Re: [X2Go-Dev] Bug#214: Bug#214: Add maximun available desktop area to session resolutions combo box

2013-05-21 Thread Ricardo Díaz Martín
This new patch add an option box in windows/mac clients (in linux it isn't necessary because this feature is working in current stable). If user set "max available area" max height and max width are stored in session settings. It was tested in linux and in windows and works as expected. Anyway I

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Mike Gabriel
Hi Stefan, Richard, Alex, et al. On Di 21 Mai 2013 16:46:09 CEST Stefan Baur wrote: Am 21.05.2013 12:29, schrieb Richard RW. Weinberger: >I'm criticizing your code not you. >If you cannot deal with that, not my problem. I can deal with criticism, I don't like the way you did it. Sorry, that

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Stefan Baur
Am 21.05.2013 12:29, schrieb Richard RW. Weinberger: > >I'm criticizing your code not you. > >If you cannot deal with that, not my problem. > >I can deal with criticism, I don't like the way you did it. Sorry, that's life.:-) No. The tone of your messages is bordering on insulting. The fact

Re: [X2Go-Dev] Bug#214: Bug#214: Add maximun available desktop area to session resolutions combo box

2013-05-21 Thread Ricardo Díaz Martín
2013/5/20 Mike Gabriel > tag #214 - patch > tag #214 moreinfo > thanks > > Hi Ricardo, > > On Mo 20 Mai 2013 18:18:04 CEST Ricardo Díaz Martín wrote: > > Package: x2goclient >> Severity: wishlist >> Tag: patch >> >> I attach a patch to add the maximun available resolution for each monitor >> in

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Richard RW. Weinberger
- Ursprüngliche Mail - > Am 21.05.2013 11:01, schrieb Richard RW. Weinberger: > > - Ursprüngliche Mail - > >>> From: Oleksandr Shneyder > >>> Subject: Re: [X2Go-Dev] x2go and (none)security > >>> Date: 21. Mai 2013 10:40:45 MESZ > >>> To: x2go-dev@lists.berlios.de > >>> Cc: da...@s

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Richard RW. Weinberger
- Ursprüngliche Mail - > > From: Oleksandr Shneyder > > Subject: Re: [X2Go-Dev] x2go and (none)security > > Date: 21. Mai 2013 10:40:45 MESZ > > To: x2go-dev@lists.berlios.de > > Cc: da...@sigma-star.at, t.di...@sigma-star.at > > > > Hello Richard, > > > > Am 18.05.2013 21:48, schrieb Ri

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Stefan Baur
Am 21.05.2013 12:24, schrieb Oleksandr Shneyder: Hi Stefan, I didn't say that is not an issue. And I didn't understand your comment in that way. But since you wrote I didn't see such use case yet, when an administrator of server want to crash the client application on a machine of his user.

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Oleksandr Shneyder
Hi Stefan, I didn't say that is not an issue. I'll fix it as soon as possible (I think today). I only saying, that in most cases it is very hard or impossible to use it to hack the client. regards, Alex Am 21.05.2013 11:49, schrieb Stefan Baur: > Am 21.05.2013 10:40, schrieb Oleksandr Shneyder:

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Oleksandr Shneyder
Am 21.05.2013 11:01, schrieb Richard RW. Weinberger: > - Ursprüngliche Mail - >>> From: Oleksandr Shneyder >>> Subject: Re: [X2Go-Dev] x2go and (none)security >>> Date: 21. Mai 2013 10:40:45 MESZ >>> To: x2go-dev@lists.berlios.de >>> Cc: da...@sigma-star.at, t.di...@sigma-star.at >>> >>> H

[X2Go-Dev] Bug#215: Fwd: Google Chrome and chromium-browser both crash when their advanced settings menu is accessed (Windows X2GoClient)

2013-05-21 Thread Stefan Baur
Package: x2goclient Version: 4.0.0.3 Severity: important Original-Nachricht Betreff: [X2Go-Dev] Google Chrome and chromium-browser both crash when their advanced settings menu is accessed (Windows X2GoClient) Datum: Thu, 16 May 2013 13:55:24 +0200 Von: Stefan Baur Antwort an

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Stefan Baur
Am 21.05.2013 10:40, schrieb Oleksandr Shneyder: You are right, it is possible, that X2Go Client can be crashed with the wrong output from the server. This issue could (and should) be easily fixed by replacing operator "[n]" with method "value(n)". However, I don't think, that this issue is so dr

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Mike Gabriel
Hi Alex, hi Richard, On Di 21 Mai 2013 10:40:45 CEST Oleksandr Shneyder wrote: Finally I've also looked at the server. In short, the 90's called, they want their setuid bugs back. x2gosqlitewrapper.c just wrong, anyone can make it executing whatever binary he wants with higher privileges. Sor

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Mike Gabriel
Hi Richard, On Di 21 Mai 2013 10:40:45 CEST Oleksandr Shneyder wrote: Finally I've also looked at the server. In short, the 90's called, they want their setuid bugs back. x2gosqlitewrapper.c just wrong, anyone can make it executing whatever binary he wants with higher privileges. Sorry, I don

Re: [X2Go-Dev] x2go and (none)security

2013-05-21 Thread Oleksandr Shneyder
Hello Richard, Am 18.05.2013 21:48, schrieb Richard Weinberger: > Hi x2go users/developers, > > while reviewing x2go I've encountered issues which scared hell out of me. > The client seems to perform zero input validation. A rough server can > easily crash the client > and most likely execute arb