On Tue, Aug 02, 2011 at 15:41:55 (CEST), Mike Gabriel wrote:

> Hi Morty,
>
> On Di 02 Aug 2011 15:28:57 CEST Moritz Struebe wrote:
>
>> What is the rationale for the extra group? Is there a good reason for
>> disallowing someone to share his/her desktop?
>
> the desktopsharing is a tricky feature anyway as it grants many ways
> for a user who is allowed to share another's desktop to manipulate the
> user profile.

This sounds to me as desktop sharing was a somewhat insecure feature
anyway. In this case, why do you rely on a system group instead of for
instance maintaining a /etc/x2go/allowdesktopshareing.users file that
contains all users that are allowed to use the feature?

-- 
Gruesse/greetings,
Reinhard Tartler, KeyID 945348A4

_______________________________________________
X2go-Dev mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/x2go-dev

Reply via email to