-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 07.01.2015 um 04:32 schrieb Stefan Baur:
> Am 07.01.2015 um 04:27 schrieb Robert Dinse:
> 
>> For what it's worth I installed the packages for Ubuntu on Mint 
>> and it is working.  Have I introduced a grave security problem?
> 
> Maybe, maybe not.  Read through the bug description, try to
> reproduce the issue, check for the presence of that 
> /etc/xdg/autostart/mint-xhost-plus.desktop file and its content.

Addendum: the easiest way to check whether security is currently
enabled is to log on as a regular user, and run
"xhost" (without the quotes, and without any parameters) in an xterm.

In my case (Debian Wheezy, not Mint), it replies with:

access control enabled, only authorized clients can connect
SI:localuser:MYUSERNAMEHERE


And your output, if you're safe, should look similar.

If the first line, however, reads

access control disabled, clients can connect from any host

then you have an issue.  A serious one.

- -Stefan

- -- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUrK3UAAoJEG7d9BjNvlEZuNwIAJ64IvgKjPtbehQNKmelfdrq
nUcGfI2/FsjSQYecOA7uj0KeeXmToXj7k3jkb4905JQC4jEU+xRvwm0zi/y8MsdI
hUcV1YmEWohG61waLnIuS584yDmqmRIgLtAlYvUUocd+YYAnIbyVmLgSSfPzU4tR
xGyksZ8/a4Zgv4t4Ep4Zwi42UJ2Tq0QhNwjTmRios9IcCmKmQY4xtddaxjfnyrQZ
MxmPLON2bcy1ZpkMKn+KSMH9kkAW4E+epYrdwnQMo52S/XbgsytuKSJxKXsFSCQS
rHt3HHWc/BFLGS9Jd6aPASEJg+oTI4adrYgnxPg5ZhgQJ196hbcQGyA9snJzUiE=
=s458
-----END PGP SIGNATURE-----
_______________________________________________
x2go-user mailing list
x2go-user@lists.x2go.org
http://lists.x2go.org/listinfo/x2go-user

Reply via email to