Am 30.03.2018 um 15:40 schrieb Михайло Падалка:

> Is there any possibility to limit what session users can start?

If you just want to hide entries in Published Application mode, you can
replace the symlink /etc/x2go/applications with a real directory and
copy the *.desktop files you want into that.
Note that users will still be able to run other applications by
specifying them by name, either in an xterm or in Single Application mode.

To actually block users from running certain applications, please use
standard Linux/Unix mechanisms; in other words, chmod and chown are your
friends. For example, if you want people to be unable to run xterm
unless they are members of a particular group "newgroup", "chown
root:newgroup /usr/bin/xterm && chmod 750 /usr/bin/xterm", then add the
users you want to the group "newgroup": "adduser someuserhere newgroup"

Adding blocking functionality to X2Go wouldn't make any sense, because
if you have users that can log in to your server via X2Go, they can just
as well log in via regular SSH, where an X2Go-only block wouldn't be in
effect, and wreak havoc from there (even for GUI applications, as the
users could just redirect their DISPLAY variable to point at their own
X2Go session running in parallel).

Kind Regards,
Stefan Baur


-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Reply via email to