Mailinglist Archive: opensuse-edu (109 mails)

< Previous Next >
Re: [opensuse-edu] security issues regarding italc client startup
  • From: CyberOrg <cyberorg@xxxxxxxxxxxx>
  • Date: Fri, 22 Aug 2008 17:05:14 +0530
  • Message-id: <b317ae5c0808220435j4c37d954p2107465c98380026@xxxxxxxxxxxxxx>
On Thu, Jul 17, 2008 at 1:41 PM, Lars Vogdt <lrupp@xxxxxxx> wrote:

hope that this situation will change in the future, or are there
workarounds to stop users from killing the italc client?


There are patches in ubuntu packages that hide italc icon, but users
would still be able to kill if if they know it is running. We can add
it if desired.

Even with patching /etc/X11/xdm/Xsetup, users can kill the client - so the
switch to a "non destructive" setup doesn't hurt in this case. So users are
able to kill the client - but this is IMO something which can be handled
"outside" the computer via face to face communication...

But: I think we can switch to use the xauth-cookies and start the client as
root - using the authority files for the users desktop. The problem: that's
something completely new for me and I have to investigate some time to get
this up and running even for multiple users on a Terminalserver. (Any help
welcome ;-)


The clients are running on one machine with different ports per user,
not sure how we can achieve running multiple clients as root without
the italc client being installed in ltsp client image chroot.

So the "security" problem is nothing new in the end - and a solution can be
provided in the near future. Until then, a teacher already noticed that a
user has killed the ica client - so think of it like an attempt to
deceive...


Is there anything like "respawn" option that can be set on shell script?

In other related news, we have updated italc in edu repo with patches
from stgraber which has auto detect/add all the clients in the
network, do give it a try.

Ciao

-J
--
To unsubscribe, e-mail: opensuse-edu+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-edu+help@xxxxxxxxxxxx

< Previous Next >
This Thread
Follow Ups