-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 2014-01-08 14:11, Mike Gabriel wrote:
> Hi all,
>
> as those of you who have studied X2Go Server code probably have
noticed, X2Go uses the su command quite intensively. The problem about
su is that it invokes a subshell whenever it is called. Those
As a sysadmin by day, these are my thoughts:
1. We should make sure that every distro we provide packages for
includes sudo by default.
2. sudo can surely be configured in such a way that it would break
x2go's usage of it. Of course, the same thing goes for sshd (NoMachine
is quite vocal on that.)
On Wednesday 2014-01-08 14:11, Mike Gabriel wrote:
>
> Feedback? Request for comments??? Any other approach thinkable???
$ su root -s /home/jengelh/echoargs bing bang bong
Password:
-> bing
-> bang
-> bong
___
X2Go-Dev mailing list
X2Go-Dev@lists.ber
Hi all,
as those of you who have studied X2Go Server code probably have
noticed, X2Go uses the su command quite intensively. The problem about
su is that it invokes a subshell whenever it is called. Those
subshells are quite difficult to handle without providing space for
exploitation.
