On 8/18/11 1:12 PM, Yushu Yao wrote: >> (1) If a user is logged in remotely and is using VirtualGL, that means >> they have access to display :0. Thus, they can theoretically snoop the >> keystrokes or view the desktop of someone who is logged in locally to >> the machine. Solution? Don't log in locally using the X server, unless >> you are sure no one is on the machine. The only one who should ever >> need to log in locally is the SysAdmin, and they can administer the >> machine using VNC or SSH or remote X or the local text console. In >> fact, switching to the local text console will disable anyone's ability >> to use display :0 with VirtualGL, so this effectively turns off >> VirtualGL use temporarily. > > So if two user are using display :0 at the same time (is that possible? e.g. > user1 has a MatLab open and user2 has a blender open, both using vglconnect), > they can in theory snoop each other's keystrokes?
I already answered that question. No. They can only theoretically snoop the keystrokes of someone who is logged on *locally*. ------------------------------------------------------------------------------ Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 _______________________________________________ VirtualGL-Users mailing list VirtualGL-Users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/virtualgl-users
