[Bug 296604] Re: Sugar-Emulator has no access control

mungewell simon at mungewell.org
Wed Nov 12 19:07:57 GMT 2008

Slight problem with patch, 1 in 16 chance that xauth will fail as
leading 0 is dropped, new to python so don't know how to fix this....

DEBUG:sugar-emulator:Xauth command: xauth add :3 . a3dd93f39f280dad34d58d6f301a84f
xauth: (argv):1:  key contains odd number of or non-hex characters


Sugar-Emulator has no access control
You received this bug notification because you are a member of Sugar
Team, which is the registrant for Sugar shell.

Status in Sugar shell: New
Status in “sugar” source package in Ubuntu: New

Bug description:
Binary package hint: sugar

Sugar-Emulator uses the '-ac' flag in the Xephyr command line, with turns off access control. 

This means that anyone on the network can attach to the display/keyboard/mouse and interfer with the operation of Sugar (such as running xeyes, which goes full screen and can not be cancelled!).

With Xephyr on display :1
simon at destiny:~$ netstat -an
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0  *               LISTEN         
tcp6       0      0 :::6001                 :::*                    LISTEN  


More information about the Ubuntu-sugarteam mailing list