[Bug 296604] Re: Sugar-Emulator has no access control
luke at laptop.org
Wed Nov 12 21:25:11 GMT 2008
** Changed in: sugar (Ubuntu)
Assignee: (unassigned) => Luke Faraone (lfaraone)
Status: New => In Progress
Sugar-Emulator has no access control
You received this bug notification because you are a member of Sugar
Team, which is the registrant for Sugar shell.
Status in Sugar shell: New
Status in “sugar” source package in Ubuntu: In Progress
Binary package hint: sugar
Sugar-Emulator uses the '-ac' flag in the Xephyr command line, with turns off access control.
This means that anyone on the network can attach to the display/keyboard/mouse and interfer with the operation of Sugar (such as running xeyes, which goes full screen and can not be cancelled!).
With Xephyr on display :1
simon at destiny:~$ netstat -an
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:6001 0.0.0.0:* LISTEN
tcp6 0 0 :::6001 :::* LISTEN
More information about the Ubuntu-sugarteam