[Bug 296604] Re: Sugar-Emulator has no access control
Brian Murray
brian at ubuntu.com
Tue Feb 16 21:37:56 GMT 2010
I imagine it was meant for the Ubuntu status and importance to be set to
Fix Released and Critical - not the upstream task which was unset by the
bug watch updater.
** Changed in: sugar (Ubuntu)
Status: Triaged => Fix Released
** Changed in: sugar (Ubuntu)
Importance: Low => Critical
--
Sugar-Emulator has no access control
https://bugs.launchpad.net/bugs/296604
You received this bug notification because you are a member of Sugar
Team, which is subscribed to sugar in ubuntu.
Status in Sugar Learning Platform: Confirmed
Status in “sugar” package in Ubuntu: Fix Released
Bug description:
Binary package hint: sugar
Sugar-Emulator uses the '-ac' flag in the Xephyr command line, with turns off access control.
This means that anyone on the network can attach to the display/keyboard/mouse and interfer with the operation of Sugar (such as running xeyes, which goes full screen and can not be cancelled!).
With Xephyr on display :1
--
simon at destiny:~$ netstat -an
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:6001 0.0.0.0:* LISTEN
tcp6 0 0 :::6001 :::* LISTEN
--
Simon.
More information about the Ubuntu-sugarteam
mailing list