[Bug 296604] Re: Sugar-Emulator has no access control

[Bug Watch Updater]

** Changed in: sugar
       Status: Confirmed => Unknown

-- 
You received this bug notification because you are a member of Sugar
Team, which is subscribed to Sugar.
https://bugs.launchpad.net/bugs/296604

Title:
  Sugar-Emulator has no access control

Status in Sugar Learning Platform:
  Unknown
Status in “sugar” package in Ubuntu:
  Fix Released

Bug description:
  Binary package hint: sugar

  Sugar-Emulator uses the '-ac' flag in the Xephyr command line, with
  turns off access control.

  This means that anyone on the network can attach to the
  display/keyboard/mouse and interfer with the operation of Sugar (such
  as running xeyes, which goes full screen and can not be cancelled!).

  With Xephyr on display :1
  --
  simon at destiny:~$ netstat -an
  Active Internet connections (servers and established)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State      
  tcp        0      0 0.0.0.0:6001            0.0.0.0:*               LISTEN         
  tcp6       0      0 :::6001                 :::*                    LISTEN  
  --

  Simon.

To manage notifications about this bug go to:
https://bugs.launchpad.net/sugar/+bug/296604/+subscriptions