Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

reduce the amount of information exposed by the proxy via dbus GetInfo #1939

Closed
totaam opened this issue Aug 24, 2018 · 1 comment
Closed

Comments

@totaam
Copy link
Collaborator

totaam commented Aug 24, 2018

This was flagged as a potential issue during Bug 1102836 - AUDIT-0: xpra: suse-dbus-unauthorized-service org.xpra.Server a security review of xpra for packaging into suse.

FWIW: all the information exposed should normally already be accessible to all users on the system, but it is possible that we expose some internal attributes that should not be - difficult to tell, so let's err on the side of caution.

@totaam
Copy link
Collaborator Author

totaam commented Aug 24, 2018

Done in r20186, 20187 backport for the v2.3.x branch.

Sample output from d-feet:

{'mode': 'proxy',
 'python': {'version': '3.6.6'},
 'session-type': 'proxy',
 'start_time': 65850,
 'type': 'Python',
 'uuid': 'ade8405288844b92aeddd5c073cd7097'}

@totaam totaam closed this as completed Aug 24, 2018
@totaam totaam added the v2.3.x label Jan 22, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant