Re: security issues regarding italc client startup

On Thu, Jul 17, 2008 at 1:41 PM, Lars Vogdt <[email protected]> wrote:

>> hope that this situation will change in the future, or are there
>> workarounds to stop users from killing the italc client?
>

There are patches in ubuntu packages that hide italc icon, but users
would still be able to kill if if they know it is running. We can add
it if desired.

> Even with patching /etc/X11/xdm/Xsetup, users can kill the client - so the
> switch to a "non destructive" setup doesn't hurt in this case. So users are
> able to kill the client - but this is IMO something which can be handled
> "outside" the computer via face to face communication...
>
> But: I think we can switch to use the xauth-cookies and start the client as
> root - using the authority files for the users desktop. The problem: that's
> something completely new for me and I have to investigate some time to get
> this up and running even for multiple users on a Terminalserver. (Any help
> welcome ;-)
>

The clients are running on one machine with different ports per user,
not sure how we can achieve running multiple clients as root without
the italc client being installed in ltsp client image chroot.

> So the "security" problem is nothing new in the end - and a solution can be
> provided in the near future. Until then, a teacher already noticed that a
> user has killed the ica client - so think of it like an attempt to
> deceive...
>

Is there  anything like "respawn" option that can be set on shell script?

In other related news, we have updated italc in edu repo with patches
from stgraber which has auto detect/add all the clients in the
network, do give it a try.

Ciao

-J