Opened 11 years ago

Closed 8 years ago

#1645 closed defect (wontfix)

sugar-session opens remote listening ports

Reported by: sascha_silbe Owned by: erikos
Priority: Unspecified by Maintainer Milestone: Unspecified
Component: Sugar Version: Git as of bugdate
Severity: Unspecified Keywords:
Cc: Distribution/OS: Unspecified
Bug Status: New

Description

sugar-session currently listens on TCP (both IPv4 and IPv6) ports open to anyone (not just localhost). Even though (or arguably especially because) nothing seems to actually read from those sockets, it's bad style to do so.

They seem to get opened in src/sugar/gsm-xsmp.c. The code suggests there's a workaround if Xtrans.h is available, but unfortunately HAVE_X11_XTRANS_XTRANS_H only ever gets checked, but never set.

Given the copyright header (mentioning Novell) I guess this got copied from somewhere (what package? it's not documented in the file). The same source probably has an appropriate autoconf snippet we should copy as well.

Change History (3)

comment:1 in reply to: ↑ description Changed 11 years ago by tomeu

Replying to sascha_silbe:

Given the copyright header (mentioning Novell) I guess this got copied from somewhere (what package? it's not documented in the file). The same source probably has an appropriate autoconf snippet we should copy as well.

AFAIK, from http://git.gnome.org/browse/gnome-session

comment:2 Changed 8 years ago by dnarvaez

  • Component changed from sugar-toolkit to Sugar

comment:3 Changed 8 years ago by dnarvaez

  • Resolution set to wontfix
  • Status changed from new to closed

If it's just bad style to do so I don't think it's worth fixing it, especially because we will have to move away from xsmp when we port to wayland.

Note: See TracTickets for help on using tickets.