Bug#744695: marked as done (x11-common: Xsession.options should accomodate .xsessionrc by default)
Your message dated Thu, 17 Apr 2014 12:25:53 +0100
with message-id <20140417112553.GA17353@copernicus.demon.co.uk>
and subject line Re: Bug#744695: x11-common: Xsession.options should accomodate .xsessionrc by default
has caused the Debian Bug report #744695,
regarding x11-common: Xsession.options should accomodate .xsessionrc by default
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
744695: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744695
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: x11-common
Version: 1:7.7+7
Severity: normal
tags: security
The introduction of $HOME/.xsessionrc was occasioned by #411639:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=411639
$HOME/.Xresources and $HOME/.xsession are catered for in Xsession.options
so there would appear to be a need for (no-)allow-user-xsessionrc if only
for completeness. It is also possible to evade the restrictions of
no-allow-user-resources and no-allow-user-xsession with suitable entries
in $HOME/.xsessionrc, making this option more desirable.
Regards,
Brian.
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 3.13-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages x11-common depends on:
ii debconf [debconf-2.0] 1.5.52
ii lsb-base 4.1+Debian12
x11-common recommends no packages.
x11-common suggests no packages.
-- debconf information:
x11-common/xwrapper/allowed_users: Console Users Only
x11-common/xwrapper/actual_allowed_users: console
--- End Message ---
--- Begin Message ---
severity 744695 wishlist
tags 744695 - security
thanks
On Sun 13 Apr 2014 at 18:43:46 +0100, Brian Potkin wrote:
> The introduction of $HOME/.xsessionrc was occasioned by #411639:
>
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=411639
>
> $HOME/.Xresources and $HOME/.xsession are catered for in Xsession.options
> so there would appear to be a need for (no-)allow-user-xsessionrc if only
> for completeness. It is also possible to evade the restrictions of
> no-allow-user-resources and no-allow-user-xsession with suitable entries
> in $HOME/.xsessionrc, making this option more desirable.
It is acknowledged for no-allow-user-session in Xsession(5)
....that the restriction may be easy to bypass, e.g. by using
a .gnomerc file instead.
Noting also that gdm3 and kdm both allow bypassing via ~/.xprofile or
~/.profile it would seem that an enhancement to Xsession.options just
for the sake of consistency may not be worth the effort. Hence closing
this report.
Regards,
Brian.
--- End Message ---
Reply to: