[Bugs] #1645 UNSP: sugar-session opens remote listening ports
Sugar Labs Bugs
bugtracker-noreply at sugarlabs.org
Fri Jan 8 11:12:52 EST 2010
#1645: sugar-session opens remote listening ports
------------------------------------------+---------------------------------
Reporter: sascha_silbe | Owner: erikos
Type: defect | Status: new
Priority: Unspecified by Maintainer | Milestone: Unspecified by Release Team
Component: sugar-toolkit | Version: Git as of bugdate
Severity: Unspecified | Keywords:
Distribution: Unspecified | Status_field: New
------------------------------------------+---------------------------------
sugar-session currently listens on TCP (both IPv4 and IPv6) ports open to
anyone (not just localhost). Even though (or arguably especially because)
nothing seems to actually read from those sockets, it's bad style to do
so.
They seem to get opened in src/sugar/gsm-xsmp.c. The code suggests there's
a workaround if Xtrans.h is available, but unfortunately
HAVE_X11_XTRANS_XTRANS_H only ever gets checked, but never set.
Given the copyright header (mentioning Novell) I guess this got copied
from somewhere (what package? it's not documented in the file). The same
source probably has an appropriate autoconf snippet we should copy as
well.
--
Ticket URL: <http://bugs.sugarlabs.org/ticket/1645>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system
More information about the Bugs
mailing list