Skip to content

Authenticate local clients

David Edmundson requested to merge work/d_ed/ksmserver_changes into master
  • Remove iceauth dependency

Previously the tool iceauth was used to write authentication to and from the iceauthority file, running a set of commands to manipulate the file.

This external dependency is not often installed, which may create a problem now that all paths go through authentication. If iceauth is not currently installed ksmserver will assert rendering the session useless.

This patch writes and manages the file directly removing the need for external tools.

Co-authored-by: Fabian Vogt fabian@ritter-vogt.de

  • Authenticate local clients

ksmserver currently authenticates remote clients, but allows local connections through.

This is a security risk that can allow another user on the same system to access the user's session management session without authentication.

Co-authored-by: Fabian Vogt fabian@ritter-vogt.de

Merge request reports