Last modified: 2013-02-19 18:50:41 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T47157, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 45157 - X11 Forwarding for sshd on bastion*
X11 Forwarding for sshd on bastion*
Status: RESOLVED WONTFIX
Product: Wikimedia Labs
Classification: Unclassified
Infrastructure (Other open bugs)
unspecified
All All
: Unprioritized normal
: ---
Assigned To: Ryan Lane
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-02-19 17:03 UTC by Marc A. Pelletier
Modified: 2013-02-19 18:50 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Marc A. Pelletier 2013-02-19 17:03:42 UTC
Some tools may need to use GUIs during deployment or configuration (in particular, qmon)

While tunnelling can work around the lack of open X11 forwarding, doing so is less secure since it doesn't cleanly handle xauth.

Security impact:  Minimal; only affects users whose clients have a $DISPLAY set, and who turned on X11 forwarding.
Comment 1 Marc A. Pelletier 2013-02-19 18:50:41 UTC
Turns out there is an alternate method where only the instance needs to be configured to allow X11 forwarding, so the issue is moot.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links