[debian-edu-commits] debian-edu/pkg-team/ 83/159: another security note

[Dominik George]

This is an automated email from the git hooks/post-receive script.

natureshadow-guest pushed a commit to branch master
in repository xrdp.

commit 39c6ee2e75f141949a873319c61f134139dbf444
Author: mirabilos <tg at mirbsd.org>
Date:   Wed Aug 26 21:06:11 2015 +0200

    another security note
---
 README.Debian | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.Debian b/README.Debian
index a82114b..36e1675 100644
--- a/README.Debian
+++ b/README.Debian
@@ -20,3 +20,7 @@ This *should* read…
 • create /var/run/xrdp
 • start the xrdp dæmon as xrdp:xrdp
 … though (xrdp-sesman must run as superuser anyway).
+
+Another security issue is the disablement of access control by default.
+Use at your own risk and inform your users that privacy is possibly not
+guaranteed as all users can attach to RDP users’ sessions locally.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-edu/pkg-team/xrdp.git