Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 621358 - >=mate-base/mate-session-manager-1.18 - warn the user that building without xtrans binds to all interfaces
Summary: >=mate-base/mate-session-manager-1.18 - warn the user that building without x...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo MATE Desktop
URL: https://github.com/mate-desktop/mate-...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-06-10 00:49 UTC by tonemgub
Modified: 2017-06-21 18:38 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description tonemgub 2017-06-10 00:49:12 UTC
I did not realize that my desktop environment was broadcasting over the local area network and public network until getting some unusual traffic.

Upstream is aware of the issue:
    [AS_HELP_STRING([--without-xtrans],
+			   [Build without xtrans support (results in ICE listening on remote TCP ports)])],

https://github.com/mate-desktop/mate-session-manager/commit/0fcdc12fd7c7b77402867027c2a48d3eb8f6e788

Since this is a rather serious security concern, I think it may be nice to mention a notification to the user when building without xtrans. Or make xtrans a required dependency.

Thank you.
Comment 1 Adam Feldman gentoo-dev 2017-06-21 18:38:07 UTC
Resolved in a7a5866bea13c2624536700e30a9dfa5ffe08cc3 and 3a0f6be5c1bbc5cadb35721f2ceb433965665364