rpm/tigervnc
SHA256
1
0
Fork 0
forked from pool/tigervnc
Code Pull Requests Activity

- Fixes for bsc#1209283

Browse Source 
* Drop chown vnc:vnc calls in with-vnc-key.sh
  * Add TLSNone to -securitytypes to increase security in xvnc@.service

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/tigervnc?expand=0&rev=245
This commit is contained in:
Joan Torres 2023-04-03 09:02:15 +00:00 committed by Git OBS Bridge
parent 5dcec8406a
commit 45aee162cd
3 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
tigervnc.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Mon Apr 3 08:57:25 UTC 2023 - Joan Torres <joan.torres@suse.com>
- Fixes for bsc#1209283
* Drop chown vnc:vnc calls in with-vnc-key.sh
* Add TLSNone to -securitytypes to increase security in xvnc@.service
------------------------------------------------------------------- -------------------------------------------------------------------
Sun Mar 19 09:33:05 UTC 2023 - Dirk Müller <dmueller@suse.com> Sun Mar 19 09:33:05 UTC 2023 - Dirk Müller <dmueller@suse.com>

2
with-vnc-key.sh
View File

@ -19,7 +19,6 @@ fi
# If the key file doesn't exist or has zero size (because it doubles as lock), generate it. # If the key file doesn't exist or has zero size (because it doubles as lock), generate it.
if ! test -s $TLSKEY ; then if ! test -s $TLSKEY ; then
(umask 077 && openssl genrsa -out $TLSKEY 2048) >&200 (umask 077 && openssl genrsa -out $TLSKEY 2048) >&200
chown vnc:vnc $TLSKEY
fi fi
# If the cert file doesn't exist, generate it. # If the cert file doesn't exist, generate it.
@ -28,7 +27,6 @@ fi
CN="`hostname`" CN="`hostname`"
CN=${CN:0:64} CN=${CN:0:64}
openssl req -new -x509 -extensions usr_cert -key $TLSKEY -out $TLSCERT -days 7305 -subj "/CN=$CN/" openssl req -new -x509 -extensions usr_cert -key $TLSKEY -out $TLSCERT -days 7305 -subj "/CN=$CN/"
chown vnc:vnc $TLSCERT
fi fi
) 200>>$TLSKEY 2>/dev/null ) 200>>$TLSKEY 2>/dev/null

2
xvnc@.service.in
View File

@ -2,7 +2,7 @@
Description=Xvnc Server Description=Xvnc Server
[Service] [Service]
ExecStart=@LIBEXECDIR@/vnc/with-vnc-key.sh /usr/bin/Xvnc -noreset -inetd -once -query localhost -geometry 1024x768 -securitytypes X509None,None -X509Key /etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30 -extension MIT-SHM ExecStart=@LIBEXECDIR@/vnc/with-vnc-key.sh /usr/bin/Xvnc -noreset -inetd -once -query localhost -geometry 1024x768 -securitytypes X509None,TLSNone,None -X509Key /etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30 -extension MIT-SHM
User=vnc User=vnc
StandardInput=socket StandardInput=socket
StandardOutput=socket StandardOutput=socket