Ubuntu
vino package

vino http server binds to external interfaces despite local_only configuration

Bug #984093 reported by andornaut on 2012-04-17

This bug affects 5 people

Affects		Status	Importance	Assigned to	Milestone
	vino	Fix Released	Medium	gnome-bugs #674268
	vino (Ubuntu)	Fix Released	Low	Unassigned

Bug Description

Environment:

Debian Wheezy
Vino 3.2.2-1+b1

Vino is configured for local access only via:

gconftool-2 --set /desktop/gnome/remote_access/local_only --type bool true

Vino's vnc server is only listening on localhost:5900 and no other interfaces - as expected.

Vino's http server, though, is listening on all interfaces, despite the local_only configuration. The expected behaviour would be for all vino services, including the http server, to only bind to the localhost interface when configured accordingly.

Tags:

Revision history for this message

andornaut (andornaut) wrote on 2012-04-17:

Filed upstream:

https://bugzilla.gnome.org/show_bug.cgi?id=674268

Revision history for this message

Sebastien Bacher (seb128) wrote on 2012-04-17:

Thank you for your bug report, that's the Ubuntu bug tracker you are using and not the Debian one though, is that an issue as well in the current Ubuntu version?

Changed in vino (Ubuntu):
status:	New → Triaged
importance:	Undecided → Low
status:	Triaged → Incomplete

Revision history for this message

andornaut (andornaut) wrote on 2012-04-17:

I mistakenly filed this bug with Ubuntu, when it would be more appropriate to file it with Debian or with Gnome (which I've also done). I cannot say whether this bug occurs with the current Ubuntu release, though I'd suspect that it does.

Revision history for this message

Sebastien Bacher (seb128) wrote on 2012-04-17:

thanks, let's see what upstream says

Changed in vino (Ubuntu):
status:	Incomplete → Triaged

Bug Watch Updater (bug-watch-updater) on 2012-04-18

Changed in vino:
importance:	Unknown → Medium
status:	Unknown → New

Revision history for this message

Mihai Capotă (mihaic) wrote on 2014-06-24:

Patch for debian/rules to disable HTTP server Edit (330 bytes, text/plain)

As far as I know, the HTTP server is Vino is not used in Ubuntu. So as a workaround, the HTTP server can be disabled by passing the --disable-http-server flag during configuration.

Revision history for this message

Ubuntu Foundations Team Bug Bot (crichton) wrote on 2014-06-24:

The attachment "Patch for debian/rules to disable HTTP server" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

tags:

added: patch

Revision history for this message

Jamie Strandboge (jdstrand) wrote on 2014-08-11:

Thanks for the patch! I'm uncomfortable ACKing this patch without more supporting information that it disabling it won't break people. I think the proper thing to do is continue to wait on upstream's response. It would probably make the process go quicker if a patch was submitted upstream that fixed the buggy behavior.

Unsubscribing ubuntu-sponsors for now. If you'd like to have a patch applied to Ubuntu, please link to a bzr branch or supply a debdiff (see https://wiki.ubuntu.com/SponsorshipProcess for details).

Thanks again.

Bug Watch Updater (bug-watch-updater) on 2014-08-16

Changed in vino:
status:	New → Fix Released

Revision history for this message

Phill (phill.l) wrote on 2015-04-01:

Current situation on 14.04 LTS is the port 5800 is still open and currently responds to HTTP requests with:

<html><head><title>File Not Found</title></head>
<body><h1>File Not Found</h1></body></html>

Verified this was vino by killing it to see the port closed. Verified on a remote machine. In my testing I used the instructions in https://help.ubuntu.com/community/VNC/Servers were followed to allow only local connections.

Sebastien Bacher (seb128) on 2015-11-20

Changed in vino (Ubuntu):
status:	Triaged → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-11-20:

This bug was fixed in the package vino - 3.8.1-0ubuntu7

---------------
vino (3.8.1-0ubuntu7) xenial; urgency=medium

  * debian/patches/git_struct_init.patch:
    - "Be more careful with memory allocation", should fix some of the
      segfault issues reports (lp: #987287)
  * debian/patches/git_small_bugfixes.patch:
    - backport some easy bugfixes
  * debian/patches/git_no_http_server.patch:
    - remove http server, it's not used and listen on interfaces for no
      reason (lp: #984093)