Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Recent Gnome-3 (under GNU/Linux, BSD or other Un*x) offer a gnome shell with nice presentation, but where the configuration and theming are to be done via Internet Browser (and a public URL, on a public server).

I know that having two question for one is not welcome there, but the link between the questions is strong: My questions:

  • Could this feature become a security issue?

  • If yes, how coud I manage access (even block) this?

Like allow or disallow javascript in browser, I would be able to allowing or not javascript access to dbus, maybe with some limitations, like ip or ssl-certs list...

share|improve this question
add comment

1 Answer

Yes, it can result in a security issue.It is like any web interface accessible from the internet.If the authentication system is not proper, an attacker might bypass it.

On how to manage access.

Depending on the kind of infrastructure that you have in your network, you can setup a VPN and enable access to the interface through the VPN.( you will use a private IP address to do the configuration)

I am not sure about the ways to block the web configuration entirely.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.