Problems with tigervncserver copying credential files to /tmp
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
tigervnc (Debian) |
New
|
Unknown
|
|||
tigervnc (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
(Ubuntu 24.04.1, TigerVNC 1.13.1+
On startup, tigervncserver (via Wrapper.pm) copies ~/.vnc/passwd (and other credential files) into /tmp/tigervnc.
1: On Ubuntu, automatic age-based cleaning of /tmp is enabled by default. This is problematic in general (see bug #2088268), but specifically the /tmp/tigervnc.
2: If the credential files (e.g. password) in ~/.vnc/ are changed, the running VNC server will not pick this up and will continue to use the old cached credential files.
I think there should at least be a mechanism to enable/disable this caching behavior via a configuration file (or a command line argument). Also, if such caching is done, I think the proper location would be under $XDG_RUNTIME_DIR instead of /tmp.
Changed in tigervnc (Debian): | |
status: | Unknown → New |
no longer affects: | systemd (Ubuntu) |
It sounds like tigervnc needs its own runtime directory (e.g. /run/tigervnc/) which it can control with its own tmpfiles configuration (or otherwise). It should not assume that things in /tmp will be around indefinitely.
If you want to change the default on your system, you can do so with a /etc/tmpfiles. d/tmp.conf override.