Commit Graph

45 Commits

Author SHA1 Message Date
matt335672
0db849fc5c Move SCP to a Unix Domain Socket
The TCP socket implementation of sesman has a number of limitations,
namely that it is affected by firewalls, and also that determining the
user on the other end requires a full authentication process.

The advantage of the TCP socket is that sesman and xrdp can be run on
separate machines. This is however not supported by the xorgxrdp
backend (shared memory), and is insecure, in that passwords are sent
in-the-clear, and the connection is susceptible to MitM attacks. This
architecture has been deprecated in release notes since xrdp v0.9.17,
and although it will continue to be supported in any further releases
in the x0.9.x series, it will not be supported in the next major
version.
2022-04-18 09:12:35 +01:00
Kentaro Hayashi
bd82084505 Extend In/Outbound text,file,image restriction respectively
It supports the extended configurations for sesman.ini:

Before:

  [Security]
  RestrictOutboundClipboard=true or false

After:

  [Security]
  RestrictInboundClipboard=[true or false | text or file or image | comma separated list]
  RestrictOutboundClipboard=[true or false | text or file or image | comma separated list]

Above configuration is disabled by default (false)
And it can be specified comma separated list like this:.

  RestrictInboundClipboard=file, image
  RestrictOutboundClipboard=text, file, image

Note that if RestrictOutboundClipboard=true,file is set,
file is ignored and it is treated as RestrictOutboundClipboard=true

It is same for RestrictInboundClipboard.
2022-01-14 10:17:02 +09:00
Alexandre Quesnel
52707ac686 Fixing formatting with astyle 2021-05-08 16:58:11 +00:00
matt335672
e6c1df64d3 Added --config/-c to sesman 2020-12-09 10:19:14 +00:00
Jaroslaw Osmanski
56fe961349 Fixed style and format issues. 2019-03-08 08:42:18 +01:00
Jaroslaw Osmanski
46c33ddaf4 Read sesman config in clipboard 2019-02-26 11:36:32 +01:00
Krzysztof Adamski
751cd97018 reapply outboud-resitrcted clipboard 2019-02-26 07:40:17 +01:00
Koichiro IWAO
a39b413746
sesman: make the path of reconnect script configurable 2018-06-16 16:44:37 +09:00
Koichiro IWAO
e82f212f34
sesman: accept full path for DefaultWindowManager
Solves: #1143

Also, this idea is inspired by Fedora's patch [1]. Some distro wants to
put all scripts in libexec directory due to SELinux. This enables
distros to put such scripts anywhere.

[1] https://src.fedoraproject.org/cgit/rpms/xrdp.git/tree/xrdp-0.9.6-scripts-libexec.patch?id=02f845c1b8cea781313cf3e9efcd6d7d50341824
2018-06-16 16:44:37 +09:00
Koichiro IWAO
19fa26a27e
sesman: don't print config in reader function
reader function should just read. Add config_dump function to print read
config.
2018-06-05 00:19:35 +09:00
Koichiro IWAO
de33a7832e
sesman: s/XOrg/Xorg/g, no logic change
X.Org is usually spelled X.Org or Xorg.
2018-06-05 00:19:35 +09:00
Koichiro IWAO
e4857b13fa
sesman: config_read_logging function no longer exists 2018-06-05 00:19:33 +09:00
Koichiro IWAO
08f847d74b
sesman: refactor, change variable names
session_variables1 -> env_names
session_variables2 -> env_values

Use the name used in callee function env_set_user(). The former names
are not clear.
2018-01-11 10:57:47 +09:00
Pavel Roskin
6ed4c969f4 Eliminate APP_CC and DEFAULT_CC 2017-03-14 00:21:48 -07:00
Pavel Roskin
b28a986071 Fix memory leak in xrdp-sesman on config reload 2016-10-21 20:15:50 +00:00
Pavel Roskin
a77ae440a7 Rename SESMAN_CFG_X11DISPLAYOFFSET to SESMAN_CFG_SESS_X11DISPLAYOFFSET
Move it to other session options in config.h. X11DisplayOffset is part of
the [Sessions] section.
2016-06-21 16:30:15 -07:00
Koichiro IWAO
fb08623b66 sesman: brief xorg_params, no logic change 2016-04-07 16:27:23 +09:00
Pavel Roskin
92a6833e9b Fix typos 2016-02-13 20:41:07 -08:00
Jay Sorg
49fcc23673 sesman: added SessionVariables to sesman.ini and some indent cleanup 2014-05-09 16:02:19 -07:00
Jay Sorg
1934c9ea00 sesman: more options for session lookup from Fredy Paquet 2014-04-20 00:42:19 -07:00
Laxmikant Rashinkar
ac6717e32e fixed some connection issues when using xorg driver mode 2014-03-09 11:24:30 -07:00
Laxmikant Rashinkar
883650700f added support for using Xorg driver model 2014-03-08 16:41:37 -08:00
Jay Sorg
c6fa03102f copyright year update 2013-06-08 10:51:53 -07:00
ArvidNorr
876f356dad deny access if group is undefined 2013-01-31 15:19:58 +01:00
Laxmikant Rashinkar
1123323fda o moved from GNU General Public License to Apache License, Version 2.0
o applied new coding standards to all .c files
o moved some files around
2012-09-19 20:51:34 -07:00
norrarvid
4d4ebbf363 Initial syslog support in XRDP 2012-05-27 17:17:39 +02:00
jsorg71
7e36a89921 update copyright year 2010-07-26 03:48:58 +00:00
jsorg71
e83b4c43f5 added X11DisplayOffset sesman option 2010-04-24 06:41:55 +00:00
jsorg71
23ffdb0c5f autotools fix and file_loc.h simplified 2009-05-19 04:23:49 +00:00
ilsimo
4c9d3862e5 updating logging subsystem 2008-02-20 22:02:24 +00:00
jsorg71
cd57d1b689 update copyright year 2008-01-30 07:53:57 +00:00
ilsimo
f22b5b42a7 making libscp a real library
some fixes in configuration options
2007-05-06 21:02:25 +00:00
ilsimo
6cbc09be53 added ListenAddress configuration option 2007-03-25 21:20:20 +00:00
jsorg71
6886ba4556 copyright year update 2007-01-12 05:07:07 +00:00
ilsimo
2637efd4ee Adding MaxLoginRetry configuration option 2006-10-25 19:18:36 +00:00
jsorg71
7cdd7191a4 added ability to put extra Xserver parameters in sesman.ini 2006-09-18 04:40:43 +00:00
ilsimo
013ab3c61f updated code documentation 2006-05-25 20:34:32 +00:00
jsorg71
b1b3ff9e7d year update and moved some stuff to os_calls.c 2006-04-23 21:54:12 +00:00
ilsimo
153b59ad84 new session list code
added support for new [sessions] configuration options
2006-01-13 15:51:23 +00:00
ilsimo
721ca9efae adding some access control features 2005-12-15 20:41:03 +00:00
jsorg71
58976ccc97 Makefile changes 2005-12-02 03:24:41 +00:00
ilsimo
9ac351a4cb added --nodaemon and --kill options
added pid file generation
improved some code documentation
2005-11-13 22:06:49 +00:00
ilsimo
e7dbdea767 Adding logging functions and adding log options in config files 2005-10-23 21:47:17 +00:00
ilsimo
a0507a3381 Splitted sesman.c in more files.
Added sig.*, session.*, env.*, auth.h, tcp.*
2005-10-06 19:21:18 +00:00
jsorg71
19d37b565c added user specific window manager startup script and SIGUP to reload sesman configuration 2005-09-25 03:30:09 +00:00