Improve sockdir permissions model #2458
matt335672
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Here's the wiki page which lays out the current design of the sockets dir:-
https://github.com/neutrinolabs/xrdp/wiki/The-socketdir-directory
We're possibly in a position to change this for the next major release of xrdp, and I don't think it's a giant step to improve on where we are.
One of the reasons we've got a flat directory is so that xrdp can locate the xorgxrdp socket given just the display number. The IPC mechanism between xrdp and xrdp-sesman is now more capable, so we could also send back the UID of the user.
We could then add a sub-directory under the socketdir which is the UID for the user. On a normal install, after user
user1
logs in, the directory could look like this:-On a Debian system, where the xrdp process runs as the
xrdp:xrdp
user, the permissions would look like this:-Any drawbacks to this anyone can see?
Beta Was this translation helpful? Give feedback.
All reactions