Commit Graph

10 Commits

Author SHA1 Message Date
matt335672 8bcb14f79d Prefer SessionSockdirGroup to be set to 'root'
With recent changes to the SCP interface, the xrdp process no longer
needs read access to the user sockdir when sesman is in use.
2025-07-14 19:39:26 +01:00
metalefty 4e378c9a91 Merge pull request #3368 from metalefty/sysconfsubdir
Allow to change config file (sub)directory
2024-12-29 11:00:16 +09:00
Koichiro Iwao 75736f4853 Allow to change config file (sub)directory
This allows the `xrdp` part of the path `/etc/xrdp` where config files
are placed to be customizable. This change is useful when trying the
stable version and the devel version alternately.
2024-12-27 10:53:31 +09:00
matt335672 ae6b1ed8a8 xrdp-droppriv erroneous includes
xrdp-droppriv.c is erroneously including os_calls.c rather than
os_calls.h

This leads to a link failure on Ubuntu 20.04:-

/usr/bin/ld: xrdp-droppriv.o: undefined reference to symbol 'dlclose@@GLIBC_2.2.5'

The error does not happen with later glibc versions, as libdl is
included in libc for these versions.

(cherry picked from commit b914d3e997ee70544db5fd2e28509bbcae32ddc6)
2024-12-23 11:19:30 +00:00
Koichiro Iwao a857f0b7ea tools: make the output of xrdp-chkpriv fancy
While here, drop exec permission from xrdp-chkpriv.in. The exec
permission will be granted to substituted xrdp-chkpriv script
during `make install` process.
2024-12-12 23:35:10 +09:00
Koichiro Iwao f61a59166e tools: fix for make dist
- Do not include substitutedd xrdp-chkpriv into tarball
- Dot not install xrdp-chkpriv.in

While here, drop exec permission from *.c source file.
2024-12-12 23:28:06 +09:00
Jay Sorg ce27b373c1 link error dlclose, use DLOPEN_LIBS 2024-07-13 12:13:52 -07:00
Koichiro Iwao c2b8cbf19e chkpriv: respect $sysconfdir for config files directory
While here, ignore build artifacts of chkpriv tools.

Follow-up to:   #2974
2024-07-12 11:11:06 +09:00
matt335672 0ebf4cff13 Check unprivileged user can't write TLS files
The unprivileged user needs to be able to read the certificate and
key files to offer TLS, but should not be able to write to then.

This commit checks the TLS files are read-only, rather than
simply readable
2024-07-01 14:25:23 +01:00
matt335672 48255da29a Add xrdp-chkpriv script to check xrdp privileges 2024-07-01 11:11:21 +01:00