Hey,
On Wed, Sep 23, 2015 at 10:05:40AM -0400, David Mansfield wrote:
> Hi,
>
> The attached is a very simple patch, which is working but possibly not
> suitable for inclusion at this point, that locks the x11 session when the
> client disconnects.
>
> Locking is performed using "xdg-screensaver lock", which seems like an ok
> implementation given that "xdg-open" is used in the file-transfer code.
>
> I looked at the ovirt-guest-agent code and that agent also locks the session
> on disconnect unless specifically disabled.
>
> Citrix (ICAClient) sessions also automatically lock when the client
> disconnects.
>
Not sure if I agree with the idea for vdagent... But it would need to be
configurable by client-side IMHO. As Michal point out, the _security_
when accesing remote VMs should be in the connection not _after_.
Meaning: If one person can connect to the VM without permission, that's
bad already, right?
> 3) Is there any point checking the exit status of the lock command? (me: NO)
why not?
> 4) Should the lock command be configurable? (me: grumble)
yes, preferable client-side
cheers,
toso
> diff -ur spice-vdagent-0.15.0.orig/src/vdagent-x11.c spice-vdagent-0.15.0/src/vdagent-x11.c
> --- spice-vdagent-0.15.0.orig/src/vdagent-x11.c 2013-10-14 08:52:01.000000000 -0400
> +++ spice-vdagent-0.15.0/src/vdagent-x11.c 2015-09-23 09:46:00.166210785 -0400
> @@ -1308,11 +1308,17 @@
> void vdagent_x11_client_disconnected(struct vdagent_x11 *x11)
> {
> int sel;
> + int status;
>
> for (sel = 0; sel < VD_AGENT_CLIPBOARD_SELECTION_SECONDARY; sel++) {
> if (x11->clipboard_owner[sel] == owner_client)
> vdagent_x11_clipboard_release(x11, sel);
> }
> +
> + status = system("xdg-screensaver lock");
> + if (status != 0) {
> + /* exit status is not checked */
> + }
> }
>
> /* Function used to determine the default location to save file-xfers,
> Only in spice-vdagent-0.15.0/src: vdagent-x11.c~
> _______________________________________________
> Spice-devel mailing list
> Spice-devel@xxxxxxxxxxxxxxxxxxxxx
> http://lists.freedesktop.org/mailman/listinfo/spice-devel
_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
http://lists.freedesktop.org/mailman/listinfo/spice-devel