Lukas Raska created GUACAMOLE-1969:
--------------------------------------
Summary: Allow screen recording to capture user clipboard
interactions
Key: GUACAMOLE-1969
URL: https://issues.apache.org/jira/browse/GUACAMOLE-1969
Project: Guacamole
Issue Type: Improvement
Components: guacamole, guacd
Reporter: Lukas Raska
Currently, Guacamole screen recording contains only graphical events and
optionally admins can use _recording-include-keys_ to include also key events
into the recording
([https://guacamole.apache.org/doc/gug/configuring-guacamole.html#graphical-session-recording]
).
While that might be enough for certain situations, for various
auditing/compliance reasons, clipboard paste events might be required. If user
performs clipoard paste, these data are mostly not included (in certain cases
those text information might be present in Typescript), so when determining
what user actually pasted, is not possible.
I suggest implementing new connection parameter *recording-include-clipboard*
which would hook into the user clipboard handler and optionally dump the
relevant *clipboard* instruction and related stream events
([https://guacamole.apache.org/doc/gug/protocol-reference.html#clipboard-instruction]
) to include only the user-pasting clipboard contents.
If you're ok with implementing this improvement, I can draft a PR for all the
relevant parts.
Obviously this should come with warning for administrators to understand the
consequences of enabling the parameter - from both capacity perspective
(recording might get larger depending on the amount of data pasted, although
probably less data than actual screen capture) as well as legal / regulations
perspective (data within clipboard can contain sensitive information and data
not related to the actual Guacamole session).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
