On Mon, Jan 15, 2018 at 11:59 AM, Ryan Underwood
wrote:
> Aaron and Mike,
>
> This may be an issue in the source for recording.c (line 83 and again for
> the naming retries):
>
>
>
> /* Attempt to open recording */
>
> *int* fd = open(basename, O_CREAT | O_EXCL | O_WRONLY, S_IRUSR |
> S_I
Aaron and Mike,
This may be an issue in the source for recording.c (line 83 and again for the
naming retries):
/* Attempt to open recording */
int fd = open(basename, O_CREAT | O_EXCL | O_WRONLY, S_IRUSR | S_IWUSR);
man(2) for open states that if you use O_CREAT you must supply the mode
I've resolved the issue with the file permissions on the recordings. I
still think the cleanest way to playback the recordings, is for the files
to be written with permissions that allow them to be read but I also
realize that not everyone would want this. The most restrictive permissions
on the se
Hi Mike,
Thank you for your answer.
I created an application on server side that send some data to my virtual
channel and it works (for Firefox and Chrome). But when I began test on IE
there were problems.
But I can't localize it for some reason. I noticed some dependency with
clipboard (see my
Hi,
I have reconfigured Debian Jessie x86 Guacamole 0.9.13 RELEASE to use nginx to
terminate SSL traffic.
But dragging and dropping files onto the SharedFolder:downloads folder still
fails
First drop - it does nothing
Second drop - it works. But session gets disconnected.
On guacamole server
Hi Mike,
thanks for your answer. You are right, it is no security issue.
I tried out your suggestion and configured no session for the user,
after that i kick of the active session and he could not connect again.
He's still logged in into the guac-client, but he can't do anything.
thank's for y
On Sun, Jan 14, 2018 at 11:46 PM, Michael Niehren
wrote:
> Hi together,
>
> i see an security issue in the following scenario:
>
First, if you think you've found a problem with security implications,
*please do not post about it in a public forum*. Follow responsible
disclosure practices, as des