Re: possible security issue

2018-01-15 Thread Mike Jumper
On Sun, Jan 14, 2018 at 11:46 PM, Michael Niehren wrote: > Hi together, > > i see an security issue in the following scenario: > First, if you think you've found a problem with security implications, *please do not post about it in a public forum*. Follow responsible disclosure practices, as des

Re: possible security issue

2018-01-15 Thread Michael Niehren
Hi Mike, thanks for your answer. You are right, it is no security issue. I tried out your suggestion and configured no session for the user, after that i kick of the active session and he could not connect again. He's still logged in into the guac-client, but he can't do anything. thank's for y

RE: SSL RDP Download file fails

2018-01-15 Thread Adrian Owen
Hi, I have reconfigured Debian Jessie x86 Guacamole 0.9.13 RELEASE to use nginx to terminate SSL traffic. But dragging and dropping files onto the SharedFolder:downloads folder still fails First drop - it does nothing Second drop - it works. But session gets disconnected. On guacamole server

Re: Virtual Channel callback onpipe doesn't work on IE11

2018-01-15 Thread fadeev
Hi Mike, Thank you for your answer. I created an application on server side that send some data to my virtual channel and it works (for Firefox and Chrome). But when I began test on IE there were problems. But I can't localize it for some reason. I noticed some dependency with clipboard (see my

Re: Permissions on screen capture recordings

2018-01-15 Thread Aaron Newsome
I've resolved the issue with the file permissions on the recordings. I still think the cleanest way to playback the recordings, is for the files to be written with permissions that allow them to be read but I also realize that not everyone would want this. The most restrictive permissions on the se

RE: Permissions on screen capture recordings

2018-01-15 Thread Ryan Underwood
Aaron and Mike, This may be an issue in the source for recording.c (line 83 and again for the naming retries): /* Attempt to open recording */ int fd = open(basename, O_CREAT | O_EXCL | O_WRONLY, S_IRUSR | S_IWUSR); man(2) for open states that if you use O_CREAT you must supply the mode

Re: Permissions on screen capture recordings

2018-01-15 Thread Mike Jumper
On Mon, Jan 15, 2018 at 11:59 AM, Ryan Underwood wrote: > Aaron and Mike, > > This may be an issue in the source for recording.c (line 83 and again for > the naming retries): > > > > /* Attempt to open recording */ > > *int* fd = open(basename, O_CREAT | O_EXCL | O_WRONLY, S_IRUSR | > S_I