Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • K KDE Portal for XDG Desktop
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 3
    • Issues 3
    • List
    • Boards
    • Service Desk
    • Milestones
  • Bugzilla
    • Bugzilla
  • Merge requests 11
    • Merge requests 11
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Releases
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • PlasmaPlasma
  • KDE Portal for XDG Desktop
  • Merge requests
  • !144

Allow RemoteDesktop requests if they come from a non-sandboxed app

  • Review changes

  • Download
  • Email patches
  • Plain diff
Merged Aleix Pol Gonzalez requested to merge work/apol/remotedesktop-auth into master Dec 15, 2022
  • Overview 30
  • Commits 3
  • Pipelines 10
  • Changes 9

If an app is run outside of the sandbox, grant them RemoteDesktop privileges. Un-sandboxed apps like those installed from the distro or AppImage have unlimited access to the system already so there is no security to be gained, but we may as well offer them access to the same codepath that sandboxed apps use to improve the UX and offer better functionality.

Accordingly, this MR refactors the SNI for screen sharing so that it applies to RemoteDesktop sessions as well and makes sure that the messaging is properly tailored to the use-case.

Note for the kind reviewers:

  • Non-sandboxed apps will be granted RemoteDesktop capabilities and will show a notification about it happening with the same contents as the confirmation dialog. This can be tested with krfb as is, or with kde connect with network/kdeconnect-kde!501 (merged) applied.
  • The SNI we get when in a screenshare session is now 1 per session rather than 1 per stream (can be tested with OBS and Firefox).
  • Polishing the text of the different notifications and SNI could make sense. We could do it either in this MR or in a future iteration as it's not trivial to test this.
Edited Jan 02, 2023 by Nate Graham
Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: work/apol/remotedesktop-auth