- up to 0.9.25

[packages/xrdp.git] / config.patch

--- xrdp-0.9.19/sesman/sesman.ini~      2022-03-17 06:21:20.000000000 +0000
+++ xrdp-0.9.19/sesman/sesman.ini       2022-03-22 06:06:23.939319489 +0000
@@ -12,13 +12,13 @@
 ReconnectScript=reconnectwm.sh
 
 [Security]
-AllowRootLogin=true
+AllowRootLogin=false
 MaxLoginRetry=4
-TerminalServerUsers=tsusers
-TerminalServerAdmins=tsadmins
+TerminalServerUsers=xrdp
+TerminalServerAdmins=root
 ; When AlwaysGroupCheck=false access will be permitted
 ; if the group TerminalServerUsers is not defined.
-AlwaysGroupCheck=false
+AlwaysGroupCheck=true
 ; When RestrictOutboundClipboard=all clipboard from the
 ; server is not pushed to the client.
 ; In addition, you can control text/file/image transfer restrictions
@@ -65,10 +65,10 @@
 
 [Logging]
 ; Note: Log levels can be any of: core, error, warning, info, debug, or trace
-LogFile=xrdp-sesman.log
+LogFile=/dev/null
 LogLevel=INFO
 EnableSyslog=true
-#SyslogLevel=INFO
+SyslogLevel=INFO
 #EnableConsole=false
 #ConsoleLevel=INFO
 #EnableProcessId=false
@@ -102,8 +102,8 @@
 param=-noreset
 param=-nolisten
 param=tcp
-param=-logfile
-param=.xorgxrdp.%s.log
+#param=-logfile
+#param=.xorgxrdp.%s.log
 
 [Xvnc]
 param=Xvnc
--- xrdp-0.9.18.1/xrdp/xrdp.ini~	2022-02-07 13:41:27.000000000 +0000
+++ xrdp-0.9.18.1/xrdp/xrdp.ini	2022-02-22 17:22:28.239696963 +0000
@@ -4,6 +4,8 @@
 
 ; fork a new process for each incoming connection
 fork=true
+; IP address to listen
+;address=127.0.0.1
 
 ; ports to listen on, number alone means listen on all interfaces
 ; 0.0.0.0 or :: if ipv6 is configured
@@ -178,10 +180,10 @@
 
 [Logging]
 ; Note: Log levels can be any of: core, error, warning, info, debug, or trace
-LogFile=xrdp.log
+LogFile=/dev/null
 LogLevel=INFO
 EnableSyslog=true
-#SyslogLevel=INFO
+SyslogLevel=INFO
 #EnableConsole=false
 #ConsoleLevel=INFO
 #EnableProcessId=false
@@ -218,14 +220,14 @@
 ; Some session types such as Xorg, X11rdp and Xvnc start a display server.
 ; Startup command-line parameters for the display server are configured
 ; in sesman.ini. See and configure also sesman.ini.
-[Xorg]
-name=Xorg
-lib=libxup.so
-username=ask
-password=ask
-ip=127.0.0.1
-port=-1
-code=20
+#[Xorg]
+#name=Xorg
+#lib=libxup.so
+#username=ask
+#password=ask
+#ip=127.0.0.1
+#port=-1
+#code=20
 
 [Xvnc]
 name=Xvnc
@@ -247,13 +249,13 @@
 ; Generic VNC Proxy
 ; Tailor this to specific hosts and VNC instances by specifying an ip
 ; and port and setting a suitable name.
-[vnc-any]
-name=vnc-any
-lib=libvnc.so
-ip=ask
-port=ask5900
-username=na
-password=ask
+#[vnc-any]
+#name=vnc-any
+#lib=libvnc.so
+#ip=ask
+#port=ask5900
+#username=na
+#password=ask
 #pamusername=asksame
 #pampassword=asksame
 #pamsessionmng=127.0.0.1
@@ -262,15 +264,15 @@
 ; Generic RDP proxy using NeutrinoRDP
 ; Tailor this to specific hosts by specifying an ip and port and setting
 ; a suitable name.
-[neutrinordp-any]
-name=neutrinordp-any
+#[neutrinordp-any]
+#name=neutrinordp-any
 ; To use this section, you should build xrdp with configure option
 ; --enable-neutrinordp.
-lib=libxrdpneutrinordp.so
-ip=ask
-port=ask3389
-username=ask
-password=ask
+#lib=libxrdpneutrinordp.so
+#ip=ask
+#port=ask3389
+#username=ask
+#password=ask
 ; Uncomment the following lines to enable PAM authentication for proxy
 ; connections.
 #pamusername=ask