guacamole-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nick Couchman <nick.couch...@yahoo.com>
Subject Re: RE: RE: Disable Hidden Menu
Date Thu, 24 Aug 2017 12:55:40 GMT
Adrian,For RDP, you can disable this functionality on the server-side, through GPO, I believe.
For SSH, I'm not sure I have a good answer there at the moment - I can't remember how Guacmaole
actually handles the copy/paste functionality in SSH, and if there's a SSH server way to block
this.
However, be aware that just disabling the user menu won't necessarily disable the ability
to use the clipboard, particularly in SSH.  Users can still load a browser extension and
use the clipboard transparently to copy text between the guest and the server, without actually
having access to this menu.  Obviously if you can control what extensions the user loads
in their browser you can, at least partially, mitigate this risk - but I don't know that I
would consider just hiding the user menu a fool-proof way to disable clipboard access.
-Nick

On Wednesday, August 2, 2017, 10:19:29 AM EDT, Adrian Owen <adrian.owen@eesm.com> wrote:

#yiv4861024719 #yiv4861024719 -- _filtered #yiv4861024719 {font-family:Helvetica;panose-1:2
11 6 4 2 2 2 2 2 4;} _filtered #yiv4861024719 {panose-1:2 4 5 3 5 4 6 3 2 4;} _filtered #yiv4861024719
{font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}#yiv4861024719 #yiv4861024719 p.yiv4861024719MsoNormal,
#yiv4861024719 li.yiv4861024719MsoNormal, #yiv4861024719 div.yiv4861024719MsoNormal {margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}#yiv4861024719
a:link, #yiv4861024719 span.yiv4861024719MsoHyperlink {color:blue;text-decoration:underline;}#yiv4861024719
a:visited, #yiv4861024719 span.yiv4861024719MsoHyperlinkFollowed {color:purple;text-decoration:underline;}#yiv4861024719
p.yiv4861024719msonormal, #yiv4861024719 li.yiv4861024719msonormal, #yiv4861024719 div.yiv4861024719msonormal
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}#yiv4861024719 p.yiv4861024719msochpdefault,
#yiv4861024719 li.yiv4861024719msochpdefault, #yiv4861024719 div.yiv4861024719msochpdefault
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}#yiv4861024719 span.yiv4861024719msohyperlink
{}#yiv4861024719 span.yiv4861024719msohyperlinkfollowed {}#yiv4861024719 span.yiv4861024719emailstyle17
{}#yiv4861024719 p.yiv4861024719msonormal1, #yiv4861024719 li.yiv4861024719msonormal1, #yiv4861024719
div.yiv4861024719msonormal1 {margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}#yiv4861024719
span.yiv4861024719msohyperlink1 {color:#0563C1;text-decoration:underline;}#yiv4861024719 span.yiv4861024719msohyperlinkfollowed1
{color:#954F72;text-decoration:underline;}#yiv4861024719 span.yiv4861024719emailstyle171 {color:#1F497D;}#yiv4861024719
p.yiv4861024719msochpdefault1, #yiv4861024719 li.yiv4861024719msochpdefault1, #yiv4861024719
div.yiv4861024719msochpdefault1 {margin-right:0cm;margin-left:0cm;font-size:10.0pt;}#yiv4861024719
span.yiv4861024719EmailStyle27 {color:#1F497D;}#yiv4861024719 .yiv4861024719MsoChpDefault
{font-size:10.0pt;} _filtered #yiv4861024719 {margin:72.0pt 72.0pt 72.0pt 72.0pt;}#yiv4861024719
div.yiv4861024719WordSection1 {}#yiv4861024719 
RDP to Windows and SSH to Linux all thru Guacamole.

  

From: Nick Couchman [mailto:nick.couchman@yahoo.com] 
Sent: 02 August 2017 15:17
To: user@guacamole.incubator.apache.org
Subject: Re: RE: Disable Hidden Menu

  

What type of systems are you connecting to on the remote side?

  

  

  

On Wednesday, August 2, 2017, 10:15:19 AM EDT, Adrian Owen <adrian.owen@eesm.com> wrote:

  

  

Hi Nick,

 

Thanks for you explanation.

 

The reason is: Users are not allowed Clipboard access to remote computers. 

 

Disabling Guacamole hidden menu, and ‘Browser Clipboard access’ meets the requirement.

 

 

Thanks, Adrian

 

From: Nick Couchman [mailto:nick.couchman@yahoo.com] 
Sent: 02 August 2017 15:03
To: user@guacamole.incubator.apache.org
Subject: Re: Disable Hidden Menu

 

Adrian,

A couple of issues, here:

 

- Moving files out of the way in Tomcat like that isn't a very reliable way to make changes,
since Tomcat will likely, at some point, re-deploy the web application and wipe out your changes.
 It looks like moving that file and restarting doesn't necessarily trigger the redeploy of
the original file, but it's still not a very reliable method for doing that.

 

- The client.html file is not the file responsible for the appearance of the hidden menu.
 That code is buried in the app.js file that contains all of the other JavaScript code for
Guacamole.  So, I would not expect moving this file out of the way to actually disable this
menu, or at least not only disable the menu - it will probably cause other problems.  The
fact that you're not seeing any changes after moving it probably has to do with caching on
client, server, or both.

 

- I do not believe there is currently a way to disable the hidden menu.  Maybe you can add
some detail about why you want to hide it, and you can also open a JIRA issue to request that
as an enhancement, if you like, but it would probably be good to discuss a little further,
here, and see what you're trying to accomplish and why.

 

Regards,

Nick

 


On Wednesday, August 2, 2017, 9:21:30 AM EDT, Adrian Owen <adrian.owen@eesm.com> wrote:


I renamed 
/var/lib/tomcat8/webapps/guacamole/app/client/templates/client.html
To
/var/lib/tomcat8/webapps/guacamole/app/client/templates/client.html.old
 
And restarted tomcat8
 
But hidden menu still appears?
 
How to disable it?
 
Many thanks, Adrian
 
 

Mime
View raw message