debian/0000755000000000000000000000000012031570703007164 5ustar debian/default0000644000000000000000000000025512031570703010535 0ustar # Do we need to start sesman ? SESMAN_START=yes # Do we restart xrdp on upgrade ? If not set to no, any xrdp session will # be shutdown on upgrade. # RESTART_ON_UPGRADE=no debian/init.d0000644000000000000000000001154312031570703010300 0ustar #!/bin/sh -e # # start/stop xrdp and sesman daemons # ### BEGIN INIT INFO # Provides: xrdp # Required-Start: $network $remote_fs # Required-Stop: $network $remote_fs # Default-Start: 2 3 4 5 # Default-Stop: 0 1 6 # Short-Description: Start xrdp and sesman daemons # Description: XRDP uses the Remote Desktop Protocol to present a # graphical login to a remote client allowing connection # to a VNC server or another RDP server. ### END INIT INFO PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin DAEMON=/usr/sbin/xrdp PIDDIR=/var/run/xrdp USERID=xrdp RSAKEYS=/etc/xrdp/rsakeys.ini NAME=xrdp DESC="Remote Desktop Protocol server" test -x $DAEMON || exit 0 . /lib/lsb/init-functions check_root() { if [ "$(id -u)" != "0" ]; then log_failure_msg "You must be root to start, stop or restart $NAME." exit 4 fi } if [ -r /etc/default/$NAME ]; then . /etc/default/$NAME fi # Tasks that can only be run as root if [ "$(id -u)" = "0" ]; then # Check for pid dir if [ ! -d $PIDDIR ] ; then mkdir $PIDDIR fi chown $USERID:$USERID $PIDDIR # Check for rsa key if [ ! -f $RSAKEYS ] || cmp $RSAKEYS /usr/share/doc/xrdp/rsakeys.ini > /dev/null; then log_action_begin_msg "Generating xrdp RSA keys..." (umask 077 ; xrdp-keygen xrdp $RSAKEYS) chown $USERID:$USERID $RSAKEYS if [ ! -f $RSAKEYS ] ; then log_action_end_msg 1 "could not create $RSAKEYS" exit 1 fi log_action_end_msg 0 "done" fi fi case "$1" in start) check_root exitval=0 log_daemon_msg "Starting $DESC " if pidofproc -p $PIDDIR/$NAME.pid $DAEMON > /dev/null; then log_progress_msg "$NAME apparently already running" log_end_msg 0 exit 0 fi log_progress_msg $NAME start-stop-daemon --start --quiet --oknodo --pidfile $PIDDIR/$NAME.pid \ --chuid $USERID:$USERID --exec $DAEMON exitval=$? if [ "$SESMAN_START" = "yes" ] ; then log_progress_msg "sesman" start-stop-daemon --start --quiet --oknodo --pidfile $PIDDIR/xrdp-sesman.pid \ --exec /usr/sbin/xrdp-sesman value=$? [ $value -gt 0 ] && exitval=$value fi # Make pidfile readables for all users (for status to work) [ -e $PIDDIR/xrdp-sesman.pid ] && chmod 0644 $PIDDIR/xrdp-sesman.pid [ -e $PIDDIR/$NAME.pid ] && chmod 0644 $PIDDIR/$NAME.pid # Note: Unfortunately, xrdp currently takes too long to create # the pidffile unless properly patched log_end_msg $exitval ;; stop) check_root [ -n "$XRDP_UPGRADE" -a "$RESTART_ON_UPGRADE" = "no" ] && { echo "Upgrade in progress, no restart of xrdp." exit 0 } exitval=0 log_daemon_msg "Stopping RDP Session manager " log_progress_msg "sesman" if pidofproc -p $PIDDIR/xrdp-sesman.pid /usr/sbin/xrdp-sesman > /dev/null; then start-stop-daemon --stop --quiet --oknodo --pidfile $PIDDIR/xrdp-sesman.pid \ --chuid $USERID:$USERID --exec /usr/sbin/xrdp-sesman exitval=$? else log_progress_msg "apparently not running" fi log_progress_msg $NAME if pidofproc -p $PIDDIR/$NAME.pid $DAEMON > /dev/null; then start-stop-daemon --stop --quiet --oknodo --pidfile $PIDDIR/$NAME.pid \ --exec $DAEMON value=$? [ $value -gt 0 ] && exitval=$value else log_progress_msg "apparently not running" fi log_end_msg $exitval ;; restart|force-reload) check_root $0 stop # Wait for things to settle down sleep 1 $0 start ;; reload) log_warning_msg "Reloading $NAME daemon: not implemented, as the daemon" log_warning_msg "cannot re-read the config file (use restart)." ;; status) exitval=0 log_daemon_msg "Checking status of $DESC" "$NAME" if pidofproc -p $PIDDIR/$NAME.pid $DAEMON > /dev/null; then log_progress_msg "running" log_end_msg 0 else log_progress_msg "apparently not running" log_end_msg 1 || true exitval=1 fi if [ "$SESMAN_START" = "yes" ] ; then log_daemon_msg "Checking status of RDP Session Manager" "sesman" if pidofproc -p $PIDDIR/xrdp-sesman.pid /usr/sbin/xrdp-sesman > /dev/null; then log_progress_msg "running" log_end_msg 0 else log_progress_msg "apparently not running" log_end_msg 1 || true exitval=1 fi fi exit $exitval ;; *) N=/etc/init.d/$NAME echo "Usage: $N {start|stop|restart|force-reload|status}" >&2 exit 1 ;; esac exit 0 debian/startwm.sh0000644000000000000000000000016612031570703011224 0ustar #!/bin/sh if [ -r /etc/default/locale ]; then . /etc/default/locale export LANG LANGUAGE fi . /etc/X11/Xsession debian/source/0000755000000000000000000000000012031570703010464 5ustar debian/source/format0000644000000000000000000000001412031570703011672 0ustar 3.0 (quilt) debian/patches/0000755000000000000000000000000012031570703010613 5ustar debian/patches/08-format-security.patch0000644000000000000000000000123112031570703015213 0ustar Fix a potential security problem if the message log contained "%". diff --git a/common/log.c b/common/log.c index 7bbdfc0..4ed2adf 100644 --- a/common/log.c +++ b/common/log.c @@ -160,13 +160,13 @@ log_message(struct log_config* l_cfg, const unsigned int lvl, const char* msg, . if (l_cfg->enable_syslog && (lvl <= l_cfg->log_level)) { /* log to syslog */ - syslog(log_xrdp2syslog(lvl), buff + 20); + syslog(log_xrdp2syslog(lvl), "%s", buff + 20); } if (lvl <= l_cfg->log_level) { /* log to console */ - g_printf((char*)buff); + g_printf("%s", (char*)buff); /* log to application logfile */ #ifdef LOG_ENABLE_THREAD debian/patches/06-xrdp_pidfile_early.patch0000644000000000000000000000205312031570703015724 0ustar Ensure that the PID file is written before sleeping. Index: xrdp/xrdp/xrdp.c =================================================================== --- xrdp.orig/xrdp/xrdp.c 2012-09-29 13:03:27.666630538 +0200 +++ xrdp/xrdp/xrdp.c 2012-09-29 13:03:32.874746622 +0200 @@ -388,17 +388,6 @@ g_deinit(); g_exit(0); } - g_sleep(1000); - g_file_close(0); - g_file_close(1); - g_file_close(2); - g_file_open("/dev/null"); - g_file_open("/dev/null"); - g_file_open("/dev/null"); - /* end of daemonizing code */ - } - if (!no_daemon) - { /* write the pid to file */ pid = g_getpid(); fd = g_file_open(pid_file); /* xrdp.pid */ @@ -414,6 +403,14 @@ g_file_write(fd, text, g_strlen(text)); g_file_close(fd); } + g_sleep(1000); + g_file_close(0); + g_file_close(1); + g_file_close(2); + g_file_open("/dev/null"); + g_file_open("/dev/null"); + g_file_open("/dev/null"); + /* end of daemonizing code */ } g_threadid = tc_get_threadid(); g_listen = xrdp_listen_create(); debian/patches/01reuse-session.patch0000644000000000000000000000143412031570703014603 0ustar Allow to reuse an existing session by fixing a bug in session comparison. See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573258 Index: xrdp/sesman/session.c =================================================================== --- xrdp.orig/sesman/session.c 2012-09-29 12:51:50.115200445 +0200 +++ xrdp/sesman/session.c 2012-09-29 12:54:40.302890162 +0200 @@ -56,6 +56,19 @@ { struct session_chain* tmp; + /* convert from SCP_SESSION_TYPE namespace to SESMAN_SESSION_TYPE namespace */ + switch (type) + { + case SCP_SESSION_TYPE_XVNC: + type = SESMAN_SESSION_TYPE_XVNC; + break; + case SCP_SESSION_TYPE_XRDP: + type = SESMAN_SESSION_TYPE_XRDP; + break; + default: + return 0; + } + /*THREAD-FIX require chain lock */ lock_chain_acquire(); debian/patches/04quiet_start.patch0000644000000000000000000001066212031570703014351 0ustar Avoid displaying a lot of information when starting xrdp and sesman Index: xrdp/sesman/config.c =================================================================== --- xrdp.orig/sesman/config.c 2012-09-29 12:51:50.000000000 +0200 +++ xrdp/sesman/config.c 2012-09-29 12:55:57.560560996 +0200 @@ -179,13 +179,13 @@ } /* showing read config */ - g_printf("sesman config:\r\n"); + /* g_printf("sesman config:\r\n"); g_printf("\tListenAddress: %s\r\n", cf->listen_address); g_printf("\tListenPort: %s\r\n", cf->listen_port); g_printf("\tEnableUserWindowManager: %i\r\n", cf->enable_user_wm); g_printf("\tUserWindowManager: %s\r\n", cf->user_wm); g_printf("\tDefaultWindowManager: %s\r\n", cf->default_wm); - g_printf("\tAuthFilePath: %s\r\n", ((cf->auth_file_path) ? (cf->auth_file_path) : ("disabled"))); + g_printf("\tAuthFilePath: %s\r\n", ((cf->auth_file_path) ? (cf->auth_file_path) : ("disabled"))); */ return 0; } @@ -236,11 +236,11 @@ lc->log_file=g_strdup("./sesman.log"); } - g_printf("logging configuration:\r\n"); + /* g_printf("logging configuration:\r\n"); g_printf("\tLogFile: %s\r\n",lc->log_file); g_printf("\tLogLevel: %i\r\n", lc->log_level); g_printf("\tEnableSyslog: %i\r\n", lc->enable_syslog); - g_printf("\tSyslogLevel: %i\r\n", lc->syslog_level); + g_printf("\tSyslogLevel: %i\r\n", lc->syslog_level); */ return 0; } @@ -295,7 +295,7 @@ } /* printing security config */ - g_printf("security configuration:\r\n"); + /* g_printf("security configuration:\r\n"); g_printf("\tAllowRootLogin: %i\r\n",sc->allow_root); g_printf("\tMaxLoginRetry: %i\r\n",sc->login_retry); if (sc->ts_users_enable) @@ -313,7 +313,7 @@ else { g_printf("\tNo TSAdminsGroup defined\r\n"); - } + } */ return 0; } @@ -363,12 +363,12 @@ } /* printing security config */ - g_printf("session configuration:\r\n"); + /* g_printf("session configuration:\r\n"); g_printf("\tMaxSessions: %i\r\n", se->max_sessions); g_printf("\tX11DisplayOffset: %i\r\n", se->x11_display_offset); g_printf("\tKillDisconnected: %i\r\n", se->kill_disconnected); g_printf("\tIdleTimeLimit: %i\r\n", se->max_idle_time); - g_printf("\tDisconnectedTimeLimit: %i\r\n", se->max_idle_time); + g_printf("\tDisconnectedTimeLimit: %i\r\n", se->max_idle_time); */ return 0; } @@ -392,11 +392,11 @@ } /* printing security config */ - g_printf("X11rdp parameters:\r\n"); + /* g_printf("X11rdp parameters:\r\n"); for (i = 0; i < cs->rdp_params->count; i++) { g_printf("\tParameter %02d %s\r\n", i, (char*)list_get_item(cs->rdp_params, i)); - } + } */ return 0; } @@ -420,11 +420,11 @@ } /* printing security config */ - g_printf("Xvnc parameters:\r\n"); + /* g_printf("Xvnc parameters:\r\n"); for (i = 0; i < cs->vnc_params->count; i++) { g_printf("\tParameter %02d %s\r\n", i, (char*)list_get_item(cs->vnc_params, i)); - } + } */ return 0; } Index: xrdp/sesman/sesman.c =================================================================== --- xrdp.orig/sesman/sesman.c 2012-09-29 12:51:50.000000000 +0200 +++ xrdp/sesman/sesman.c 2012-09-29 12:55:11.103556585 +0200 @@ -143,7 +143,7 @@ if (1 == argc) { /* no options on command line. normal startup */ - g_printf("starting sesman...\n"); + /* g_printf("starting sesman...\n"); */ daemon = 1; } else if ((2 == argc) && ((0 == g_strcasecmp(argv[1], "--nodaemon")) || Index: xrdp/xrdp/xrdp.c =================================================================== --- xrdp.orig/xrdp/xrdp.c 2012-09-29 12:51:50.000000000 +0200 +++ xrdp/xrdp/xrdp.c 2012-09-29 12:55:11.103556585 +0200 @@ -383,7 +383,7 @@ } if (0 != pid) { - g_writeln("process %d started ok", pid); + /* g_writeln("process %d started ok", pid); */ /* exit, this is the main process */ g_deinit(); g_exit(0); Index: xrdp/sesman/libscp/libscp_init.c =================================================================== --- xrdp.orig/sesman/libscp/libscp_init.c 2012-09-29 12:51:50.111200358 +0200 +++ xrdp/sesman/libscp/libscp_init.c 2012-09-29 12:55:11.103556585 +0200 @@ -42,8 +42,6 @@ scp_lock_init(); - log_message(s_log, LOG_LEVEL_WARNING, "[init:%d] libscp initialized", __LINE__); - return 0; } debian/patches/series0000644000000000000000000000016712031570703012034 0ustar 01reuse-session.patch 04quiet_start.patch 05-default-keymap.patch 06-xrdp_pidfile_early.patch 08-format-security.patch debian/patches/05-default-keymap.patch0000644000000000000000000000112412031570703014764 0ustar Ensure that the default keymap is US english if there is a problem locating one. Index: xrdp/xrdp/lang.c =================================================================== --- xrdp.orig/xrdp/lang.c 2012-09-29 13:01:00.267338590 +0200 +++ xrdp/xrdp/lang.c 2012-09-29 13:03:28.446647925 +0200 @@ -239,6 +239,13 @@ g_file_close(fd); } } + else if (keylayout != 0x409) + { + g_free(filename); + g_writeln("keymap for 0x%4.4x was not found. Falling back to 0x0409 instead", + keylayout); + return get_keymaps(0x409, keymap); + } g_free(filename); return 0; } debian/copyright0000644000000000000000000001416412031570703011125 0ustar This package was downloaded from http://xrdp.sourceforge.net/. Files: * Copyright: © 2003-2010 Jay Sorg License: GPL-2+ | other xrdp may be redistributed under the terms of the GNU GPL, Version 2 or later, found on Debian systems in the file `/usr/share/common-licenses/GPL-2`, with a few exception allowing the use of OpenSSL and allowing to link with proprietary modules. Those exceptions are reproduced below: 8<----------------------------------------------------------------- special clause for libxrdp and librdp, both based on rdesktop these libraries link to openssl This software is released under the GNU General Public License (reproduced below) with the additional exemption that compiling, linking, and/or using OpenSSL together with this software is allowed. special clause for xrdp, that main executable for linking with proprietary modules Linking this library statically or dynamically with other modules is making a combined work based on this library. Thus, the terms and conditions of the GNU General Public License cover the whole combination. As a special exception, the copyright holders of this library give you permission to link this library with independent modules to produce an executable, regardless of the license terms of these independent modules, and to copy and distribute the resulting executable under terms of your choice, provided that you also meet, for each linked independent module, the terms and conditions of the license of that module. An independent module is a module which is not derived from or based on this library. If you modify this library, you may extend this exception to your version of the library, but you are not obliged to do so. If you do not wish to do so, delete this exception statement from your version. 8<----------------------------------------------------------------- Files: debian/* Copyright: © 2007, 2008 Vincent Bernat License: GPL-2+ Files: xrdp/sans-10.fv1 Copyright: © 2003 Bitstream, Inc. License: other All Rights Reserved. Bitstream Vera is a trademark of Bitstream, Inc. Permission is hereby granted, free of charge, to any person obtaining a copy of the fonts accompanying this license ("Fonts") and associated documentation files (the "Font Software"), to reproduce and distribute the Font Software, including without limitation the rights to use, copy, merge, publish, distribute, and/or sell copies of the Font Software, and to permit persons to whom the Font Software is furnished to do so, subject to the following conditions: The above copyright and trademark notices and this permission notice shall be included in all copies of one or more of the Font Software typefaces. The Font Software may be modified, altered, or added to, and in particular the designs of glyphs or characters in the Fonts may be modified and additional glyphs or characters may be added to the Fonts, only if the fonts are renamed to names not containing either the words "Bitstream" or the word "Vera". This License becomes null and void to the extent applicable to Fonts or Font Software that has been modified and is distributed under the "Bitstream Vera" names. The Font Software may be sold as part of a larger software package but no copy of one or more of the Font Software typefaces may be sold by itself. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL BITSTREAM OR THE GNOME FOUNDATION BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. Except as contained in this notice, the names of Gnome, the Gnome Foundation, and Bitstream Inc., shall not be used in advertising or otherwise to promote the sale, use or other dealings in this Font Software without prior written authorization from the Gnome Foundation or Bitstream Inc., respectively. For further information, contact: . Files: common/xrdp_constants.h Copyright: © Matthew Chapman 1999-2007 License: GPL-2+ Files: common/d3des.h common/d3des.c Copyright: © 1999 AT&T Laboratories Cambridge, © 1988,1989,1990,1991,1992 by Richard Outerbridge License: PD D3DES (V5.09) - A portable, public domain, version of the Data Encryption Standard. Written with Symantec's THINK (Lightspeed) C by Richard Outerbridge. Thanks to: Dan Hoey for his excellent Initial and Inverse permutation code; Jim Gillogly & Phil Karn for the DES key schedule code; Dennis Ferguson, Eric Young and Dana How for comparing notes; and Ray Lau, for humouring me on. Files: common/os_calls.* arch.h file.* list.* thread_calls.* parse.h Copyright: © 2004-2010 Jay Sorg License: MIT Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. On Debian systems, the complete text of the GPL can be found in `/usr/share/common-licenses/GPL-2`. debian/xrdp-keygen.80000644000000000000000000000154112031570703011513 0ustar .\" Hey, EMACS: -*- nroff -*- .TH xrdp-keygen 8 "2007-07-31" .SH NAME xrdp-keygen \- xrdp RSA keys generation utility .SH SYNOPSIS .B xrdp-keygen .RI [ options ] .RI [ filename ] .SH DESCRIPTION This manual page documents briefly the command .B xrdp-keygen. .PP \fBxrdp-keygen\fP generates the file .I /etc/xrdp/rsakeys.ini whose contains the RSA keypair used to perform authentication to the remote client. The public key is self-signed. .SH OPTIONS This program takes one option: .TP .B xrdp Generate a new keypair. This is the option you should use. .TP .B test Generate a test keypair. Do not use this option. .SH SEE ALSO .BR xrdp (8), .BR sesman (8). .SH AUTHOR xrdp-keygen was written by Jay Sorg. .PP This manual page was written by Vincent Bernat , for the Debian project (but may be used by others). debian/rules0000755000000000000000000000144712031570703010252 0ustar #!/usr/bin/make -f # -*- makefile -*- %: dh $@ override_dh_auto_configure: ./bootstrap ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var find -name Makefile | while read i; do sed -e 's#\(XRDP_PID_PATH.*/run\)#\1/xrdp#g' -i "$$i"; done override_dh_makeshlibs: dh_makeshlibs -a -n override_dh_installman: dh_installman -a debian/xrdp-keygen.8 override_dh_installpam: dh_installpam --name=sesman rm debian/xrdp/etc/pam.d/xrdp-sesman override_dh_installdeb: # Clean up some files rm debian/xrdp/etc/xrdp/xrdp.sh rm debian/xrdp/usr/lib/xrdp/*a rm debian/xrdp/usr/bin/xrdp-sestest # Use our own startwm.sh install -m 755 debian/startwm.sh debian/xrdp/etc/xrdp # Move rsakeys to documentation mv debian/xrdp/etc/xrdp/rsakeys.ini debian/xrdp/usr/share/doc/xrdp dh_installdeb -a debian/postrm0000644000000000000000000000047712031570703010443 0ustar #! /bin/sh # postrm script for xrdp # # see: dh_installdeb(1) set -e #DEBHELPER# case "$1" in purge) # We delete user and group deluser --system xrdp || true delgroup --system xrdp || true rm -rf /etc/xrdp /var/run/xrdp /var/log/sesman.log /var/log/xrdp-sesman.log ;; *) ;; esac exit 0 debian/xrdp.links0000644000000000000000000000004712031570703011204 0ustar etc/pam.d/sesman etc/pam.d/xrdp-sesman debian/compat0000644000000000000000000000000212031570703010362 0ustar 9 debian/postinst0000644000000000000000000000106212031570703010771 0ustar #!/bin/sh -e if ! ([ "$1" = "configure" ] || [ "$1" = "reconfigure" ]); then exit 0 fi XRDP="xrdp" CHOWN="/bin/chown" ADDUSER="/usr/sbin/adduser" [ -d /var/run/xrdp ] || mkdir -p /var/run/xrdp $ADDUSER --system --disabled-password --disabled-login --home /var/run/xrdp \ --no-create-home --quiet --group $XRDP $CHOWN -R $XRDP:$XRDP /etc/xrdp if [ "$1" = "configure" ]; then if dpkg --compare-versions "$2" lt '0.4.0~dfsg-7'; then # We remove old keys [ -f /etc/xrdp/rsakeys.ini ] && rm /etc/xrdp/rsakeys.ini fi fi #DEBHELPER# debian/prerm0000644000000000000000000000022512031570703010233 0ustar #!/bin/sh set -e # If we are upgrading, we notify init.d script that we are upgrading [ "$1" = "upgrade" ] && export XRDP_UPGRADE=yes #DEBHELPER# debian/watch0000644000000000000000000000005012031570703010210 0ustar # CVS version, no watch file available. debian/changelog0000644000000000000000000001562012031570703011042 0ustar xrdp (0.6.0-1) unstable; urgency=low * New upstream version. Closes: #687039. * Drop 07-unix-socks-in-var-run.patch: upstream now creates a dedicated directory for Unix sockets in /tmp (with mkdtemp). * Drop the following patches, applied upstream: + alt-gr-fix.patch + keycode-fix.patch * Bump Standards-Version to 3.9.3. * Enable hardening. -- Vincent Bernat Sat, 29 Sep 2012 13:00:49 +0200 xrdp (0.5.0-2) unstable; urgency=low * Remove sesman logs on purge. Closes: #656212. * Don't create /var/log/sesman.log in postinst. sesman is now able to create it. * Don't create Unix socket in /tmp. Put them in /var/run/xrdp. Closes: #656210. * Bump Standards-Version to 3.9.2. -- Vincent Bernat Sun, 22 Jan 2012 13:14:11 +0100 xrdp (0.5.0-1) unstable; urgency=low * New upstream version. + This version also happens to fix linking problems. Closes: #615803. * Support for some non-US keyboards whose keycodes may be greater than 128 with a patch from Sasajima. Closes: #610961. -- Vincent Bernat Sun, 18 Sep 2011 20:38:04 +0200 xrdp (0.5.0~20100303cvs-6) unstable; urgency=low * Add a patch to fix Alt-Gr issues with Windows TS client. Closes: #584666. * Bump Standards-Version to 3.9.1. -- Vincent Bernat Wed, 11 Aug 2010 18:47:30 +0200 xrdp (0.5.0~20100303cvs-5) unstable; urgency=low * Rewrite of init.d by Javier Fernández-Sanguino Peña to be LSB compliant. Closes: #589757. * Bump Standards-Version to 3.9.0. -- Vincent Bernat Sat, 24 Jul 2010 16:40:34 +0200 xrdp (0.5.0~20100303cvs-4) unstable; urgency=low * Add a patch to fall back to US keymap if the correct keymap is not found in /etc/xrdp. Closes: #575477. -- Vincent Bernat Sat, 01 May 2010 20:09:05 +0200 xrdp (0.5.0~20100303cvs-3) unstable; urgency=low * Ensure that /var/run/xrdp is owned by xrdp:xrdp. Closes: #575438. -- Vincent Bernat Thu, 25 Mar 2010 21:25:52 +0100 xrdp (0.5.0~20100303cvs-2) unstable; urgency=low * Allow to reuse an existing session, thanks to a patch from Daniel Baumann. Closes: #573258. -- Vincent Bernat Wed, 10 Mar 2010 22:08:30 +0100 xrdp (0.5.0~20100303cvs-1) unstable; urgency=low * New upstream release (0.5.0) from CVS repository. + Upstream now provide a free font, therefore, we use pristine sources and we can drop 01sans_font.dpatch. + Drop most of the other patchs since they have been merged upstream. + Windows 7 RDP client can now connect. Closes: #572764. + Session selection is now available. Closes: #523281. + Mapping problems seems to be fixed. Closes: #483365. + No more unneeded awakening. Closes: #447377. * Bump Standards-Version to 3.8.4. * Switch to 3.0 (quilt) format. * Switch to debhelper 7. * Fix path to xrdp and xrdp-sesman in init.d script. * Drop debian/watch, we use a CVS version. * Build-Depends on libx*-dev since it is now requested by configure. -- Vincent Bernat Mon, 08 Mar 2010 21:27:35 +0100 xrdp (0.4.1~dfsg-2) unstable; urgency=low * Don't chown /var/run/xrdp in postinst since it is done in init.d but create it to not rely on adduser doing it. -- Vincent Bernat Sun, 27 Sep 2009 09:20:56 +0200 xrdp (0.4.1~dfsg-1) unstable; urgency=low * Package xrdp 0.4.1. Remove 09vista_mstc.dpatch and 10mono_cursor.dpatch since they were included upstream. This new version happens to fix LDAP login. Closes: #547999, #548002. LP: #429637. * Export locale settings from /etc/default/locale, thanks to a suggestion from Alessandro Vietta. Closes: #528032. * Fix a bus error on ARM, thanks to a patch from Sven-Ola Tuecke. Closes: #544384. * Update Standards-Version to 3.8.3. No changes required. * Don't ship /var/run/xrdp since it is created in init.d. -- Vincent Bernat Sat, 26 Sep 2009 17:37:20 +0200 xrdp (0.4.0~dfsg-9) unstable; urgency=high * Fix CVE-2008-5902 and CVE-2008-5904 with the help of patches proposed by Ondrej Kolacek. The patch fixing CVE-2008-5902 also happens to fix CVE-2008-5903 by checking boundary before calling add_char_at(). This closes: #511641. * Really add patch to fix monochrome cursor issue. * Also updates Standards-Version and add ${misc:Depends} macro. * Don't use Pa macro in xrdp-keygen manual page. -- Vincent Bernat Fri, 23 Jan 2009 21:29:14 +0100 xrdp (0.4.0~dfsg-8) unstable; urgency=low * Add a patch to fix monochrome cursor issue -- Vincent Bernat Tue, 03 Jun 2008 00:17:16 +0200 xrdp (0.4.0~dfsg-7) unstable; urgency=medium * Due to OpenSSL weak random number generator, rsakeys.ini contains weak keys. We remove them on upgrade without any warning since they are not checked by any client. -- Vincent Bernat Wed, 21 May 2008 06:49:20 +0200 xrdp (0.4.0~dfsg-6) unstable; urgency=low * Add Vcs-* fields to debian/control * Convert debian/copyright to machine-readable format (Closes: #469074) * Add a patch to support Visa SP1 mstc application, thanks to Jay Sorg -- Vincent Bernat Thu, 08 May 2008 22:31:41 +0200 xrdp (0.4.0~dfsg-5) unstable; urgency=low * Package sessvc which was left out (Closes: #465210). * Sleep a bit after stopping so that xrdp can be restarted on upgrade. * Add an option in /etc/default/xrdp to avoid to restart xrdp on upgrade, thanks to a suggestion from Ola Lundqvist (Closes: #472186). -- Vincent Bernat Wed, 26 Mar 2008 20:45:12 +0100 xrdp (0.4.0~dfsg-4) unstable; urgency=low * Add a patch to fix missing keys in fr and de layout. Layout enhancements are welcome! (Closes: #440912) * Bump Standards-Version to 3.7.3 * Add XS-DM-Upload field to debian/control -- Vincent Bernat Sat, 02 Feb 2008 00:53:59 +0100 xrdp (0.4.0~dfsg-3) unstable; urgency=low * Delete user and group on purge. * Do not delete xrdp user on postinst if it exists, thanks to Trent W. Buck (Closes: #435671). * Provide a more generic PAM configuration file. * Run sesman as root to allow him to use PAM properly (Closes: #435667). * Fix file paths in man pages. -- Vincent Bernat Sun, 05 Aug 2007 20:33:55 +0200 xrdp (0.4.0~dfsg-2) unstable; urgency=low * Includes a keygen utility from CVS to generate a fresh keypair on first start and ensure that permissions are correct. (Closes: #435076). * Removes redundant "open source" mention in description, thanks to Josh Triplett (Closes: #435061). * Add a watch file * Now running the daemon as xrdp user -- Vincent Bernat Sun, 29 Jul 2007 13:05:46 +0200 xrdp (0.4.0~dfsg-1) unstable; urgency=low * Initial release (Closes: #391103) -- Vincent Bernat Wed, 11 Jul 2007 09:13:08 +0200 debian/xrdp.sesman.pam0000644000000000000000000000015012031570703012121 0ustar #%PAM-1.0 @include common-auth @include common-account @include common-session @include common-password debian/control0000644000000000000000000000165712031570703010600 0ustar Source: xrdp Section: net Priority: optional Maintainer: Vincent Bernat Build-Depends: debhelper (>= 7.0.50~), libssl-dev, libpam0g-dev, autoconf (>= 2.59), automake (>= 1.6), libtool, libx11-dev, libxfixes-dev, libfreerdp-dev, pkg-config Standards-Version: 3.9.3 Homepage: http://xrdp.sourceforge.net Vcs-Browser: http://git.debian.org/?p=collab-maint/xrdp.git Vcs-Git: git://git.debian.org/git/collab-maint/xrdp.git Package: xrdp Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends}, adduser Recommends: vnc4server | tightvncserver | vnc-server Description: Remote Desktop Protocol (RDP) server Based on research work by the rdesktop project, xrdp uses the Remote Desktop Protocol to present a graphical login to a remote client. xrdp can connect to a VNC server or another RDP server. . Microsoft Windows users can connect to a system running xrdp without installing additional software.