Commit Graph

190 Commits

Author SHA1 Message Date
Bojan Smojver
ebf3964dd6 Bump up to 0.9.4. 2017-10-06 14:36:47 +11:00
Bojan Smojver
39d1b75d13 Add patch to clean sockets. 2017-09-19 07:22:54 +10:00
Bojan Smojver
f5708ae118 Bump up to 0.9.3. 2017-08-10 10:42:06 +10:00
Fedora Release Engineering
2892a14dfd - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 10:58:09 +00:00
Fedora Release Engineering
6eb1547e64 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 22:26:06 +00:00
Bojan Smojver
12a8dc25dd Document problems/workaround with clipboard support in TigerVNC 1.8.0. 2017-05-18 15:37:54 +10:00
Bojan Smojver
288dcc812b Actually add the patch. 2017-05-18 12:29:13 +10:00
Bojan Smojver
0e4fbd83c7 Add a patch that allows equal signs in ini file values. 2017-05-18 12:28:38 +10:00
Bojan Smojver
4b1af7e079 Use epoch in version dependency.
Provide SELinux scriptlets.
2017-04-13 15:22:09 +10:00
Bojan Smojver
294ba5281a Adjust Fedora README file for SELinux changes. 2017-04-13 08:31:21 +10:00
Bojan Smojver
75d49d9d76 Add SELinux policy sub-package. 2017-04-12 22:15:12 +10:00
Bojan Smojver
24e3a2139d Own /usr/libexec/xrdp directory. 2017-04-11 11:23:00 +10:00
Bojan Smojver
ba89333c84 Move scripts to /usr/libexec/xrdp, so that they get labelled as bin_t. 2017-04-11 11:16:53 +10:00
Bojan Smojver
c89b807752 Rework starting of Xorg to use setpriv, directly from xrdp.
Document SELinux deficiencies.
2017-04-08 16:24:24 +10:00
Bojan Smojver
0e2197f37f Fix the name of the renamed patch. 2017-04-07 14:19:03 +10:00
Bojan Smojver
c248a7d1ef Avoid SELinux context transition after prctl() call by using setpriv. 2017-04-07 14:13:47 +10:00
Bojan Smojver
2824937920 Do not attempt xrdp restarts, may cause dnf transaction problems.
Stop depending on Xorg server, xorgxrdp already does.
Add README.Fedora.
2017-04-04 08:49:00 +10:00
Bojan Smojver
9b7edb41eb Stop using /usr/libexec/Xorg, not present on EL7. 2017-04-03 19:04:12 +10:00
Bojan Smojver
ef84d9ffb3 Add nasm to the list of build requirements. 2017-03-31 11:38:39 +11:00
Bojan Smojver
19dd11b67f Bump up to 0.9.2. 2017-03-31 11:37:08 +11:00
Pavel Roskin
84a28878e6 Upload xrdp-0.9.2.tar.gz 2017-03-29 23:59:01 -07:00
Bojan Smojver
1316fae0cf Revert "Patch CVE-2017-6967."
This reverts commit 34847db9aa.
2017-03-21 19:34:09 +11:00
Bojan Smojver
a009df5bb7 Revert "Correct the patch for CVE-2017-6967."
This reverts commit 39eedd2899.
2017-03-21 19:34:04 +11:00
Bojan Smojver
39eedd2899 Correct the patch for CVE-2017-6967. 2017-03-21 19:25:13 +11:00
Bojan Smojver
34847db9aa Patch CVE-2017-6967. 2017-03-21 19:12:27 +11:00
Bojan Smojver
fdd3ba2522 Bump up release number. 2017-03-14 15:39:33 +11:00
Bojan Smojver
5e20737406 Require tigervnc-server-minimal again, make it default.
Comment out references to X11rdp.
2017-03-14 15:35:35 +11:00
Pavel Roskin
f1350805d5 Revert the last change, it's not working on f25 2017-03-11 00:07:43 -08:00
Pavel Roskin
cf3b9a55dc Set tls_ciphers to PROFILE=SYSTEM, disable SSLv3
See https://fedoraproject.org/wiki/Packaging:CryptoPolicies
2017-03-10 14:24:08 -08:00
Pavel Roskin
e27e31d616 Exclude *.so files for non-modules 2017-03-10 13:08:40 -08:00
Pavel Roskin
81cb1033b1 Call xrdp-keygen with full path in %posttrans 2017-03-10 10:31:17 -08:00
Pavel Roskin
3c9d286368 Require Xsession
- Require /etc/X11/xinit/Xsession, it's called from startwm.sh
2017-03-10 09:13:02 -08:00
Pavel Roskin
d3c649536b Use xorgxrdp by default
- Make xrdp depend on xorgxrdp, not on tigervnc-server-minimal
- Make Xorg backend default
- Call /usr/libexec/Xorg directly to avoid permission checks
2017-03-09 15:51:11 -08:00
Bojan Smojver
2d35ec095a Require openssl in posttrans phase.
Move conditional restart to posttrans phase.
2017-02-21 05:15:28 +11:00
Bojan Smojver
7271948d04 Move key/cert generation to posttrans phase. 2017-02-20 15:13:56 +11:00
Bojan Smojver
341ecd47bb Fix log file rotation.
PID files do not exist, so sending a HUP will not be possible. Use
copytruncate instead. Create option is irrelevant in that case.

Also, include xrdp.log file.
2017-02-16 10:02:51 +11:00
Fedora Release Engineering
3a33d2ee40 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 18:08:46 +00:00
Pavel Roskin
041d3cee4a Enable hardened build, it's required for daemons that run as root 2017-02-08 00:24:48 -08:00
Pavel Roskin
5504de0cad Be careful to only package xrdp headers in xrdp-devel 2017-01-25 01:17:08 -08:00
Pavel Roskin
c02680c663 Use version 0.9.1-1 for the package, it was never built 2017-01-24 00:54:06 -08:00
Pavel Roskin
cb6a7d777b Fix permissions on keys and certificates
Make sure to generate them with mode 400. Adjust permissions on
preexisiting keys. Regenerate empty keys.
2017-01-24 00:11:42 -08:00
Pavel Roskin
6277dbab0f Enable libpainter for compatibility with "noorders" clients 2017-01-23 23:46:02 -08:00
Pavel Roskin
c90b0028bb Put Xvnc first, then Xorg and X11rdp, remove rdp-any
Until xorgxrdp package is ready and is a dependency of xrdp, Xvnc should
be first. Enable X11rdp, but put it to the end of the list. rdp-any is
beyond repair and has been deleted in git, so don't leave it even
commented out.
2017-01-23 23:34:41 -08:00
Pavel Roskin
dcc8234cc7 Remove duplicate files, prepare 0.9.1-2 build 2017-01-23 23:13:54 -08:00
Pavel Roskin
993073e124 Stop services on package removal (see bug 1349083) 2017-01-23 22:51:59 -08:00
Pavel Roskin
7e4969065f Mark xrdp.log as ghost, don't create empty xrdp-sesman.log 2017-01-22 22:45:41 -08:00
Pavel Roskin
703134b7c4 Add expanded openssl.conf to sources, use no location in certificate 2017-01-22 22:23:24 -08:00
Pavel Roskin
74dabc2cd6 Split out xrdp-devel package 2017-01-22 20:10:58 -08:00
Pavel Roskin
5872e948e0 Add fastpath hotfix 2017-01-22 12:31:24 -08:00
Pavel Roskin
66c205af73 Restore patch for *.service files
Thanks to Bojan Smojver.
2017-01-22 11:59:32 -08:00