fix: 监控时增加只读模式参数, 提升安全性 (#290)

看参考 https://guacamole.apache.org/doc/gug/configuring-guacamole.html read-only参数
dushixiang · Oct 26, 2022 · f87d44d · f87d44d
1 parent 320eecd
commit f87d44d
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/server/api/guacamole.go b/server/api/guacamole.go
@@ -224,6 +224,7 @@ func (api GuacamoleApi) GuacamoleMonitor(c echo.Context) error {
 	configuration.SetParameter("width", strconv.Itoa(s.Width))
 	configuration.SetParameter("height", strconv.Itoa(s.Height))
 	configuration.SetParameter("dpi", "96")
+	configuration.SetReadOnlyMode()
 
 	addr := config.GlobalCfg.Guacd.Hostname + ":" + strconv.Itoa(config.GlobalCfg.Guacd.Port)
 

diff --git a/server/common/guacamole/guacd.go b/server/common/guacamole/guacd.go
@@ -52,6 +52,7 @@ const (
 	SwapRedBlue = "swap-red-blue"
 	DestHost    = "dest-host"
 	DestPort    = "dest-port"
+	ReadOnly    = "read-only"
 
 	UsernameRegex     = "username-regex"
 	PasswordRegex     = "password-regex"
@@ -83,6 +84,10 @@ func NewConfiguration() (config *Configuration) {
 	return config
 }
 
+func (opt *Configuration) SetReadOnlyMode() {
+	opt.Parameters[ReadOnly] = "true"
+}
+
 func (opt *Configuration) SetParameter(name, value string) {
 	opt.Parameters[name] = value
 }