Xpra: Ticket #676: Allow admin to restrict the user's ability to overwrite xpra config settings

For admin-managed environments it is not always desireable to allow users to change xpra.conf settings. A simple solution is, to add a command line switch to the xpra server process which makes it ignore the ~/xpra.conf. A more flexible solution is to mark options in /etc/xpra/xpra.conf individually as "forced", e.g. by using " =! " instead of " = ". Forced options cannot be overwritten by ~/xpra.conf.



Wed, 17 Sep 2014 04:14:35 GMT - Antoine Martin: owner changed

I don't think we can do this:

etc..

Also, I really don't like the idea of using a funny syntax. If anything, I would prefer doing something this:


Wed, 17 Sep 2014 07:54:41 GMT - sschnitzer:

I think command line switches can be ignored. If the user has permission to start the xpra server process (which is required if he wants to pass command line options), he could most likely also start a modified xpra which ignores "forced" options.

I think the tray menu, as well as xpra control allows only a few options to be changed. I guess the client cannot switch the server to an encoding which is not listed in encodings on the server, right?

Is there any documentation available about what options from xpra.conf can be set by command line options or changed by xpra control?

I appreciate the idea of a /etc/xpra/overrides.conf.


Wed, 17 Sep 2014 08:06:52 GMT - Antoine Martin:

I think command line switches can be ignored. If the user has permission to start the xpra server process (which is required if he wants to pass command line options) ...


Wrong. xpra is a command which can be used for both client and server, in both cases it takes command line arguments. What makes you think that you need to "start the xpra server process .. to pass command line options" ?

I guess the client cannot switch the server to an encoding which is not listed in encodings on the server, right?


Correct.

Is there any documentation available about what options from xpra.conf can be set by command line options ..


All of them.

or changed by xpra control?


No, and none is planned. It is not a stable interface yet. What you can do is run:

xpra control :DISPLAY help

Which should give you a list of control commands supported by that server, some of which may support the help mode themselves, ie:

xpra control :DISPLAY debug help

Mon, 27 Oct 2014 17:46:00 GMT - Antoine Martin: status changed; resolution set

Not heard back.


Sat, 23 Jan 2021 05:02:41 GMT - migration script:

this ticket has been moved to: https://github.com/Xpra-org/xpra/issues/676