Apply read-only perms upon connecting

2020-10-12 14:45:31 +03:00
parent 9a5afc5a62
commit 263d05a296
7 changed files with 91 additions and 9 deletions
--- a/common/network/websockify.c
+++ b/common/network/websockify.c
@@ -227,7 +227,13 @@ void proxy_handler(ws_ctx_t *ws_ctx) {
    strcpy(addr.sun_path, ".KasmVNCSock");
    addr.sun_path[0] = '\0';

+    struct sockaddr_un myaddr;
+    myaddr.sun_family = AF_UNIX;
+    sprintf(myaddr.sun_path, ".%s@%s", ws_ctx->user, ws_ctx->ip);
+    myaddr.sun_path[0] = '\0';
+
    int tsock = socket(AF_UNIX, SOCK_STREAM, 0);
+    bind(tsock, (struct sockaddr *) &myaddr, sizeof(struct sockaddr_un));

    handler_msg("connecting to VNC target\n");