From fe3569c6e82179b66d1ede159117ff9f5ce32bcd Mon Sep 17 00:00:00 2001
From: Dmitry Maksyoma <ledestin@gmail.com>
Date: Thu, 16 Sep 2021 22:57:29 +1200
Subject: [PATCH] vncserver: check user is in ssl-cert group on Debian-based
 distros

---
 unix/vncserver | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/unix/vncserver b/unix/vncserver
index cde307e..0c38867 100755
--- a/unix/vncserver
+++ b/unix/vncserver
@@ -543,6 +543,23 @@ sub CheckRequiredDependenciesArePresent
     $AF_INET = &AF_INET;
     $SOCK_STREAM = &SOCK_STREAM;
   }
+
+  &CheckUserHasSslCertGroupOnDebian();
+}
+
+sub CheckUserHasSslCertGroupOnDebian {
+  if (! -f "/etc/debian_version") {
+    return;
+  }
+
+  my $certGroup = 'ssl-cert';
+  if (system("groups | grep -qw $certGroup") != 0) {
+    say <<EOF;
+      Can't access TLS certificate.
+      Please add your user to $certGroup via 'addgroup <user> $certGroup'
+EOF
+    exit(1);
+  }
 }
 
 sub CreateXstartupIfNeeded