[
https://issues.apache.org/jira/browse/GUACAMOLE-1969?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Nick Couchman updated GUACAMOLE-1969:
-------------------------------------
Fix Version/s: 1.7.0
> Allow screen recording to capture user clipboard interactions
> -------------------------------------------------------------
>
> Key: GUACAMOLE-1969
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-1969
> Project: Guacamole
> Issue Type: Improvement
> Components: guacamole, guacd
> Reporter: Lukas Raska
> Priority: Major
> Fix For: 1.7.0
>
>
> Currently, Guacamole screen recording contains only graphical events and
> optionally admins can use _recording-include-keys_ to include also key events
> into the recording
> ([https://guacamole.apache.org/doc/gug/configuring-guacamole.html#graphical-session-recording]
> ).
>
> While that might be enough for certain situations, for various
> auditing/compliance reasons, clipboard paste events might be required. If
> user performs clipoard paste, these data are mostly not included (in certain
> cases those text information might be present in Typescript), so when
> determining what user actually pasted, is not possible.
>
> I suggest implementing new connection parameter *recording-include-clipboard*
> which would hook into the user clipboard handler and optionally dump the
> relevant *clipboard* instruction and related stream events
> ([https://guacamole.apache.org/doc/gug/protocol-reference.html#clipboard-instruction]
> ) to include only the user-pasting clipboard contents.
>
> If you're ok with implementing this improvement, I can draft a PR for all the
> relevant parts.
> Obviously this should come with warning for administrators to understand the
> consequences of enabling the parameter - from both capacity perspective
> (recording might get larger depending on the amount of data pasted, although
> probably less data than actual screen capture) as well as legal / regulations
> perspective (data within clipboard can contain sensitive information and data
> not related to the actual Guacamole session).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
