Mariano Abad 027178af27 drm: re-authorize the _drm stream per frame and auth the producer (review 3.3, 4.1) ...

3.3: DRM/KMS capture is not session-scoped -- the worker grabs a CRTC's physical
scanout regardless of which session owns the display -- but the peer was
authorized only once at accept. Capture the peer uid and re-check it at the top of
the forward loop: root is always allowed, any other peer must still be the
active-session uid, fail closed otherwise. A session change now tears the stream
down within one frame (~33ms) instead of leaking the incoming user's screen to the
outgoing user's --server.
4.1: connect_drm accepted any producer. Reject a non-root peer (peer_uid != 0) so a
process that won the socket-path race cannot feed the consumer a display list,
frames and dma-buf fds while the DRM path suppresses the portal consent prompt.

2026-07-24 08:50:17 -03:00

..

client

fix: non-E2EE show dialog (#15514)

2026-07-06 17:05:11 +08:00

hbbs_http

fix: update download, force tls (#15529)

2026-07-09 15:05:49 +08:00

ipc

feat(macos): silent auto-update with security hardening (#15550)

2026-07-23 00:22:10 +08:00

lang

Translate 'Continue' to 'Kontynuuj' in Polish (#15641)

2026-07-21 22:43:09 +08:00

platform

drm: address review findings 3.1, 4.2, 4.3, 4.4, 4.7 + minors

2026-07-24 08:50:17 -03:00

plugin

…

privacy_mode

Refact/privacy mode 1 multi monitors (#15321)

2026-06-18 21:27:44 +08:00

server

drm: address review findings 3.1, 4.2, 4.3, 4.4, 4.7 + minors

2026-07-24 08:50:17 -03:00

ui

fix: non-E2EE show dialog (#15514)

2026-07-06 17:05:11 +08:00

whiteboard

…

auth_2fa.rs

…

client.rs

fix: non-E2EE show dialog (#15514)

2026-07-06 17:05:11 +08:00

clipboard_file.rs

fix(fuse): umount (#15426)

2026-06-26 16:17:44 +08:00

clipboard.rs

fix(fuse): umount (#15426)

2026-06-26 16:17:44 +08:00

common.rs

Fix disabled installation bypass (#15598)

2026-07-16 16:00:38 +08:00

core_main.rs

fix(deploy): don't wipe local id when --deploy gets an empty --id (#15633)

2026-07-20 10:58:28 +08:00

custom_server.rs

…

flutter_ffi.rs

fix: non-E2EE show dialog (#15514)

2026-07-06 17:05:11 +08:00

flutter.rs

Fix disabled installation bypass (#15598)

2026-07-16 16:00:38 +08:00

hbbs_http.rs

fix: update download, force tls (#15529)

2026-07-09 15:05:49 +08:00

ipc.rs

drm: re-authorize the _drm stream per frame and auth the producer (review 3.3, 4.1)

2026-07-24 08:50:17 -03:00

kcp_stream.rs

…

keyboard.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

lan.rs

fix: check valid id (#15535)

2026-07-14 15:35:52 +08:00

lang.rs

cjk (#15379)

2026-06-22 14:47:12 +08:00

lib.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

main.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

naming.rs

…

port_forward.rs

fix: non-E2EE show dialog (#15514)

2026-07-06 17:05:11 +08:00

privacy_mode.rs

feat(macos): initial privacy mode support [a simple try] (#14102)

2026-01-27 16:38:37 +08:00

rendezvous_mediator.rs

Support controller user attribution in audit logs (#15407)

2026-06-26 15:07:27 +08:00

server.rs

feat(drm): opt-in DRM/KMS screen capture for Linux/Wayland

2026-07-24 08:50:16 -03:00

service.rs

feat(macos): silent auto-update with security hardening (#15550)

2026-07-23 00:22:10 +08:00

tray.rs

Fix tray icon click (regression due to breaking change in tray-icon 0.17) (#15413)

2026-06-25 09:43:04 +08:00

ui_cm_interface.rs

harden switch side

2026-05-06 19:27:56 +08:00

ui_interface.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

ui_session_interface.rs

fix: non-E2EE show dialog (#15514)

2026-07-06 17:05:11 +08:00

ui.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

updater.rs

feat(macos): silent auto-update with security hardening (#15550)

2026-07-23 00:22:10 +08:00

virtual_display_manager.rs

fix: uninstall, idd (#13142)

2025-10-12 09:14:21 +08:00