xrdp v0.10.2

[metalefty]

Release notes for xrdp v0.10.2 (2024/12/24)

General announcements

Power Up Privacy and @CyberTrust sponsored H.264 encoding (mentioned later). We greatly appreciate the sponsorship.

If you like xrdp, please consider sponsoring or donating to the project. We accept financial contributions through Open Collective, and direct donations to individual developers via GitHub Sponsors are also welcome.

Highlights

H.264 encoding

We’re very excited to announce that xrdp has supported H.264 encoding in graphics remoting since v0.10.2. xrdp with H.264 encoding reduces the amount of data transmitted over the network and provides a much smoother and more responsive experience compared to previous versions when using graphics-intensive applications.

For details, see the H.264 encoding page on the wiki and also check the Known Issues section.

Unprivileged xrdp daemon

Since v0.10.2, xrdp officially supports running xrdp daemon as an unprivileged user. xrdp-sesman daemon still needs to be run as a privileged user because it handles user authentication and session management.

Running xrdp daemon as an unprivileged user requires some adjustments, such as user/group and files/directory permissions. We have bundled a script named xrdp-chkpriv with xrdp to check if it is ready to run xrdp as an unprivileged user. The script is typically installed into /usr/share/xrdp/xrdp-chkpriv. See also the man page of xrdp.ini for more configuration information.

Security fixes

None

New features

• FUSE operations can now use direct I/O to bypass the block cache ([V0.10] add option to enable FUSE direct i/o on file open #3260)
• Supported clients can now skip channel join messages ([V0.10] Allow compatible clients to skip channel join messages #3282)
• Frame capture interval (frame rate) can now be configured separately via xrdp for H.264 and RFX (Use different frame rates for H.264 and RFX xorgxrdp#347 [v0.10] Set different frame capture interval for H.264 and RFX and pass them to xorgxrdp #3317)
• The statvfs system call is now supported on the FUSE filesystem (Add support for statvfs() to FUSE #3304)
• A path can now be specified for the chansrv log file ([V0.10] Allow a path to be specified for the chansrv log file #3344)
• Add Czech keyboard (Need new keyboard layout : Keyboard layout changes on client connection loss #3348 [V0.10] add czech keyboard #3358)

Bug fixes

• Redirector improvements. Removed some unnecessary limitations on filename lengths, and improved compatibility with FreeRDP (Specific filenames cause File transfer / drive redirection error #3165 [V0.10] chansrv clip fixes #3194). Special thanks to @tsz8899 for raising this and working with the team.
• Fix misreported cache size ([V0.10] Fix misreported cache size #3212)
• Clarified Policy setting in sesman.ini ([V0.10] Minor update to policy description in sesman.ini #3235)
• Fixed a regression in support for non-resizeable VNC sessions ([V0.10] Regression: Support fixed-size VNC sessions #3242)
• A regression in chansrv functionality when used in standalone mode for VNC sessions has been fixed ([V0.10] chansrv connect to sesman #3283). This was introduced by the move to the v0.10.x sockets dir layout
• Fix AltGr on Spanish keyboard ([V0.10] Fix AltGr on Spanish keyboard #3313)
• The KDE Dolphin file manager can now save files to a mapped drive (Cannot copy files into mapped drives in KDE - no free space #3300)
• pam_limits.so is now included explicitly for Debian and derivatives ([V0.10] pam: debian: Explicitly include pam_limits for xrdp sessions #3347)

Internal changes

• CI version updates : cppcheck to v2.15.0 and astyle to 3.4.14 ([V0.10] update cppcheck and astyle #3232 [V0.10] update cppcheck version to v2.16.0 #3309 [V0.10] Re-introduce -DHAVE_BOOST to cppcheck builds #3314)
• Remove xrdp_sec_in_mcs_data() function ([V0.10] Remove xrdp_sec_in_mcs_data() function #3273)

Changes for users

• xrdp.ini has some new configuration parameters for H. 264 ([v0.10] Set different frame capture interval for H.264 and RFX and pass them to xorgxrdp #3317). When updating from v0.10.1 to v0.10.2, make sure to merge the new xrdp.ini with the old one.
• If moving from v0.9.x, read the v0.10.0 release note.

Changes for packagers or developers

• xrdp.ini and sesman.ini are now dynamically substituted during the build process (it was not working as intended before) (Release tarball contains wrong sesman.ini and xrdp.ini instead of sesman.ini.in and xrdp.ini.in #3187 [v0.10] Include {xrdp,sesman}.ini.in instead of substituted .ini in tarball #3188)
• Running xrdp daemon as an unprivileged user is now officially supported. It is optional but consider creating a user/group for xrdp daemon in the post-install script or an appropriate location.
• The libfuse version required is now > 3.1.0 ([V0.10] Move to fuse3 #3284)
• If moving from v0.9.x, read the v0.10.0 release note.

---

This discussion was created from the release xrdp v0.10.2.