In xrdp.ini it is recommended to change the user who runs xrdp from root to an unprivileged user. I added instructions for doing this to the wiki, however when the package is updated the permissions and group ownership on /etc/xrdp/{cert,key}.pem are reset. I guess these files are regenerated during the update.
It would therefore be helpful if the installation script ran '/usr/share/xrdp/xrdp-chkpriv' as root after installation to notify the user when the permissions change after installation.
Pinned Comments
Abzie commented on 2024-05-10 14:40 (UTC)
If upgrading from 0.9.x, please read the 'User Changes' section from the release page:https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.0
There is one breaking change that require manual intervention but there are three other changes that will continue to work for now.
xRDP states: Users are urged to heed any generated configuration warnings and update their configurations. Later major versions of xrdp may remove these warnings, or introduce other behaviours for the affected parameters.