Add VNC allow and approval settings to MDM policy

This commit is contained in:
Viktor Liu
2026-07-13 16:39:28 +02:00
parent b747cf1547
commit 455a345764
16 changed files with 190 additions and 15 deletions
+6
View File
@@ -63,6 +63,12 @@
<true/>
<!--
<key>allowServerVNC</key>
<true/>
<key>disableVNCApproval</key>
<false/>
<key>disableAutoConnect</key>
<false/>
+4
View File
@@ -113,6 +113,10 @@
<key>allowServerSSH</key>
<true/>
<!--
<key>allowServerVNC</key>
<true/>
<key>disableVNCApproval</key>
<false/>
<key>rosenpassEnabled</key>
<true/>
<key>rosenpassPermissive</key>
+4
View File
@@ -56,6 +56,8 @@ NULL='__UNSET__'
managementURL='https://api.netbird.io:443'
preSharedKey="$NULL" # secret; redacted in log
allowServerSSH='true'
allowServerVNC="$NULL"
disableVNCApproval="$NULL"
blockInbound="$NULL"
disableAutoConnect="$NULL"
disableClientRoutes="$NULL"
@@ -153,6 +155,8 @@ main() {
is_set "$managementURL" && emit_string managementURL "$managementURL"
is_set "$preSharedKey" && emit_string preSharedKey "$preSharedKey"
is_set "$allowServerSSH" && emit_bool allowServerSSH "$allowServerSSH"
is_set "$allowServerVNC" && emit_bool allowServerVNC "$allowServerVNC"
is_set "$disableVNCApproval" && emit_bool disableVNCApproval "$disableVNCApproval"
is_set "$blockInbound" && emit_bool blockInbound "$blockInbound"
is_set "$disableAutoConnect" && emit_bool disableAutoConnect "$disableAutoConnect"
is_set "$disableClientRoutes" && emit_bool disableClientRoutes "$disableClientRoutes"
+4
View File
@@ -35,6 +35,10 @@
<string id="AllowServerSSH_Name">Allow server SSH</string>
<string id="AllowServerSSH_Help">When enabled, this client accepts incoming SSH sessions via NetBird SSH. Equivalent to --allow-server-ssh.</string>
<string id="AllowServerVNC_Name">Allow server VNC</string>
<string id="AllowServerVNC_Help">When enabled, this client accepts incoming remote desktop (VNC) sessions via NetBird. Equivalent to --allow-server-vnc.</string>
<string id="DisableVNCApproval_Name">Disable VNC connection approval</string>
<string id="DisableVNCApproval_Help">When enabled, incoming VNC sessions are accepted without prompting the local user for approval.</string>
<string id="RosenpassEnabled_Name">Enable Rosenpass</string>
<string id="RosenpassEnabled_Help">Enables Rosenpass post-quantum key exchange on WireGuard tunnels. Both peers must support it.</string>
+24
View File
@@ -112,6 +112,30 @@
<disabledValue><decimal value="0" /></disabledValue>
</policy>
<policy name="AllowServerVNC"
class="Machine"
displayName="$(string.AllowServerVNC_Name)"
explainText="$(string.AllowServerVNC_Help)"
key="Software\Policies\NetBird"
valueName="AllowServerVNC">
<parentCategory ref="NetBird" />
<supportedOn ref="SUPPORTED_NetBird_All" />
<enabledValue><decimal value="1" /></enabledValue>
<disabledValue><decimal value="0" /></disabledValue>
</policy>
<policy name="DisableVNCApproval"
class="Machine"
displayName="$(string.DisableVNCApproval_Name)"
explainText="$(string.DisableVNCApproval_Help)"
key="Software\Policies\NetBird"
valueName="DisableVNCApproval">
<parentCategory ref="NetBird" />
<supportedOn ref="SUPPORTED_NetBird_All" />
<enabledValue><decimal value="1" /></enabledValue>
<disabledValue><decimal value="0" /></disabledValue>
</policy>
<policy name="RosenpassEnabled"
class="Machine"
displayName="$(string.RosenpassEnabled_Name)"