mirror of
https://github.com/netbirdio/netbird.git
synced 2026-09-12 01:39:07 +02:00
Add VNC allow and approval settings to MDM policy
This commit is contained in:
@@ -63,6 +63,12 @@
|
||||
<true/>
|
||||
|
||||
<!--
|
||||
<key>allowServerVNC</key>
|
||||
<true/>
|
||||
|
||||
<key>disableVNCApproval</key>
|
||||
<false/>
|
||||
|
||||
<key>disableAutoConnect</key>
|
||||
<false/>
|
||||
|
||||
|
||||
@@ -113,6 +113,10 @@
|
||||
<key>allowServerSSH</key>
|
||||
<true/>
|
||||
<!--
|
||||
<key>allowServerVNC</key>
|
||||
<true/>
|
||||
<key>disableVNCApproval</key>
|
||||
<false/>
|
||||
<key>rosenpassEnabled</key>
|
||||
<true/>
|
||||
<key>rosenpassPermissive</key>
|
||||
|
||||
@@ -56,6 +56,8 @@ NULL='__UNSET__'
|
||||
managementURL='https://api.netbird.io:443'
|
||||
preSharedKey="$NULL" # secret; redacted in log
|
||||
allowServerSSH='true'
|
||||
allowServerVNC="$NULL"
|
||||
disableVNCApproval="$NULL"
|
||||
blockInbound="$NULL"
|
||||
disableAutoConnect="$NULL"
|
||||
disableClientRoutes="$NULL"
|
||||
@@ -153,6 +155,8 @@ main() {
|
||||
is_set "$managementURL" && emit_string managementURL "$managementURL"
|
||||
is_set "$preSharedKey" && emit_string preSharedKey "$preSharedKey"
|
||||
is_set "$allowServerSSH" && emit_bool allowServerSSH "$allowServerSSH"
|
||||
is_set "$allowServerVNC" && emit_bool allowServerVNC "$allowServerVNC"
|
||||
is_set "$disableVNCApproval" && emit_bool disableVNCApproval "$disableVNCApproval"
|
||||
is_set "$blockInbound" && emit_bool blockInbound "$blockInbound"
|
||||
is_set "$disableAutoConnect" && emit_bool disableAutoConnect "$disableAutoConnect"
|
||||
is_set "$disableClientRoutes" && emit_bool disableClientRoutes "$disableClientRoutes"
|
||||
|
||||
@@ -35,6 +35,10 @@
|
||||
|
||||
<string id="AllowServerSSH_Name">Allow server SSH</string>
|
||||
<string id="AllowServerSSH_Help">When enabled, this client accepts incoming SSH sessions via NetBird SSH. Equivalent to --allow-server-ssh.</string>
|
||||
<string id="AllowServerVNC_Name">Allow server VNC</string>
|
||||
<string id="AllowServerVNC_Help">When enabled, this client accepts incoming remote desktop (VNC) sessions via NetBird. Equivalent to --allow-server-vnc.</string>
|
||||
<string id="DisableVNCApproval_Name">Disable VNC connection approval</string>
|
||||
<string id="DisableVNCApproval_Help">When enabled, incoming VNC sessions are accepted without prompting the local user for approval.</string>
|
||||
|
||||
<string id="RosenpassEnabled_Name">Enable Rosenpass</string>
|
||||
<string id="RosenpassEnabled_Help">Enables Rosenpass post-quantum key exchange on WireGuard tunnels. Both peers must support it.</string>
|
||||
|
||||
@@ -112,6 +112,30 @@
|
||||
<disabledValue><decimal value="0" /></disabledValue>
|
||||
</policy>
|
||||
|
||||
<policy name="AllowServerVNC"
|
||||
class="Machine"
|
||||
displayName="$(string.AllowServerVNC_Name)"
|
||||
explainText="$(string.AllowServerVNC_Help)"
|
||||
key="Software\Policies\NetBird"
|
||||
valueName="AllowServerVNC">
|
||||
<parentCategory ref="NetBird" />
|
||||
<supportedOn ref="SUPPORTED_NetBird_All" />
|
||||
<enabledValue><decimal value="1" /></enabledValue>
|
||||
<disabledValue><decimal value="0" /></disabledValue>
|
||||
</policy>
|
||||
|
||||
<policy name="DisableVNCApproval"
|
||||
class="Machine"
|
||||
displayName="$(string.DisableVNCApproval_Name)"
|
||||
explainText="$(string.DisableVNCApproval_Help)"
|
||||
key="Software\Policies\NetBird"
|
||||
valueName="DisableVNCApproval">
|
||||
<parentCategory ref="NetBird" />
|
||||
<supportedOn ref="SUPPORTED_NetBird_All" />
|
||||
<enabledValue><decimal value="1" /></enabledValue>
|
||||
<disabledValue><decimal value="0" /></disabledValue>
|
||||
</policy>
|
||||
|
||||
<policy name="RosenpassEnabled"
|
||||
class="Machine"
|
||||
displayName="$(string.RosenpassEnabled_Name)"
|
||||
|
||||
Reference in New Issue
Block a user