Chrome Remote Desktop and Wayland

[Benjamin Berg]

On Fri, 2020-04-17 at 11:18 -0400, Ray Strode wrote:
> Hi,
> 
> On Fri, Apr 17, 2020 at 9:58 AM Benjamin Berg <benjamin at sipsolutions.net> wrote:
> > I do however think there is value in supporting such delegation from
> > the logind side. A primary motivator for me here is systemd-homed, as
> > it may freeze the user session, making it impossible to re-authenticate
> > from within.
> So my plan for systemd-homed was going to be to just make the GDM session
> worker jump to VT1. Today, if we jump to VT1 a login screen will materialize
> and all should just work.
> 
> We could add some mechanism to logind to register where a login screen will go
> and provide a way for logind to jump to that login screen instead, sure.

Oh, true, I had not considered the possibility of doing this from the
session worker. It just felt natural to me to enforce the VT switch on
the logind level as it should know that the session is unusable.

> > And really, it would be better if we don't let the user ever see their own password.
> not sure what you mean by this. are you talking about ensuring trusted path?

Yes, I meant having a trusted path for the password.

> If so, I agree it's better if we don't have the user entering their
> password in their
> own session.  In an ideal world we'd have a "secure attention" key or key
> sequence on the keyboard that users hit when it's time to type their password.

Yup.

> > But, it should be as simple as logind forcing a VT switch to the
> > correct greeter UI/session. Plus a little bit more magic to maybe spin
> > up the UI in the background before suspending and pre-selecting the
> > user to make the experience smoother.
> Right, I'm definitely not opposed to api getting added to logind for
> this, but I also
> don't think it's strictly necessary.  We can do it all from GDM pretty easily.
> Probably when I play with systemd-homed I'll prototype things out on the GDM
> side first.
> 
> But, I also think this is an orthogonal discussion to remote desktop support.
> (maybe one better for the systemd list?)

Agreed.

Benjamin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <https://lists.freedesktop.org/archives/wayland-devel/attachments/20200417/efd8d691/attachment.sig>