Thank you for filling in the bug! So from what I understand here, this means that sharing is disabled until someone opens the sharing screen in the gnome-control-center, right? I agree with the 'High' priority here in that case, but it's certainly not a 22.04 release blocker - however, the fix for that should be prepared ASAP and uploaded as a 0-day SRU, if possible. Actually, I even think maybe it should go through the security pocket, as at least to me this seems like a violation of our security policies by enabling RDP without the users knowledge. This way all the users would get this update as well via unattended updates.
Could we get some input from the security team? What do you think? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-control-center in Ubuntu. https://bugs.launchpad.net/bugs/1969619 Title: RDP Sharing appears on by default in jammy Status in gnome-control-center: Unknown Status in gnome-control-center package in Ubuntu: Triaged Status in gnome-control-center source package in Jammy: Triaged Bug description: Summary ======= 1. From the Ubuntu 22.04 live session (or a clean install), Open the Settings app. 2. Open the Sharing page. It looks like Remote Desktop sharing is turned on. On further investigation, it is not actually on. More details ============ This issue affects both the live session and the initial install. (Probably would show up for any new user.) 1. Before opening the Settings app, the gnome-remote-desktop service is running. I think this is expected. $ systemctl status --user gnome-remote-desktop.service \u25cf gnome-remote-desktop.service - GNOME Remote Desktop Loaded: loaded (/usr/lib/systemd/user/gnome-remote-desktop.service; enable> Active: active (running) since Wed 2022-04-20 08:07:44 EDT; 17s ago Main PID: 1611 (gnome-remote-de) Tasks: 4 (limit: 4603) Memory: 13.8M CPU: 66ms CGroup: /user.slice/user-1000.slice/user@1000.service/app.slice/gnome-remo> \u2514\u25001611 /usr/libexec/gnome-remote-desktop-daemon Apr 20 08:07:44 ubuntu2204 systemd[1483]: Starting GNOME Remote Desktop... Apr 20 08:07:44 ubuntu2204 gnome-remote-desktop-daemon[1611]: libEGL warning: pci id for fd 9: 1b36:0100, driver (null) Apr 20 08:07:44 ubuntu2204 systemd[1483]: Started GNOME Remote Desktop. Also, the RDP enable gsettings key is turned off. $ gsettings get org.gnome.desktop.remote-desktop.rdp enable false 2. When I open the Sharing page, the gsettings key turns to true and systemctl shows me an error where it tried to enable RDP: Apr 20 08:12:50 ubuntu2204 gnome-remote-de[1611]: RDP TLS certificate and key not configured properly 3. So then I open Remote Desktop Sharing and turn it off then on and then systemctl shows me that is working correctly. Apr 20 08:14:32 ubuntu2204 systemd[1483]: Starting GNOME Remote Desktop... Apr 20 08:14:32 ubuntu2204 gnome-remote-desktop-daemon[2801]: libEGL warning: p> Apr 20 08:14:32 ubuntu2204 systemd[1483]: Started GNOME Remote Desktop. Apr 20 08:14:32 ubuntu2204 gnome-remote-de[2801]: RDP server started Note in particular the final line: "RDP server started". That tells us whether RDP is running or not. There would be a similar line for VNC. This line didn't show in the initial state in step 1. What should happen ================== Remote Desktop should show off by default and should not attempt to turn on just by opening the Sharing page. There is no gsettings for the Sharing master on/off switch (in the headerbar). It shows as On if any of the services are On. None of the services should be On by default so this should show Off by default. A Bug Trigger ============= It looks like this bug was triggered by https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/commit/7f4ef31fd3 I have reported this issue to GNOME. That patch fixes an important issue so maybe we need to keep that patch but fix the logic in gnome- control-center. To manage notifications about this bug go to: https://bugs.launchpad.net/gnome-control-center/+bug/1969619/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp