On Sat, May 2, 2020 at 11:17 AM WhiteTiger <[email protected]> wrote:
> Now I read the framework documentation, but at least all the suggestions > related to Disclaimers and Policy management should be included in a future > release. > But you can do all of that with the extension framework. So, whether we add the capability to the core product or not, it is possible to do this with Guacamole. > Especially in Europe, the GDPR requires companies to take a particular > approach to managing access to IT systems. > I don't understand how those things were not already included a year ago, > when the GDPR became law. > In my opinion (and I can be wrong), the use of Guacamole today puts > European > companies out of law. > > Several others have already given their input on this, but the use of Guacamole on its own does not violate any EU laws. There are certainly capabilities within Guacamole (like session recording) that have the potential to cause you, as the person running Guacamole, to violate those laws, but that is entirely up to you whether you use those features or not. Furthermore, I would venture a guess that it is much more important that the systems you are accessing with Guacamole are in line with GDPR (etc.) than Guacamole. Guacamole is a tool to access remote systems and has very little capability for storing personal information (again, session recording may be the exception), so the focus would be more on the remote systems - and with remote systems (Windows, Linux, Mac) you can put disclaimers on the logon screens, so you can also solve that problem there. I'm not sure that addresses *all* GDPR concerns, but it should be part of the overall picture. > In my opinion, the best solution is that the administrator has options with > the possibility of inserting images or an HTML text in which he himself > will > insert the links to images or other pages. > > There is already a JIRA request out there for putting a Message of The Day, which may partially address the features you're concerned about: https://issues.apache.org/jira/browse/GUACAMOLE-842 However, again, you can already do this by using the extension framework to build your own interface that would handle this. -Nick
