Security idear

[Patterson, Chris]

For those of you interested in what I did to the source that allows the user
to accept or reject the connection, here is a brief description of what I
did.

1.)	Added a new class titled vncRemoteRequest with a few very simple
methods that show a dialog box with "Accept" and "Reject" buttons and
process the resulting button press.  The implementation of this class was
placed in the vncClientThread class.  The dialog box is implemented just
before the password is requested in vncClientThread:InitAuthenticate().  If
the user selects Accept then the password is requested and the rest of the
code functions the same as it always has.  If Reject is selected it exits
the function and drops the connection.  A message is sent back to the viewer
stating access was denied.

2.)	Added a dialog box to the end of vncClientThread:run(void * arg)
which tells the user when the connection is dropped that the admin no longer
has control of their PC.

3.)	Removed the dialog that shows up every time the service is started
informing the user that the properties for VNC have been locked down.
(Didn't see the need for it.  The user can figure out they can't change the
properties and I didn't want that showing up every single time the user
rebooted.)

4.)	Removed the Dialog confirming that the service was installed
successfully under NT (This only affects NT and does not affect how the
installation runs.  The dialog box which informs the user the install failed
is still there..  I found this was helpful in my attempts to create an
automated install batch file which did a custom install of VNC.)

All source is based on VNC 3.3.2.   I have not had the time to add these
mods to 3.3.3

All functionality of VNC is left in tact other than what I have referenced
above.  Installation is the same and once connected VNC functions just as it
has.  If any one has more questions or would like the executable/source you
are welcome to email me.  I have only modified the Win32 version, BTW.

Enjoy!

	-----Original Message-----
	From:	Olivier ILIOU [SMTP:oiliou "at" ifremer.fr]
	Sent:	Friday, September 10, 1999 12:38 AM
	To:	vnc-list "at" uk.research.att.com
	Subject:	Re: Security idear

	I'm really interesting with your option. I'd like to know just a
little
	more about this :
	which part of the source have you modified ??
	what is the effect on the installation ??
	Is there any change with VNC running ???
	

---------------------------------------------------------------------
The VNC mailing list - see http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------