Artica Wiki

The WebView tab of the RDS Proxy

Components, versions, automatic installation and browser parameters of RDS Proxy web targets.

Open RDP Proxy and the WebView tab.
It has three parts: Overview, Browser parameters and Trusted certificates.

Overview

WebView overview

Each component shows its state and its version.

Tile What it tells
Redemption engine The version of the RDS Proxy engine and its web capability.
Authentication hook The version of the RDS Proxy authenticator.
Browser bridge The version of artica-webview, and whether the copy in use matches the Artica package.
Chromium headless shell The browser package.
Bubblewrap sandbox The sandbox package.
Web targets Enabled and total web targets, trusted certificates, targets with automatic login, and whether copy and paste is available.
Automatic installation The last apt attempt and the free space on /usr.
Network confinement and Web target proxies The policies that use a network namespace or an upstream proxy.

Browser parameters

This part lists what protects the bastion from a hostile page.
Every value comes from the bridge itself.

Browser parameters

Sandbox, limits, network filtering, session controls and the Chromium options in use.

Protection Value
Account 65534, no Linux capability, even inside the sandbox
Namespaces user, pid, ipc, uts, cgroup
Disk Read-only view of the system. /tmp and /dev/shm are in memory, 256 MB each
Memory and processes 1024 MB of JavaScript per page, 4 rendering processes, 8192 open files, files of 512 MB at most
Core dumps Disabled
Network Every connection goes through the filtering proxy of the session

When a session ends, the browser, its profile and its cache are destroyed.