===== xRDP =====

xRDP is an open-source RDP server for Linux.

GitHub: [[https://github.com/neutrinolabs/xrdp| github.com/neutrinolabs - xRDP]]

==== Allow everything for XRDP session ====

<code bash>sudo nano /etc/polkit-1/localauthority/50-local.d/50-allow-xrdp-everything.pkla</code>

With this as content:
<panel type="warning" title="xRDP Polkit Config">
++++ Show/Hide |
 <code bash>[Allow Colord all Users]
Identity=unix-user:*
Action=org.dpkg.pkexec.updatealternatives;org.freedesktop.ModemManager1.Contacts;org.freedesktop.ModemManager1.Control;org.freedesktop.ModemManager1.Device.Control;org.freedesktop.ModemManager1.Firmware;org.freedesktop.ModemManager1.Location;org.freedesktop.ModemManager1.Messaging;org.freedesktop.ModemManager1.Time;org.freedesktop.ModemManager1.USSD;org.freedesktop.ModemManager1.Voice;org.freedesktop.NetworkManager.checkpoint-rollback;org.freedesktop.NetworkManager.enable-disable-connectivity-check;org.freedesktop.NetworkManager.enable-disable-network;org.freedesktop.NetworkManager.enable-disable-statistics;org.freedesktop.NetworkManager.enable-disable-wifi;org.freedesktop.NetworkManager.enable-disable-wimax;org.freedesktop.NetworkManager.enable-disable-wwan;org.freedesktop.NetworkManager.network-control;org.freedesktop.NetworkManager.reload;org.freedesktop.NetworkManager.settings.modify.global-dns;org.freedesktop.NetworkManager.settings.modify.hostname;org.freedesktop.NetworkManager.settings.modify.own;org.freedesktop.NetworkManager.settings.modify.system;org.freedesktop.NetworkManager.sleep-wake;org.freedesktop.NetworkManager.wifi.scan;org.freedesktop.NetworkManager.wifi.share.open;org.freedesktop.NetworkManager.wifi.share.protected;org.freedesktop.RealtimeKit1.acquire-high-priority;org.freedesktop.RealtimeKit1.acquire-real-time;org.freedesktop.accounts.change-own-password;org.freedesktop.accounts.change-own-user-data;org.freedesktop.accounts.set-login-option;org.freedesktop.accounts.user-administration;org.freedesktop.color-manager.create-device;org.freedesktop.color-manager.create-profile;org.freedesktop.color-manager.delete-device;org.freedesktop.color-manager.delete-profile;org.freedesktop.color-manager.device-inhibit;org.freedesktop.color-manager.install-system-wide;org.freedesktop.color-manager.modify-device;org.freedesktop.color-manager.modify-profile;org.freedesktop.color-manager.sensor-lock;org.freedesktop.hostname1.get-product-uuid;org.freedesktop.hostname1.set-hostname;org.freedesktop.hostname1.set-machine-info;org.freedesktop.hostname1.set-static-hostname;org.freedesktop.locale1.set-keyboard;org.freedesktop.locale1.set-locale;org.freedesktop.login1.attach-device;org.freedesktop.login1.chvt;org.freedesktop.login1.flush-devices;org.freedesktop.login1.halt;org.freedesktop.login1.halt-ignore-inhibit;org.freedesktop.login1.halt-multiple-sessions;org.freedesktop.login1.hibernate;org.freedesktop.login1.hibernate-ignore-inhibit;org.freedesktop.login1.hibernate-multiple-sessions;org.freedesktop.login1.inhibit-block-idle;org.freedesktop.login1.inhibit-block-shutdown;org.freedesktop.login1.inhibit-block-sleep;org.freedesktop.login1.inhibit-delay-shutdown;org.freedesktop.login1.inhibit-delay-sleep;org.freedesktop.login1.inhibit-handle-hibernate-key;org.freedesktop.login1.inhibit-handle-lid-switch;org.freedesktop.login1.inhibit-handle-power-key;org.freedesktop.login1.inhibit-handle-reboot-key;org.freedesktop.login1.inhibit-handle-suspend-key;org.freedesktop.login1.lock-sessions;org.freedesktop.login1.manage;org.freedesktop.login1.power-off;org.freedesktop.login1.power-off-ignore-inhibit;org.freedesktop.login1.power-off-multiple-sessions;org.freedesktop.login1.reboot;org.freedesktop.login1.reboot-ignore-inhibit;org.freedesktop.login1.reboot-multiple-sessions;org.freedesktop.login1.set-reboot-parameter;org.freedesktop.login1.set-reboot-to-boot-loader-entry;org.freedesktop.login1.set-reboot-to-boot-loader-menu;org.freedesktop.login1.set-reboot-to-firmware-setup;org.freedesktop.login1.set-self-linger;org.freedesktop.login1.set-user-linger;org.freedesktop.login1.set-wall-message;org.freedesktop.login1.suspend;org.freedesktop.login1.suspend-ignore-inhibit;org.freedesktop.login1.suspend-multiple-sessions;org.freedesktop.network1.forcerenew;org.freedesktop.network1.reconfigure;org.freedesktop.network1.reload;org.freedesktop.network1.renew;org.freedesktop.network1.revert-dns;org.freedesktop.network1.revert-ntp;org.freedesktop.network1.set-default-route;org.freedesktop.network1.set-dns-over-tls;org.freedesktop.network1.set-dns-servers;org.freedesktop.network1.set-dnssec;org.freedesktop.network1.set-dnssec-negative-trust-anchors;org.freedesktop.network1.set-domains;org.freedesktop.network1.set-llmnr;org.freedesktop.network1.set-mdns;org.freedesktop.network1.set-ntp-servers;org.freedesktop.packagekit.cancel-foreign;org.freedesktop.packagekit.clear-offline-update;org.freedesktop.packagekit.device-rebind;org.freedesktop.packagekit.package-downgrade;org.freedesktop.packagekit.package-eula-accept;org.freedesktop.packagekit.package-install;org.freedesktop.packagekit.package-install-untrusted;org.freedesktop.packagekit.package-reinstall;org.freedesktop.packagekit.package-remove;org.freedesktop.packagekit.repair-system;org.freedesktop.packagekit.system-network-proxy-configure;org.freedesktop.packagekit.system-sources-configure;org.freedesktop.packagekit.system-sources-refresh;org.freedesktop.packagekit.system-trust-signing-key;org.freedesktop.packagekit.system-update;org.freedesktop.packagekit.trigger-offline-update;org.freedesktop.packagekit.trigger-offline-upgrade;org.freedesktop.packagekit.upgrade-system;org.freedesktop.policykit.exec;org.freedesktop.policykit.lockdown;org.freedesktop.resolve1.register-service;org.freedesktop.resolve1.revert;org.freedesktop.resolve1.set-default-route;org.freedesktop.resolve1.set-dns-over-tls;org.freedesktop.resolve1.set-dns-servers;org.freedesktop.resolve1.set-dnssec;org.freedesktop.resolve1.set-dnssec-negative-trust-anchors;org.freedesktop.resolve1.set-domains;org.freedesktop.resolve1.set-llmnr;org.freedesktop.resolve1.set-mdns;org.freedesktop.resolve1.unregister-service;org.freedesktop.systemd1.manage-unit-files;org.freedesktop.systemd1.manage-units;org.freedesktop.systemd1.reload-daemon;org.freedesktop.systemd1.reply-password;org.freedesktop.systemd1.set-environment;org.freedesktop.timedate1.set-local-rtc;org.freedesktop.timedate1.set-ntp;org.freedesktop.timedate1.set-time;org.freedesktop.timedate1.set-timezone;org.freedesktop.udisks2.ata-check-power;org.freedesktop.udisks2.ata-secure-erase;org.freedesktop.udisks2.ata-smart-enable-disable;org.freedesktop.udisks2.ata-smart-selftest;org.freedesktop.udisks2.ata-smart-simulate;org.freedesktop.udisks2.ata-smart-update;org.freedesktop.udisks2.ata-standby;org.freedesktop.udisks2.ata-standby-other-seat;org.freedesktop.udisks2.ata-standby-system;org.freedesktop.udisks2.cancel-job;org.freedesktop.udisks2.cancel-job-other-user;org.freedesktop.udisks2.eject-media;org.freedesktop.udisks2.eject-media-other-seat;org.freedesktop.udisks2.eject-media-system;org.freedesktop.udisks2.encrypted-change-passphrase;org.freedesktop.udisks2.encrypted-change-passphrase-system;org.freedesktop.udisks2.encrypted-lock-others;org.freedesktop.udisks2.encrypted-unlock;org.freedesktop.udisks2.encrypted-unlock-crypttab;org.freedesktop.udisks2.encrypted-unlock-other-seat;org.freedesktop.udisks2.encrypted-unlock-system;org.freedesktop.udisks2.filesystem-fstab;org.freedesktop.udisks2.filesystem-mount;org.freedesktop.udisks2.filesystem-mount-other-seat;org.freedesktop.udisks2.filesystem-mount-system;org.freedesktop.udisks2.filesystem-take-ownership;org.freedesktop.udisks2.filesystem-unmount-others;org.freedesktop.udisks2.loop-delete-others;org.freedesktop.udisks2.loop-modify-others;org.freedesktop.udisks2.loop-setup;org.freedesktop.udisks2.manage-md-raid;org.freedesktop.udisks2.manage-swapspace;org.freedesktop.udisks2.modify-device;org.freedesktop.udisks2.modify-device-other-seat;org.freedesktop.udisks2.modify-device-system;org.freedesktop.udisks2.modify-drive-settings;org.freedesktop.udisks2.modify-system-configuration;org.freedesktop.udisks2.open-device;org.freedesktop.udisks2.open-device-system;org.freedesktop.udisks2.power-off-drive;org.freedesktop.udisks2.power-off-drive-other-seat;org.freedesktop.udisks2.power-off-drive-system;org.freedesktop.udisks2.read-system-configuration-secrets;org.freedesktop.udisks2.rescan;org.kde.fontinst.manage;org.kde.k3b.addtogroup;org.kde.k3b.updatepermissions;org.kde.kcontrol.kcmclock.save;org.kde.kcontrol.kcmkwallet5.save;org.kde.kcontrol.kcmsddm.installtheme;org.kde.kcontrol.kcmsddm.reset;org.kde.kcontrol.kcmsddm.save;org.kde.kcontrol.kcmsddm.sync;org.kde.kcontrol.kcmsddm.uninstalltheme;org.kde.kded.smart.smartctl;org.kde.kpmcore.externalcommand.init;org.kde.ksysguard.processlisthelper.changecpuscheduler;org.kde.ksysguard.processlisthelper.changeioscheduler;org.kde.ksysguard.processlisthelper.renice;org.kde.ksysguard.processlisthelper.sendsignal;org.kde.ktexteditor.katetextbuffer.savefile;org.kde.powerdevil.backlighthelper.brightness;org.kde.powerdevil.backlighthelper.brightnessmax;org.kde.powerdevil.backlighthelper.setbrightness;org.kde.powerdevil.backlighthelper.syspath;org.kde.powerdevil.chargethresholdhelper.getthreshold;org.kde.powerdevil.chargethresholdhelper.setthreshold;org.kde.powerdevil.discretegpuhelper.hasdualgpu;
ResultAny=yes
ResultInactive=yes
ResultActive=yes

[Allow Package Management all Users]
Identity=unix-user:*
Action=org.debian.apt.*;io.snapcraft.*;org.freedesktop.packagekit.*;com.ubuntu.update-notifier.*
ResultAny=no
ResultInactive=no
ResultActive=yes</code>
++++
</panel>