远程连接解决方案及剪裁粘贴监控
伙计们，我被要求为我的小公司评估一些远程连接解决方案（Linux 和Solaris，但可以选择仅Solaris 的解决方案）。
更困难的要求之一（对我来说......）是切割和切割。必须监视远程和本地系统之间的粘贴。
我列出了 3 个可能的解决方案：
- Sun Secure Global Desktop
- Citrix
- X 通过 SSH 建立隧道
事情是我不知道这些中的任何一个能让我监控剪切和连接。膏体流。有什么想法吗？还有其他解决方案可以给我这种程度的控制吗？
或者，如果这是一场失败的战斗，您可以禁用剪切和剪切功能吗？粘贴？
Guys I've been asked to evaluate a few remote connection solutions for my small company (linux & solaris, but could go for a solaris only solution).
One of the more difficult requirements (for me...) is that cut & paste between remote and local system has to be monitored.
I short listed 3 possible solutions:
- Sun Secure Global Desktop
- Citrix
- X tunnelling through SSH
Thing is I don't know any of these will let me monitor cut & paste flow. Any ideas? Any other solutions that will give me that level of control?
Or if it's a lost battle, can you just disable cut & paste?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
Linux 或 Solaris 桌面上剪切和粘贴的基本控制由
X 窗口。这意味着桌面管理器（GNOME、KDE）并不重要。
通过 ssh 的 X Windows 隧道不会对剪切和粘贴产生任何影响。 X Windows 隧道虽然 ssh 只允许您从本地桌面上的远程服务器运行 X Windows 并保护它们之间的连接。
Citrix 提供 X Windows 服务器和客户端应用程序。我不知道 Citrix 产品的管理功能。我也不知道 Sun Secure Global Desktop 的管理功能。
X Windows 为您提供了一种监视 X Windows 事件的方法：XSelectInput。 X Windows 剪切和粘贴是在不同类型的选择中实现的：主选择和剪贴板。因此，通过监视这些事件，您可以收集缓冲区内容。我找到了一个 [perl 脚本]（https://github.com/trapd00r/clipbored/blob/95b33c547a84eb2e13e51557fcc95641e003acd6/clipbored），它使用 xclip 实用程序监视缓冲区。
事情变得更加复杂。 GNOME 和 KDE 都有用于复制和粘贴的剪贴板。所以你也必须监控这些。
要问的重要问题是您希望通过复制粘贴监控实现什么目标以及它的成本是多少。我认为你无法通过剪切和过去的监控来阻止员工故意复制敏感信息。有几种明显的规避机制：电子邮件、USB 闪存驱动器、打印到纸上、刻录到 CD、移动设备（电话、MP3 播放器等）。员工会不喜欢和反感这种监控或限制。他们的不满和怨恨也是这里需要考虑的成本。您可以使用复制和粘贴监控来检测敏感信息的无意复制，但是一旦检测到它，您将做什么？
Fundamental control of Cut and Paste on a Linux or Solaris desktop is managed by
X Windows. This means that the Desktop Manager (GNOME, KDE) doesn't matter.
X Windows tunneling through ssh will not have any impact on cut and paste. X Windows tunneling though ssh just allows you to run X Windows from a remote server on your local desktop and protect that connection between them.
Citrix provides an X Windows server and client applications. I do not know the administrative capabilities of Citrix products. Neither do I know the administrative capabilities of Sun Secure Global Desktop.
X Windows gives you a way to monitor X Windows events: XSelectInput. X Windows cut and paste is implemented in to different types of selection: Primary and clipboard. So by monitoring those events you can collect the buffer contents. I found a [perl script] (https://github.com/trapd00r/clipbored/blob/95b33c547a84eb2e13e51557fcc95641e003acd6/clipbored) which monitors the buffer using the xclip utility.
It gets more complicated. GNOME and KDE both have clipboards for copying and pasting. So you would have to monitor those too.
The important question to ask is what you hope to achieve with copy and paste monitoring and what will it cost. I don't think you can deter employees from intentionally copying sensitive information with cut and past monitoring. There are several obvious circumvention mechanisms: e-mail, USB flash drive, print out to paper, burn to CD, mobile device (phone, mp3 player, etc). And the employees will dislike and resent this monitoring or restriction. Their dissatisfaction and resentment is also a cost to factor in here. You may use copy and paste monitoring to detect the unintentional copying of sensitive information, but then what are you going to do once you have detected it?