rustdesk / rustdesk/rustdesk-server-pro

[Feature Request] Require connection reason/justification when using Permanent Password (logged in Server Pro audit logs)

Open
#1,013 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
317
Forks
119
PR merge metrics
No merged PRs in 30d

Description

Description:

For auditing and compliance purposes, we require a feature that logs the reason or justification whenever a remote session is initiated using a Permanent Password.

Currently, when connecting to a remote host, there are two primary authorization paths:

1. User Acceptance:

The end-user manually accepts the incoming connection request on the target machine.

2. Permanent Password:

The administrator/supporter connects directly using a predefined permanent password.

Proposed Feature:

When a connection is initiated using a Permanent Password, the client should prompt the user to enter a "Reason for Connection" (e.g., Ticket ID, Reason for Access, or Brief Notes).

Prompt:

A mandatory or configurable text field displayed during or immediately after permanent password entry.

Logging:

The entered reason must be sent to RustDesk Server Pro and stored alongside the session audit logs (Connection Logs / Session History).

Configurability:

Ideally, this prompt can be made mandatory via RustDesk Server Pro policy for unattended connections.

Use Case / Security & Compliance Benefit:

In corporate and managed environments, unattended access via permanent passwords creates compliance risks if unsupported or unauthorized sessions occur. Requiring a justification for every password-based connection ensures full traceability, aligns with internal auditing standards, and simplifies ticket-matching in support workflows.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue does not identify files, tests, or entry points. Start by locating the permanent-password connection flow and the Server Pro audit-log or session-history integration, then clarify how policy configuration should work. Done means a reason is collected for the specified connections, transmitted to Server Pro, stored with the audit record, and enforced when configured.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.