Open RDP Proxy and the WebView tab.
It has three parts: Overview, Browser parameters and Trusted certificates.
¶ Overview
| Tile | What it tells |
|---|---|
| Redemption engine | The version of the RDS Proxy engine and its web capability. |
| Authentication hook | The version of the RDS Proxy authenticator. |
| Browser bridge | The version of artica-webview, and whether the copy in use matches the Artica package. |
| Chromium headless shell | The browser package. |
| Bubblewrap sandbox | The sandbox package. |
| Web targets | Enabled and total web targets, trusted certificates, targets with automatic login, and whether copy and paste is available. |
| Automatic installation | The last apt attempt and the free space on /usr. |
| Network confinement and Web target proxies | The policies that use a network namespace or an upstream proxy. |
¶ Browser parameters
This part lists what protects the bastion from a hostile page.
Every value comes from the bridge itself.
| Protection | Value |
|---|---|
| Account | 65534, no Linux capability, even inside the sandbox |
| Namespaces | user, pid, ipc, uts, cgroup |
| Disk | Read-only view of the system. /tmp and /dev/shm are in memory, 256 MB each |
| Memory and processes | 1024 MB of JavaScript per page, 4 rendering processes, 8192 open files, files of 512 MB at most |
| Core dumps | Disabled |
| Network | Every connection goes through the filtering proxy of the session |
When a session ends, the browser, its profile and its cache are destroyed.