Files
nexus/rust/core/Cargo.toml
T
Andy Dixon b798422735 feat(rdp): remote audio and a shared folder redirected as a drive
- Audio: the RDPSND channel with IronRDP's cpal playback backend (PCM;
  Opus left out to avoid another native library). On by default for new
  RDP profiles. Building now needs the ALSA headers on Linux
  (libasound2-dev), added to CI, release and fuzz jobs and the build docs.
- Shared folder (Linux/macOS): one local folder appears on the remote
  desktop as a drive. IronRDP's native backend joins server paths onto
  the share unchecked, so it is wrapped in ConfinedDrive: create, list
  and rename paths with '..' components, NUL bytes, or that resolve
  through a symlink outside the share are refused (ACCESS_DENIED);
  tests cover the escapes.

Verified against xrdp (with FUSE): the remote read the shared file, and
writes, mkdir and rename landed in the local folder. Not verified:
audio playback (the test container has no sound module), and xrdp lists
the drive as 'ignored' and can't list its directories (an IronRDP/xrdp
naming and listing mismatch, fixed upstream for the name).
2026-10-12 18:07:49 +01:00

52 lines
1.6 KiB
TOML

[package]
name = "nexus-core"
version.workspace = true
edition.workspace = true
[features]
# Exposes parser entry points for rust/fuzz (cargo-fuzz).
fuzzing = []
[dependencies]
serde = { version = "1", features = ["derive"] }
serde_json = "1"
rusqlite = { version = "0.37", features = ["bundled"] }
uuid = { version = "1", features = ["v4"] }
chrono = { version = "0.4", features = ["serde"] }
argon2 = "0.5"
aes-gcm = "0.10"
rand = "0.8"
base64 = "0.22"
ureq = "3"
keyring = { version = "3", features = ["apple-native", "windows-native", "async-secret-service", "tokio", "crypto-rust"] }
russh = { version = "0.64.1", default-features = false, features = ["flate2", "ring", "rsa"] }
russh-sftp = "3.0.1"
tokio = { version = "1.53.2", features = ["full"] }
sha2 = "0.11.0"
hmac = "0.13.0"
sha1 = "0.11.0"
zeroize = "1"
parking_lot = "0.12"
tracing = "0.1"
portable-pty = "0.9.0"
serialport = { version = "4", default-features = false }
des = "0.9"
flate2 = "1"
image = { version = "0.25", default-features = false, features = ["jpeg"] }
rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
webpki-roots = "1"
ironrdp = { version = "0.17", features = ["connector", "session", "graphics", "pdu", "svc", "dvc", "displaycontrol", "input", "cliprdr", "rdpsnd", "rdpdr"] }
ironrdp-rdpsnd-native = { version = "0.7", default-features = false }
ironrdp-blocking = "0.10"
x509-cert = { version = "0.2", default-features = false, features = ["std"] }
[target.'cfg(unix)'.dependencies]
ironrdp-rdpdr-native = "0.7"
[dev-dependencies]
tiny_http = "0.12"
[target.'cfg(target_os = "linux")'.dev-dependencies]
libc = "0.2"