DreamConnect v1.1
Hardening + fixes release. Recommended for all users.
Install / upgrade
curl -fsSL https://github.com/ghostpsalm/DreamConnect/releases/latest/download/dreamconnect-install.sh | sudo bashChanges since v1.0
Security
- Shared-memory framebuffer and control socket are now
0600(were world-readable /
world-writable) — no local screen scraping or input injection. Root reads them via DAC. - Agent only instruments the ScreenConnect client, not inherited child JVMs.
- Deploys root-owned; documented the trust model; inspect-first install guidance.
Performance (capture hot path)
- No per-call stat syscalls; bulk IntBuffer row copies; skip copies mid-write and when idle.
Fixes
- Fixed a periodic black-frame flash (a seqlock race introduced during hardening).
- Bounded daemon reply reads; systemd retry hardening; autologin (reboot-survival) warning.
Quality
- Added an automated test suite (
./run-tests.sh) covering keymap, frame reader
(incl. the black-flash regression), and the command parser.
See CODE_REVIEW and ROADMAP for details.