Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Isn't being able to read input while unfocused a huge security issue?

Meanwhile if you have root you're still free to do so directly.

 help



I don't think so, and it's something every Windows and X11 Linux application can do. Perhaps this perspective is a divide between people writing/using applications, and those using/writing web servers? But maybe the Wayland team disagrees, and this is one of the reasons for this restriction? I'm speculating.

A Display server is not a security boundary. If you want that start your processes as different users.

> If you want that start your processes as different users.

How does this make any difference if they're going to connect to the same IPC that handles input/display?

The display server must absolutely enforce some kind of security boundary between clients. Clients that are running untrusted code (e.g. a web browser) must not be able to hijacked into controlling a potentially privileged client (e.g. a root terminal).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: