Malware Found in the Ubuntu Snap Store

Re:Malware Found in the Ubuntu Snap Store by mikedelfino on Saturday May 12, 2018 @04:45PM (#17055927)

Doesn't Xauthority solve this? I thought we could use xauth to generate an unprivileged cookie and launch the program using it. Then it could not meddle with other X clients or even the clipboard.

Of course you should also prevent the program from reading the original privileged Xauthority data. Running it as a different user does the trick.

[ Parent | on HN ]

Re:Malware Found in the Ubuntu Snap Store by vbernat on Sunday May 13, 2018 @04:25AM (#17057887)

Xauthority isn't fine-grained. Once you get a cookie, you haven't any restriction to what you can do with the X server.

[ Parent | on HN ]

Re:Malware Found in the Ubuntu Snap Store by mikedelfino on Sunday May 13, 2018 @10:20AM (#17059012)

We could generate an "untrusted" cookie. This prevents clients using it from meddling with "trusted" clients.

It's not really fine grained and also doesn't prevent untrusted clients from meddling with one another, but seems like a starting point for someone inclined to add more security to X.

[ Parent | on HN ]