Re:Enhancing X11 Application Security with LXC
by orangeboats on Sunday June 28, 2026 @10:39AM
(#48707705)
> If we want to move to a version with minimal privileges
Then you would have to cut everything provided by the X protocol into many, smaller, controllable pieces. Because if the permission control is just a switch that says "ability to communicate with the X server", then the whole exercise is rather moot, isn't it.
And when you cut the protocol into smaller pieces...
Re:Enhancing X11 Application Security with LXC
by uecker on Sunday June 28, 2026 @11:07AM
(#48707990)
No, there is already a secure mode which in the past worked fine but was bit too restrictive for modern clients, and there already exist hooks for fine grained access control.
Then you would have to cut everything provided by the X protocol into many, smaller, controllable pieces. Because if the permission control is just a switch that says "ability to communicate with the X server", then the whole exercise is rather moot, isn't it.
And when you cut the protocol into smaller pieces...