The Linux Security Circus: On GUI isolation

Re:The Linux Security Circus: On GUI isolation by sandGorgon on Friday April 18, 2014 @02:53AM (#7608215)

Can someone (who is more familiar than me on this topic) comment on whether this is a by-product of Xorg running with root privileges.

The systemd-logind work on Fedora [1] is attempting to run Xorg without root rights (and Wayland/Weston[2] in the future) and I'm wondering if that is a much more effective fix than all this sandboxing ?

[1] https://fedoraproject.org/wiki/Changes/XorgWithoutRootRights

[2] https://plus.google.com/+DavidHerrmann/posts/ggK1tStCvJH

EDIT: longer discussion on Reddit - http://www.reddit.com/r/linux/comments/1viqpt/x_server_runni...

[ Parent | on HN ]

Re:The Linux Security Circus: On GUI isolation by antocv on Friday April 18, 2014 @05:40AM (#7608579)

This is not specific to running as root or not, its a problem with X protocol - it doesnt isolate clients.

[ Parent | on HN ]