Re: [RFC] Implementing Wayland Security Module

2015-03-12 Thread Jasper St. Pierre
How would a game change the mode in the first place? There is no request to do so. Anyway, I'm still going to push for a complete solution that isn't tied to Wayland and also works for DBus, but I can't convince you this is a bad idea. So, best of luck to you, and I'll shut up now :) On Mar 11, 20

Re: [RFC] Implementing Wayland Security Module

2015-03-11 Thread Jasper St. Pierre
You have written this exact same email before. Please do not write it again. Window management is extremely complex and hairy, and I'd appreciate not to get lectured from the peanut gallery about what strategies do and do not work. A thread on security protocols isn't the time or place for it. Th

Re: [RFC] Implementing Wayland Security Module

2015-03-11 Thread Bill Spitzak
On 03/11/2015 10:55 AM, Jasper St. Pierre wrote: How would a game change the mode in the first place? There is no request to do so. I think the compositor is allowed to change the mode if it thinks that is the best way to enlarge a fullscreen buffer to fill the screen. But this just means i

Re: [RFC] Implementing Wayland Security Module

2015-03-11 Thread Manuel Bachmann
Hi Jasper, "Why are fullscreen and resolution change privileged operations?" Personally, I think fullscreen should be allowed by default, but could be disallowed on a per-application-basis ; because a few ones could abuse it by re-triggering repeatedly (it made a great testcase for the demo, howe

Re: [RFC] Implementing Wayland Security Module

2015-03-09 Thread Jasper St. Pierre
On Mon, Mar 9, 2015 at 12:52 PM, Manuel Bachmann < manuel.bachm...@open.eurogiciel.org> wrote: > Hi Matthias, > > "I don't think it makes sense to develop a specific solution just for > the portion of application sandboxing that happens to overlap with > wayland protocol requests. The same questio

Re: [RFC] Implementing Wayland Security Module

2015-03-09 Thread Bill Spitzak
Fullscreen is not any more of a problem than resizing, except for the fact that a bunch of people think "fullscreen" == "always on top". Due to child windows this is not going to be true, compositors have to support floating windows atop the fullscreen one. People are being confused by the pan

Re: [RFC] Implementing Wayland Security Module

2015-03-09 Thread Manuel Bachmann
Hi Matthias, "I don't think it makes sense to develop a specific solution just for the portion of application sandboxing that happens to overlap with wayland protocol requests. The same questions need to be answered when a third-party application e.g. wants to open a file or send an email." While

Re: [RFC] Implementing Wayland Security Module

2015-03-09 Thread Jari Vetoniemi
2015-03-09 15:30 GMT+02:00 Matthias Clasen : > I don't think it makes sense to develop a specific solution just for > the portion of application sandboxing that happens to overlap with > wayland protocol requests. The same questions need to be answered when > a third-party application e.g. wants t

Re: [RFC] Implementing Wayland Security Module

2015-03-09 Thread Matthias Clasen
On Mon, Mar 9, 2015 at 1:38 AM, Manuel Bachmann wrote: > Any comments on this ? > I don't think it makes sense to develop a specific solution just for the portion of application sandboxing that happens to overlap with wayland protocol requests. The same questions need to be answered when a third

[RFC] Implementing Wayland Security Module

2015-03-08 Thread Manuel Bachmann
Hi fellow developers, Some time ago, there has been some discussion on this mailing list about "libwsm" (alias lib "Wayland Security Module"). Here is the previous thread : http://lists.freedesktop.org/archives/wayland-devel/2014-February/013359.html Libwsm has been developed by Martin Peres and