Proxying Wayland for security

ld be likely to be generally useful, outside of our project? Would it make sense as something to collaborate on / have as a freedesktop.org project? [1]: https://spectrum-os.org/ Alyssa Ross signature.asc Description: PGP signature ___ wayla

Re: Proxying Wayland for security

Hi Carsten, thanks for the detailed reply. Carsten Haitzler writes: > On Tue, 27 Jul 2021 19:29:45 +0000 Alyssa Ross said: > >> Hi! I'm Alyssa and I'm working on Spectrum[1], which is a project >> aiming to create a compartmentalized desktop Linux system, with

Re: Proxying Wayland for security

Carsten Haitzler writes: > On Tue, 27 Jul 2021 19:29:45 +0000 Alyssa Ross said: > >> Hi! I'm Alyssa and I'm working on Spectrum[1], which is a project >> aiming to create a compartmentalized desktop Linux system, with high >> levels of isolation between appl

Re: Proxying Wayland for security

Simon Ser writes: > On Wednesday, July 28th, 2021 at 11:17, Alyssa Ross wrote: > >> A further thought I've just had -- the pid lookup is generally done >> through libwayland-server's wl_client_get_credentials(), right? So if >> libwayland-server could be tau

Re: Proxying Wayland for security

Carsten Haitzler writes: > On Wed, 28 Jul 2021 09:51:53 + Simon Ser said: > >> Please read the (lengthy) discussion at [1]. >> >> [1]: https://gitlab.freedesktop.org/wayland/weston/-/issues/206 >> >> In particular, the "get_credentials → PID → executable path" lookup is >> racy. PID re-use

Re: Proxying Wayland for security

Carsten Haitzler writes: >> > What I think would be of value is a standardized method to decide which >> > wayland clients should be locked down and which should not be. This is >> > currently "undecided". Something a compositor can easily look up given the >> > client socket and then decide whic

Re: Proxying Wayland for security

Daniel Stone writes: >> One big issue for us is protecting the system against potentially >> malicious Wayland clients. It's important that a compartmentalized >> application can't read from the clipboard or take a screenshot of the >> whole desktop without user consent. (The latter is possible

Re: Proxying Wayland for security

Jonas Ådahl writes: > On Wed, Jul 28, 2021 at 11:06:43AM +0000, Alyssa Ross wrote: >> Daniel Stone writes: >> >> >> One big issue for us is protecting the system against potentially >> >> malicious Wayland clients. It's important that a compartment

Re: Proxying Wayland for security

Pekka Paalanen writes: > On Wed, 28 Jul 2021 11:06:43 + > Alyssa Ross wrote: > >> Daniel Stone writes: >> >> >> One big issue for us is protecting the system against potentially >> >> malicious Wayland clients. It's important that a compa

Re: Proxying Wayland for security

Pekka Paalanen writes: > On Wed, 28 Jul 2021 17:14:11 + > Alyssa Ross wrote: > >> Pekka Paalanen writes: >> >> > On Wed, 28 Jul 2021 11:06:43 + >> > Alyssa Ross wrote: >> > >> >> Daniel Stone writes: >> &g

Re: [RFC] Wayland Security Modules

"Sloane, Brandon" writes: > I'm not sure how the pop-os/cosmic-comp PR is relevent. It seems to be about > exposing cosmic-comp as a library in general. While potentially useful, > several other compositors have been doing that for a while, and it doesn't > seem inform security decisions. Yea

RE: [RFC] Wayland Security Modules

"Sloane, Brandon" writes: >> -Original Message- >> From: Pekka Paalanen >> Sent: Tuesday, May 20, 2025 4:58 AM >> To: Sloane, Brandon >> Cc: wayland-devel@lists.freedesktop.org >> Subject: Re: [RFC] Wayland Security Modules >> >> On Mon, 19 May 2025 15:48:04 + >> "Sloane, Brandon"