Sandboxed file access

I believe that the plan is to have AppArmor use XACE hooks, which IIRC are the same hooks that SELinux is using for security-enhanced X. This was mentioned on the spec, but I'm not up-to-date enough on AppArmor to know how good the XACE support is.

Certainly a nicer solution would involve the X security extension, or better yet, an untrusted X proxy that also happens to NAT all global X identifiers. I was working on code for this when I was a grad student, then got distracted and went to industry. Maybe I'll dust it off again and see if I can get something working...