| |||||||||||||
Distributions for the Nexus 7 (TGDaily and HotHardware)Distributions for the Nexus 7 (TGDaily and HotHardware)Posted Dec 27, 2012 11:50 UTC (Thu) by rsidd (subscriber, #2582)In reply to: Distributions for the Nexus 7 (TGDaily and HotHardware) by ibukanov Parent article: Distributions for the Nexus 7 (TGDaily and HotHardware)
> The X server can allow display from all local users (applications), and each application can run in its own UID.I was suggesting the Android model where each application is run as a separate user, but displays to the same X server.
(Log in to post comments)
Distributions for the Nexus 7 (TGDaily and HotHardware) Posted Dec 27, 2012 12:59 UTC (Thu) by ibukanov (subscriber, #3942) [Link]
> I was suggesting the Android model where each application is run as a separate user, but displays to the same X server.
One of the points of that article is that X does not provide isolation between its clients. It does not matter if they are run from the same user id or come from different computers. As long as applications share X-server, they can do bad things with each other. Fixing this requires so many changes to the X protocol that one better starts with scratch.
Distributions for the Nexus 7 (TGDaily and HotHardware) Posted Dec 27, 2012 17:12 UTC (Thu) by shmerl (guest, #65921) [Link]
What precludes Wayland to work differently though and have better process isolation? X is a transitory state in the mobile and desktop Linux. Wayland is the next big step.
Distributions for the Nexus 7 (TGDaily and HotHardware) Posted Dec 28, 2012 14:57 UTC (Fri) by renox (subscriber, #23785) [Link]
> What precludes Wayland to work differently though and have better process isolation?
Nothing and there are already a few discussions about how to ensure that Wayland is secure.
Distributions for the Nexus 7 (TGDaily and HotHardware) Posted Dec 29, 2012 8:42 UTC (Sat) by rqosa (subscriber, #24136) [Link] > As long as applications share X-server, they can do bad things with each other. It's possible to run separate X servers in separate virtual consoles, though (this is how the "switch user" feature is implemented).
|
|||||||||||||