> I was suggesting the Android model where each application is run as a separate user, but displays to the same X server.
One of the points of that article is that X does not provide isolation between its clients. It does not matter if they are run from the same user id or come from different computers. As long as applications share X-server, they can do bad things with each other. Fixing this requires so many changes to the X protocol that one better starts with scratch.
Distributions for the Nexus 7 (TGDaily and HotHardware)
Posted Dec 27, 2012 17:12 UTC (Thu) by shmerl (guest, #65921)
[Link]
What precludes Wayland to work differently though and have better process isolation? X is a transitory state in the mobile and desktop Linux. Wayland is the next big step.
Distributions for the Nexus 7 (TGDaily and HotHardware)
Posted Dec 28, 2012 14:57 UTC (Fri) by renox (subscriber, #23785)
[Link]
> What precludes Wayland to work differently though and have better process isolation?
Nothing and there are already a few discussions about how to ensure that Wayland is secure.
Distributions for the Nexus 7 (TGDaily and HotHardware)
Posted Dec 29, 2012 8:42 UTC (Sat) by rqosa (subscriber, #24136)
[Link]
> As long as applications share X-server, they can do bad things with each other.
It's possible to run separate X servers in separate virtual consoles, though (this is how the "switch user" feature is implemented).