4 ms·
There's no reason a Docker container has to run as root. The daemon does, but that's another issue.
by amouat 11y ago
There's no reason a Docker container has to run as root. The daemon does, but that's another issue.
- audidude 11y agoIf you are connecting to X, it doesn't matter. You can attack all other X11 clients by design. This is why GNOME is pushing so heavily on xdg-app (for the sandbox) and the wayland-enabled GNOME shell (so apps can't snoop on each other).
- anthk 11y agoWayland doesn't have the Xinput disaster.
- timthelion 11y agoSubuser uses XPRA, so it shouldn't suffer from this problem: http://subuser.org/news/0.3.html#the-xpra-x11-bridge http://subuser.org/news/0.3.html#the-xpra-x11-bridge