4 ms·
No. It was already possible for any X11 application to do this. Some people interpreted snap as providing additional protection against this, but it does not. F
by sciurus 10y ago
No. It was already possible for any X11 application to do this. Some people interpreted snap as providing additional protection against this, but it does not. Fixing it requires switching from X11 to another display server with a better security model, such as Wayland or Mir.
- isxek 10y agoAnd, IIRC, Wayland isn't ready for primetime yet. Thanks for replying. I guess I'll stick to updates through good old apt then.
- digi_owl 10y agoFrom elsewhere i have learned that there are a couple of ways to "harden" X. http://www.x.org/wiki/Development/Documentation/Security/ http://www.x.org/wiki/Development/Documentation/Security/ is one. Another is to run each program inside their own "server", via xnest, xephyr or similar.