4 ms·

What are you using for X security context isolation? I've been wanting a good solution for that one for a while now, and the end of my list is still “write my o

• e12e 8y ago
  See: https://www.qubes-os.org/doc/gui/ https://www.qubes-os.org/doc/gui/ (they have essentially written 2500 lines of c that acts as a proxy of sorts)
• 08-15 8y ago
  Nothing... but can X11 applications actually steal data from each other? I wouldn't know how to do that, but I know precious little about the X11 protocol. (Screen shots are an awkward option, I guess.) If I was worried enough (I'm not), I could use multiple logins. Two different X servers under different users would be completely isolated.
  • icebraining 8y ago
    Even using two X servers under two logins, the fact is that desktop apps by default have much more freedom and therefore much more surface to attack. Even the kernel syscalls alone are not safe; exploits that elevate processes to root are not rare. You'd need to lock them down much more than just using different users. By the way, they may have an history, but nowadays I wouldn't bet on the security of the average distro vs Windows, and I say this as a dyed-in-the-wool Debian user. For example, their Desktop environment does have protections against cross-application attacks, unlike X.