X (which sucks in many ways) does have a security extension (which isolates X clients from each other); a lot of applications don't work with it, but this probl

X (which sucks in many ways) does have a security extension (which isolates X clients from each other); a lot of applications don't work with it, but this problem has been considered. Frankly, I was expecting this to be a pro-DAC (SELinux/grsecurity/TrustedBSD) article.