3 ms·

If you expect Wayland to protect users who give arbitrary programs root access, I have nothing more to say to you.

• nurettin 8y ago
  I expect attack vectors to be equal or less than X. Also consider what I wrote instead of repeating the same mantra of full root access.
  • mort96 8y ago
    I don't quite understand. A rouge root user in X can just replace the /usr/bin/X binary with their own version which records the screen and logs user input or does whatever they want the next time the user restarts X, or better yet, install a kernel module of their own and have arbitrary code running in ring 0. What exact attack vectors do you see in X which you don't see in Wayland, which actually makes a difference and isn't completely overshadowed by all the other things a root user can do?
    • nurettin 8y ago
      Can you change /usr/bin/X if you are only given access to /dev ?
      • ddevault 8y ago
        If you're running alone in a sandbox as root, you can just insert a kernel module which breaks you out of the sandbox.