3 ms·
Maybe a stupid question, but can't any program read the memory of other programs from the same user? Can't you attach to it for debugging?
by davrosthedalek 7y ago
Maybe a stupid question, but can't any program read the memory of other programs from the same user? Can't you attach to it for debugging?
- cycloptic 7y agoNot necessarily. Newer Linux distros have ptrace disabled on all non-child processes. You can still turn off this protection if you need to.
- vertex-four 7y agoOn many systems, and by default, yes - but the other part of what's going on is that Wayland allows applications to be sandboxed like they couldn't be before, as they can no longer use your X server as a conduit to spawn an unsandboxed shell and run commands. You can, today, run e.g. Firefox in a sandboxed environment and be certain it can't access anything you don't want it to.
- m4rtink 7y agoAFAIK graphical application disttribution/sandboxing systems such as Flatpak pretty much require this to be avaialable if they ever want to provide reasonably secure sandboxing & might be already making use of this on Wayland systems.