4 ms·
You can finetune access control of your app into filesystem for example with AppArmor, but access for X.org is always required, remaining as the biggest attack
by nicce 5y ago
You can finetune access control of your app into filesystem for example with AppArmor, but access for X.org is always required, remaining as the biggest attack surface.
- badsectoracula 5y agoIf you are going to configure something like AppArmor then you can certainly configure X to treat an application as untrusted.
- shatteredgate 5y agoNeither are really good options for graphical applications. The focus now is on using container sandboxing, at least with things like flatpak and snap anyway.