3 ms·
> I mean, c'mon, here's a simple X11 "any app can read out the contents of any other window" solution: add access controls to Xorg so that they can't. This exi
by pcwalton 4y ago
> I mean, c'mon, here's a simple X11 "any app can read out the contents of any other window" solution: add access controls to Xorg so that they can't.
This exists and is called XSECURITY. It breaks everything, so nobody uses it. Also, nobody thinks Xorg is secure against RCE from hostile clients: the code is just too old and brittle.
- uecker 4y agoXorg network code is considered well audited and very few problems have been found over the years. Please stop making stuff up.
- tadfisher 4y agoThe most recent release had to be rolled back after four zero-day remote privilege escalations were found and given CVEs. The network code may be fine, but everything exposed to the network is not, and manpower is dwindling to address problems.
- pcwalton 4y agoHere are a zillion memory safety problems in X libraries typical of what happens when you point a fuzzer at 1980s code: https://lists.x.org/archives/xorg-devel/2013-May/036276.html https://lists.x.org/archives/xorg-devel/2013-May/036276.html