Hacker News new | ask | show | jobs
by destructionator 1900 days ago
> Allowing arbitrary clients to globally capture keys at will is impossible to do without opening up a hole for keyloggers

https://www.x.org/wiki/Development/Documentation/Security/

The X.Org Foundation released 7.2.0 (aka X11R7.2) on February 15th, 2007.

The Wayland devs themselves say "It's entirely possible to incorporate the buffer exchange and update models that Wayland is built on into X." https://wayland.freedesktop.org/faq.html#heading_toc_j_5

They just didn't want to.

1 comments

XACE is basically an extension of SELinux into userspace for X11. Given that today Fedora/RHEL are the only distros that enable SELinux out of the box, such an approach would have been doomed to failure (or doomed to provide a product differentiator for RHEL in the best case) - not to mention the sheer joy and excitement that debugging SELinux AVC denials would produce for end users and desktop application developers.

https://www.freedesktop.org/software/XDevConf/x-security-wal...

(Wayland's "buffer exchange and update models" won't provide security on their own without any improvement on the input side)