[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freedesktop-xorg-devel
Subject:    Re: X SECURITY: allowed extensions for untrusted clients
From:       "Uecker, Martin" <Martin.Uecker () med ! uni-goettingen ! de>
Date:       2018-03-28 16:15:39
Message-ID: 1522253738.18567.1.camel () med ! uni-goettingen ! de
[Download RAW message or body]


So what does it take to get this done? Should I a submit a
patch adding RENDER and PRESENT to the list of allowed
extensions.

The other major thing we are missing is isolation of different
untrusted clients. With those two changes, we could properly
isolate different clients from each other.

Martin 

Am Sonntag, den 15.10.2017, 16:46 -0700 schrieb Keith Packard:
> "Uecker, Martin" <Martin.Uecker@med.uni-goettingen.de> writes:
> 
> > The question is what security risks all the different extensions
> > may expose.
> 
> For things like Render and Present, they're no more serious than the
> existing core protocol. I'm pretty sure we could list the extensions
> which provide core-like functionality in an improved form and
> separate
> those from extensions which provide new functionality.
> 
_______________________________________________
xorg-devel@lists.x.org: X.Org development
Archives: http://lists.x.org/archives/xorg-devel
Info: https://lists.x.org/mailman/listinfo/xorg-devel
[prev in list] [next in list] [prev in thread] [next in thread]