Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> So, didn't it make that security claim irrelevant because each window can access the screen?

No, because these APIs allow the user to audit the requests and allow or deny. You could have a default-allow policy and get back to the X security but most implementations ask you to confirm first.



Ok. Thanks for the Information. But,last time i tried Wayland (sway to be specific) , it didn't ask me to allow/deny ,ie, no audit was present.


It’s more of a future feature. Until we have most things sandboxed with SELinux there isn’t a whole lot of point adding a permissions dialog. But all of this work pays off in the future when Linux can match macOS in security.


It is up to your compositor. Some just allow everything (like X)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: