[Wayland-bugs] [Bug 101345] Multiple compositor crash and security problem

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Thu Jun 8 12:06:52 UTC 2017


https://bugs.freedesktop.org/show_bug.cgi?id=101345

Daniele <vbextreme at hotmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|NOTABUG                     |---

--- Comment #4 from Daniele <vbextreme at hotmail.com> ---
If the user can view an application on compositor A but receiving messages from
compositor B is a security issue.
The compositor starts without root privileges and it may be easy to start a
fake compositor created only to run a keylogger.
I remember that a sway application appeared on the gnome session but responded
to the sway session messages.

In the coming days I will try to start multiple compositor on the same session.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/wayland-bugs/attachments/20170608/517624a7/attachment.html>


More information about the wayland-bugs mailing list