[PATCH 2/2] Support for adjusting socket access rights to allow group of users to connect to the socket.
Jussi Laako
jussi.laako at linux.intel.com
Mon Oct 20 08:06:47 PDT 2014
On 20.10.2014 17:26, Daniel Stone wrote:
> Makes sense, although you can already enforce isolation with a single
> shared compositor ...
Only weston can access the DRM compositor socket since it's the only one
having group privileges for doing it. So each user has their own
contained environment. DRM compositor is using fullscreen-shell and
nested ones are using what ever other shell they wish.
We looked into input methods splitting with a shared compositor but it
was getting a bit too complex. So now each nested compositor will manage
their own set of input devices.
So we have a functional setup with two displays, two mice, two keyboards
and a touch screen. With the current approach. Two users have two mouse
pointers and can type on the keyboard same time and window focus
management and such works without modifications.
> Doing it through environment variables is just plain nasty though; I
> really don't like this patch. I'd much rather see an explicit call, or
> users creating the appropriate fd and then just passing it to the lib.
OK, then I think it would be better to move the socket creation out from
libwayland and just pass the socket descriptor to libwayland.
More information about the wayland-devel
mailing list