[Trac #260] Implement keyboard and event security in X using XACE
Zarro Boogs per Child
bugtracker at laptop.org
Thu Nov 2 13:54:42 EST 2006
#260: Implement keyboard and event security in X using XACE
-----------------------------+----------------------------------------------
Reporter: krstic | Owner: jg
Type: task | Status: new
Priority: blocker | Milestone: CTest
Component: X window system | Resolution:
Keywords: |
-----------------------------+----------------------------------------------
Changes (by jg):
* owner: dilinger => jg
Comment:
X has always marked events that are due to SendEvent.
Our applications should be checking the keyboard events and being
appropriately paranoid, when appropriate (e.g. xterm has ignored
events sent via SendEvent for > 20 years). Does sugar do so?
And there is the issue of the XTest extension being able to completely
synthesize input: but this is vital for certain accessibility situations.
Right now, access control to connecting to the X server is the current
protection against sniffing. This is inadequate if you don't trust
applications or are sharing a display among multiple users.
--
Ticket URL: <http://dev.laptop.org/ticket/260#comment:1>
One Laptop Per Child <http://laptop.org/>
More information about the Bugs
mailing list