[Trac #260] Implement keyboard and event security in X using XACE

Zarro Boogs per Child bugtracker at laptop.org
Thu Nov 2 13:54:42 EST 2006


#260: Implement keyboard and event security in X using XACE
-----------------------------+----------------------------------------------
 Reporter:  krstic           |        Owner:  jg   
     Type:  task             |       Status:  new  
 Priority:  blocker          |    Milestone:  CTest
Component:  X window system  |   Resolution:       
 Keywords:                   |  
-----------------------------+----------------------------------------------
Changes (by jg):

  * owner:  dilinger => jg

Comment:

 X has always marked events that are due to SendEvent.

 Our applications should be checking the keyboard events and being
 appropriately paranoid, when appropriate (e.g. xterm has ignored
 events sent via SendEvent for > 20 years).  Does sugar do so?

 And there is the issue of the XTest extension being able to completely
 synthesize input: but this is vital for certain accessibility situations.

 Right now, access control to connecting to the X server is the current
 protection against sniffing.  This is inadequate if you don't trust
 applications or are sharing a display among multiple users.

-- 
Ticket URL: <http://dev.laptop.org/ticket/260#comment:1>
One Laptop Per Child <http://laptop.org/>



More information about the Bugs mailing list