Re: Wayland Is Coming

On Mon, 13 May 2024 08:00:33 -0000 (UTC), Muttley wrote:

On Sun, 12 May 2024 20:37:18 -0000 (UTC)
Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
>

On Sun, 12 May 2024 08:44:04 -0000 (UTC), Muttley wrote:
>

And how do you propose to restrict access to specific processes?
Process name, user, some kind of certificate? All these things can be
spoofed.

>
Process identity can’t be spoofed.

 
Really? So what sort of idenfication system prevents spoofing then?

The kernel. It’s a feature of Unix sockets, because of the fact that
they’re strictly local.

You're the one who's paranoid about remote connections, not me. But
then wayland can't do this anyway ...

>
Actually it can, via Waypipe.

 
A side plug in that seems to have to run as a server alongside the
wayland server. Very efficient I'm sure.

It’s called “modularity”.

Wayland is only reachable via a Unix socket, which, unlike TCP/IP ports,
is subject to standard Linux filesystem protections.

Waypipe extends to relaying that via a Unix socket on the remote machine,
which is subject to standard Linux filesystem protections there.

And SSH provides the secure tunnel connecting them together.

You see how all the parts fit together, without compromising security?

X can also use unix swockets

No it can’t. An X display has to be a number, not a name.