Hacker News new | past | comments | ask | show | jobs | submit login

The biggest hurdle for Wayland adoption is the absolutely brain dead "security model". Commonly used features like hotkey daemons, push to talk, screen recording/streaming/sharing, window management, clipboard history manager or even Wallpapers need to managed by the particular implementation (of there are many) of the Wayland server itself and have mostly no common protocols, at least not official. And when all those protocols after a long process are finally finished I have serious doubts that Wayland will be either less bloated and "messy" or more secure than current X11.

The non-existent X11 security model is not really ideal but at least you could mitigate the problem there with access control hooks and as long as you use trusted software (which is 99.9% the case on a typical Linux system) you can use all the above mentioned features today without having too much headaches.




Sun shipped a Trusted Solaris with trusted X11 Windows... over TWENTY YEARS AGO.

https://docs.oracle.com/cd/E18752_01/html/819-0869/windowapi...


The non-existent X11 security model is irrelevant considering on most systems anything under a uid can debug something else under a uid. Wayland's security is entirely pointless.

I suspect Wayland will just become a container for an X11 session.


This is not true on Ubuntu 18.04. I had to use sudo or change /proc or something to use gdb on other processes running on my user.


> considering on most systems anything under a uid can debug something else under a uid

Right? Couldn't only security hardened distros like SELinux take advantage of this?

Or I suppose Docker GUI apps?


Docker isn't a security layer


Security isn't the only thing Docker offers, but yes Docker on Linux is a security layer.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: