xpra icon
Bug tracker and wiki

This bug tracker and wiki are being discontinued
please use https://github.com/Xpra-org/xpra instead.


Opened 7 years ago

Last modified 6 months ago

#622 assigned enhancement

seccomp security support — at Initial Version

Reported by: Antoine Martin Owned by: Antoine Martin
Priority: minor Milestone: future
Component: core Version:
Keywords: Cc:

Description

See libseccomp.

It shouldn't be too hard to wrap this in ctypes or Cython.

After we have started the server, created its log file, the vfb and all the clients, there is no need for having permission to create any more (as long as we can still send signals to clients). (the only exception might be the setxkbmap call we still make to setup the keyboard for new clients, the client code has already had this replaced with native xkb calls in r6931)

Client side, the same caveat applies: we currently have a setxkbmap fallback, which we could probably get rid of.

Change History (0)

Note: See TracTickets for help on using tickets.