• [^] # Re: développement interminable

    Posté par (site web personnel, Mastodon) . En réponse au lien "Wayland ne sauvera pas le bureau Linux", par un dev Wayland déçu. Évalué à 3.

    Avec son argument qu'il n'installe pas de malware, on pourrait plaider pour l'abandon des droits d'accès, pour l'absence de protection mémoire entre les processus, etc. C'était justement peut être l'un des derniers endroits du système où globalement les applications avaient accès à tout en toute circonstance sans contrôle. C'est aberrant en 2022.

    Tu ne crois pas si bien dire. En cherchant vite fait des réactions à ce billet sur Reddit et Hacker News (oui je sais, je cherche la merde), j'ai vu passer des trucs comme ça ou ça :

    Because security, dude! Wayland is designed with the thought that users download random applications from the interwebz which are not trustworthy and run them. Wayland actually makes a lot of sense if you don't think of Linux desktop distributions and desktop systems, but of smartphones. But for some reason we absolutely need this technology on the desktop, like we had not enough pain and lose ends over here without it.

    It being a security risk is basically nerd masturbation. The risk is that you would be in fact pwned and the better separation between you and graphics and input hardware would prevent said malware from doing as much damage. However if you are running software as you unconstrained it already has full access to everything you care about. Wayland is a piece of a more secure environment. Selinux is another piece. Flatpak would be if it wasn't a piece of crap that on net decreases overall security. If you don't pwn yourself you are pretty secure on mint.

    Security is, largely, a non-issue unless you run untrusted binaries all the time and/or open ports on your X server to random places that can then run random programs on your display. However, for the paranoid (and a little healthy paranoia is a good thing), it would be more involved but still not a whole lot of work[0] to modify the X server architecture to support a more Wayland-like security model by default, while still allowing trusted apps to do things like take screenshots and respond to global hotkeys.