New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Debian Template: passive popups sometimes not closeable #1076

Closed
adrelanos opened this Issue Jul 21, 2015 · 2 comments

Comments

Projects
None yet
2 participants
@adrelanos
Member

adrelanos commented Jul 21, 2015

Start a debian-8 based AppVM. Test command (requires having the libnotify-bin package installed):

notify-send test

This is also security issue. Something wrong within the VM can spam dom0 with loads of uncloseable windows.

More discussion and ideas what could be causing this:
https://groups.google.com/d/msg/qubes-users/PtnwWxqQdHA/UwiNkLe5YJUJ

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Jul 22, 2015

Member

On Tue, Jul 21, 2015 at 01:10:16PM -0700, Patrick Schleizer wrote:

Start a debian-8 based AppVM. Test command (requires having the libnotify-bin package installed):

notify-send test

This is also security issue. Something wrong within the VM can spam dom0 with loads of uncloseable windows.

More discussion and ideas what could be causing this:
https://groups.google.com/d/msg/qubes-users/PtnwWxqQdHA/UwiNkLe5YJUJ


Reply to this email directly or view it on GitHub:
#1076

Regarding security aspect - this isn't related to notify-send (or
notify-osd package in this case), but more generally to windows with
override-redirect flag set. Those windows are not managed by dom0 WM, so
can't be moved, forcibly closed etc. Similar issue is described in
#1044.
We need some generic solution for that (like keyboard shortcut to close
misbehaving window/VM).

Regarding popups problem, I'll respond on mailing list.

Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

Member

marmarek commented Jul 22, 2015

On Tue, Jul 21, 2015 at 01:10:16PM -0700, Patrick Schleizer wrote:

Start a debian-8 based AppVM. Test command (requires having the libnotify-bin package installed):

notify-send test

This is also security issue. Something wrong within the VM can spam dom0 with loads of uncloseable windows.

More discussion and ideas what could be causing this:
https://groups.google.com/d/msg/qubes-users/PtnwWxqQdHA/UwiNkLe5YJUJ


Reply to this email directly or view it on GitHub:
#1076

Regarding security aspect - this isn't related to notify-send (or
notify-osd package in this case), but more generally to windows with
override-redirect flag set. Those windows are not managed by dom0 WM, so
can't be moved, forcibly closed etc. Similar issue is described in
#1044.
We need some generic solution for that (like keyboard shortcut to close
misbehaving window/VM).

Regarding popups problem, I'll respond on mailing list.

Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

@marmarek marmarek added this to the Release 3.0 milestone Jul 23, 2015

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Sep 1, 2015

Member

Notification daemon in Debian changed to mate-notification-daemon.

Member

marmarek commented Sep 1, 2015

Notification daemon in Debian changed to mate-notification-daemon.

@marmarek marmarek closed this Sep 1, 2015

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment