Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security feature status #984

Closed
25 of 34 tasks
ddevault opened this issue Dec 4, 2016 · 1 comment
Closed
25 of 34 tasks

Security feature status #984

ddevault opened this issue Dec 4, 2016 · 1 comment

Comments

@ddevault
Copy link
Contributor

ddevault commented Dec 4, 2016 •
edited
Loading

  • Default security config for /etc/sway/config.d/
  • Run config files through sed to replace PREFIX and SYSCONFDIR
  • Config structure changes & support code
  • Implement the permit and reject commands
  • Feature policies
    • background
    • panel
    • lock
    • lock
    • fullscreen
    • keyboard
    • mouse
    • ipc
    • screenshot
  • Command policies
  • IPC security
    • Enable/disable features
    • Enable/disable events
  • Startup sanity check
    • Check permissions on /etc/sway
    • Check procfs is available
    • Check for CAP_SYS_PTRACE
    • Check for security sensitive command policies
    • Inform user visually of sanity check failures
  • Write sway-security(7)
  • Drop -Denable-binding-event from cmake
  • Optimize permission checks
  • New Wayland protocol extensions
    • Screenshot
  • Handle permission errors in swaybar, swaygrab, swaymsg, etc more gracefully
  • Paranoid mode for swaygrab
  • Standard mechanisms for sandboxing (collab with wayland-devel)
  • Configure IPC features per-executable
  • exec --policy=... [...]
@emersion
Copy link
Member

emersion commented Feb 8, 2020

This issue was about Sway 0.15. Closing in favor of #2333.

@emersion emersion closed this as completed Feb 8, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@emersion @ddevault