Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Sat 25 Nov 2017, 02:03
All times are UTC - 4
 Forum index » Off-Topic Area » Security
X.org server
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [2 Posts]  
Author Message
labbe5

Joined: 13 Nov 2013
Posts: 1024
Location: Canada

PostPosted: Mon 11 Sep 2017, 11:54    Post subject:  X.org server
Subject description: built-in vulnerabilities and Firejail as an immediate solution
 

http://www.techrepublic.com/article/a-lesser-known-reason-to-migrate-from-x-org/

Linux users are aware of the long-standing debate between X.org server and Wayland, and why we all should switch to Wayland.

The fact is X.org server has built-in vulnerabilities, and Wayland is a response to that.

Read on :
For those that don't know, X was originally designed and released in 1985 and X11 in 1987. X.org replaced X11 and was originally released April 6, 2004. When X was originally conceived, the computing world was in a completely different state. Both X and X.org lack a few very important security features that are critical for modern era usage and hardware.

Effectively, with X.org, your display could be turned into a keylogger. That, my friends, is reason enough to warrant the switch. Thing is, however, few distributions have officially made the jump from X.org to the likes of Wayland. In fact, the only major distribution to make the switch is Fedora. And we all know what happened with the Ubuntu Desktop and its attempted migration from X.org. The good news on that front is that Ubuntu 18.04 will be making use of the newer Wayland X server. Once Ubuntu makes the switch, Ubuntu spinoffs will also enjoy the change.

A few smaller distros that are already implementing Wayland. For instance, RebbecaBlackOS (a Debian testing distribution) uses Wayland by default. Two other lesser-known distributions that rely on Wayland are Liri and MauiOS. Fedora is the only major distribution to use Wayland.

If you are overly concerned about security (which, let's face it, you should be), it would behoove you to either implement Firejail.

Firejail version is now 0.9.50. For you to install latest version, don't rely on repositories. You should compile Firejail : $ ./configure && make && sudo make install-strip
Or use a Puppy compiler.

Trinitydog users may install Firejail and do :
$ sudo firecfg
This command integrates Firejail into your desktop.
But run sudo firecfg every time you install a new program.
https://firejail.wordpress.com/features-3/man-firecfg/

On a personal note, i prefer using Firejail in terminal, because i can set which dns are to be used with Firefox, such as in this example : firejail --private --dns=84.200.69.80 --dns=84.200.70.40 --caps.drop=all firefox -no-remote
When integrated into your desktop, all applications that have a Firejail profile are sandboxed.
Back to top
View user's profile Send private message 
rufwoof

Joined: 24 Feb 2014
Posts: 2164

PostPosted: Tue 12 Sep 2017, 04:55    Post subject:  

Quote:
Effectively, with X.org, your display could be turned into a keylogger. That, my friends, is reason enough to warrant the switch.

See this Reddit https://www.reddit.com/r/linux/comments/5x9gvw/what_are_the_advantages_of_mirwayland_over_xorg/ and search for the text around ....
Quote:
Security of Wayland is better than of X.org.

Absolutely not. This is a giant myth. Wayland has the exact same security situation as X11 right now. All clients can completely manipulate each other outside of a sandbox and they can't touch each other inside of a sandbox.

This is a myth that Wayland propaganda loves to spread
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [2 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0292s ][ Queries: 14 (0.0052s) ][ GZIP on ]