Announcement

Collapse
No announcement yet.

X.Org Could Use More Help Improving & Addressing Its Security

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • X.Org Could Use More Help Improving & Addressing Its Security

    Phoronix: X.Org Could Use More Help Improving & Addressing Its Security

    Those reading Phoronix over the years likely know the X.Org Server has had an increasing number of vulnerabilities come to light in recent times and statements by security researchers like the security being even worse than it looks. Given the age of the X.Org/X11 codebase and many components being rather unmaintained these days, the security situation isn't that great combined with a lack of manpower. The security topic was under the spotlight today at the XDC2021 conference...

    https://www.phoronix.com/scan.php?pa...rity-Help-2021

  • #2
    The solution would be to abandon X and fix Wayland (it still lacks several things like data query for hotkeys and Synergy).

    Comment


    • #3
      Originally posted by tildearrow View Post
      The solution would be to abandon X and fix Wayland (it still lacks several things like data query for hotkeys and Synergy).
      I agree with the sentiment but keep in mind that X will probably be around forever in the form of XWayland(which is a modified but fully functional X.Org server running over a wayland compositor). And many applications will use it too as some will not be updated.

      Comment


      • #4
        15 years too late

        Comment


        • #5
          Originally posted by iskra32 View Post

          I agree with the sentiment but keep in mind that X will probably be around forever in the form of XWayland(which is a modified but fully functional X.Org server running over a wayland compositor). And many applications will use it too as some will not be updated.
          XServer is way more vulnerable than XWayland due to running as root. The largest barrier to Wayland conversion, NVidia, finally appears to be on board. So maybe we will start seeing faster conversion onto native Wayland.

          Comment


          • #6
            Originally posted by jonsmirl View Post
            XServer is way more vulnerable than XWayland
            I assume this is a typo. XWayland is an XServer.

            Originally posted by jonsmirl View Post
            due to running as root.
            Xorg doesn't need to run as root.

            https://why-openbsd.rocks/fact/xorg/

            Linux distros just seem to do that. Except for Hyperbola apparently: https://wiki.hyperbola.info/doku.php...rvers:xenocara)
            Last edited by kpedersen; 16 September 2021, 05:37 PM.

            Comment


            • #7
              Originally posted by tildearrow View Post
              The solution would be to abandon X and fix Wayland.
              Come on. No one asked for Wayland. The majority of distros stick to X because Xorg works even though Wayland exists for 13 years. Xorg may be dirty, but it works fine. Wayland looks like a launcher for GNOME, invented by GNOME fanatics who always go against Unix philosophy with their stupid decisions: CSD and such stuff. Perhaps, Xorg will be replaced eventually, but not by Wayland.
              Last edited by Monsterovich; 16 September 2021, 07:14 PM.

              Comment


              • #8
                Originally posted by Monsterovich View Post

                ... The majority of the distros stick to X ...
                Do we have a score card anywhere?

                All fedora and Red Hat based distros default to Wayland. Ubuntu has started to default to Wayland since 21.04. I dont know about Debian, OpenSuse, Manjaro, Arch etc.

                Comment


                • #9
                  Originally posted by You- View Post

                  Do we have a score card anywhere?
                  Hah, you know how scatty open-source is. No chance of a score card. The best I can find is:

                  https://linux-hardware.org/?view=os_display_server

                  X11 still has the overwhelming majority. However:
                  Last edited by kpedersen; 16 September 2021, 06:10 PM.

                  Comment


                  • #10
                    Originally posted by You- View Post
                    All fedora and Red Hat based distros default to Wayland.
                    I can't believe that the source of all GNU/Linux evil is not using Wayland and GNOME by default.

                    Originally posted by You- View Post
                    Ubuntu has started to default to Wayland since 21.04.
                    Ubuntu is no longer a good distro, which it was years ago before they invented Unity.
                    Last edited by Monsterovich; 27 September 2021, 05:05 AM.

                    Comment

                    Working...
                    X