X.Org's GLAMOR Adds Support For OpenGL ES 3.0 Shaders

[oiaohm]

How do you keep missing the point that any "isolation" wayland offers is fictional (all the data in ram and vram is in clear text) and undesirable (users want and expect copy and paste to work between applications, and under no circumstances want it not to work)

That the thing not all things are kept in memory not encrypted. https://www.phoronix.com/news/Google...ontent-Connect

https://discussion.fedoraproject.org/t/disabling-middle-click-paste-does-not-apply-to-flatpaks/74498

What users expect are not all the same. So there are cases where users want copy and paste to fail. This is the thing how are you going to-do the required controls.

Yes the child sommelier process can still have copy/paste work.

Also the data being in ram and vram as clear text does not mean it not protected. What you are saying is really like saying process memory access and /dev/mem unrestricted access is the same thing.

Security is not just about encrypting.

->Multiple X11 sommelier instances can be used for improved isolation or when per-client configuration is needed, but it will be at the cost of losing the ability for programs to use the X server for communication between each other.

They don't do that by default because things break same reason why Debian does not allow X11 security mode over ssh -X by default..