Announcement

Collapse
No announcement yet.

GNOME's Mutter Adds Support For Launching "Trusted Clients" On Wayland

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts
    oiaohm
    Senior Member

  • oiaohm
    replied
    Originally posted by uid313 View Post
    Trusted by whom?

    Is this for applications to be trusted by me that they are secure and don't betray me and protect me and my system?
    Or this for the system to be trusted by the application developer to keep me away?

    Is this to prevent me from taking screenshots or doing video capture?
    Taking screenshots or video capture is still use the pipewire and the dbus screencast interface. This Trusted Clients does not change this in fact Trusted Client if it wanted to screenshot or video capture they have to use the same thing as this interface does not in fact give access to compositor output.

    This is to allow desktop icons, docker... and so on to be moved out to individual applications outside the main compositor. Of course done this way some random not approved program cannot go and replace the desktop icons, docker... Core wayland really restricts what kind of windows applications can request. This gives trusted applications extra types of windows they can request over and above the base protocol of wayland.

    If trusted method does take off between compositors could make those who want to mix and match docker from one solution with the wayland compositor from another and so on happier.

    This could be party that libinput telling about lag forces this to be address as well to get stuff out the main compositor loop and into sub programs.

    Leave a comment:

  • skeevy420
    Senior Member

  • skeevy420
    replied
    Originally posted by uid313 View Post
    Trusted by whom?

    Is this for applications to be trusted by me that they are secure and don't betray me and protect me and my system?
    Or this for the system to be trusted by the application developer to keep me away?

    Is this to prevent me from taking screenshots or doing video capture?
    This allows to create extensions that launch a child process, and when that process creates a window, the extension can confirm in a secure way that the window really belongs to that process launched by it,
    Ownership verification. To see if it trusts itself.

    To allow you to take screenshots and doing video capture

    Here's what Michael left out:

    Several examples of the usefulness of this are that, with it, it is possible to write programs that implements:

    - desktop icons
    - a dock
    - a top or bottom bar
    ...

    all in a secure manner, avoiding insecure programs to do the same. In fact, even if the same code is launched manually, it won't have those privileges, only the specific process launched from inside mutter.

    Leave a comment:

  • skeevy420
    Senior Member

  • skeevy420
    replied
    Originally posted by 144Hz View Post
    Great stuff. An extensions dev now doing upstream work.
    It really is. See, I use this other desktop software -- I don't believe I gotta mention its name -- I can help feeling a little envious when I'm reading certain GNOME news these days.

    I see GNOME is into the whole child labor thing too

    Leave a comment:

  • ssokolow
    Senior Member

  • ssokolow
    replied
    Originally posted by uid313 View Post
    Trusted by whom?

    Is this for applications to be trusted by me that they are secure and don't betray me and protect me and my system?
    Or this for the system to be trusted by the application developer to keep me away?

    Is this to prevent me from taking screenshots or doing video capture?
    It's to implement what the Wayland protocol designers promised way back in the beginning... that cross-desktop protocols for things like screenshot tools would be re-created in the Wayland world by having a method where the risky APIs were only exposed to applications you granted permission to.

    ...sure took them their sweet time.

    Leave a comment:

  • uid313
    Senior Member

  • uid313
    replied
    Trusted by whom?

    Is this for applications to be trusted by me that they are secure and don't betray me and protect me and my system?
    Or this for the system to be trusted by the application developer to keep me away?

    Is this to prevent me from taking screenshots or doing video capture?

    Leave a comment:

  • phoronix
    Administrator

  • GNOME's Mutter Adds Support For Launching "Trusted Clients" On Wayland

    Phoronix: GNOME's Mutter Adds Support For Launching "Trusted Clients" On Wayland

    Merged to GNOME's Mutter compositor is an API for Wayland to allow the launching of trusted clients...

    http://www.phoronix.com/scan.php?pag...-Wayland-Trust
Working...
X