* XWindows and CLIP?
@ 2016-06-02 21:29 John Chludzinski
2016-06-02 21:51 ` Joshua Brindle
0 siblings, 1 reply; 2+ messages in thread
From: John Chludzinski @ 2016-06-02 21:29 UTC (permalink / raw)
To: Selinux
What are the issues with XWindows and CLIP? Why is CLIP XWindow-less?
Is there something inherently unsecure with the XWindow client/server
model?
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: XWindows and CLIP?
2016-06-02 21:29 XWindows and CLIP? John Chludzinski
@ 2016-06-02 21:51 ` Joshua Brindle
0 siblings, 0 replies; 2+ messages in thread
From: Joshua Brindle @ 2016-06-02 21:51 UTC (permalink / raw)
To: John Chludzinski; +Cc: Selinux
John Chludzinski wrote:
> What are the issues with XWindows and CLIP? Why is CLIP XWindow-less?
CLIP strives to be a minimal system suited to secure solutions and does
not come with software not necessary for such systems (e.g., cross
domain solutions).
> Is there something inherently unsecure with the XWindow client/server
> model?
Xorg manages interactions between programs running under X itself and is
therefore an object manager (similar to how an RDBMS is an object
manager that manages rows and tables).
There is work to extend SELinux controls to Xorg (XACE) but without
using XACE and X SELinux policy you cannot meaningfully manage
information flow between X applications uses SELinux.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2016-06-02 21:51 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-06-02 21:29 XWindows and CLIP? John Chludzinski
2016-06-02 21:51 ` Joshua Brindle
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.