Commit Graph

7 Commits

Author SHA1 Message Date
Enrico Weigelt, metux IT consult 56aff8b09b Xnamespace: whitelist access to some server resources
Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-04 18:51:26 +02:00
Enrico Weigelt, metux IT consult 240e21ccdd Xnamespace: whitelist some XI operations
Whitelisting some XI operations in various hooks.

Note that some additional filtering needs to be done in send or
receive hook in order to prevent clients to receive possibly sensible
input data from the root window.

Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-04 18:51:26 +02:00
Enrico Weigelt, metux IT consult 5d064423c9 Xnamespace: whitelist access to namespace virtual root window
Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-04 18:51:26 +02:00
Enrico Weigelt, metux IT consult 817f107dfe Xnamespace: whitelist certain operations on (real) root window
CreateWindow() needs access to root window, in order to create
top level windows. Whitelisting this operation.

Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-04 18:51:26 +02:00
Enrico Weigelt, metux IT consult f3407ab1ae Xnamespace: whitelist resource access for serverClient
The server itself is allowed to access anything w/o restrictions.

Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-04 18:51:26 +02:00
Enrico Weigelt, metux IT consult b828d3763c Xnamespace: whitelist resource access within same namespace
Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-04 18:51:26 +02:00
Enrico Weigelt, metux IT consult 9e9f75f7f8 Xnamespace: filter transparency
Silently drop transparency flag if namespace isn't allowed to use it.

Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-04 18:51:26 +02:00