Commit Graph

7 Commits

Author SHA1 Message Date
Enrico Weigelt, metux IT consult f5f45fae5e Xnamespace: whitelist access to some server resources
Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-05 16:06:57 +02:00
Enrico Weigelt, metux IT consult 0de8d77da5 Xnamespace: whitelist some XI operations
Whitelisting some XI operations in various hooks.

Note that some additional filtering needs to be done in send or
receive hook in order to prevent clients to receive possibly sensible
input data from the root window.

Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-05 16:06:57 +02:00
Enrico Weigelt, metux IT consult b8e375641a Xnamespace: whitelist access to namespace virtual root window
Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-05 16:06:56 +02:00
Enrico Weigelt, metux IT consult 797bb1fc02 Xnamespace: whitelist certain operations on (real) root window
CreateWindow() needs access to root window, in order to create
top level windows. Whitelisting this operation.

Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-05 16:06:56 +02:00
Enrico Weigelt, metux IT consult d00e191dcd Xnamespace: whitelist resource access for serverClient
The server itself is allowed to access anything w/o restrictions.

Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-05 16:06:56 +02:00
Enrico Weigelt, metux IT consult d9d47ec8a1 Xnamespace: whitelist resource access within same namespace
Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-05 16:06:56 +02:00
Enrico Weigelt, metux IT consult 140105dcf0 Xnamespace: filter transparency
Silently drop transparency flag if namespace isn't allowed to use it.

Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
2025-06-05 16:06:56 +02:00