D17097: [scripting] Emit clientAdded for Wayland clients

davidedmundson added a comment.


  > KWallet is not secure at all.
  
  Kwallet is secure at its one job. Keeping passwords secret if your harddrive is stolen and mounted in another machine.
  
  The problem with kwallet is it gained the nonsense "access control" where it pretends it's doing something that it can't do.
  
  -----
  
  > or to say we ignore the security problems due to the point written above.
  
  IMHO yes.
  
  Wayland (display sandboxing) and the filesystem sandboxing are two parts of securing a system and either one is useless without the other.
  
  If a process can read/write to all your files you've already lost.
  Even if we did secure kwin somehow magically, I'm not securing the .desktop files plasma loads and there's a million other vectors.
  
  We should have prompts and permissions for scripts off the internet (though that's unrelated to this patch), but IMHO trying to protect Kwin/Plasma from unsandboxed processes running as the same user meddling with the config should IMHO be declared out of scope and we should be up front about it.
  
  ----
  
  Given wayland clients are already exposed with a slightly more obscure API already. I think shipping this as-is now totally makes sense, but I don't want to go against Martin F.

REPOSITORY
  R108 KWin

REVISION DETAIL
  https://phabricator.kde.org/D17097

To: zzag, #kwin
Cc: davidedmundson, mart, graesslin, kwin, jraleigh, GB_2, mkulinski, ragreen, jackyalcine, Pitel, iodelay, bwowk, ZrenBot, ngraham, alexeymin, lesliezhai, ali-mohamed, hardening, jensreuterberg, abetts, sebas, apol