elementary / elementary/gala

Don't allow non-elementary namespace apps to access desktop integration dbus API

Open
#1,996 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Vala
Stars
302
Forks
83
Avg merge
1d 1h
Merged PRs (30d)
7

Description

### Problem

I was just reviewing https://github.com/leolost2605/detective/compare/1.0.2...1.1.0 and third party apps being able to do things like ask for focus or get a list of windows is re-introducing security problems from X11

### Proposal

We should make sure that only `io.elementary` namespace IDs are able to access this dbus interface. Apps shouldn't be able to get this kind of information without user consent

### Prior Art (Optional)

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.