Phillip:

You were banned from the Ubuntu Forms not by me personally, but rather
by the Forums Council after repeated violations of the CoC and difficult
interactions with the Forums Staff including both moderators and Forums
Council Members.

You appealed your ban to the Community Council, and your ban was upheld.

This is not the appropriate place to protest you ban. I am no longer an
active staff member, please contact the current Forums Council if you
wish to discuss any potential future use of the Forums

https://wiki.ubuntu.com/ForumCouncil

As far as the technical discussion I am afraid we will have to agree to
disagree.

I can not always follow what you are saying, but I have the impression,
perhaps falsely, you do not understand or that you intermingle issues of
Wayland, X (XWayland, Xhost), and Weston, those are fairly diverse
features / functions.

At any rate, I also think you do not understand that Wayland is in rapid
development and not all the mechanisms of security have been agreed on
up stream or resolved.

I believe Upstream has made their security intentions very clear in
their mailing list and security blog, which I have provided for your
consideration.

The fedora experience makes this very clear in their bug reports as
well. The Fedora project has raised most if not all of your issues, and
as they are a bit further ahead, the Fedora Bug Reports are referenced
here.

This thread makes it clear that Ubuntu is working not on revamping
wayland security, but by rewriting applications and the way they obtain
elevated privileges.

I also see your bugs getting closed as "wont fix" here on Ubuntu.

My best suggestion would be that you engage into a technical discussion
with your LP mentor, the community council, perhaps Norbert, or one of
the Gnome Developers whom you respect rather than continue a discussion
with myself, here, on this bug report.

I suggest you conduct such a technical discussion outside this bug
report, perhaps on the gnome or wayland mailing list or IRC or whatever
channel you feel benefits you most. I have given you the Wayland mailing
list and links to security discussions and can send them again if you
would like.

I believe this bug report is not the best place to obtain the
clarification and answers to your questions and I have in good faith
provided you and others what I would hope would be helpful information
and sources of further information.


bodhi@daemon:~$sudo gedit
No protocol specified
Unable to init server: Could not connect: Connection refused

(gedit:7374): Gtk-WARNING **: cannot open display: :0
bodhi@daemon:~$sudo su -


root@daemon:~#gedit
Unable to init server: Could not connect: Connection refused

(gedit:7346): Gtk-WARNING **: cannot open display:

I believe once Upstream (Wayland) feels the wayland code has matured
their long term intentions will be to drop XWayland and support for
circumventing wayland security via the mechanisms you currently use /
exploit such as Xhost , su - , etc.

I believe Xwayland and Xhost are intended to give downstream projects
such a Fedora and Ubuntu time to transition from X to Wayland and time
for Wayland to mature. Obviously this is a large project, both for
Wayland and Ubuntu .

I do not believe that because mechanisms currently exist to run
applications as root on Wayland at this time that you should assume that
such mechanisms will either be maintained or expanded in the future.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1713313

Title:
  Unable to launch pkexec'ed applications on Wayland session

To manage notifications about this bug go to:
https://bugs.launchpad.net/backintime/+bug/1713313/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to