On Tue, 2006-08-15 at 15:12 -0400, Dan Espen wrote: > "Thomson, David-P63356" <[EMAIL PROTECTED]> writes: > > FVWM Developers, > > > > I was told I can only ask questions on here if I am sufficiently vague > > about what we are doing. I work for a government contractor and we are > > currently working on a contract for one of those 3-lettered agencies to > > do something with PCs and I am in charge (at the moment) of the UI > > design. Suffice it to say that our final project will be used by most > > every gov/mil agency at some point in the coming years. We did a market > > survey of window managers for the UI a while back and actually have > > chosen FVWM. Enough said... > > > > Here's my hopefully simple task: learn enough about FVWM to modify it > > to meet our needs. Seeing as I am still an amateur in modifying WMs, I > > hope to pick all your brains, and maybe get a little help while writing > > these changes. Having FVWM on many MANY systems in 3-letter abbreviated > > organizations and "special operations" type organizations along with > > getting your beloved FVWM to become pretty ubiquitous may be motivating > > factors. > > > > Let me know if this is the place to ask questions and if any of you are > > "willing and able". > > > > My first task involves SELinux security labels and per-window > > decoration. > > > > Dave
Ooo, this will not be easy. The only way I can think about doing it is to create a module that is capable of checking what process a windowid is associated with, then checking the label of that process. The output of this could be used to choose a decor. Although this is all a bit insecure since the link between the decor and the label is fairly weak. To do this to a level that would be considered secure enough to keep labels seperate you'd also need to monitor the x clipboard to ensure no data is copied down a security level and much more bits. If you really need this you may want to look at the metacity that Sun is using for their trusted solaris extensions (can't remember if they released it yet though) as it is label aware and can handle most of this in a secure manner. Chris
