Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

question

(what I am looking for?)

I am looking for alternatives to X.org, which is the most often used X-Server in linux' graphic systems today (which means also in Ubuntu). Do you know some alternatives?

I already know about DirectFB and Wayland. With Wayland I am not really sure if it can be seen as a replacement-alternative or simple some kind of addon.

Also I am asking about Ubuntu in particular in the question. So I was wondering if there is an alternative (already packed as a packaged for ubuntu). If somebody knows an "not ubuntu yet" alternative I would none-the-less appreciate a response as I assume ubuntu is thought to embrace development and progress (which alternatives might induce). Thank you.

background

(why I am looking for it?)

The key aspect here is security. While ubuntu offers security in many aspects

  • LUKS (Linux Unified Key Setup) for disk encryption
  • AppArmor MAC (Mandatory Access Control) for zero day attacks
  • gnupg (Gnu Privacy Guard) signatures, safe mail communication

it is sad to know that the X.org server might give away much security. The concern is stated in many places. It is for instance:

The X server allows an X client to:

 - Snoop on the screen by reading its contents.
 - Snoop on the keyboard.
 - Take control of other X clients by sending them keyboard and mouse events.
 - Impersonate other X clients by using their names in window title bars.
 - Discover what other X clients are running.
 - Steal the input focus.
 - Deny service by grabbing the pointer or keyboard or the whole server.
 - Deny service by consuming the X server's resources. strong text

source: http://plash.beasts.org/wiki/X11Security

The above would mean that some software running in the X-server (this almost is every program that has a graphical output - is not running on the command line) can make itself a keylogger. The linux file system is keeping the permissions set and by this User A can be restricted to access User B's files. In the X.org/X-server it is hard to keep program A from accessing the X-server resources of program B. So by having installed a malicious firefox addon + using a sudo ... on gnome-terminal you might have done enough to give away remote root access.

This is why I want to learn / ask about alternatives to X.org's Xserver software (in ubuntu). At best an alternative that keeps the programs graphic resources (windows,keyboard input) seperated! Maybe this is some comprisive description of the problem that drives my search for an alternative: http://theinvisiblethings.blogspot.de/2011/04/linux-security-circus-on-gui-isolation.html

share|improve this question

1 Answer 1

Wayland is supposed to be a complete replacement for X, not an addon, and it addresses the problems which concern you. Note that at the moment Wayland is not production ready and there is limited driver and toolkit support for it.

It seems that Ubuntu does not have any plans to integrate Wayland at the moment, and wants to create its own display server called Mir, which may also address some of your security concerns. Mir is also not ready for general use.

DirectFB is a bare bones solution for embedded systems which gives programs direct access to the video card's framebuffer. It does not have any security mechanisms.

Another solution is not to run a GUI at all.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.
{"cc_re__cc_re__cc_by_sa_3_0": ["sites in the Stack Exchange network\">Area 51</a></li>\r\n                        <li><a href=\"//careers.stackoverflow.com?utm_source=stackoverflow.com&amp;utm_medium=site-ui&amp;utm_campaign=footerlink\">Stack Overflow Careers</a></li>\r\n                    \r\n                </ol>\r\n            </td>\r\n    </tr>\r\n</table>\r\n                </div>\r\n            </div>\r\n\r\n            <div id=\"copyright\">\r\n                site design / logo &#169; 2014 stack exchange inc; user contributions licensed under <a href=\"http://creativecommons.org/licenses/by-sa/3.0/\" rel=\"license\">cc by-sa 3.0</a>                   with <a href=\"http://blog.stackoverflow.com/2009/06/attribution-required/\" rel=\"license\">attribution required</a>\r\n            </div>\r\n            <div id=\"svnrev\">\r\n                rev 2014.12.24.2140\r\n            </div>\r\n                <div id=\"additional-notices\">\r\n                    Ubuntu and Canonical are registered trademarks of Canonical Ltd.\r\n                </div>\r\n            \r\n        </div>\r\n    </div>\r\n    <noscript>\r\n        <div id=\"noscript-w"], "copyright__copyright__copyright": [" of your security concerns. Mir is also not ready for general use.\n\nDirectFB is a bare bones solution for embedded systems which gives programs direct access to the video card's framebuffer. It does not have any security mechanisms.\n\nAnother solution is not to run a GUI at all.\n\nshare|improve this answer\n\nYour Answer\n\n\u00a0\ndiscard\n\nBy posting your answer, you agree to the privacy policy and terms of service.\n\nNot the answer you're looking for? Browse other questions tagged or ask your own question.", " of your security concerns. Mir is also not ready for general use.\n\nDirectFB is a bare bones solution for embedded systems which gives programs direct access to the video card's framebuffer. It does not have any security mechanisms.\n\nAnother solution is not to run a GUI at all.\n\nshare|improve this answer\n\nYour Answer\n\n\u00a0\ndiscard\n\nBy posting your answer, you agree to the privacy policy and terms of service.\n\nNot the answer you're looking for? Browse other questions tagged or ask your own question.", " of your security concerns. Mir is also not ready for general use.\n\nDirectFB is a bare bones solution for embedded systems which gives programs direct access to the video card's framebuffer. It does not have any security mechanisms.\n\nAnother solution is not to run a GUI at all.\n\nshare|improve this answer\n\nYour Answer\n\n\u00a0\ndiscard\n\nBy posting your answer, you agree to the privacy policy and terms of service.\n\nNot the answer you're looking for? Browse other questions tagged or ask your own question."]}