(what I am looking for?)
I am looking for alternatives to X.org, which is the most often used X-Server in linux' graphic systems today (which means also in Ubuntu). Do you know some alternatives?
Also I am asking about Ubuntu in particular in the question. So I was wondering if there is an alternative (already packed as a packaged for ubuntu). If somebody knows an "not ubuntu yet" alternative I would none-the-less appreciate a response as I assume ubuntu is thought to embrace development and progress (which alternatives might induce). Thank you.
(why I am looking for it?)
The key aspect here is security. While ubuntu offers security in many aspects
- LUKS (Linux Unified Key Setup) for disk encryption
- AppArmor MAC (Mandatory Access Control) for zero day attacks
- gnupg (Gnu Privacy Guard) signatures, safe mail communication
it is sad to know that the X.org server might give away much security. The concern is stated in many places. It is for instance:
The X server allows an X client to: - Snoop on the screen by reading its contents. - Snoop on the keyboard. - Take control of other X clients by sending them keyboard and mouse events. - Impersonate other X clients by using their names in window title bars. - Discover what other X clients are running. - Steal the input focus. - Deny service by grabbing the pointer or keyboard or the whole server. - Deny service by consuming the X server's resources. strong text
The above would mean that some software running in the X-server (this almost is every program that has a graphical output - is not running on the command line) can make itself a keylogger.
The linux file system is keeping the permissions set and by this User A can be restricted to access User B's files.
In the X.org/X-server it is hard to keep program A from accessing the X-server resources of program B. So by having installed a malicious firefox addon + using a
sudo ... on
gnome-terminal you might have done enough to give away remote root access.
This is why I want to learn / ask about alternatives to X.org's Xserver software (in ubuntu). At best an alternative that keeps the programs graphic resources (windows,keyboard input) seperated! Maybe this is some comprisive description of the problem that drives my search for an alternative: http://theinvisiblethings.blogspot.de/2011/04/linux-security-circus-on-gui-isolation.html