Problem
There is no wlr_security_context_manager; sandboxed apps (Flatpak) can't be tagged, and the compositor can't distinguish or restrict them.
Why it matters
Needed for Flatpak/sandbox integration and to keep privileged protocols (screencopy, data-control, layer-shell) away from untrusted clients.
Where
compositor/services/core.lua init; future gating where protocol globals are filtered.
Approach
wlr_security_context_manager_v1_create(display); record each client's security context and use it to filter sensitive globals (deny screencopy/data-control/layer-shell to sandboxed clients).
Effort
S
Problem
There is no
wlr_security_context_manager; sandboxed apps (Flatpak) can't be tagged, and the compositor can't distinguish or restrict them.Why it matters
Needed for Flatpak/sandbox integration and to keep privileged protocols (screencopy, data-control, layer-shell) away from untrusted clients.
Where
compositor/services/core.luainit; future gating where protocol globals are filtered.Approach
wlr_security_context_manager_v1_create(display); record each client's security context and use it to filter sensitive globals (deny screencopy/data-control/layer-shell to sandboxed clients).Effort
S