tree fe9e08bf3b47505ca21010f2b54d01159963c0e5
parent f8f7fd69df5bf318b2da9ec6ce964ac676eb2e29
author Derek Foreman <derekf@osg.samsung.com> 1498670266 -0500
committer Derek Foreman <derekf@osg.samsung.com> 1534515924 -0500

input: Send unique keymap file descriptors to clients

Client may map any file descriptor opened for writing with PROT_WRITE
themselves.  On linux, even a read-only file descriptor to an unlinked
file can be re-opened with write permission through /proc/self/fd.

The only way to prevent this is to create a memfd which
is subsequently write-sealed.  Unfortunately this prevents clients
from mapping with MAP_SHARED, which is already in widespread usage.

To isolate and protect the keymap, whilst allowing MAP_SHARED clients
to continue to work, use a unique file descriptor for each
wl_keyboard resource.

Reviewed-by: Daniel Stone <daniels@collabora.com>