for example, Xwayland could have command instead of path
command=/usr/bin/Xwayland -nolisten tcp -nolisten local
then sandboxes like firejail can make local x servers for apps that cant see eachother, or prevent an app from seeing x11 at all, without having to make a new network namespace.
That's interesting - how do you ensure this with firejail? Does it ship a patched Xwayland to add a new path?
Also, we would need to separately add this to each of Weston, Mutter, KWin, Enlightenment, Sway, Rootston, etc.
-- GitLab Migration Automatic Message --
This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.
You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/wayland/weston/issues/238.