[Deskbar] Re: Gnome 2.14 Module Proposal: Deskbar Applet

[Alan Cox <alan lxorguk ukuu org uk>]

On Iau, 2005-10-27 at 13:32 +0100, Gustavo J. A. M. Carneiro wrote:
>   The result: a single process (per user, per display), and a single
> main loop, for all applets.  Of course this means if one applet
> deadlocks or dies, they all die.  But at least dying in python is not so
> easy.  You usually get only an exception that is ignored.  Deadlock is


Which means all the applets run in the same security context which like
all the assumptions about "root" in other threads is a bad idea. To
apply good security policies you need isolation not amorphous blobs.