I have been doing some reading about security issues with Xorg on Linux, and was surprised to find that you can keylog any GUI application using two shell commands...
xinput list xinput test <id of keyboard>
While there are ways to protect your root account from such attacks (creating a separate user account that has root access but does not use X), and this would be reasonably easy to do, but that is not my concern, due to a variety of reasons. However, this does nothing to protect other password fields. For instance, accessing bank websites, my master password file, etc. I would like to know if there is a way to protect all password fields from
- Is it possible to completely disable the
xinput testcommand for a certain user, or will doing so break keyboard input from every GUI application?
- Can certain GUI applications (such as Firefox and Konsole) be sandboxed individually?
- I would prefer not to use a dedicated X servers for every GUI application, as I would expect this to use far more system resources, and it is useful to take screenshots of individual windows.
- I am using Arch Linux and KDE