Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
6.94 ms (none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
0.00 ms (none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
0.05 ms (none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5
"App\Security\Voter\EntryCommentVoter"
6
"App\Security\Voter\EntryVoter"
7
"App\Security\Voter\MagazineVoter"
8
"App\Security\Voter\MessageThreadVoter"
9
"App\Security\Voter\MessageVoter"
10
"App\Security\Voter\NotificationVoter"
11
"App\Security\Voter\OAuth2UserConsentVoter"
12
"App\Security\Voter\PostCommentVoter"
13
"App\Security\Voter\PostVoter"
14
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
2 DENIED moderate
App\Entity\Entry {#2400
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +magazine: App\Entity\Magazine {#263
    +icon: Proxies\__CG__\App\Entity\Image {#244 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#273
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#235 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
    +entries: Doctrine\ORM\PersistentCollection {#178 …}
    +posts: Doctrine\ORM\PersistentCollection {#136 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
    +bans: Doctrine\ORM\PersistentCollection {#115 …}
    +reports: Doctrine\ORM\PersistentCollection {#101 …}
    +badges: Doctrine\ORM\PersistentCollection {#79 …}
    +logs: Doctrine\ORM\PersistentCollection {#69 …}
    +awards: Doctrine\ORM\PersistentCollection {#1830 …}
    +categories: Doctrine\ORM\PersistentCollection {#1863 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#267
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#269
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
  +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
  +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
  +url: null
  +body: """
    Think Zoom, Teams, google meet etc\n
    \n
    When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
    \n
    Has anyone
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 12
  +favouriteCount: 34
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1722294726 {#2420
    date: 2024-07-30 01:12:06.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1408 …}
  +votes: Doctrine\ORM\PersistentCollection {#1961 …}
  +reports: Doctrine\ORM\PersistentCollection {#1972 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
  +badges: Doctrine\ORM\PersistentCollection {#2436 …}
  +children: []
  -id: 28848
  -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
  -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705019856
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10557177"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704933456 {#1816
    date: 2024-01-11 01:37:36.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
3 DENIED edit
App\Entity\Entry {#2400
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +magazine: App\Entity\Magazine {#263
    +icon: Proxies\__CG__\App\Entity\Image {#244 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#273
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#235 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
    +entries: Doctrine\ORM\PersistentCollection {#178 …}
    +posts: Doctrine\ORM\PersistentCollection {#136 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
    +bans: Doctrine\ORM\PersistentCollection {#115 …}
    +reports: Doctrine\ORM\PersistentCollection {#101 …}
    +badges: Doctrine\ORM\PersistentCollection {#79 …}
    +logs: Doctrine\ORM\PersistentCollection {#69 …}
    +awards: Doctrine\ORM\PersistentCollection {#1830 …}
    +categories: Doctrine\ORM\PersistentCollection {#1863 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#267
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#269
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
  +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
  +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
  +url: null
  +body: """
    Think Zoom, Teams, google meet etc\n
    \n
    When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
    \n
    Has anyone
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 12
  +favouriteCount: 34
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1722294726 {#2420
    date: 2024-07-30 01:12:06.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1408 …}
  +votes: Doctrine\ORM\PersistentCollection {#1961 …}
  +reports: Doctrine\ORM\PersistentCollection {#1972 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
  +badges: Doctrine\ORM\PersistentCollection {#2436 …}
  +children: []
  -id: 28848
  -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
  -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705019856
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10557177"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704933456 {#1816
    date: 2024-01-11 01:37:36.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
4 DENIED moderate
App\Entity\Entry {#2400
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +magazine: App\Entity\Magazine {#263
    +icon: Proxies\__CG__\App\Entity\Image {#244 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#273
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#235 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
    +entries: Doctrine\ORM\PersistentCollection {#178 …}
    +posts: Doctrine\ORM\PersistentCollection {#136 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
    +bans: Doctrine\ORM\PersistentCollection {#115 …}
    +reports: Doctrine\ORM\PersistentCollection {#101 …}
    +badges: Doctrine\ORM\PersistentCollection {#79 …}
    +logs: Doctrine\ORM\PersistentCollection {#69 …}
    +awards: Doctrine\ORM\PersistentCollection {#1830 …}
    +categories: Doctrine\ORM\PersistentCollection {#1863 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#267
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#269
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
  +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
  +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
  +url: null
  +body: """
    Think Zoom, Teams, google meet etc\n
    \n
    When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
    \n
    Has anyone
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 12
  +favouriteCount: 34
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1722294726 {#2420
    date: 2024-07-30 01:12:06.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1408 …}
  +votes: Doctrine\ORM\PersistentCollection {#1961 …}
  +reports: Doctrine\ORM\PersistentCollection {#1972 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
  +badges: Doctrine\ORM\PersistentCollection {#2436 …}
  +children: []
  -id: 28848
  -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
  -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705019856
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10557177"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704933456 {#1816
    date: 2024-01-11 01:37:36.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
6 DENIED moderate
App\Entity\EntryComment {#4020
  +user: App\Entity\User {#3968 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: """
    [obsproject.com/…/solved-record-multiple-windows-b…](https://obsproject.com/forum/threads/solved-record-multiple-windows-but-not-all.106931/)\n
    \n
    in addition to windowed projector (creates window of what obs would be streaming)\n
    \n
    A but hacky, and a pain to set up past 2 windows, but it works. I do this, creating a windowed projector, and then just share only that window.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705091840 {#4030
    date: 2024-01-12 21:37:20.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4018 …}
  +nested: Doctrine\ORM\PersistentCollection {#4016 …}
  +votes: Doctrine\ORM\PersistentCollection {#4014 …}
  +reports: Doctrine\ORM\PersistentCollection {#4012 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3980 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3984 …}
  -id: 303116
  -bodyTs: "'/forum/threads/solved-record-multiple-windows-but-not-all.106931/)':5 '/solved-record-multiple-windows-b':2 '2':29 'addit':7 'creat':11,37 'hacki':21 'ob':15 'obsproject.com':1,4 'obsproject.com/forum/threads/solved-record-multiple-windows-but-not-all.106931/)':3 'pain':24 'past':28 'projector':10,40 'set':26 'share':44 'stream':18 'window':9,12,30,39,47 'work':33 'would':16"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6390225"
  +editedAt: DateTimeImmutable @1722028282 {#3966
    date: 2024-07-26 23:11:22.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705091840 {#4029
    date: 2024-01-12 21:37:20.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
7 DENIED edit
App\Entity\EntryComment {#4020
  +user: App\Entity\User {#3968 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: """
    [obsproject.com/…/solved-record-multiple-windows-b…](https://obsproject.com/forum/threads/solved-record-multiple-windows-but-not-all.106931/)\n
    \n
    in addition to windowed projector (creates window of what obs would be streaming)\n
    \n
    A but hacky, and a pain to set up past 2 windows, but it works. I do this, creating a windowed projector, and then just share only that window.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705091840 {#4030
    date: 2024-01-12 21:37:20.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4018 …}
  +nested: Doctrine\ORM\PersistentCollection {#4016 …}
  +votes: Doctrine\ORM\PersistentCollection {#4014 …}
  +reports: Doctrine\ORM\PersistentCollection {#4012 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3980 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3984 …}
  -id: 303116
  -bodyTs: "'/forum/threads/solved-record-multiple-windows-but-not-all.106931/)':5 '/solved-record-multiple-windows-b':2 '2':29 'addit':7 'creat':11,37 'hacki':21 'ob':15 'obsproject.com':1,4 'obsproject.com/forum/threads/solved-record-multiple-windows-but-not-all.106931/)':3 'pain':24 'past':28 'projector':10,40 'set':26 'share':44 'stream':18 'window':9,12,30,39,47 'work':33 'would':16"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6390225"
  +editedAt: DateTimeImmutable @1722028282 {#3966
    date: 2024-07-26 23:11:22.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705091840 {#4029
    date: 2024-01-12 21:37:20.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
8 DENIED moderate
App\Entity\EntryComment {#4020
  +user: App\Entity\User {#3968 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: """
    [obsproject.com/…/solved-record-multiple-windows-b…](https://obsproject.com/forum/threads/solved-record-multiple-windows-but-not-all.106931/)\n
    \n
    in addition to windowed projector (creates window of what obs would be streaming)\n
    \n
    A but hacky, and a pain to set up past 2 windows, but it works. I do this, creating a windowed projector, and then just share only that window.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705091840 {#4030
    date: 2024-01-12 21:37:20.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4018 …}
  +nested: Doctrine\ORM\PersistentCollection {#4016 …}
  +votes: Doctrine\ORM\PersistentCollection {#4014 …}
  +reports: Doctrine\ORM\PersistentCollection {#4012 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3980 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3984 …}
  -id: 303116
  -bodyTs: "'/forum/threads/solved-record-multiple-windows-but-not-all.106931/)':5 '/solved-record-multiple-windows-b':2 '2':29 'addit':7 'creat':11,37 'hacki':21 'ob':15 'obsproject.com':1,4 'obsproject.com/forum/threads/solved-record-multiple-windows-but-not-all.106931/)':3 'pain':24 'past':28 'projector':10,40 'set':26 'share':44 'stream':18 'window':9,12,30,39,47 'work':33 'would':16"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6390225"
  +editedAt: DateTimeImmutable @1722028282 {#3966
    date: 2024-07-26 23:11:22.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705091840 {#4029
    date: 2024-01-12 21:37:20.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
10 DENIED moderate
App\Entity\EntryComment {#4058
  +user: App\Entity\User {#4041 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: """
    > If I run these as an unprivileged user via xhost, they don’t really work well.\n
    \n
    This is not a strong security boundary and in this case is basically doing the opposite of what you want. Giving access to an X session is basically giving the app full access to your user account. As an example they can inject keystrokes to open a terminal and do whatever they want. X also gives every program access to every other program.\n
    \n
    Running as a different user will prevent direct access to other resources of your user account which may block some generic malware/spyware that tries to gobble up random files, but keyloggers and screen captures will just work as expected because they use X anyways.\n
    \n
    ---\n
    \n
    As mentioned in other comments the best solution to this is Wayland. Under Wayland apps don’t have direct access to each other. These apps use “Portals” which are trusted permission prompts. So if you try to share the screen under Wayland you will get a trusted prompt that list all windows, and if you select one the app only gets access to that one selected window.\n
    \n
    Although it is worth noting that most apps running under your user account will have pretty broad access. This can be mitigated by sandboxing tools like Flatpak but many available Flatpaks don’t provide much isolation. Carefully check the permissions if isolation is important to you.\n
    \n
    And for the truly paranoid anything running under the same kernel is not strongly isolated. It is likely good enough for these partially trusted apps like Zoom or Teams (they are not likely to actually try to exploit your system, just suck up more data than you would like them to) but not strong enough for running completely untrusted programs that may be malicious. You would at least want a VM boundary (see Qubes OS) or ideally different physical hardware.\n
    \n
    Another good option is running these in a browser. Browsers are designed from the ground up to run untrusted software safely. Google Meet works perfectly in the browser and Zoom has all of the core functionality available. (I don’t use MS Teams so can’t vouch for it.) This is my main approach to isolating proprietary software as it is reliable and I also value features such as cross-platform usage. Half of these programs just run Electron anyways so running in my main browser will use less resources and be faster than running 7 different Chromium processes.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1722294726 {#4064
    date: 2024-07-30 01:12:06.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4056 …}
  +nested: Doctrine\ORM\PersistentCollection {#4054 …}
  +votes: Doctrine\ORM\PersistentCollection {#4052 …}
  +reports: Doctrine\ORM\PersistentCollection {#4049 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4045 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4043 …}
  -id: 299204
  -bodyTs: "'7':413 'access':38,49,75,88,143,185,208 'account':53,95,203 'actual':271 'also':71,381 'although':191 'anoth':317 'anyth':242 'anyway':123,397 'app':47,138,148,182,198,261 'approach':370 'avail':220,353 'basic':29,44 'best':130 'block':98 'boundari':23,308 'broad':207 'browser':325,326,344,403 'captur':113 'care':227 'case':27 'check':228 'chromium':415 'comment':128 'complet':294 'core':351 'cross':387 'cross-platform':386 'data':281 'design':328 'differ':83,314,414 'direct':87,142 'electron':396 'enough':256,291 'everi':73,77 'exampl':56 'expect':118 'exploit':274 'faster':410 'featur':383 'file':108 'flatpak':217,221 'full':48 'function':352 'generic':100 'get':168,184 'give':37,45,72 'gobbl':105 'good':255,318 'googl':338 'ground':331 'half':390 'hardwar':316 'ideal':313 'import':234 'inject':59 'isol':226,232,251,372 'kernel':247 'keylogg':110 'keystrok':60 'least':304 'less':406 'like':216,254,262,269,285 'list':173 'main':369,402 'malici':300 'malware/spyware':101 'mani':219 'may':97,298 'meet':339 'mention':125 'mitig':212 'ms':358 'much':225 'note':195 'one':180,188 'open':62 'opposit':32 'option':319 'os':311 'paranoid':241 'partial':259 'perfect':341 'permiss':154,230 'physic':315 'platform':388 'portal':150 'pretti':206 'prevent':86 'process':416 'program':74,79,296,393 'prompt':155,171 'proprietari':373 'provid':224 'qube':310 'random':107 'realli':14 'reliabl':378 'resourc':91,407 'run':3,80,199,243,293,321,334,395,399,412 'safe':337 'sandbox':214 'screen':112,163 'secur':22 'see':309 'select':179,189 'session':42 'share':161 'softwar':336,374 'solut':131 'strong':21,250,290 'suck':278 'system':276 'team':265,359 'termin':64 'tool':215 'tri':103,159,272 'truli':240 'trust':153,170,260 'unprivileg':7 'untrust':295,335 'usag':389 'use':121,149,357,405 'user':8,52,84,94,202 'valu':382 'via':9 'vm':307 'vouch':363 'want':36,69,305 'wayland':135,137,165 'well':16 'whatev':67 'window':175,190 'work':15,116,340 'worth':194 'would':284,302 'x':41,70,122 'xhost':10 'zoom':263,346"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7258148"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704988706 {#4062
    date: 2024-01-11 16:58:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
11 DENIED edit
App\Entity\EntryComment {#4058
  +user: App\Entity\User {#4041 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: """
    > If I run these as an unprivileged user via xhost, they don’t really work well.\n
    \n
    This is not a strong security boundary and in this case is basically doing the opposite of what you want. Giving access to an X session is basically giving the app full access to your user account. As an example they can inject keystrokes to open a terminal and do whatever they want. X also gives every program access to every other program.\n
    \n
    Running as a different user will prevent direct access to other resources of your user account which may block some generic malware/spyware that tries to gobble up random files, but keyloggers and screen captures will just work as expected because they use X anyways.\n
    \n
    ---\n
    \n
    As mentioned in other comments the best solution to this is Wayland. Under Wayland apps don’t have direct access to each other. These apps use “Portals” which are trusted permission prompts. So if you try to share the screen under Wayland you will get a trusted prompt that list all windows, and if you select one the app only gets access to that one selected window.\n
    \n
    Although it is worth noting that most apps running under your user account will have pretty broad access. This can be mitigated by sandboxing tools like Flatpak but many available Flatpaks don’t provide much isolation. Carefully check the permissions if isolation is important to you.\n
    \n
    And for the truly paranoid anything running under the same kernel is not strongly isolated. It is likely good enough for these partially trusted apps like Zoom or Teams (they are not likely to actually try to exploit your system, just suck up more data than you would like them to) but not strong enough for running completely untrusted programs that may be malicious. You would at least want a VM boundary (see Qubes OS) or ideally different physical hardware.\n
    \n
    Another good option is running these in a browser. Browsers are designed from the ground up to run untrusted software safely. Google Meet works perfectly in the browser and Zoom has all of the core functionality available. (I don’t use MS Teams so can’t vouch for it.) This is my main approach to isolating proprietary software as it is reliable and I also value features such as cross-platform usage. Half of these programs just run Electron anyways so running in my main browser will use less resources and be faster than running 7 different Chromium processes.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1722294726 {#4064
    date: 2024-07-30 01:12:06.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4056 …}
  +nested: Doctrine\ORM\PersistentCollection {#4054 …}
  +votes: Doctrine\ORM\PersistentCollection {#4052 …}
  +reports: Doctrine\ORM\PersistentCollection {#4049 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4045 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4043 …}
  -id: 299204
  -bodyTs: "'7':413 'access':38,49,75,88,143,185,208 'account':53,95,203 'actual':271 'also':71,381 'although':191 'anoth':317 'anyth':242 'anyway':123,397 'app':47,138,148,182,198,261 'approach':370 'avail':220,353 'basic':29,44 'best':130 'block':98 'boundari':23,308 'broad':207 'browser':325,326,344,403 'captur':113 'care':227 'case':27 'check':228 'chromium':415 'comment':128 'complet':294 'core':351 'cross':387 'cross-platform':386 'data':281 'design':328 'differ':83,314,414 'direct':87,142 'electron':396 'enough':256,291 'everi':73,77 'exampl':56 'expect':118 'exploit':274 'faster':410 'featur':383 'file':108 'flatpak':217,221 'full':48 'function':352 'generic':100 'get':168,184 'give':37,45,72 'gobbl':105 'good':255,318 'googl':338 'ground':331 'half':390 'hardwar':316 'ideal':313 'import':234 'inject':59 'isol':226,232,251,372 'kernel':247 'keylogg':110 'keystrok':60 'least':304 'less':406 'like':216,254,262,269,285 'list':173 'main':369,402 'malici':300 'malware/spyware':101 'mani':219 'may':97,298 'meet':339 'mention':125 'mitig':212 'ms':358 'much':225 'note':195 'one':180,188 'open':62 'opposit':32 'option':319 'os':311 'paranoid':241 'partial':259 'perfect':341 'permiss':154,230 'physic':315 'platform':388 'portal':150 'pretti':206 'prevent':86 'process':416 'program':74,79,296,393 'prompt':155,171 'proprietari':373 'provid':224 'qube':310 'random':107 'realli':14 'reliabl':378 'resourc':91,407 'run':3,80,199,243,293,321,334,395,399,412 'safe':337 'sandbox':214 'screen':112,163 'secur':22 'see':309 'select':179,189 'session':42 'share':161 'softwar':336,374 'solut':131 'strong':21,250,290 'suck':278 'system':276 'team':265,359 'termin':64 'tool':215 'tri':103,159,272 'truli':240 'trust':153,170,260 'unprivileg':7 'untrust':295,335 'usag':389 'use':121,149,357,405 'user':8,52,84,94,202 'valu':382 'via':9 'vm':307 'vouch':363 'want':36,69,305 'wayland':135,137,165 'well':16 'whatev':67 'window':175,190 'work':15,116,340 'worth':194 'would':284,302 'x':41,70,122 'xhost':10 'zoom':263,346"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7258148"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704988706 {#4062
    date: 2024-01-11 16:58:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
12 DENIED moderate
App\Entity\EntryComment {#4058
  +user: App\Entity\User {#4041 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: """
    > If I run these as an unprivileged user via xhost, they don’t really work well.\n
    \n
    This is not a strong security boundary and in this case is basically doing the opposite of what you want. Giving access to an X session is basically giving the app full access to your user account. As an example they can inject keystrokes to open a terminal and do whatever they want. X also gives every program access to every other program.\n
    \n
    Running as a different user will prevent direct access to other resources of your user account which may block some generic malware/spyware that tries to gobble up random files, but keyloggers and screen captures will just work as expected because they use X anyways.\n
    \n
    ---\n
    \n
    As mentioned in other comments the best solution to this is Wayland. Under Wayland apps don’t have direct access to each other. These apps use “Portals” which are trusted permission prompts. So if you try to share the screen under Wayland you will get a trusted prompt that list all windows, and if you select one the app only gets access to that one selected window.\n
    \n
    Although it is worth noting that most apps running under your user account will have pretty broad access. This can be mitigated by sandboxing tools like Flatpak but many available Flatpaks don’t provide much isolation. Carefully check the permissions if isolation is important to you.\n
    \n
    And for the truly paranoid anything running under the same kernel is not strongly isolated. It is likely good enough for these partially trusted apps like Zoom or Teams (they are not likely to actually try to exploit your system, just suck up more data than you would like them to) but not strong enough for running completely untrusted programs that may be malicious. You would at least want a VM boundary (see Qubes OS) or ideally different physical hardware.\n
    \n
    Another good option is running these in a browser. Browsers are designed from the ground up to run untrusted software safely. Google Meet works perfectly in the browser and Zoom has all of the core functionality available. (I don’t use MS Teams so can’t vouch for it.) This is my main approach to isolating proprietary software as it is reliable and I also value features such as cross-platform usage. Half of these programs just run Electron anyways so running in my main browser will use less resources and be faster than running 7 different Chromium processes.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1722294726 {#4064
    date: 2024-07-30 01:12:06.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4056 …}
  +nested: Doctrine\ORM\PersistentCollection {#4054 …}
  +votes: Doctrine\ORM\PersistentCollection {#4052 …}
  +reports: Doctrine\ORM\PersistentCollection {#4049 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4045 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4043 …}
  -id: 299204
  -bodyTs: "'7':413 'access':38,49,75,88,143,185,208 'account':53,95,203 'actual':271 'also':71,381 'although':191 'anoth':317 'anyth':242 'anyway':123,397 'app':47,138,148,182,198,261 'approach':370 'avail':220,353 'basic':29,44 'best':130 'block':98 'boundari':23,308 'broad':207 'browser':325,326,344,403 'captur':113 'care':227 'case':27 'check':228 'chromium':415 'comment':128 'complet':294 'core':351 'cross':387 'cross-platform':386 'data':281 'design':328 'differ':83,314,414 'direct':87,142 'electron':396 'enough':256,291 'everi':73,77 'exampl':56 'expect':118 'exploit':274 'faster':410 'featur':383 'file':108 'flatpak':217,221 'full':48 'function':352 'generic':100 'get':168,184 'give':37,45,72 'gobbl':105 'good':255,318 'googl':338 'ground':331 'half':390 'hardwar':316 'ideal':313 'import':234 'inject':59 'isol':226,232,251,372 'kernel':247 'keylogg':110 'keystrok':60 'least':304 'less':406 'like':216,254,262,269,285 'list':173 'main':369,402 'malici':300 'malware/spyware':101 'mani':219 'may':97,298 'meet':339 'mention':125 'mitig':212 'ms':358 'much':225 'note':195 'one':180,188 'open':62 'opposit':32 'option':319 'os':311 'paranoid':241 'partial':259 'perfect':341 'permiss':154,230 'physic':315 'platform':388 'portal':150 'pretti':206 'prevent':86 'process':416 'program':74,79,296,393 'prompt':155,171 'proprietari':373 'provid':224 'qube':310 'random':107 'realli':14 'reliabl':378 'resourc':91,407 'run':3,80,199,243,293,321,334,395,399,412 'safe':337 'sandbox':214 'screen':112,163 'secur':22 'see':309 'select':179,189 'session':42 'share':161 'softwar':336,374 'solut':131 'strong':21,250,290 'suck':278 'system':276 'team':265,359 'termin':64 'tool':215 'tri':103,159,272 'truli':240 'trust':153,170,260 'unprivileg':7 'untrust':295,335 'usag':389 'use':121,149,357,405 'user':8,52,84,94,202 'valu':382 'via':9 'vm':307 'vouch':363 'want':36,69,305 'wayland':135,137,165 'well':16 'whatev':67 'window':175,190 'work':15,116,340 'worth':194 'would':284,302 'x':41,70,122 'xhost':10 'zoom':263,346"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7258148"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704988706 {#4062
    date: 2024-01-11 16:58:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
14 DENIED moderate
App\Entity\EntryComment {#4475
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4058
    +user: App\Entity\User {#4041 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: null
    +root: null
    +body: """
      > If I run these as an unprivileged user via xhost, they don’t really work well.\n
      \n
      This is not a strong security boundary and in this case is basically doing the opposite of what you want. Giving access to an X session is basically giving the app full access to your user account. As an example they can inject keystrokes to open a terminal and do whatever they want. X also gives every program access to every other program.\n
      \n
      Running as a different user will prevent direct access to other resources of your user account which may block some generic malware/spyware that tries to gobble up random files, but keyloggers and screen captures will just work as expected because they use X anyways.\n
      \n
      ---\n
      \n
      As mentioned in other comments the best solution to this is Wayland. Under Wayland apps don’t have direct access to each other. These apps use “Portals” which are trusted permission prompts. So if you try to share the screen under Wayland you will get a trusted prompt that list all windows, and if you select one the app only gets access to that one selected window.\n
      \n
      Although it is worth noting that most apps running under your user account will have pretty broad access. This can be mitigated by sandboxing tools like Flatpak but many available Flatpaks don’t provide much isolation. Carefully check the permissions if isolation is important to you.\n
      \n
      And for the truly paranoid anything running under the same kernel is not strongly isolated. It is likely good enough for these partially trusted apps like Zoom or Teams (they are not likely to actually try to exploit your system, just suck up more data than you would like them to) but not strong enough for running completely untrusted programs that may be malicious. You would at least want a VM boundary (see Qubes OS) or ideally different physical hardware.\n
      \n
      Another good option is running these in a browser. Browsers are designed from the ground up to run untrusted software safely. Google Meet works perfectly in the browser and Zoom has all of the core functionality available. (I don’t use MS Teams so can’t vouch for it.) This is my main approach to isolating proprietary software as it is reliable and I also value features such as cross-platform usage. Half of these programs just run Electron anyways so running in my main browser will use less resources and be faster than running 7 different Chromium processes.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 5
    +score: 0
    +lastActive: DateTime @1722294726 {#4064
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4056 …}
    +nested: Doctrine\ORM\PersistentCollection {#4054 …}
    +votes: Doctrine\ORM\PersistentCollection {#4052 …}
    +reports: Doctrine\ORM\PersistentCollection {#4049 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4045 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4043 …}
    -id: 299204
    -bodyTs: "'7':413 'access':38,49,75,88,143,185,208 'account':53,95,203 'actual':271 'also':71,381 'although':191 'anoth':317 'anyth':242 'anyway':123,397 'app':47,138,148,182,198,261 'approach':370 'avail':220,353 'basic':29,44 'best':130 'block':98 'boundari':23,308 'broad':207 'browser':325,326,344,403 'captur':113 'care':227 'case':27 'check':228 'chromium':415 'comment':128 'complet':294 'core':351 'cross':387 'cross-platform':386 'data':281 'design':328 'differ':83,314,414 'direct':87,142 'electron':396 'enough':256,291 'everi':73,77 'exampl':56 'expect':118 'exploit':274 'faster':410 'featur':383 'file':108 'flatpak':217,221 'full':48 'function':352 'generic':100 'get':168,184 'give':37,45,72 'gobbl':105 'good':255,318 'googl':338 'ground':331 'half':390 'hardwar':316 'ideal':313 'import':234 'inject':59 'isol':226,232,251,372 'kernel':247 'keylogg':110 'keystrok':60 'least':304 'less':406 'like':216,254,262,269,285 'list':173 'main':369,402 'malici':300 'malware/spyware':101 'mani':219 'may':97,298 'meet':339 'mention':125 'mitig':212 'ms':358 'much':225 'note':195 'one':180,188 'open':62 'opposit':32 'option':319 'os':311 'paranoid':241 'partial':259 'perfect':341 'permiss':154,230 'physic':315 'platform':388 'portal':150 'pretti':206 'prevent':86 'process':416 'program':74,79,296,393 'prompt':155,171 'proprietari':373 'provid':224 'qube':310 'random':107 'realli':14 'reliabl':378 'resourc':91,407 'run':3,80,199,243,293,321,334,395,399,412 'safe':337 'sandbox':214 'screen':112,163 'secur':22 'see':309 'select':179,189 'session':42 'share':161 'softwar':336,374 'solut':131 'strong':21,250,290 'suck':278 'system':276 'team':265,359 'termin':64 'tool':215 'tri':103,159,272 'truli':240 'trust':153,170,260 'unprivileg':7 'untrust':295,335 'usag':389 'use':121,149,357,405 'user':8,52,84,94,202 'valu':382 'via':9 'vm':307 'vouch':363 'want':36,69,305 'wayland':135,137,165 'well':16 'whatev':67 'window':175,190 'work':15,116,340 'worth':194 'would':284,302 'x':41,70,122 'xhost':10 'zoom':263,346"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7258148"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704988706 {#4062
      date: 2024-01-11 16:58:26.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4058}
  +body: """
    Thank you for the explanation\n
    \n
    So wayland fixes most of these. Is it possible to run GUI programs as another user just like in X with xhost though ? I’m asking not only from a security point, but as a practical one since I need to run the same program under different namespaces/users
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705108163 {#4473
    date: 2024-01-13 02:09:23.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@kevincox@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4476 …}
  +nested: Doctrine\ORM\PersistentCollection {#4478 …}
  +votes: Doctrine\ORM\PersistentCollection {#4480 …}
  +reports: Doctrine\ORM\PersistentCollection {#4482 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4484 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4486 …}
  -id: 303812
  -bodyTs: "'anoth':20 'ask':31 'differ':52 'explan':5 'fix':8 'gui':17 'like':23 'm':30 'namespaces/users':53 'need':45 'one':42 'point':37 'possibl':14 'practic':41 'program':18,50 'run':16,47 'secur':36 'sinc':43 'thank':1 'though':28 'user':21 'wayland':7 'x':25 'xhost':27"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6634179"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705108163 {#4474
    date: 2024-01-13 02:09:23.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
15 DENIED edit
App\Entity\EntryComment {#4475
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4058
    +user: App\Entity\User {#4041 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: null
    +root: null
    +body: """
      > If I run these as an unprivileged user via xhost, they don’t really work well.\n
      \n
      This is not a strong security boundary and in this case is basically doing the opposite of what you want. Giving access to an X session is basically giving the app full access to your user account. As an example they can inject keystrokes to open a terminal and do whatever they want. X also gives every program access to every other program.\n
      \n
      Running as a different user will prevent direct access to other resources of your user account which may block some generic malware/spyware that tries to gobble up random files, but keyloggers and screen captures will just work as expected because they use X anyways.\n
      \n
      ---\n
      \n
      As mentioned in other comments the best solution to this is Wayland. Under Wayland apps don’t have direct access to each other. These apps use “Portals” which are trusted permission prompts. So if you try to share the screen under Wayland you will get a trusted prompt that list all windows, and if you select one the app only gets access to that one selected window.\n
      \n
      Although it is worth noting that most apps running under your user account will have pretty broad access. This can be mitigated by sandboxing tools like Flatpak but many available Flatpaks don’t provide much isolation. Carefully check the permissions if isolation is important to you.\n
      \n
      And for the truly paranoid anything running under the same kernel is not strongly isolated. It is likely good enough for these partially trusted apps like Zoom or Teams (they are not likely to actually try to exploit your system, just suck up more data than you would like them to) but not strong enough for running completely untrusted programs that may be malicious. You would at least want a VM boundary (see Qubes OS) or ideally different physical hardware.\n
      \n
      Another good option is running these in a browser. Browsers are designed from the ground up to run untrusted software safely. Google Meet works perfectly in the browser and Zoom has all of the core functionality available. (I don’t use MS Teams so can’t vouch for it.) This is my main approach to isolating proprietary software as it is reliable and I also value features such as cross-platform usage. Half of these programs just run Electron anyways so running in my main browser will use less resources and be faster than running 7 different Chromium processes.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 5
    +score: 0
    +lastActive: DateTime @1722294726 {#4064
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4056 …}
    +nested: Doctrine\ORM\PersistentCollection {#4054 …}
    +votes: Doctrine\ORM\PersistentCollection {#4052 …}
    +reports: Doctrine\ORM\PersistentCollection {#4049 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4045 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4043 …}
    -id: 299204
    -bodyTs: "'7':413 'access':38,49,75,88,143,185,208 'account':53,95,203 'actual':271 'also':71,381 'although':191 'anoth':317 'anyth':242 'anyway':123,397 'app':47,138,148,182,198,261 'approach':370 'avail':220,353 'basic':29,44 'best':130 'block':98 'boundari':23,308 'broad':207 'browser':325,326,344,403 'captur':113 'care':227 'case':27 'check':228 'chromium':415 'comment':128 'complet':294 'core':351 'cross':387 'cross-platform':386 'data':281 'design':328 'differ':83,314,414 'direct':87,142 'electron':396 'enough':256,291 'everi':73,77 'exampl':56 'expect':118 'exploit':274 'faster':410 'featur':383 'file':108 'flatpak':217,221 'full':48 'function':352 'generic':100 'get':168,184 'give':37,45,72 'gobbl':105 'good':255,318 'googl':338 'ground':331 'half':390 'hardwar':316 'ideal':313 'import':234 'inject':59 'isol':226,232,251,372 'kernel':247 'keylogg':110 'keystrok':60 'least':304 'less':406 'like':216,254,262,269,285 'list':173 'main':369,402 'malici':300 'malware/spyware':101 'mani':219 'may':97,298 'meet':339 'mention':125 'mitig':212 'ms':358 'much':225 'note':195 'one':180,188 'open':62 'opposit':32 'option':319 'os':311 'paranoid':241 'partial':259 'perfect':341 'permiss':154,230 'physic':315 'platform':388 'portal':150 'pretti':206 'prevent':86 'process':416 'program':74,79,296,393 'prompt':155,171 'proprietari':373 'provid':224 'qube':310 'random':107 'realli':14 'reliabl':378 'resourc':91,407 'run':3,80,199,243,293,321,334,395,399,412 'safe':337 'sandbox':214 'screen':112,163 'secur':22 'see':309 'select':179,189 'session':42 'share':161 'softwar':336,374 'solut':131 'strong':21,250,290 'suck':278 'system':276 'team':265,359 'termin':64 'tool':215 'tri':103,159,272 'truli':240 'trust':153,170,260 'unprivileg':7 'untrust':295,335 'usag':389 'use':121,149,357,405 'user':8,52,84,94,202 'valu':382 'via':9 'vm':307 'vouch':363 'want':36,69,305 'wayland':135,137,165 'well':16 'whatev':67 'window':175,190 'work':15,116,340 'worth':194 'would':284,302 'x':41,70,122 'xhost':10 'zoom':263,346"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7258148"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704988706 {#4062
      date: 2024-01-11 16:58:26.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4058}
  +body: """
    Thank you for the explanation\n
    \n
    So wayland fixes most of these. Is it possible to run GUI programs as another user just like in X with xhost though ? I’m asking not only from a security point, but as a practical one since I need to run the same program under different namespaces/users
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705108163 {#4473
    date: 2024-01-13 02:09:23.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@kevincox@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4476 …}
  +nested: Doctrine\ORM\PersistentCollection {#4478 …}
  +votes: Doctrine\ORM\PersistentCollection {#4480 …}
  +reports: Doctrine\ORM\PersistentCollection {#4482 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4484 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4486 …}
  -id: 303812
  -bodyTs: "'anoth':20 'ask':31 'differ':52 'explan':5 'fix':8 'gui':17 'like':23 'm':30 'namespaces/users':53 'need':45 'one':42 'point':37 'possibl':14 'practic':41 'program':18,50 'run':16,47 'secur':36 'sinc':43 'thank':1 'though':28 'user':21 'wayland':7 'x':25 'xhost':27"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6634179"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705108163 {#4474
    date: 2024-01-13 02:09:23.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
16 DENIED moderate
App\Entity\EntryComment {#4475
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4058
    +user: App\Entity\User {#4041 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: null
    +root: null
    +body: """
      > If I run these as an unprivileged user via xhost, they don’t really work well.\n
      \n
      This is not a strong security boundary and in this case is basically doing the opposite of what you want. Giving access to an X session is basically giving the app full access to your user account. As an example they can inject keystrokes to open a terminal and do whatever they want. X also gives every program access to every other program.\n
      \n
      Running as a different user will prevent direct access to other resources of your user account which may block some generic malware/spyware that tries to gobble up random files, but keyloggers and screen captures will just work as expected because they use X anyways.\n
      \n
      ---\n
      \n
      As mentioned in other comments the best solution to this is Wayland. Under Wayland apps don’t have direct access to each other. These apps use “Portals” which are trusted permission prompts. So if you try to share the screen under Wayland you will get a trusted prompt that list all windows, and if you select one the app only gets access to that one selected window.\n
      \n
      Although it is worth noting that most apps running under your user account will have pretty broad access. This can be mitigated by sandboxing tools like Flatpak but many available Flatpaks don’t provide much isolation. Carefully check the permissions if isolation is important to you.\n
      \n
      And for the truly paranoid anything running under the same kernel is not strongly isolated. It is likely good enough for these partially trusted apps like Zoom or Teams (they are not likely to actually try to exploit your system, just suck up more data than you would like them to) but not strong enough for running completely untrusted programs that may be malicious. You would at least want a VM boundary (see Qubes OS) or ideally different physical hardware.\n
      \n
      Another good option is running these in a browser. Browsers are designed from the ground up to run untrusted software safely. Google Meet works perfectly in the browser and Zoom has all of the core functionality available. (I don’t use MS Teams so can’t vouch for it.) This is my main approach to isolating proprietary software as it is reliable and I also value features such as cross-platform usage. Half of these programs just run Electron anyways so running in my main browser will use less resources and be faster than running 7 different Chromium processes.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 5
    +score: 0
    +lastActive: DateTime @1722294726 {#4064
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4056 …}
    +nested: Doctrine\ORM\PersistentCollection {#4054 …}
    +votes: Doctrine\ORM\PersistentCollection {#4052 …}
    +reports: Doctrine\ORM\PersistentCollection {#4049 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4045 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4043 …}
    -id: 299204
    -bodyTs: "'7':413 'access':38,49,75,88,143,185,208 'account':53,95,203 'actual':271 'also':71,381 'although':191 'anoth':317 'anyth':242 'anyway':123,397 'app':47,138,148,182,198,261 'approach':370 'avail':220,353 'basic':29,44 'best':130 'block':98 'boundari':23,308 'broad':207 'browser':325,326,344,403 'captur':113 'care':227 'case':27 'check':228 'chromium':415 'comment':128 'complet':294 'core':351 'cross':387 'cross-platform':386 'data':281 'design':328 'differ':83,314,414 'direct':87,142 'electron':396 'enough':256,291 'everi':73,77 'exampl':56 'expect':118 'exploit':274 'faster':410 'featur':383 'file':108 'flatpak':217,221 'full':48 'function':352 'generic':100 'get':168,184 'give':37,45,72 'gobbl':105 'good':255,318 'googl':338 'ground':331 'half':390 'hardwar':316 'ideal':313 'import':234 'inject':59 'isol':226,232,251,372 'kernel':247 'keylogg':110 'keystrok':60 'least':304 'less':406 'like':216,254,262,269,285 'list':173 'main':369,402 'malici':300 'malware/spyware':101 'mani':219 'may':97,298 'meet':339 'mention':125 'mitig':212 'ms':358 'much':225 'note':195 'one':180,188 'open':62 'opposit':32 'option':319 'os':311 'paranoid':241 'partial':259 'perfect':341 'permiss':154,230 'physic':315 'platform':388 'portal':150 'pretti':206 'prevent':86 'process':416 'program':74,79,296,393 'prompt':155,171 'proprietari':373 'provid':224 'qube':310 'random':107 'realli':14 'reliabl':378 'resourc':91,407 'run':3,80,199,243,293,321,334,395,399,412 'safe':337 'sandbox':214 'screen':112,163 'secur':22 'see':309 'select':179,189 'session':42 'share':161 'softwar':336,374 'solut':131 'strong':21,250,290 'suck':278 'system':276 'team':265,359 'termin':64 'tool':215 'tri':103,159,272 'truli':240 'trust':153,170,260 'unprivileg':7 'untrust':295,335 'usag':389 'use':121,149,357,405 'user':8,52,84,94,202 'valu':382 'via':9 'vm':307 'vouch':363 'want':36,69,305 'wayland':135,137,165 'well':16 'whatev':67 'window':175,190 'work':15,116,340 'worth':194 'would':284,302 'x':41,70,122 'xhost':10 'zoom':263,346"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7258148"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704988706 {#4062
      date: 2024-01-11 16:58:26.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4058}
  +body: """
    Thank you for the explanation\n
    \n
    So wayland fixes most of these. Is it possible to run GUI programs as another user just like in X with xhost though ? I’m asking not only from a security point, but as a practical one since I need to run the same program under different namespaces/users
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705108163 {#4473
    date: 2024-01-13 02:09:23.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@kevincox@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4476 …}
  +nested: Doctrine\ORM\PersistentCollection {#4478 …}
  +votes: Doctrine\ORM\PersistentCollection {#4480 …}
  +reports: Doctrine\ORM\PersistentCollection {#4482 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4484 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4486 …}
  -id: 303812
  -bodyTs: "'anoth':20 'ask':31 'differ':52 'explan':5 'fix':8 'gui':17 'like':23 'm':30 'namespaces/users':53 'need':45 'one':42 'point':37 'possibl':14 'practic':41 'program':18,50 'run':16,47 'secur':36 'sinc':43 'thank':1 'though':28 'user':21 'wayland':7 'x':25 'xhost':27"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6634179"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705108163 {#4474
    date: 2024-01-13 02:09:23.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
18 DENIED moderate
App\Entity\EntryComment {#4527
  +user: App\Entity\User {#4041 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4475
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: App\Entity\EntryComment {#4058
      +user: App\Entity\User {#4041 …}
      +entry: App\Entity\Entry {#2400}
      +magazine: App\Entity\Magazine {#263}
      +image: null
      +parent: null
      +root: null
      +body: """
        > If I run these as an unprivileged user via xhost, they don’t really work well.\n
        \n
        This is not a strong security boundary and in this case is basically doing the opposite of what you want. Giving access to an X session is basically giving the app full access to your user account. As an example they can inject keystrokes to open a terminal and do whatever they want. X also gives every program access to every other program.\n
        \n
        Running as a different user will prevent direct access to other resources of your user account which may block some generic malware/spyware that tries to gobble up random files, but keyloggers and screen captures will just work as expected because they use X anyways.\n
        \n
        ---\n
        \n
        As mentioned in other comments the best solution to this is Wayland. Under Wayland apps don’t have direct access to each other. These apps use “Portals” which are trusted permission prompts. So if you try to share the screen under Wayland you will get a trusted prompt that list all windows, and if you select one the app only gets access to that one selected window.\n
        \n
        Although it is worth noting that most apps running under your user account will have pretty broad access. This can be mitigated by sandboxing tools like Flatpak but many available Flatpaks don’t provide much isolation. Carefully check the permissions if isolation is important to you.\n
        \n
        And for the truly paranoid anything running under the same kernel is not strongly isolated. It is likely good enough for these partially trusted apps like Zoom or Teams (they are not likely to actually try to exploit your system, just suck up more data than you would like them to) but not strong enough for running completely untrusted programs that may be malicious. You would at least want a VM boundary (see Qubes OS) or ideally different physical hardware.\n
        \n
        Another good option is running these in a browser. Browsers are designed from the ground up to run untrusted software safely. Google Meet works perfectly in the browser and Zoom has all of the core functionality available. (I don’t use MS Teams so can’t vouch for it.) This is my main approach to isolating proprietary software as it is reliable and I also value features such as cross-platform usage. Half of these programs just run Electron anyways so running in my main browser will use less resources and be faster than running 7 different Chromium processes.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 5
      +score: 0
      +lastActive: DateTime @1722294726 {#4064
        date: 2024-07-30 01:12:06.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@shadowintheday2@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4056 …}
      +nested: Doctrine\ORM\PersistentCollection {#4054 …}
      +votes: Doctrine\ORM\PersistentCollection {#4052 …}
      +reports: Doctrine\ORM\PersistentCollection {#4049 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4045 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4043 …}
      -id: 299204
      -bodyTs: "'7':413 'access':38,49,75,88,143,185,208 'account':53,95,203 'actual':271 'also':71,381 'although':191 'anoth':317 'anyth':242 'anyway':123,397 'app':47,138,148,182,198,261 'approach':370 'avail':220,353 'basic':29,44 'best':130 'block':98 'boundari':23,308 'broad':207 'browser':325,326,344,403 'captur':113 'care':227 'case':27 'check':228 'chromium':415 'comment':128 'complet':294 'core':351 'cross':387 'cross-platform':386 'data':281 'design':328 'differ':83,314,414 'direct':87,142 'electron':396 'enough':256,291 'everi':73,77 'exampl':56 'expect':118 'exploit':274 'faster':410 'featur':383 'file':108 'flatpak':217,221 'full':48 'function':352 'generic':100 'get':168,184 'give':37,45,72 'gobbl':105 'good':255,318 'googl':338 'ground':331 'half':390 'hardwar':316 'ideal':313 'import':234 'inject':59 'isol':226,232,251,372 'kernel':247 'keylogg':110 'keystrok':60 'least':304 'less':406 'like':216,254,262,269,285 'list':173 'main':369,402 'malici':300 'malware/spyware':101 'mani':219 'may':97,298 'meet':339 'mention':125 'mitig':212 'ms':358 'much':225 'note':195 'one':180,188 'open':62 'opposit':32 'option':319 'os':311 'paranoid':241 'partial':259 'perfect':341 'permiss':154,230 'physic':315 'platform':388 'portal':150 'pretti':206 'prevent':86 'process':416 'program':74,79,296,393 'prompt':155,171 'proprietari':373 'provid':224 'qube':310 'random':107 'realli':14 'reliabl':378 'resourc':91,407 'run':3,80,199,243,293,321,334,395,399,412 'safe':337 'sandbox':214 'screen':112,163 'secur':22 'see':309 'select':179,189 'session':42 'share':161 'softwar':336,374 'solut':131 'strong':21,250,290 'suck':278 'system':276 'team':265,359 'termin':64 'tool':215 'tri':103,159,272 'truli':240 'trust':153,170,260 'unprivileg':7 'untrust':295,335 'usag':389 'use':121,149,357,405 'user':8,52,84,94,202 'valu':382 'via':9 'vm':307 'vouch':363 'want':36,69,305 'wayland':135,137,165 'well':16 'whatev':67 'window':175,190 'work':15,116,340 'worth':194 'would':284,302 'x':41,70,122 'xhost':10 'zoom':263,346"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ml/comment/7258148"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704988706 {#4062
        date: 2024-01-11 16:58:26.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4058}
    +body: """
      Thank you for the explanation\n
      \n
      So wayland fixes most of these. Is it possible to run GUI programs as another user just like in X with xhost though ? I’m asking not only from a security point, but as a practical one since I need to run the same program under different namespaces/users
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1705108163 {#4473
      date: 2024-01-13 02:09:23.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
      "@kevincox@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4476 …}
    +nested: Doctrine\ORM\PersistentCollection {#4478 …}
    +votes: Doctrine\ORM\PersistentCollection {#4480 …}
    +reports: Doctrine\ORM\PersistentCollection {#4482 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4484 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4486 …}
    -id: 303812
    -bodyTs: "'anoth':20 'ask':31 'differ':52 'explan':5 'fix':8 'gui':17 'like':23 'm':30 'namespaces/users':53 'need':45 'one':42 'point':37 'possibl':14 'practic':41 'program':18,50 'run':16,47 'secur':36 'sinc':43 'thank':1 'though':28 'user':21 'wayland':7 'x':25 'xhost':27"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6634179"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705108163 {#4474
      date: 2024-01-13 02:09:23.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4058}
  +body: """
    I can’t way I have tried. But Wayland uses a socket, so many you can set file permissions to let other users access it?\n
    \n
    I don’t know what your exact use case is but if you just want programs to have different “profiles” you can probably do something like setting `$HOME` to point somewhere else or otherwise configure their data directory.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705115552 {#4525
    date: 2024-01-13 04:12:32.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@kevincox@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4528 …}
  +nested: Doctrine\ORM\PersistentCollection {#4530 …}
  +votes: Doctrine\ORM\PersistentCollection {#4532 …}
  +reports: Doctrine\ORM\PersistentCollection {#4534 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
  -id: 304088
  -bodyTs: "'access':24 'case':34 'configur':60 'data':62 'differ':44 'directori':63 'els':57 'exact':32 'file':18 'home':53 'know':29 'let':21 'like':51 'mani':14 'otherwis':59 'permiss':19 'point':55 'probabl':48 'profil':45 'program':41 'set':17,52 'socket':12 'someth':50 'somewher':56 'tri':7 'use':10,33 'user':23 'want':40 'way':4 'wayland':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7319884"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705115552 {#4526
    date: 2024-01-13 04:12:32.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
19 DENIED edit
App\Entity\EntryComment {#4527
  +user: App\Entity\User {#4041 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4475
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: App\Entity\EntryComment {#4058
      +user: App\Entity\User {#4041 …}
      +entry: App\Entity\Entry {#2400}
      +magazine: App\Entity\Magazine {#263}
      +image: null
      +parent: null
      +root: null
      +body: """
        > If I run these as an unprivileged user via xhost, they don’t really work well.\n
        \n
        This is not a strong security boundary and in this case is basically doing the opposite of what you want. Giving access to an X session is basically giving the app full access to your user account. As an example they can inject keystrokes to open a terminal and do whatever they want. X also gives every program access to every other program.\n
        \n
        Running as a different user will prevent direct access to other resources of your user account which may block some generic malware/spyware that tries to gobble up random files, but keyloggers and screen captures will just work as expected because they use X anyways.\n
        \n
        ---\n
        \n
        As mentioned in other comments the best solution to this is Wayland. Under Wayland apps don’t have direct access to each other. These apps use “Portals” which are trusted permission prompts. So if you try to share the screen under Wayland you will get a trusted prompt that list all windows, and if you select one the app only gets access to that one selected window.\n
        \n
        Although it is worth noting that most apps running under your user account will have pretty broad access. This can be mitigated by sandboxing tools like Flatpak but many available Flatpaks don’t provide much isolation. Carefully check the permissions if isolation is important to you.\n
        \n
        And for the truly paranoid anything running under the same kernel is not strongly isolated. It is likely good enough for these partially trusted apps like Zoom or Teams (they are not likely to actually try to exploit your system, just suck up more data than you would like them to) but not strong enough for running completely untrusted programs that may be malicious. You would at least want a VM boundary (see Qubes OS) or ideally different physical hardware.\n
        \n
        Another good option is running these in a browser. Browsers are designed from the ground up to run untrusted software safely. Google Meet works perfectly in the browser and Zoom has all of the core functionality available. (I don’t use MS Teams so can’t vouch for it.) This is my main approach to isolating proprietary software as it is reliable and I also value features such as cross-platform usage. Half of these programs just run Electron anyways so running in my main browser will use less resources and be faster than running 7 different Chromium processes.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 5
      +score: 0
      +lastActive: DateTime @1722294726 {#4064
        date: 2024-07-30 01:12:06.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@shadowintheday2@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4056 …}
      +nested: Doctrine\ORM\PersistentCollection {#4054 …}
      +votes: Doctrine\ORM\PersistentCollection {#4052 …}
      +reports: Doctrine\ORM\PersistentCollection {#4049 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4045 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4043 …}
      -id: 299204
      -bodyTs: "'7':413 'access':38,49,75,88,143,185,208 'account':53,95,203 'actual':271 'also':71,381 'although':191 'anoth':317 'anyth':242 'anyway':123,397 'app':47,138,148,182,198,261 'approach':370 'avail':220,353 'basic':29,44 'best':130 'block':98 'boundari':23,308 'broad':207 'browser':325,326,344,403 'captur':113 'care':227 'case':27 'check':228 'chromium':415 'comment':128 'complet':294 'core':351 'cross':387 'cross-platform':386 'data':281 'design':328 'differ':83,314,414 'direct':87,142 'electron':396 'enough':256,291 'everi':73,77 'exampl':56 'expect':118 'exploit':274 'faster':410 'featur':383 'file':108 'flatpak':217,221 'full':48 'function':352 'generic':100 'get':168,184 'give':37,45,72 'gobbl':105 'good':255,318 'googl':338 'ground':331 'half':390 'hardwar':316 'ideal':313 'import':234 'inject':59 'isol':226,232,251,372 'kernel':247 'keylogg':110 'keystrok':60 'least':304 'less':406 'like':216,254,262,269,285 'list':173 'main':369,402 'malici':300 'malware/spyware':101 'mani':219 'may':97,298 'meet':339 'mention':125 'mitig':212 'ms':358 'much':225 'note':195 'one':180,188 'open':62 'opposit':32 'option':319 'os':311 'paranoid':241 'partial':259 'perfect':341 'permiss':154,230 'physic':315 'platform':388 'portal':150 'pretti':206 'prevent':86 'process':416 'program':74,79,296,393 'prompt':155,171 'proprietari':373 'provid':224 'qube':310 'random':107 'realli':14 'reliabl':378 'resourc':91,407 'run':3,80,199,243,293,321,334,395,399,412 'safe':337 'sandbox':214 'screen':112,163 'secur':22 'see':309 'select':179,189 'session':42 'share':161 'softwar':336,374 'solut':131 'strong':21,250,290 'suck':278 'system':276 'team':265,359 'termin':64 'tool':215 'tri':103,159,272 'truli':240 'trust':153,170,260 'unprivileg':7 'untrust':295,335 'usag':389 'use':121,149,357,405 'user':8,52,84,94,202 'valu':382 'via':9 'vm':307 'vouch':363 'want':36,69,305 'wayland':135,137,165 'well':16 'whatev':67 'window':175,190 'work':15,116,340 'worth':194 'would':284,302 'x':41,70,122 'xhost':10 'zoom':263,346"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ml/comment/7258148"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704988706 {#4062
        date: 2024-01-11 16:58:26.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4058}
    +body: """
      Thank you for the explanation\n
      \n
      So wayland fixes most of these. Is it possible to run GUI programs as another user just like in X with xhost though ? I’m asking not only from a security point, but as a practical one since I need to run the same program under different namespaces/users
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1705108163 {#4473
      date: 2024-01-13 02:09:23.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
      "@kevincox@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4476 …}
    +nested: Doctrine\ORM\PersistentCollection {#4478 …}
    +votes: Doctrine\ORM\PersistentCollection {#4480 …}
    +reports: Doctrine\ORM\PersistentCollection {#4482 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4484 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4486 …}
    -id: 303812
    -bodyTs: "'anoth':20 'ask':31 'differ':52 'explan':5 'fix':8 'gui':17 'like':23 'm':30 'namespaces/users':53 'need':45 'one':42 'point':37 'possibl':14 'practic':41 'program':18,50 'run':16,47 'secur':36 'sinc':43 'thank':1 'though':28 'user':21 'wayland':7 'x':25 'xhost':27"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6634179"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705108163 {#4474
      date: 2024-01-13 02:09:23.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4058}
  +body: """
    I can’t way I have tried. But Wayland uses a socket, so many you can set file permissions to let other users access it?\n
    \n
    I don’t know what your exact use case is but if you just want programs to have different “profiles” you can probably do something like setting `$HOME` to point somewhere else or otherwise configure their data directory.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705115552 {#4525
    date: 2024-01-13 04:12:32.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@kevincox@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4528 …}
  +nested: Doctrine\ORM\PersistentCollection {#4530 …}
  +votes: Doctrine\ORM\PersistentCollection {#4532 …}
  +reports: Doctrine\ORM\PersistentCollection {#4534 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
  -id: 304088
  -bodyTs: "'access':24 'case':34 'configur':60 'data':62 'differ':44 'directori':63 'els':57 'exact':32 'file':18 'home':53 'know':29 'let':21 'like':51 'mani':14 'otherwis':59 'permiss':19 'point':55 'probabl':48 'profil':45 'program':41 'set':17,52 'socket':12 'someth':50 'somewher':56 'tri':7 'use':10,33 'user':23 'want':40 'way':4 'wayland':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7319884"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705115552 {#4526
    date: 2024-01-13 04:12:32.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
20 DENIED moderate
App\Entity\EntryComment {#4527
  +user: App\Entity\User {#4041 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4475
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: App\Entity\EntryComment {#4058
      +user: App\Entity\User {#4041 …}
      +entry: App\Entity\Entry {#2400}
      +magazine: App\Entity\Magazine {#263}
      +image: null
      +parent: null
      +root: null
      +body: """
        > If I run these as an unprivileged user via xhost, they don’t really work well.\n
        \n
        This is not a strong security boundary and in this case is basically doing the opposite of what you want. Giving access to an X session is basically giving the app full access to your user account. As an example they can inject keystrokes to open a terminal and do whatever they want. X also gives every program access to every other program.\n
        \n
        Running as a different user will prevent direct access to other resources of your user account which may block some generic malware/spyware that tries to gobble up random files, but keyloggers and screen captures will just work as expected because they use X anyways.\n
        \n
        ---\n
        \n
        As mentioned in other comments the best solution to this is Wayland. Under Wayland apps don’t have direct access to each other. These apps use “Portals” which are trusted permission prompts. So if you try to share the screen under Wayland you will get a trusted prompt that list all windows, and if you select one the app only gets access to that one selected window.\n
        \n
        Although it is worth noting that most apps running under your user account will have pretty broad access. This can be mitigated by sandboxing tools like Flatpak but many available Flatpaks don’t provide much isolation. Carefully check the permissions if isolation is important to you.\n
        \n
        And for the truly paranoid anything running under the same kernel is not strongly isolated. It is likely good enough for these partially trusted apps like Zoom or Teams (they are not likely to actually try to exploit your system, just suck up more data than you would like them to) but not strong enough for running completely untrusted programs that may be malicious. You would at least want a VM boundary (see Qubes OS) or ideally different physical hardware.\n
        \n
        Another good option is running these in a browser. Browsers are designed from the ground up to run untrusted software safely. Google Meet works perfectly in the browser and Zoom has all of the core functionality available. (I don’t use MS Teams so can’t vouch for it.) This is my main approach to isolating proprietary software as it is reliable and I also value features such as cross-platform usage. Half of these programs just run Electron anyways so running in my main browser will use less resources and be faster than running 7 different Chromium processes.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 5
      +score: 0
      +lastActive: DateTime @1722294726 {#4064
        date: 2024-07-30 01:12:06.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@shadowintheday2@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4056 …}
      +nested: Doctrine\ORM\PersistentCollection {#4054 …}
      +votes: Doctrine\ORM\PersistentCollection {#4052 …}
      +reports: Doctrine\ORM\PersistentCollection {#4049 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4045 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4043 …}
      -id: 299204
      -bodyTs: "'7':413 'access':38,49,75,88,143,185,208 'account':53,95,203 'actual':271 'also':71,381 'although':191 'anoth':317 'anyth':242 'anyway':123,397 'app':47,138,148,182,198,261 'approach':370 'avail':220,353 'basic':29,44 'best':130 'block':98 'boundari':23,308 'broad':207 'browser':325,326,344,403 'captur':113 'care':227 'case':27 'check':228 'chromium':415 'comment':128 'complet':294 'core':351 'cross':387 'cross-platform':386 'data':281 'design':328 'differ':83,314,414 'direct':87,142 'electron':396 'enough':256,291 'everi':73,77 'exampl':56 'expect':118 'exploit':274 'faster':410 'featur':383 'file':108 'flatpak':217,221 'full':48 'function':352 'generic':100 'get':168,184 'give':37,45,72 'gobbl':105 'good':255,318 'googl':338 'ground':331 'half':390 'hardwar':316 'ideal':313 'import':234 'inject':59 'isol':226,232,251,372 'kernel':247 'keylogg':110 'keystrok':60 'least':304 'less':406 'like':216,254,262,269,285 'list':173 'main':369,402 'malici':300 'malware/spyware':101 'mani':219 'may':97,298 'meet':339 'mention':125 'mitig':212 'ms':358 'much':225 'note':195 'one':180,188 'open':62 'opposit':32 'option':319 'os':311 'paranoid':241 'partial':259 'perfect':341 'permiss':154,230 'physic':315 'platform':388 'portal':150 'pretti':206 'prevent':86 'process':416 'program':74,79,296,393 'prompt':155,171 'proprietari':373 'provid':224 'qube':310 'random':107 'realli':14 'reliabl':378 'resourc':91,407 'run':3,80,199,243,293,321,334,395,399,412 'safe':337 'sandbox':214 'screen':112,163 'secur':22 'see':309 'select':179,189 'session':42 'share':161 'softwar':336,374 'solut':131 'strong':21,250,290 'suck':278 'system':276 'team':265,359 'termin':64 'tool':215 'tri':103,159,272 'truli':240 'trust':153,170,260 'unprivileg':7 'untrust':295,335 'usag':389 'use':121,149,357,405 'user':8,52,84,94,202 'valu':382 'via':9 'vm':307 'vouch':363 'want':36,69,305 'wayland':135,137,165 'well':16 'whatev':67 'window':175,190 'work':15,116,340 'worth':194 'would':284,302 'x':41,70,122 'xhost':10 'zoom':263,346"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ml/comment/7258148"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704988706 {#4062
        date: 2024-01-11 16:58:26.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4058}
    +body: """
      Thank you for the explanation\n
      \n
      So wayland fixes most of these. Is it possible to run GUI programs as another user just like in X with xhost though ? I’m asking not only from a security point, but as a practical one since I need to run the same program under different namespaces/users
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1705108163 {#4473
      date: 2024-01-13 02:09:23.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
      "@kevincox@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4476 …}
    +nested: Doctrine\ORM\PersistentCollection {#4478 …}
    +votes: Doctrine\ORM\PersistentCollection {#4480 …}
    +reports: Doctrine\ORM\PersistentCollection {#4482 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4484 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4486 …}
    -id: 303812
    -bodyTs: "'anoth':20 'ask':31 'differ':52 'explan':5 'fix':8 'gui':17 'like':23 'm':30 'namespaces/users':53 'need':45 'one':42 'point':37 'possibl':14 'practic':41 'program':18,50 'run':16,47 'secur':36 'sinc':43 'thank':1 'though':28 'user':21 'wayland':7 'x':25 'xhost':27"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6634179"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705108163 {#4474
      date: 2024-01-13 02:09:23.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4058}
  +body: """
    I can’t way I have tried. But Wayland uses a socket, so many you can set file permissions to let other users access it?\n
    \n
    I don’t know what your exact use case is but if you just want programs to have different “profiles” you can probably do something like setting `$HOME` to point somewhere else or otherwise configure their data directory.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705115552 {#4525
    date: 2024-01-13 04:12:32.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@kevincox@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4528 …}
  +nested: Doctrine\ORM\PersistentCollection {#4530 …}
  +votes: Doctrine\ORM\PersistentCollection {#4532 …}
  +reports: Doctrine\ORM\PersistentCollection {#4534 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
  -id: 304088
  -bodyTs: "'access':24 'case':34 'configur':60 'data':62 'differ':44 'directori':63 'els':57 'exact':32 'file':18 'home':53 'know':29 'let':21 'like':51 'mani':14 'otherwis':59 'permiss':19 'point':55 'probabl':48 'profil':45 'program':41 'set':17,52 'socket':12 'someth':50 'somewher':56 'tri':7 'use':10,33 'user':23 'want':40 'way':4 'wayland':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7319884"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705115552 {#4526
    date: 2024-01-13 04:12:32.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
22 DENIED moderate
App\Entity\EntryComment {#4140
  +user: App\Entity\User {#4153 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: "You could pass through one GPU to a VM running zoom if you wanted to get hardcore."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704988630 {#4135
    date: 2024-01-11 16:57:10.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4141 …}
  +nested: Doctrine\ORM\PersistentCollection {#4143 …}
  +votes: Doctrine\ORM\PersistentCollection {#4145 …}
  +reports: Doctrine\ORM\PersistentCollection {#4147 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4149 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4151 …}
  -id: 299202
  -bodyTs: "'could':2 'get':16 'gpu':6 'hardcor':17 'one':5 'pass':3 'run':10 'vm':9 'want':14 'zoom':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://linux.community/comment/1481086"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704988630 {#4136
    date: 2024-01-11 16:57:10.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
23 DENIED edit
App\Entity\EntryComment {#4140
  +user: App\Entity\User {#4153 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: "You could pass through one GPU to a VM running zoom if you wanted to get hardcore."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704988630 {#4135
    date: 2024-01-11 16:57:10.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4141 …}
  +nested: Doctrine\ORM\PersistentCollection {#4143 …}
  +votes: Doctrine\ORM\PersistentCollection {#4145 …}
  +reports: Doctrine\ORM\PersistentCollection {#4147 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4149 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4151 …}
  -id: 299202
  -bodyTs: "'could':2 'get':16 'gpu':6 'hardcor':17 'one':5 'pass':3 'run':10 'vm':9 'want':14 'zoom':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://linux.community/comment/1481086"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704988630 {#4136
    date: 2024-01-11 16:57:10.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
24 DENIED moderate
App\Entity\EntryComment {#4140
  +user: App\Entity\User {#4153 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: "You could pass through one GPU to a VM running zoom if you wanted to get hardcore."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704988630 {#4135
    date: 2024-01-11 16:57:10.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4141 …}
  +nested: Doctrine\ORM\PersistentCollection {#4143 …}
  +votes: Doctrine\ORM\PersistentCollection {#4145 …}
  +reports: Doctrine\ORM\PersistentCollection {#4147 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4149 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4151 …}
  -id: 299202
  -bodyTs: "'could':2 'get':16 'gpu':6 'hardcor':17 'one':5 'pass':3 'run':10 'vm':9 'want':14 'zoom':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://linux.community/comment/1481086"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704988630 {#4136
    date: 2024-01-11 16:57:10.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
25 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
26 DENIED moderate
App\Entity\EntryComment {#4213
  +user: App\Entity\User {#4226 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: """
    To my knowledge it’s impossible in X, unless you run apps on separate X servers.\n
    \n
    Wayland handles this by default, with the exception of Xwayland apps
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 9
  +score: 0
  +lastActive: DateTime @1704959763 {#4208
    date: 2024-01-11 08:56:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4214 …}
  +nested: Doctrine\ORM\PersistentCollection {#4216 …}
  +votes: Doctrine\ORM\PersistentCollection {#4218 …}
  +reports: Doctrine\ORM\PersistentCollection {#4220 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4222 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4224 …}
  -id: 298510
  -bodyTs: "'app':12,27 'default':21 'except':24 'handl':18 'imposs':6 'knowledg':3 'run':11 'separ':14 'server':16 'unless':9 'wayland':17 'x':8,15 'xwayland':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.blahaj.zone/comment/5552880"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704959763 {#4209
    date: 2024-01-11 08:56:03.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
27 DENIED edit
App\Entity\EntryComment {#4213
  +user: App\Entity\User {#4226 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: """
    To my knowledge it’s impossible in X, unless you run apps on separate X servers.\n
    \n
    Wayland handles this by default, with the exception of Xwayland apps
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 9
  +score: 0
  +lastActive: DateTime @1704959763 {#4208
    date: 2024-01-11 08:56:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4214 …}
  +nested: Doctrine\ORM\PersistentCollection {#4216 …}
  +votes: Doctrine\ORM\PersistentCollection {#4218 …}
  +reports: Doctrine\ORM\PersistentCollection {#4220 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4222 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4224 …}
  -id: 298510
  -bodyTs: "'app':12,27 'default':21 'except':24 'handl':18 'imposs':6 'knowledg':3 'run':11 'separ':14 'server':16 'unless':9 'wayland':17 'x':8,15 'xwayland':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.blahaj.zone/comment/5552880"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704959763 {#4209
    date: 2024-01-11 08:56:03.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
28 DENIED moderate
App\Entity\EntryComment {#4213
  +user: App\Entity\User {#4226 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: """
    To my knowledge it’s impossible in X, unless you run apps on separate X servers.\n
    \n
    Wayland handles this by default, with the exception of Xwayland apps
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 9
  +score: 0
  +lastActive: DateTime @1704959763 {#4208
    date: 2024-01-11 08:56:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4214 …}
  +nested: Doctrine\ORM\PersistentCollection {#4216 …}
  +votes: Doctrine\ORM\PersistentCollection {#4218 …}
  +reports: Doctrine\ORM\PersistentCollection {#4220 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4222 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4224 …}
  -id: 298510
  -bodyTs: "'app':12,27 'default':21 'except':24 'handl':18 'imposs':6 'knowledg':3 'run':11 'separ':14 'server':16 'unless':9 'wayland':17 'x':8,15 'xwayland':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.blahaj.zone/comment/5552880"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704959763 {#4209
    date: 2024-01-11 08:56:03.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
29 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
30 DENIED moderate
App\Entity\EntryComment {#4287
  +user: App\Entity\User {#4300 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: "Idk what exactly you’re asking for, but this is already an option for me on teams in chrome running under Wayland??? Like when I choose start presenting it pops up a dialog with window options including the whole desktop."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1720934474 {#4282
    date: 2024-07-14 07:21:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4288 …}
  +nested: Doctrine\ORM\PersistentCollection {#4290 …}
  +votes: Doctrine\ORM\PersistentCollection {#4292 …}
  +reports: Doctrine\ORM\PersistentCollection {#4294 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4296 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4298 …}
  -id: 297932
  -bodyTs: "'alreadi':11 'ask':6 'choos':26 'chrome':19 'desktop':40 'dialog':33 'exact':3 'idk':1 'includ':37 'like':23 'option':13,36 'pop':30 'present':28 're':5 'run':20 'start':27 'team':17 'wayland':22 'whole':39 'window':35"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6566934"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704935151 {#4283
    date: 2024-01-11 02:05:51.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
31 DENIED edit
App\Entity\EntryComment {#4287
  +user: App\Entity\User {#4300 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: "Idk what exactly you’re asking for, but this is already an option for me on teams in chrome running under Wayland??? Like when I choose start presenting it pops up a dialog with window options including the whole desktop."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1720934474 {#4282
    date: 2024-07-14 07:21:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4288 …}
  +nested: Doctrine\ORM\PersistentCollection {#4290 …}
  +votes: Doctrine\ORM\PersistentCollection {#4292 …}
  +reports: Doctrine\ORM\PersistentCollection {#4294 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4296 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4298 …}
  -id: 297932
  -bodyTs: "'alreadi':11 'ask':6 'choos':26 'chrome':19 'desktop':40 'dialog':33 'exact':3 'idk':1 'includ':37 'like':23 'option':13,36 'pop':30 'present':28 're':5 'run':20 'start':27 'team':17 'wayland':22 'whole':39 'window':35"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6566934"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704935151 {#4283
    date: 2024-01-11 02:05:51.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
32 DENIED moderate
App\Entity\EntryComment {#4287
  +user: App\Entity\User {#4300 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: "Idk what exactly you’re asking for, but this is already an option for me on teams in chrome running under Wayland??? Like when I choose start presenting it pops up a dialog with window options including the whole desktop."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1720934474 {#4282
    date: 2024-07-14 07:21:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4288 …}
  +nested: Doctrine\ORM\PersistentCollection {#4290 …}
  +votes: Doctrine\ORM\PersistentCollection {#4292 …}
  +reports: Doctrine\ORM\PersistentCollection {#4294 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4296 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4298 …}
  -id: 297932
  -bodyTs: "'alreadi':11 'ask':6 'choos':26 'chrome':19 'desktop':40 'dialog':33 'exact':3 'idk':1 'includ':37 'like':23 'option':13,36 'pop':30 'present':28 're':5 'run':20 'start':27 'team':17 'wayland':22 'whole':39 'window':35"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6566934"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704935151 {#4283
    date: 2024-01-11 02:05:51.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
33 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
34 DENIED moderate
App\Entity\EntryComment {#4459
  +user: Proxies\__CG__\App\Entity\User {#4460 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4287
    +user: App\Entity\User {#4300 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: null
    +root: null
    +body: "Idk what exactly you’re asking for, but this is already an option for me on teams in chrome running under Wayland??? Like when I choose start presenting it pops up a dialog with window options including the whole desktop."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1720934474 {#4282
      date: 2024-07-14 07:21:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4288 …}
    +nested: Doctrine\ORM\PersistentCollection {#4290 …}
    +votes: Doctrine\ORM\PersistentCollection {#4292 …}
    +reports: Doctrine\ORM\PersistentCollection {#4294 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4296 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4298 …}
    -id: 297932
    -bodyTs: "'alreadi':11 'ask':6 'choos':26 'chrome':19 'desktop':40 'dialog':33 'exact':3 'idk':1 'includ':37 'like':23 'option':13,36 'pop':30 'present':28 're':5 'run':20 'start':27 'team':17 'wayland':22 'whole':39 'window':35"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6566934"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704935151 {#4283
      date: 2024-01-11 02:05:51.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4287}
  +body: "The same window pops up under xorg too."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704964243 {#4457
    date: 2024-01-11 10:10:43.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@mvirts@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4461 …}
  +nested: Doctrine\ORM\PersistentCollection {#4463 …}
  +votes: Doctrine\ORM\PersistentCollection {#4465 …}
  +reports: Doctrine\ORM\PersistentCollection {#4467 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4469 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4471 …}
  -id: 298589
  -bodyTs: "'pop':4 'window':3 'xorg':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7377415"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704964243 {#4458
    date: 2024-01-11 10:10:43.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
35 DENIED edit
App\Entity\EntryComment {#4459
  +user: Proxies\__CG__\App\Entity\User {#4460 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4287
    +user: App\Entity\User {#4300 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: null
    +root: null
    +body: "Idk what exactly you’re asking for, but this is already an option for me on teams in chrome running under Wayland??? Like when I choose start presenting it pops up a dialog with window options including the whole desktop."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1720934474 {#4282
      date: 2024-07-14 07:21:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4288 …}
    +nested: Doctrine\ORM\PersistentCollection {#4290 …}
    +votes: Doctrine\ORM\PersistentCollection {#4292 …}
    +reports: Doctrine\ORM\PersistentCollection {#4294 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4296 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4298 …}
    -id: 297932
    -bodyTs: "'alreadi':11 'ask':6 'choos':26 'chrome':19 'desktop':40 'dialog':33 'exact':3 'idk':1 'includ':37 'like':23 'option':13,36 'pop':30 'present':28 're':5 'run':20 'start':27 'team':17 'wayland':22 'whole':39 'window':35"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6566934"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704935151 {#4283
      date: 2024-01-11 02:05:51.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4287}
  +body: "The same window pops up under xorg too."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704964243 {#4457
    date: 2024-01-11 10:10:43.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@mvirts@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4461 …}
  +nested: Doctrine\ORM\PersistentCollection {#4463 …}
  +votes: Doctrine\ORM\PersistentCollection {#4465 …}
  +reports: Doctrine\ORM\PersistentCollection {#4467 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4469 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4471 …}
  -id: 298589
  -bodyTs: "'pop':4 'window':3 'xorg':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7377415"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704964243 {#4458
    date: 2024-01-11 10:10:43.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
36 DENIED moderate
App\Entity\EntryComment {#4459
  +user: Proxies\__CG__\App\Entity\User {#4460 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4287
    +user: App\Entity\User {#4300 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: null
    +root: null
    +body: "Idk what exactly you’re asking for, but this is already an option for me on teams in chrome running under Wayland??? Like when I choose start presenting it pops up a dialog with window options including the whole desktop."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1720934474 {#4282
      date: 2024-07-14 07:21:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4288 …}
    +nested: Doctrine\ORM\PersistentCollection {#4290 …}
    +votes: Doctrine\ORM\PersistentCollection {#4292 …}
    +reports: Doctrine\ORM\PersistentCollection {#4294 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4296 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4298 …}
    -id: 297932
    -bodyTs: "'alreadi':11 'ask':6 'choos':26 'chrome':19 'desktop':40 'dialog':33 'exact':3 'idk':1 'includ':37 'like':23 'option':13,36 'pop':30 'present':28 're':5 'run':20 'start':27 'team':17 'wayland':22 'whole':39 'window':35"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6566934"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704935151 {#4283
      date: 2024-01-11 02:05:51.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4287}
  +body: "The same window pops up under xorg too."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704964243 {#4457
    date: 2024-01-11 10:10:43.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@mvirts@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4461 …}
  +nested: Doctrine\ORM\PersistentCollection {#4463 …}
  +votes: Doctrine\ORM\PersistentCollection {#4465 …}
  +reports: Doctrine\ORM\PersistentCollection {#4467 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4469 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4471 …}
  -id: 298589
  -bodyTs: "'pop':4 'window':3 'xorg':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7377415"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704964243 {#4458
    date: 2024-01-11 10:10:43.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
37 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
38 DENIED moderate
App\Entity\EntryComment {#4498
  +user: App\Entity\User {#4041 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4459
    +user: Proxies\__CG__\App\Entity\User {#4460 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: App\Entity\EntryComment {#4287
      +user: App\Entity\User {#4300 …}
      +entry: App\Entity\Entry {#2400}
      +magazine: App\Entity\Magazine {#263}
      +image: null
      +parent: null
      +root: null
      +body: "Idk what exactly you’re asking for, but this is already an option for me on teams in chrome running under Wayland??? Like when I choose start presenting it pops up a dialog with window options including the whole desktop."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 7
      +score: 0
      +lastActive: DateTime @1720934474 {#4282
        date: 2024-07-14 07:21:14.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@shadowintheday2@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4288 …}
      +nested: Doctrine\ORM\PersistentCollection {#4290 …}
      +votes: Doctrine\ORM\PersistentCollection {#4292 …}
      +reports: Doctrine\ORM\PersistentCollection {#4294 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4296 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4298 …}
      -id: 297932
      -bodyTs: "'alreadi':11 'ask':6 'choos':26 'chrome':19 'desktop':40 'dialog':33 'exact':3 'idk':1 'includ':37 'like':23 'option':13,36 'pop':30 'present':28 're':5 'run':20 'start':27 'team':17 'wayland':22 'whole':39 'window':35"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6566934"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704935151 {#4283
        date: 2024-01-11 02:05:51.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4287}
    +body: "The same window pops up under xorg too."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1704964243 {#4457
      date: 2024-01-11 10:10:43.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
      "@mvirts@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4461 …}
    +nested: Doctrine\ORM\PersistentCollection {#4463 …}
    +votes: Doctrine\ORM\PersistentCollection {#4465 …}
    +reports: Doctrine\ORM\PersistentCollection {#4467 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4469 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4471 …}
    -id: 298589
    -bodyTs: "'pop':4 'window':3 'xorg':7"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7377415"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704964243 {#4458
      date: 2024-01-11 10:10:43.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4287}
  +body: "The difference is that the popup is optional on X. They can also just access the window data directly. On Wayland they have no way to access other windows without asking for permission via the “Portal” popup."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704988803 {#4499
    date: 2024-01-11 17:00:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@mvirts@lemmy.world"
    "@taladar@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4495 …}
  +nested: Doctrine\ORM\PersistentCollection {#4491 …}
  +votes: Doctrine\ORM\PersistentCollection {#4489 …}
  +reports: Doctrine\ORM\PersistentCollection {#4504 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4506 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4508 …}
  -id: 299206
  -bodyTs: "'access':15,27 'also':13 'ask':31 'data':18 'differ':2 'direct':19 'option':8 'permiss':33 'popup':6,37 'portal':36 'via':34 'way':25 'wayland':21 'window':17,29 'without':30 'x':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7258170"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704988803 {#4502
    date: 2024-01-11 17:00:03.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
39 DENIED edit
App\Entity\EntryComment {#4498
  +user: App\Entity\User {#4041 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4459
    +user: Proxies\__CG__\App\Entity\User {#4460 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: App\Entity\EntryComment {#4287
      +user: App\Entity\User {#4300 …}
      +entry: App\Entity\Entry {#2400}
      +magazine: App\Entity\Magazine {#263}
      +image: null
      +parent: null
      +root: null
      +body: "Idk what exactly you’re asking for, but this is already an option for me on teams in chrome running under Wayland??? Like when I choose start presenting it pops up a dialog with window options including the whole desktop."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 7
      +score: 0
      +lastActive: DateTime @1720934474 {#4282
        date: 2024-07-14 07:21:14.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@shadowintheday2@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4288 …}
      +nested: Doctrine\ORM\PersistentCollection {#4290 …}
      +votes: Doctrine\ORM\PersistentCollection {#4292 …}
      +reports: Doctrine\ORM\PersistentCollection {#4294 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4296 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4298 …}
      -id: 297932
      -bodyTs: "'alreadi':11 'ask':6 'choos':26 'chrome':19 'desktop':40 'dialog':33 'exact':3 'idk':1 'includ':37 'like':23 'option':13,36 'pop':30 'present':28 're':5 'run':20 'start':27 'team':17 'wayland':22 'whole':39 'window':35"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6566934"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704935151 {#4283
        date: 2024-01-11 02:05:51.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4287}
    +body: "The same window pops up under xorg too."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1704964243 {#4457
      date: 2024-01-11 10:10:43.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
      "@mvirts@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4461 …}
    +nested: Doctrine\ORM\PersistentCollection {#4463 …}
    +votes: Doctrine\ORM\PersistentCollection {#4465 …}
    +reports: Doctrine\ORM\PersistentCollection {#4467 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4469 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4471 …}
    -id: 298589
    -bodyTs: "'pop':4 'window':3 'xorg':7"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7377415"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704964243 {#4458
      date: 2024-01-11 10:10:43.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4287}
  +body: "The difference is that the popup is optional on X. They can also just access the window data directly. On Wayland they have no way to access other windows without asking for permission via the “Portal” popup."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704988803 {#4499
    date: 2024-01-11 17:00:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@mvirts@lemmy.world"
    "@taladar@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4495 …}
  +nested: Doctrine\ORM\PersistentCollection {#4491 …}
  +votes: Doctrine\ORM\PersistentCollection {#4489 …}
  +reports: Doctrine\ORM\PersistentCollection {#4504 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4506 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4508 …}
  -id: 299206
  -bodyTs: "'access':15,27 'also':13 'ask':31 'data':18 'differ':2 'direct':19 'option':8 'permiss':33 'popup':6,37 'portal':36 'via':34 'way':25 'wayland':21 'window':17,29 'without':30 'x':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7258170"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704988803 {#4502
    date: 2024-01-11 17:00:03.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
40 DENIED moderate
App\Entity\EntryComment {#4498
  +user: App\Entity\User {#4041 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4459
    +user: Proxies\__CG__\App\Entity\User {#4460 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: App\Entity\EntryComment {#4287
      +user: App\Entity\User {#4300 …}
      +entry: App\Entity\Entry {#2400}
      +magazine: App\Entity\Magazine {#263}
      +image: null
      +parent: null
      +root: null
      +body: "Idk what exactly you’re asking for, but this is already an option for me on teams in chrome running under Wayland??? Like when I choose start presenting it pops up a dialog with window options including the whole desktop."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 7
      +score: 0
      +lastActive: DateTime @1720934474 {#4282
        date: 2024-07-14 07:21:14.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@shadowintheday2@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4288 …}
      +nested: Doctrine\ORM\PersistentCollection {#4290 …}
      +votes: Doctrine\ORM\PersistentCollection {#4292 …}
      +reports: Doctrine\ORM\PersistentCollection {#4294 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4296 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4298 …}
      -id: 297932
      -bodyTs: "'alreadi':11 'ask':6 'choos':26 'chrome':19 'desktop':40 'dialog':33 'exact':3 'idk':1 'includ':37 'like':23 'option':13,36 'pop':30 'present':28 're':5 'run':20 'start':27 'team':17 'wayland':22 'whole':39 'window':35"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6566934"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704935151 {#4283
        date: 2024-01-11 02:05:51.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4287}
    +body: "The same window pops up under xorg too."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1704964243 {#4457
      date: 2024-01-11 10:10:43.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
      "@mvirts@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4461 …}
    +nested: Doctrine\ORM\PersistentCollection {#4463 …}
    +votes: Doctrine\ORM\PersistentCollection {#4465 …}
    +reports: Doctrine\ORM\PersistentCollection {#4467 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4469 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4471 …}
    -id: 298589
    -bodyTs: "'pop':4 'window':3 'xorg':7"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7377415"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704964243 {#4458
      date: 2024-01-11 10:10:43.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4287}
  +body: "The difference is that the popup is optional on X. They can also just access the window data directly. On Wayland they have no way to access other windows without asking for permission via the “Portal” popup."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704988803 {#4499
    date: 2024-01-11 17:00:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@mvirts@lemmy.world"
    "@taladar@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4495 …}
  +nested: Doctrine\ORM\PersistentCollection {#4491 …}
  +votes: Doctrine\ORM\PersistentCollection {#4489 …}
  +reports: Doctrine\ORM\PersistentCollection {#4504 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4506 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4508 …}
  -id: 299206
  -bodyTs: "'access':15,27 'also':13 'ask':31 'data':18 'differ':2 'direct':19 'option':8 'permiss':33 'popup':6,37 'portal':36 'via':34 'way':25 'wayland':21 'window':17,29 'without':30 'x':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7258170"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704988803 {#4502
    date: 2024-01-11 17:00:03.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
41 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
42 DENIED moderate
App\Entity\EntryComment {#4360
  +user: App\Entity\User {#4373 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: "I almost never share an entire screen, but rather single application windows; when I absolutely must share visual information from multiple applications simultaneously, I create a separate virtual desktop for presenting. Is this not possible?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1720981313 {#4355
    date: 2024-07-14 20:21:53.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4361 …}
  +nested: Doctrine\ORM\PersistentCollection {#4363 …}
  +votes: Doctrine\ORM\PersistentCollection {#4365 …}
  +reports: Doctrine\ORM\PersistentCollection {#4367 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4369 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4371 …}
  -id: 297888
  -bodyTs: "'absolut':15 'almost':2 'applic':11,22 'creat':25 'desktop':29 'entir':6 'inform':19 'multipl':21 'must':16 'never':3 'possibl':35 'present':31 'rather':9 'screen':7 'separ':27 'share':4,17 'simultan':23 'singl':10 'virtual':28 'visual':18 'window':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6566645"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704934129 {#4356
    date: 2024-01-11 01:48:49.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
43 DENIED edit
App\Entity\EntryComment {#4360
  +user: App\Entity\User {#4373 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: "I almost never share an entire screen, but rather single application windows; when I absolutely must share visual information from multiple applications simultaneously, I create a separate virtual desktop for presenting. Is this not possible?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1720981313 {#4355
    date: 2024-07-14 20:21:53.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4361 …}
  +nested: Doctrine\ORM\PersistentCollection {#4363 …}
  +votes: Doctrine\ORM\PersistentCollection {#4365 …}
  +reports: Doctrine\ORM\PersistentCollection {#4367 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4369 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4371 …}
  -id: 297888
  -bodyTs: "'absolut':15 'almost':2 'applic':11,22 'creat':25 'desktop':29 'entir':6 'inform':19 'multipl':21 'must':16 'never':3 'possibl':35 'present':31 'rather':9 'screen':7 'separ':27 'share':4,17 'simultan':23 'singl':10 'virtual':28 'visual':18 'window':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6566645"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704934129 {#4356
    date: 2024-01-11 01:48:49.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
44 DENIED moderate
App\Entity\EntryComment {#4360
  +user: App\Entity\User {#4373 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: null
  +root: null
  +body: "I almost never share an entire screen, but rather single application windows; when I absolutely must share visual information from multiple applications simultaneously, I create a separate virtual desktop for presenting. Is this not possible?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1720981313 {#4355
    date: 2024-07-14 20:21:53.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4361 …}
  +nested: Doctrine\ORM\PersistentCollection {#4363 …}
  +votes: Doctrine\ORM\PersistentCollection {#4365 …}
  +reports: Doctrine\ORM\PersistentCollection {#4367 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4369 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4371 …}
  -id: 297888
  -bodyTs: "'absolut':15 'almost':2 'applic':11,22 'creat':25 'desktop':29 'entir':6 'inform':19 'multipl':21 'must':16 'never':3 'possibl':35 'present':31 'rather':9 'screen':7 'separ':27 'share':4,17 'simultan':23 'singl':10 'virtual':28 'visual':18 'window':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6566645"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704934129 {#4356
    date: 2024-01-11 01:48:49.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
45 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
46 DENIED moderate
App\Entity\EntryComment {#4443
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4360
    +user: App\Entity\User {#4373 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: null
    +root: null
    +body: "I almost never share an entire screen, but rather single application windows; when I absolutely must share visual information from multiple applications simultaneously, I create a separate virtual desktop for presenting. Is this not possible?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 12
    +score: 0
    +lastActive: DateTime @1720981313 {#4355
      date: 2024-07-14 20:21:53.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4361 …}
    +nested: Doctrine\ORM\PersistentCollection {#4363 …}
    +votes: Doctrine\ORM\PersistentCollection {#4365 …}
    +reports: Doctrine\ORM\PersistentCollection {#4367 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4369 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4371 …}
    -id: 297888
    -bodyTs: "'absolut':15 'almost':2 'applic':11,22 'creat':25 'desktop':29 'entir':6 'inform':19 'multipl':21 'must':16 'never':3 'possibl':35 'present':31 'rather':9 'screen':7 'separ':27 'share':4,17 'simultan':23 'singl':10 'virtual':28 'visual':18 'window':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6566645"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704934129 {#4356
      date: 2024-01-11 01:48:49.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4360}
  +body: "I know this is possible, but it makes switching different windows a chore. Since I have GUI programs running under different users, I would want the screensharing program to not even be aware that other user’s GUI programs are in the screen"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704970088 {#4438
    date: 2024-01-11 11:48:08.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@SpaceNoodle@lemmy.world"
    "@shadowintheday2@lemmy.world"
    "@SpaceNoodle@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4448 …}
  +nested: Doctrine\ORM\PersistentCollection {#4444 …}
  +votes: Doctrine\ORM\PersistentCollection {#4446 …}
  +reports: Doctrine\ORM\PersistentCollection {#4451 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4453 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4455 …}
  -id: 298698
  -bodyTs: "'awar':33 'chore':13 'differ':10,21 'even':31 'gui':17,38 'know':2 'make':8 'possibl':5 'program':18,28,39 'run':19 'screen':43 'screenshar':27 'sinc':14 'switch':9 'user':22,36 'want':25 'window':11 'would':24"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6575824"
  +editedAt: DateTimeImmutable @1720766228 {#4435
    date: 2024-07-12 08:37:08.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704970088 {#4439
    date: 2024-01-11 11:48:08.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
47 DENIED edit
App\Entity\EntryComment {#4443
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4360
    +user: App\Entity\User {#4373 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: null
    +root: null
    +body: "I almost never share an entire screen, but rather single application windows; when I absolutely must share visual information from multiple applications simultaneously, I create a separate virtual desktop for presenting. Is this not possible?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 12
    +score: 0
    +lastActive: DateTime @1720981313 {#4355
      date: 2024-07-14 20:21:53.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4361 …}
    +nested: Doctrine\ORM\PersistentCollection {#4363 …}
    +votes: Doctrine\ORM\PersistentCollection {#4365 …}
    +reports: Doctrine\ORM\PersistentCollection {#4367 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4369 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4371 …}
    -id: 297888
    -bodyTs: "'absolut':15 'almost':2 'applic':11,22 'creat':25 'desktop':29 'entir':6 'inform':19 'multipl':21 'must':16 'never':3 'possibl':35 'present':31 'rather':9 'screen':7 'separ':27 'share':4,17 'simultan':23 'singl':10 'virtual':28 'visual':18 'window':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6566645"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704934129 {#4356
      date: 2024-01-11 01:48:49.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4360}
  +body: "I know this is possible, but it makes switching different windows a chore. Since I have GUI programs running under different users, I would want the screensharing program to not even be aware that other user’s GUI programs are in the screen"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704970088 {#4438
    date: 2024-01-11 11:48:08.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@SpaceNoodle@lemmy.world"
    "@shadowintheday2@lemmy.world"
    "@SpaceNoodle@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4448 …}
  +nested: Doctrine\ORM\PersistentCollection {#4444 …}
  +votes: Doctrine\ORM\PersistentCollection {#4446 …}
  +reports: Doctrine\ORM\PersistentCollection {#4451 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4453 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4455 …}
  -id: 298698
  -bodyTs: "'awar':33 'chore':13 'differ':10,21 'even':31 'gui':17,38 'know':2 'make':8 'possibl':5 'program':18,28,39 'run':19 'screen':43 'screenshar':27 'sinc':14 'switch':9 'user':22,36 'want':25 'window':11 'would':24"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6575824"
  +editedAt: DateTimeImmutable @1720766228 {#4435
    date: 2024-07-12 08:37:08.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704970088 {#4439
    date: 2024-01-11 11:48:08.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
48 DENIED moderate
App\Entity\EntryComment {#4443
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4360
    +user: App\Entity\User {#4373 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: null
    +root: null
    +body: "I almost never share an entire screen, but rather single application windows; when I absolutely must share visual information from multiple applications simultaneously, I create a separate virtual desktop for presenting. Is this not possible?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 12
    +score: 0
    +lastActive: DateTime @1720981313 {#4355
      date: 2024-07-14 20:21:53.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4361 …}
    +nested: Doctrine\ORM\PersistentCollection {#4363 …}
    +votes: Doctrine\ORM\PersistentCollection {#4365 …}
    +reports: Doctrine\ORM\PersistentCollection {#4367 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4369 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4371 …}
    -id: 297888
    -bodyTs: "'absolut':15 'almost':2 'applic':11,22 'creat':25 'desktop':29 'entir':6 'inform':19 'multipl':21 'must':16 'never':3 'possibl':35 'present':31 'rather':9 'screen':7 'separ':27 'share':4,17 'simultan':23 'singl':10 'virtual':28 'visual':18 'window':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6566645"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704934129 {#4356
      date: 2024-01-11 01:48:49.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4360}
  +body: "I know this is possible, but it makes switching different windows a chore. Since I have GUI programs running under different users, I would want the screensharing program to not even be aware that other user’s GUI programs are in the screen"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704970088 {#4438
    date: 2024-01-11 11:48:08.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@SpaceNoodle@lemmy.world"
    "@shadowintheday2@lemmy.world"
    "@SpaceNoodle@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4448 …}
  +nested: Doctrine\ORM\PersistentCollection {#4444 …}
  +votes: Doctrine\ORM\PersistentCollection {#4446 …}
  +reports: Doctrine\ORM\PersistentCollection {#4451 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4453 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4455 …}
  -id: 298698
  -bodyTs: "'awar':33 'chore':13 'differ':10,21 'even':31 'gui':17,38 'know':2 'make':8 'possibl':5 'program':18,28,39 'run':19 'screen':43 'screenshar':27 'sinc':14 'switch':9 'user':22,36 'want':25 'window':11 'would':24"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6575824"
  +editedAt: DateTimeImmutable @1720766228 {#4435
    date: 2024-07-12 08:37:08.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704970088 {#4439
    date: 2024-01-11 11:48:08.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
49 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
50 DENIED moderate
App\Entity\EntryComment {#4512
  +user: App\Entity\User {#4373 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4443
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: App\Entity\EntryComment {#4360
      +user: App\Entity\User {#4373 …}
      +entry: App\Entity\Entry {#2400}
      +magazine: App\Entity\Magazine {#263}
      +image: null
      +parent: null
      +root: null
      +body: "I almost never share an entire screen, but rather single application windows; when I absolutely must share visual information from multiple applications simultaneously, I create a separate virtual desktop for presenting. Is this not possible?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 12
      +score: 0
      +lastActive: DateTime @1720981313 {#4355
        date: 2024-07-14 20:21:53.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@shadowintheday2@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4361 …}
      +nested: Doctrine\ORM\PersistentCollection {#4363 …}
      +votes: Doctrine\ORM\PersistentCollection {#4365 …}
      +reports: Doctrine\ORM\PersistentCollection {#4367 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4369 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4371 …}
      -id: 297888
      -bodyTs: "'absolut':15 'almost':2 'applic':11,22 'creat':25 'desktop':29 'entir':6 'inform':19 'multipl':21 'must':16 'never':3 'possibl':35 'present':31 'rather':9 'screen':7 'separ':27 'share':4,17 'simultan':23 'singl':10 'virtual':28 'visual':18 'window':12"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6566645"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704934129 {#4356
        date: 2024-01-11 01:48:49.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4360}
    +body: "I know this is possible, but it makes switching different windows a chore. Since I have GUI programs running under different users, I would want the screensharing program to not even be aware that other user’s GUI programs are in the screen"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1704970088 {#4438
      date: 2024-01-11 11:48:08.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
      "@SpaceNoodle@lemmy.world"
      "@shadowintheday2@lemmy.world"
      "@SpaceNoodle@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4448 …}
    +nested: Doctrine\ORM\PersistentCollection {#4444 …}
    +votes: Doctrine\ORM\PersistentCollection {#4446 …}
    +reports: Doctrine\ORM\PersistentCollection {#4451 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4453 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4455 …}
    -id: 298698
    -bodyTs: "'awar':33 'chore':13 'differ':10,21 'even':31 'gui':17,38 'know':2 'make':8 'possibl':5 'program':18,28,39 'run':19 'screen':43 'screenshar':27 'sinc':14 'switch':9 'user':22,36 'want':25 'window':11 'would':24"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6575824"
    +editedAt: DateTimeImmutable @1720766228 {#4435
      date: 2024-07-12 08:37:08.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704970088 {#4439
      date: 2024-01-11 11:48:08.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4360}
  +body: "How is it a chore?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1704993215 {#4510
    date: 2024-01-11 18:13:35.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@SpaceNoodle@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4513 …}
  +nested: Doctrine\ORM\PersistentCollection {#4515 …}
  +votes: Doctrine\ORM\PersistentCollection {#4517 …}
  +reports: Doctrine\ORM\PersistentCollection {#4519 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4521 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4523 …}
  -id: 299374
  -bodyTs: "'chore':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6581716"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704993215 {#4511
    date: 2024-01-11 18:13:35.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
51 DENIED edit
App\Entity\EntryComment {#4512
  +user: App\Entity\User {#4373 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4443
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: App\Entity\EntryComment {#4360
      +user: App\Entity\User {#4373 …}
      +entry: App\Entity\Entry {#2400}
      +magazine: App\Entity\Magazine {#263}
      +image: null
      +parent: null
      +root: null
      +body: "I almost never share an entire screen, but rather single application windows; when I absolutely must share visual information from multiple applications simultaneously, I create a separate virtual desktop for presenting. Is this not possible?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 12
      +score: 0
      +lastActive: DateTime @1720981313 {#4355
        date: 2024-07-14 20:21:53.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@shadowintheday2@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4361 …}
      +nested: Doctrine\ORM\PersistentCollection {#4363 …}
      +votes: Doctrine\ORM\PersistentCollection {#4365 …}
      +reports: Doctrine\ORM\PersistentCollection {#4367 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4369 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4371 …}
      -id: 297888
      -bodyTs: "'absolut':15 'almost':2 'applic':11,22 'creat':25 'desktop':29 'entir':6 'inform':19 'multipl':21 'must':16 'never':3 'possibl':35 'present':31 'rather':9 'screen':7 'separ':27 'share':4,17 'simultan':23 'singl':10 'virtual':28 'visual':18 'window':12"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6566645"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704934129 {#4356
        date: 2024-01-11 01:48:49.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4360}
    +body: "I know this is possible, but it makes switching different windows a chore. Since I have GUI programs running under different users, I would want the screensharing program to not even be aware that other user’s GUI programs are in the screen"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1704970088 {#4438
      date: 2024-01-11 11:48:08.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
      "@SpaceNoodle@lemmy.world"
      "@shadowintheday2@lemmy.world"
      "@SpaceNoodle@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4448 …}
    +nested: Doctrine\ORM\PersistentCollection {#4444 …}
    +votes: Doctrine\ORM\PersistentCollection {#4446 …}
    +reports: Doctrine\ORM\PersistentCollection {#4451 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4453 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4455 …}
    -id: 298698
    -bodyTs: "'awar':33 'chore':13 'differ':10,21 'even':31 'gui':17,38 'know':2 'make':8 'possibl':5 'program':18,28,39 'run':19 'screen':43 'screenshar':27 'sinc':14 'switch':9 'user':22,36 'want':25 'window':11 'would':24"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6575824"
    +editedAt: DateTimeImmutable @1720766228 {#4435
      date: 2024-07-12 08:37:08.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704970088 {#4439
      date: 2024-01-11 11:48:08.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4360}
  +body: "How is it a chore?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1704993215 {#4510
    date: 2024-01-11 18:13:35.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@SpaceNoodle@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4513 …}
  +nested: Doctrine\ORM\PersistentCollection {#4515 …}
  +votes: Doctrine\ORM\PersistentCollection {#4517 …}
  +reports: Doctrine\ORM\PersistentCollection {#4519 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4521 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4523 …}
  -id: 299374
  -bodyTs: "'chore':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6581716"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704993215 {#4511
    date: 2024-01-11 18:13:35.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
52 DENIED moderate
App\Entity\EntryComment {#4512
  +user: App\Entity\User {#4373 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#263
      +icon: Proxies\__CG__\App\Entity\Image {#244 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#273
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#235 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
      +entries: Doctrine\ORM\PersistentCollection {#178 …}
      +posts: Doctrine\ORM\PersistentCollection {#136 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
      +bans: Doctrine\ORM\PersistentCollection {#115 …}
      +reports: Doctrine\ORM\PersistentCollection {#101 …}
      +badges: Doctrine\ORM\PersistentCollection {#79 …}
      +logs: Doctrine\ORM\PersistentCollection {#69 …}
      +awards: Doctrine\ORM\PersistentCollection {#1830 …}
      +categories: Doctrine\ORM\PersistentCollection {#1863 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#267
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#269
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Is-it-possible-to-isolate-which-GUI-programs-are-seem"
    +title: "Is it possible to isolate which GUI programs are seem by a screensharing program in xorg or wayland ?"
    +url: null
    +body: """
      Think Zoom, Teams, google meet etc\n
      \n
      When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don’t really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I’m not sure if it would work.\n
      \n
      Has anyone
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 12
    +favouriteCount: 34
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722294726 {#2420
      date: 2024-07-30 01:12:06.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 28848
    -titleTs: "'gui':7 'isol':5 'possibl':3 'program':8,14 'screenshar':13 'seem':10 'wayland':18 'xorg':16"
    -bodyTs: "'anyon':71 'applic':30 'beyond':57 'bubblewrap':54 'current':59 'etc':6 'everyth':14 'googl':4 'gui':29 'isol':23 'knowledg':56 'm':63 'meet':5 'possibl':21 'ran':31 'realli':49 'requir':55 'run':38 'sandbox':52 'screen':10 'see':13,17,26 'share':8 'skill':60 'sure':65 'team':3 'think':1 'unprivileg':42 'user':16,35,43 'via':44,53 'well':51 'work':50,69 'would':18,68 'xhost':45 'zoom':2"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705019856
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10557177"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704933456 {#1816
      date: 2024-01-11 01:37:36.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#263}
  +image: null
  +parent: App\Entity\EntryComment {#4443
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2400}
    +magazine: App\Entity\Magazine {#263}
    +image: null
    +parent: App\Entity\EntryComment {#4360
      +user: App\Entity\User {#4373 …}
      +entry: App\Entity\Entry {#2400}
      +magazine: App\Entity\Magazine {#263}
      +image: null
      +parent: null
      +root: null
      +body: "I almost never share an entire screen, but rather single application windows; when I absolutely must share visual information from multiple applications simultaneously, I create a separate virtual desktop for presenting. Is this not possible?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 12
      +score: 0
      +lastActive: DateTime @1720981313 {#4355
        date: 2024-07-14 20:21:53.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@shadowintheday2@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4361 …}
      +nested: Doctrine\ORM\PersistentCollection {#4363 …}
      +votes: Doctrine\ORM\PersistentCollection {#4365 …}
      +reports: Doctrine\ORM\PersistentCollection {#4367 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4369 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4371 …}
      -id: 297888
      -bodyTs: "'absolut':15 'almost':2 'applic':11,22 'creat':25 'desktop':29 'entir':6 'inform':19 'multipl':21 'must':16 'never':3 'possibl':35 'present':31 'rather':9 'screen':7 'separ':27 'share':4,17 'simultan':23 'singl':10 'virtual':28 'visual':18 'window':12"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6566645"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704934129 {#4356
        date: 2024-01-11 01:48:49.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4360}
    +body: "I know this is possible, but it makes switching different windows a chore. Since I have GUI programs running under different users, I would want the screensharing program to not even be aware that other user’s GUI programs are in the screen"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1704970088 {#4438
      date: 2024-01-11 11:48:08.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@shadowintheday2@lemmy.world"
      "@SpaceNoodle@lemmy.world"
      "@shadowintheday2@lemmy.world"
      "@SpaceNoodle@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4448 …}
    +nested: Doctrine\ORM\PersistentCollection {#4444 …}
    +votes: Doctrine\ORM\PersistentCollection {#4446 …}
    +reports: Doctrine\ORM\PersistentCollection {#4451 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4453 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4455 …}
    -id: 298698
    -bodyTs: "'awar':33 'chore':13 'differ':10,21 'even':31 'gui':17,38 'know':2 'make':8 'possibl':5 'program':18,28,39 'run':19 'screen':43 'screenshar':27 'sinc':14 'switch':9 'user':22,36 'want':25 'window':11 'would':24"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6575824"
    +editedAt: DateTimeImmutable @1720766228 {#4435
      date: 2024-07-12 08:37:08.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704970088 {#4439
      date: 2024-01-11 11:48:08.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4360}
  +body: "How is it a chore?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1704993215 {#4510
    date: 2024-01-11 18:13:35.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@shadowintheday2@lemmy.world"
    "@SpaceNoodle@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4513 …}
  +nested: Doctrine\ORM\PersistentCollection {#4515 …}
  +votes: Doctrine\ORM\PersistentCollection {#4517 …}
  +reports: Doctrine\ORM\PersistentCollection {#4519 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4521 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4523 …}
  -id: 299374
  -bodyTs: "'chore':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6581716"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704993215 {#4511
    date: 2024-01-11 18:13:35.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
53 DENIED edit
App\Entity\Magazine {#263
  +icon: Proxies\__CG__\App\Entity\Image {#244 …}
  +name: "linux@lemmy.ml"
  +title: "linux"
  +description: """
    From Wikipedia, the free encyclopedia\n
    \n
    Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
    \n
    Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
    \n
    ### Rules\n
    \n
    - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
    - No misinformation\n
    - No NSFW content\n
    - No hate speech, bigotry, etc\n
    \n
    ### Related Communities\n
    \n
    - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
    - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
    - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
    - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
    \n
    Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 1406
  +entryCommentCount: 28632
  +postCount: 6
  +postCommentCount: 214
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729583542 {#273
    date: 2024-10-22 09:52:22.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#235 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#231 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#220 …}
  +entries: Doctrine\ORM\PersistentCollection {#178 …}
  +posts: Doctrine\ORM\PersistentCollection {#136 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#198 …}
  +bans: Doctrine\ORM\PersistentCollection {#115 …}
  +reports: Doctrine\ORM\PersistentCollection {#101 …}
  +badges: Doctrine\ORM\PersistentCollection {#79 …}
  +logs: Doctrine\ORM\PersistentCollection {#69 …}
  +awards: Doctrine\ORM\PersistentCollection {#1830 …}
  +categories: Doctrine\ORM\PersistentCollection {#1863 …}
  -id: 73
  +apId: "linux@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/linux"
  +apPublicUrl: "https://lemmy.ml/c/linux"
  +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "linux"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583596 {#267
    date: 2024-10-22 09:53:16.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1698929468 {#269
    date: 2023-11-02 13:51:08.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS DENIED
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details