GET https://kbin.spritesserver.nl/index.php/m/linux@lemmy.ml/t/29681/Wayland-running-GUI-program-as-another-user/favourites

Response
200 OK
IP
216.73.216.97
Profiled on
Token
cf3272

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 0.93 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.04 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\Entry {#1810
  +user: Proxies\__CG__\App\Entity\User {#1911 …}
  +magazine: App\Entity\Magazine {#315
    +icon: Proxies\__CG__\App\Entity\Image {#296 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#323
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#287 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#283 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#272 …}
    +entries: Doctrine\ORM\PersistentCollection {#230 …}
    +posts: Doctrine\ORM\PersistentCollection {#188 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#250 …}
    +bans: Doctrine\ORM\PersistentCollection {#167 …}
    +reports: Doctrine\ORM\PersistentCollection {#153 …}
    +badges: Doctrine\ORM\PersistentCollection {#131 …}
    +logs: Doctrine\ORM\PersistentCollection {#121 …}
    +awards: Doctrine\ORM\PersistentCollection {#110 …}
    +categories: Doctrine\ORM\PersistentCollection {#97 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#324
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#318
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2441 …}
  +slug: "Wayland-running-GUI-program-as-another-user"
  +title: "Wayland running GUI program as another user"
  +url: null
  +body: """
    I use [github.com/slingamn/namespaced-openvpn](https://github.com/slingamn/namespaced-openvpn) to have a isolated namespace and VPN connection to work\n
    \n
    On X, these two steps would allow me to run a GUI program in the protected namespace. So I could have .e.g an IDE configuration for my main user/personal projects, and another entirely different instance of the same IDE for work because they use different users\n
    \n
    ```\n
    \n
    <span style="color:#323232;">sudo xhost '+si:localuser:user'\n
    </span><span style="color:#323232;">sudo ip netns exec protected sudo -u user -i\n
    </span><span style="color:#323232;">\n
    </span>\n
    ```\n
    \n
    On Wayland, although the protected shell is created fine, GUI programs don’t start. E.g fgor Dolphin\n
    \n
    ```\n
    \n
    <span style="color:#323232;">error: XDG_RUNTIME_DIR is invalid or not set in the environment.\n
    </span><span style="color:#323232;">Failed to create wl_display (No such file or directory)\n
    </span><span style="color:#323232;">\n
    </span>\n
    ```\n
    \n
    I’ve tried to preserve the env without success:\n
    \n
    ```\n
    \n
    <span style="color:#323232;">\n
    </span><span style="color:#323232;">sudo -E ip netns exec protected sudo -u user -i\n
    </span>\n
    ```\n
    \n
    It seems that I access to the wayland socket is a must for this to work\n
    \n
    This discussion has a nuke option - giving 777 access to the dir where the wayland socket is, and another less permissive approach adding the users to a group and giving access to a new location where the wayland socket is created\n
    \n
    [stackoverflow.com/…/linux-wayland-display-multipl…](https://stackoverflow.com/questions/41736528/linux-wayland-display-multiple-user)\n
    \n
    Is this second approach secure? If not, which other steps could I take to achieve what I did in X?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 4
  +favouriteCount: 21
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1705448855 {#2435
    date: 2024-01-17 00:47:35.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2419 …}
  +votes: Doctrine\ORM\PersistentCollection {#1882 …}
  +reports: Doctrine\ORM\PersistentCollection {#1853 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1958 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1935 …}
  +badges: Doctrine\ORM\PersistentCollection {#1392 …}
  +children: []
  -id: 29681
  -titleTs: "'anoth':6 'gui':3 'program':4 'run':2 'user':7 'wayland':1"
  -bodyTs: "'/linux-wayland-display-multipl':192 '/questions/41736528/linux-wayland-display-multiple-user)':195 '/slingamn/namespaced-openvpn](https://github.com/slingamn/namespaced-openvpn)':5 '777':157 'access':138,158,180 'achiev':210 'ad':172 'allow':22 'although':78 'anoth':47,168 'approach':171,199 'configur':40 'connect':13 'could':35,206 'creat':83,107,190 'differ':49,60 'dir':96,161 'directori':114 'discuss':151 'display':109 'dolphin':92 'e':125 'e.g':37,90 'entir':48 'env':121 'environ':104 'error':93 'exec':70,128 'fail':105 'fgor':91 'file':112 'fine':84 'github.com':4 'github.com/slingamn/namespaced-openvpn](https://github.com/slingamn/namespaced-openvpn)':3 'give':156,179 'group':177 'gui':27,85 'ide':39,54 'instanc':50 'invalid':98 'ip':68,126 'isol':9 'less':169 'localus':65 'locat':184 'main':43 'must':145 'namespac':10,32 'netn':69,127 'new':183 'nuke':154 'option':155 'permiss':170 'preserv':119 'program':28,86 'project':45 'protect':31,71,80,129 'run':25 'runtim':95 'second':198 'secur':200 'seem':135 'set':101 'shell':81 'si':64 'socket':142,165,188 'stackoverflow.com':191,194 'stackoverflow.com/questions/41736528/linux-wayland-display-multiple-user)':193 'start':89 'step':20,205 'success':123 'sudo':62,67,72,124,130 'take':208 'tri':117 'two':19 'u':73,131 'use':2,59 'user':61,66,74,132,174 'user/personal':44 've':116 'vpn':12 'wayland':77,141,164,187 'without':122 'wl':108 'work':15,56,149 'would':21 'x':17,215 'xdg':94 'xhost':63"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705221056
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10660985"
  +editedAt: DateTimeImmutable @1722591918 {#101
    date: 2024-08-02 11:45:18.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705155056 {#2404
    date: 2024-01-13 15:10:56.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\Entry {#1810
  +user: Proxies\__CG__\App\Entity\User {#1911 …}
  +magazine: App\Entity\Magazine {#315
    +icon: Proxies\__CG__\App\Entity\Image {#296 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#323
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#287 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#283 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#272 …}
    +entries: Doctrine\ORM\PersistentCollection {#230 …}
    +posts: Doctrine\ORM\PersistentCollection {#188 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#250 …}
    +bans: Doctrine\ORM\PersistentCollection {#167 …}
    +reports: Doctrine\ORM\PersistentCollection {#153 …}
    +badges: Doctrine\ORM\PersistentCollection {#131 …}
    +logs: Doctrine\ORM\PersistentCollection {#121 …}
    +awards: Doctrine\ORM\PersistentCollection {#110 …}
    +categories: Doctrine\ORM\PersistentCollection {#97 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#324
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#318
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2441 …}
  +slug: "Wayland-running-GUI-program-as-another-user"
  +title: "Wayland running GUI program as another user"
  +url: null
  +body: """
    I use [github.com/slingamn/namespaced-openvpn](https://github.com/slingamn/namespaced-openvpn) to have a isolated namespace and VPN connection to work\n
    \n
    On X, these two steps would allow me to run a GUI program in the protected namespace. So I could have .e.g an IDE configuration for my main user/personal projects, and another entirely different instance of the same IDE for work because they use different users\n
    \n
    ```\n
    \n
    <span style="color:#323232;">sudo xhost '+si:localuser:user'\n
    </span><span style="color:#323232;">sudo ip netns exec protected sudo -u user -i\n
    </span><span style="color:#323232;">\n
    </span>\n
    ```\n
    \n
    On Wayland, although the protected shell is created fine, GUI programs don’t start. E.g fgor Dolphin\n
    \n
    ```\n
    \n
    <span style="color:#323232;">error: XDG_RUNTIME_DIR is invalid or not set in the environment.\n
    </span><span style="color:#323232;">Failed to create wl_display (No such file or directory)\n
    </span><span style="color:#323232;">\n
    </span>\n
    ```\n
    \n
    I’ve tried to preserve the env without success:\n
    \n
    ```\n
    \n
    <span style="color:#323232;">\n
    </span><span style="color:#323232;">sudo -E ip netns exec protected sudo -u user -i\n
    </span>\n
    ```\n
    \n
    It seems that I access to the wayland socket is a must for this to work\n
    \n
    This discussion has a nuke option - giving 777 access to the dir where the wayland socket is, and another less permissive approach adding the users to a group and giving access to a new location where the wayland socket is created\n
    \n
    [stackoverflow.com/…/linux-wayland-display-multipl…](https://stackoverflow.com/questions/41736528/linux-wayland-display-multiple-user)\n
    \n
    Is this second approach secure? If not, which other steps could I take to achieve what I did in X?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 4
  +favouriteCount: 21
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1705448855 {#2435
    date: 2024-01-17 00:47:35.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2419 …}
  +votes: Doctrine\ORM\PersistentCollection {#1882 …}
  +reports: Doctrine\ORM\PersistentCollection {#1853 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1958 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1935 …}
  +badges: Doctrine\ORM\PersistentCollection {#1392 …}
  +children: []
  -id: 29681
  -titleTs: "'anoth':6 'gui':3 'program':4 'run':2 'user':7 'wayland':1"
  -bodyTs: "'/linux-wayland-display-multipl':192 '/questions/41736528/linux-wayland-display-multiple-user)':195 '/slingamn/namespaced-openvpn](https://github.com/slingamn/namespaced-openvpn)':5 '777':157 'access':138,158,180 'achiev':210 'ad':172 'allow':22 'although':78 'anoth':47,168 'approach':171,199 'configur':40 'connect':13 'could':35,206 'creat':83,107,190 'differ':49,60 'dir':96,161 'directori':114 'discuss':151 'display':109 'dolphin':92 'e':125 'e.g':37,90 'entir':48 'env':121 'environ':104 'error':93 'exec':70,128 'fail':105 'fgor':91 'file':112 'fine':84 'github.com':4 'github.com/slingamn/namespaced-openvpn](https://github.com/slingamn/namespaced-openvpn)':3 'give':156,179 'group':177 'gui':27,85 'ide':39,54 'instanc':50 'invalid':98 'ip':68,126 'isol':9 'less':169 'localus':65 'locat':184 'main':43 'must':145 'namespac':10,32 'netn':69,127 'new':183 'nuke':154 'option':155 'permiss':170 'preserv':119 'program':28,86 'project':45 'protect':31,71,80,129 'run':25 'runtim':95 'second':198 'secur':200 'seem':135 'set':101 'shell':81 'si':64 'socket':142,165,188 'stackoverflow.com':191,194 'stackoverflow.com/questions/41736528/linux-wayland-display-multiple-user)':193 'start':89 'step':20,205 'success':123 'sudo':62,67,72,124,130 'take':208 'tri':117 'two':19 'u':73,131 'use':2,59 'user':61,66,74,132,174 'user/personal':44 've':116 'vpn':12 'wayland':77,141,164,187 'without':122 'wl':108 'work':15,56,149 'would':21 'x':17,215 'xdg':94 'xhost':63"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705221056
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10660985"
  +editedAt: DateTimeImmutable @1722591918 {#101
    date: 2024-08-02 11:45:18.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705155056 {#2404
    date: 2024-01-13 15:10:56.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\Entry {#1810
  +user: Proxies\__CG__\App\Entity\User {#1911 …}
  +magazine: App\Entity\Magazine {#315
    +icon: Proxies\__CG__\App\Entity\Image {#296 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#323
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#287 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#283 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#272 …}
    +entries: Doctrine\ORM\PersistentCollection {#230 …}
    +posts: Doctrine\ORM\PersistentCollection {#188 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#250 …}
    +bans: Doctrine\ORM\PersistentCollection {#167 …}
    +reports: Doctrine\ORM\PersistentCollection {#153 …}
    +badges: Doctrine\ORM\PersistentCollection {#131 …}
    +logs: Doctrine\ORM\PersistentCollection {#121 …}
    +awards: Doctrine\ORM\PersistentCollection {#110 …}
    +categories: Doctrine\ORM\PersistentCollection {#97 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#324
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#318
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2441 …}
  +slug: "Wayland-running-GUI-program-as-another-user"
  +title: "Wayland running GUI program as another user"
  +url: null
  +body: """
    I use [github.com/slingamn/namespaced-openvpn](https://github.com/slingamn/namespaced-openvpn) to have a isolated namespace and VPN connection to work\n
    \n
    On X, these two steps would allow me to run a GUI program in the protected namespace. So I could have .e.g an IDE configuration for my main user/personal projects, and another entirely different instance of the same IDE for work because they use different users\n
    \n
    ```\n
    \n
    <span style="color:#323232;">sudo xhost '+si:localuser:user'\n
    </span><span style="color:#323232;">sudo ip netns exec protected sudo -u user -i\n
    </span><span style="color:#323232;">\n
    </span>\n
    ```\n
    \n
    On Wayland, although the protected shell is created fine, GUI programs don’t start. E.g fgor Dolphin\n
    \n
    ```\n
    \n
    <span style="color:#323232;">error: XDG_RUNTIME_DIR is invalid or not set in the environment.\n
    </span><span style="color:#323232;">Failed to create wl_display (No such file or directory)\n
    </span><span style="color:#323232;">\n
    </span>\n
    ```\n
    \n
    I’ve tried to preserve the env without success:\n
    \n
    ```\n
    \n
    <span style="color:#323232;">\n
    </span><span style="color:#323232;">sudo -E ip netns exec protected sudo -u user -i\n
    </span>\n
    ```\n
    \n
    It seems that I access to the wayland socket is a must for this to work\n
    \n
    This discussion has a nuke option - giving 777 access to the dir where the wayland socket is, and another less permissive approach adding the users to a group and giving access to a new location where the wayland socket is created\n
    \n
    [stackoverflow.com/…/linux-wayland-display-multipl…](https://stackoverflow.com/questions/41736528/linux-wayland-display-multiple-user)\n
    \n
    Is this second approach secure? If not, which other steps could I take to achieve what I did in X?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 4
  +favouriteCount: 21
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1705448855 {#2435
    date: 2024-01-17 00:47:35.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2419 …}
  +votes: Doctrine\ORM\PersistentCollection {#1882 …}
  +reports: Doctrine\ORM\PersistentCollection {#1853 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1958 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1935 …}
  +badges: Doctrine\ORM\PersistentCollection {#1392 …}
  +children: []
  -id: 29681
  -titleTs: "'anoth':6 'gui':3 'program':4 'run':2 'user':7 'wayland':1"
  -bodyTs: "'/linux-wayland-display-multipl':192 '/questions/41736528/linux-wayland-display-multiple-user)':195 '/slingamn/namespaced-openvpn](https://github.com/slingamn/namespaced-openvpn)':5 '777':157 'access':138,158,180 'achiev':210 'ad':172 'allow':22 'although':78 'anoth':47,168 'approach':171,199 'configur':40 'connect':13 'could':35,206 'creat':83,107,190 'differ':49,60 'dir':96,161 'directori':114 'discuss':151 'display':109 'dolphin':92 'e':125 'e.g':37,90 'entir':48 'env':121 'environ':104 'error':93 'exec':70,128 'fail':105 'fgor':91 'file':112 'fine':84 'github.com':4 'github.com/slingamn/namespaced-openvpn](https://github.com/slingamn/namespaced-openvpn)':3 'give':156,179 'group':177 'gui':27,85 'ide':39,54 'instanc':50 'invalid':98 'ip':68,126 'isol':9 'less':169 'localus':65 'locat':184 'main':43 'must':145 'namespac':10,32 'netn':69,127 'new':183 'nuke':154 'option':155 'permiss':170 'preserv':119 'program':28,86 'project':45 'protect':31,71,80,129 'run':25 'runtim':95 'second':198 'secur':200 'seem':135 'set':101 'shell':81 'si':64 'socket':142,165,188 'stackoverflow.com':191,194 'stackoverflow.com/questions/41736528/linux-wayland-display-multiple-user)':193 'start':89 'step':20,205 'success':123 'sudo':62,67,72,124,130 'take':208 'tri':117 'two':19 'u':73,131 'use':2,59 'user':61,66,74,132,174 'user/personal':44 've':116 'vpn':12 'wayland':77,141,164,187 'without':122 'wl':108 'work':15,56,149 'would':21 'x':17,215 'xdg':94 'xhost':63"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705221056
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10660985"
  +editedAt: DateTimeImmutable @1722591918 {#101
    date: 2024-08-02 11:45:18.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705155056 {#2404
    date: 2024-01-13 15:10:56.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED edit 
App\Entity\Magazine {#315
  +icon: Proxies\__CG__\App\Entity\Image {#296 …}
  +name: "linux@lemmy.ml"
  +title: "linux"
  +description: """
    From Wikipedia, the free encyclopedia\n
    \n
    Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
    \n
    Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
    \n
    ### Rules\n
    \n
    - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
    - No misinformation\n
    - No NSFW content\n
    - No hate speech, bigotry, etc\n
    \n
    ### Related Communities\n
    \n
    - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
    - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
    - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
    - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
    \n
    Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 1406
  +entryCommentCount: 28632
  +postCount: 6
  +postCommentCount: 214
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729583542 {#323
    date: 2024-10-22 09:52:22.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#287 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#283 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#272 …}
  +entries: Doctrine\ORM\PersistentCollection {#230 …}
  +posts: Doctrine\ORM\PersistentCollection {#188 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#250 …}
  +bans: Doctrine\ORM\PersistentCollection {#167 …}
  +reports: Doctrine\ORM\PersistentCollection {#153 …}
  +badges: Doctrine\ORM\PersistentCollection {#131 …}
  +logs: Doctrine\ORM\PersistentCollection {#121 …}
  +awards: Doctrine\ORM\PersistentCollection {#110 …}
  +categories: Doctrine\ORM\PersistentCollection {#97 …}
  -id: 73
  +apId: "linux@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/linux"
  +apPublicUrl: "https://lemmy.ml/c/linux"
  +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "linux"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583596 {#324
    date: 2024-10-22 09:53:16.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1698929468 {#318
    date: 2023-11-02 13:51:08.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details