Knowledge base
Linux Desktops and User Land Infrastructure
Hardening compositors, sandboxing desktop apps, and tuning the user land that developers and operators actually touch.
11 topics · 11 articles
- Flatpak Sandboxing: Restricting D-Bus Access and Host Filesystem Leaks
Flatpak's default sandbox is broader than most users assume. A packaged app can still talk to the session D-Bus, read broad paths …
- Configuring PipeWire Pro-Audio Nodes for Ultra-Low Latency Live Kernel Audio Routing
PipeWire can replace JACK for live audio, but the default configuration prioritizes desktop convenience over deterministic latency…
- Building Custom Linux Input Rules at the evdev Level for Specialized Hardware Macro Arrays
Generic input drivers treat every keyboard the same, which breaks specialized macro arrays that send non-standard scancodes or nee…
- Configuring cgroups v2 on the Desktop to Prevent Web Browsers From Starving Critical Terminal Compilations
A browser with many tabs can consume every CPU cycle and gigabyte of RAM on a workstation, stalling terminal compilations and inte…
- Configuring PipeWire Filter Chains to Inject Real-Time Noise Cancellation into System Audio Inputs
PipeWire's filter-chain module can insert DSP plugins into any audio path, including microphone inputs. By chaining a noise suppre…
- Hardening Wayland Compositors Against Memory Inversion and Screen-Scraping Vulnerabilities
Wayland's security model assumes the compositor is trusted, but memory corruption in the compositor can invert that trust and expo…
- Resolving Fractional Scaling Blurs on Wayland Across Mixed-DPI Monitor Arrays
Fractional scaling on Wayland renders applications at a non-integer scale, which often produces blurry output on mixed-DPI monitor…
- Optimizing Hyprland Workspaces for Multi-GPU Dynamic Display Pass-Through Setups
Hyprland's dynamic workspace model works well on a single GPU but becomes unstable when displays are driven by different GPUs. GPU…
- Configuring Systemd-Logind to Secure Virtual Consoles on Multi-User Desktop Nodes
Virtual consoles on multi-user desktops are a security boundary that is often overlooked. A user who switches to another console c…
- Optimizing Hyprland Workspaces for Multi-GPU Dynamic Display Pass-Through Setups
Hyprland's dynamic workspace model works well on a single GPU but becomes unstable when displays are driven by different GPUs. GPU…
- Configuring Systemd-Logind to Secure Virtual Consoles on Multi-User Desktop Nodes
Virtual consoles on multi-user desktops are a security boundary that is often overlooked. A user who switches to another console c…
Related areas
Related services
Server problem? Hacked site? Slow website?
Critical issues answered within 30 minutes, 24 hours a day, 7 days a week.