SharkCagey / SharkCage

1 stars 3 forks source link

Terminate process on secure desktop #32

Closed langweg closed 6 years ago

langweg commented 6 years ago

Processes on the secure desktop should all be terminated once the secure desktop is no longer in use. The reason is that the secure desktop might be used by two different applications in sequence. If the first application still has access to the secure desktop when the second application is executed, then the first could interfere with the second. An alternative approach could be to create a new secure desktop every time the secure desktop is invoked for a new application so that a secure desktop is only used by a single applicqation and the desktop is only removed when the user logs off.

(Did not check if this issue is duplicated by an existing one.)

DonatJR commented 6 years ago

The current implementation already uses a new secure desktop for every single application, thus there can not be any information leak between applications on consecutive invokes of the secure desktop.

@langweg If I understood correctly, this issue is solved by the above explanation, isn't it?

SailReal commented 6 years ago

As discussed in the team meeting today, this issue can be closed because of the argumentation of @DonatJR