xdg-desktop-portal-wlr VS wayland-keylogger

It comes with a systemd service file https://github.com/emersion/xdg-desktop-portal-wlr/blob/master/contrib/systemd/xdg-desktop-portal-wlr.service.in that you can use

Are you running the Wayland envvar for Firefox, MOZ_ENABLE_WAYLAND=1? Because the rest of your setup sounds very similar to my (working) setup. You could also run the Python test script included with xdg-desktop-portal-wlr (bottom of this page) as a sanity check that nothing's going wrong there

- Global hotkey portal

Not yet: https://github.com/emersion/xdg-desktop-portal-wlr/issues/107

You'll need this

I believe that a lot of the current approach to fixing it is something similar to xdg-desktop-portal. That's for signaling for screenshots, but a similar idea could work for listening for key events without being focused, apparently. It bypasses the standard Wayland system completely and uses D-Bus and Pipewire instead. I'm not too familiar with the details myself, though.

I don't know which of the xdg-desktop-portal backends you would need for gamescope, but xdg-desktop-portal-wlr has a config file which it reads where you can set the preferred output and set the chooser_type to none. That makes it skip the screen selector for me.

See these links for more info: * flameshot: flameshot gui from cli does nothing. dbus error UnknownMethod: "No such interface “org.freedesktop.portal.Screenshot” #2872 * xdg-desktop-portal: No such interface “org.freedesktop.portal.Screenshot” on object at path /org/freedesktop/portal/desktop #861 * xdg-desktop-portal-wlr: screenshot: Announce version property

This is a known issue: https://github.com/emersion/xdg-desktop-portal-wlr/issues/83

Intercepting inputs meant for other apps is easy and it's already been done via LD_PRELOAD.

And all of this just for supposedly better "security", that can easily circumvented with trivial attacks.

Not in the same sense that there's a keylogger included with Windows, no. It's that it's easier to do on Xorg as opposed to Wayland. This isn't to say that it's impossible, however.

You can have keylogger on Wayland also without root priviledge. It's trivial: https://github.com/Aishou/wayland-keylogger

> you can still deliver different experiences at runtime — but you’re not likely to have the superuser privileges needed to run a leylogger or read ~/.ssh/id_rsa, etc, at that point.

Keyloggers are trivial to do in userspace Linux via LD_PRELOAD attacks[0], and typically your user account has permission to read ~/.ssh/id_rsa.

[0] https://github.com/Aishou/wayland-keylogger

I have read that bare Linux is totally insecure (https://github.com/Aishou/wayland-keylogger) unless you use some means of sandboxing. That's why I have been reading a lot about firejail, AppArmor, Tomoyo, etc.