qubes 3.2rc2 blender can fullscreen when fullscreen is set to false

[pixel fairy]

run blender. press alt+f11

alt-tab still works. 

personally dont care. but, if someone really wants full screen disabled, this could be an issue.

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Would you mind clarifying what you mean for those of us who aren't familiar
with Blender? It would help if you could specify the actual behavior, the
expected behavior, and how they differ.

(Bear in mind that alt-tab is one of the "magic" key combinations that is
always supposed to be consumed by dom0 so that AppVMs can never trick the user
by emulating the dom0 desktop.)

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=bGMK
-----END PGP SIGNATURE-----

[pixel fairy]

On Wednesday, August 31, 2016 at 5:56:12 AM UTC-7, Andrew David Wong wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-08-31 02:32, pixel fairy wrote:
> run blender. press alt+f11 alt-tab still works.
>
> personally dont care. but, if someone really wants full screen disabled,
> this could be an issue.
>

Would you mind clarifying what you mean for those of us who aren't familiar
with Blender? It would help if you could specify the actual behavior, the
expected behavior, and how they differ.

 

blender is an art creation and mixing app, mostly used for 3d and video. its probably the 

last thing anyone would use qubes-os to run. https://www.blender.org

with fullscreen disabled in guid.conf, the expected behavior is that any app cant

go full screen. the actual behavior, is that blender does go full screen.

to replicate,

make sure fullscreen apps are disabled

in the fedora template vm: dnf -y install blender

restart appvm

in an appvm: blender

when it starts, press alt-f11

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Wed, Aug 31, 2016 at 02:32:40AM -0700, pixel fairy wrote:
> run blender. press alt+f11

Alt+F11 happen to be the default shortcut for making window fullscreen
in Xfce. Application can't trigger it itself.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXxtzbAAoJENuP0xzK19csT0sH/iFs6zn4ewvCYTSYPTpiZS91
Ts0lFTsxXOvcDFm/o3qORnonO2rDXphkhkj5383iGDZfuMzpWcY9vvulFFnknvAk
0p+0AwGX9dcw5A9zWUakMRLHjzHHNTYZeefz9aM6eWHiLDg3bQwLlOhGcDKwLVGG
au+CnY4QLCcWofBenNmm2Ox7rHmOGg1n3zVc+1Xklb/ftdbR8b28TjQYDDNlSxLV
ZxQ3FcM5IvDq66btW7+Ha8GVTIBlkVSZC1wLuQAXTRn5BjS/RtWVkOiD3A8VuSUe
3fFTaZdUOBxkVom8itFNGmaZqCsUQztgYdsdNOpHEVbWspNT/BdW/Lf5ZqdZ3hA=
=RtbM
-----END PGP SIGNATURE-----

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-08-31 06:34, Marek Marczykowski-Górecki wrote:
> On Wed, Aug 31, 2016 at 02:32:40AM -0700, pixel fairy wrote:
>> run blender. press alt+f11
>
> Alt+F11 happen to be the default shortcut for making window fullscreen in
> Xfce. Application can't trigger it itself.
>

But I think pixel fairy's main point is that it shouldn't be possible to cause
a program to go fullscreen even by pressing Alt+F11 if "allow_fullscreen =
false" for that AppVM in guid.conf.

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=pykT
-----END PGP SIGNATURE-----

[pixel fairy]

On 2016-08-31 06:34, Marek Marczykowski-Górecki wrote:
> On Wed, Aug 31, 2016 at 02:32:40AM -0700, pixel fairy wrote:
>> run blender. press alt+f11
>
> Alt+F11 happen to be the default shortcut for making window fullscreen in
> Xfce. Application can't trigger it itself.

 yes, i was fooled by the happy coincidence. 

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Wed, Aug 31, 2016 at 06:36:40AM -0700, Andrew David Wong wrote:
> On 2016-08-31 06:34, Marek Marczykowski-Górecki wrote:
> > On Wed, Aug 31, 2016 at 02:32:40AM -0700, pixel fairy wrote:
> >> run blender. press alt+f11
> >
> > Alt+F11 happen to be the default shortcut for making window fullscreen in
> > Xfce. Application can't trigger it itself.
> >
>
> But I think pixel fairy's main point is that it shouldn't be possible to cause
> a program to go fullscreen even by pressing Alt+F11 if "allow_fullscreen =
> false" for that AppVM in guid.conf.

The main reason for having this option is to prevent application from
fooling the user - hiding the real window borders and drawing them
inside actual window - pretending to be some other VM. If user
explicitly requested fullscreen, it shouldn't be a problem (as user is
aware that the whole screen is now controlled by the application.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXxuAgAAoJENuP0xzK19csAE0H/2BvHdVD/SdGFyqUUcYadRVB
BS+9ojPgkR0iHHsT/sQmWXGEmaBVuZbU//NaGuscffIEELY2QjNus6GJlI7Icxgk
cjd2/X3mvH86UiqYMikhqITJan0Mg9HCqByfaZizKSri3DwG4+BxVwxav3Lwr4nm
lgQPAMbc/5rp/pyO6tr15XIsdA4vcbmhBLvHV9OlyfoPrp0XJr5FWPs2OX4vvSOY
NUruGQUsHCwZ8awWDvqjdlXTfah8OS19lkYhedhz9R+CScN/p8Lld8Wawpqzutjs
/CZMXgt59izj6C3wzZ0O74p/k/vsqCPDVdZ+owY94S/PorDI6HL2WFb1dABbTcA=
=WInV
-----END PGP SIGNATURE-----

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-08-31 06:48, Marek Marczykowski-Górecki wrote:
> On Wed, Aug 31, 2016 at 06:36:40AM -0700, Andrew David Wong wrote:
>> On 2016-08-31 06:34, Marek Marczykowski-Górecki wrote:
>>> On Wed, Aug 31, 2016 at 02:32:40AM -0700, pixel fairy wrote:
>>>> run blender. press alt+f11
>>>
>>> Alt+F11 happen to be the default shortcut for making window fullscreen
>>> in Xfce. Application can't trigger it itself.
>>>
>
>> But I think pixel fairy's main point is that it shouldn't be possible to
>> cause a program to go fullscreen even by pressing Alt+F11 if
>> "allow_fullscreen = false" for that AppVM in guid.conf.
>
> The main reason for having this option is to prevent application from
> fooling the user - hiding the real window borders and drawing them inside
> actual window - pretending to be some other VM. If user explicitly
> requested fullscreen, it shouldn't be a problem (as user is aware that the
> whole screen is now controlled by the application.
>

I see. That strikes me as rather counterintuitive. I would have thought that
"allow_fullscreen" governs whether fullscreen is permitted *at all* (as
opposed to merely "autonomously"). Given the way it actually works, a user who
wants to disallow fullscreen under *any* circumstances (including to protect
herself from her own potential mistakes) has no recourse.

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=4F4G
-----END PGP SIGNATURE-----

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Wed, Aug 31, 2016 at 06:54:37AM -0700, Andrew David Wong wrote:
> On 2016-08-31 06:48, Marek Marczykowski-Górecki wrote:
> > On Wed, Aug 31, 2016 at 06:36:40AM -0700, Andrew David Wong wrote:
> >> On 2016-08-31 06:34, Marek Marczykowski-Górecki wrote:
> >>> On Wed, Aug 31, 2016 at 02:32:40AM -0700, pixel fairy wrote:
> >>>> run blender. press alt+f11
> >>>
> >>> Alt+F11 happen to be the default shortcut for making window fullscreen
> >>> in Xfce. Application can't trigger it itself.
> >>>
> >
> >> But I think pixel fairy's main point is that it shouldn't be possible to
> >> cause a program to go fullscreen even by pressing Alt+F11 if
> >> "allow_fullscreen = false" for that AppVM in guid.conf.
> >
> > The main reason for having this option is to prevent application from
> > fooling the user - hiding the real window borders and drawing them inside
> > actual window - pretending to be some other VM. If user explicitly
> > requested fullscreen, it shouldn't be a problem (as user is aware that the
> > whole screen is now controlled by the application.
> >
>
> I see. That strikes me as rather counterintuitive. I would have thought that
> "allow_fullscreen" governs whether fullscreen is permitted *at all* (as
> opposed to merely "autonomously"). Given the way it actually works, a user who
> wants to disallow fullscreen under *any* circumstances (including to protect
> herself from her own potential mistakes) has no recourse.

I see such option could be useful, but this is IMO different feature.

The current one allow you to make application full screen when *you*
want, without changing additional settings. This is useful for example
for watching movies. I wouldn't trust my movies VM that much to give it
permission to voluntary switch to fullscreen, but on the other hand, it
would be inconvenient to change some setting each time I want to watch
something.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXxxs8AAoJENuP0xzK19csRTsIAJD0YMmabhVgLYRoqA2aJQVJ
atAlVDjHtHPFedwvI8FnySvKktC5N7gItqZ5RLVUM/J2yzPj2miiERRwtwMNhzEM
ieKZWwIxf9a71Qpk7KKZfF8A5F7rQxVPkdmoEKyo+nisCHcmGPwirxAoQGnTi5Jq
jSJlKRe50Nsc0cy98PqKjUeFcWTOGOXkKgGx2oYBW2IHPwoxA/4rR5GYl++/TVfY
NX2dGqeebLwYNTGDQgbspHSwooj7Hom2nG9/Y3eIz2WL3NTi77LyVLS4QEk9V0Xj
2REcWaKwvD/LgAI7WNcejXLPekojjislfkk6zau5HwLSG5WpYVr+OoWosuLKDFg=
=UgcX
-----END PGP SIGNATURE-----