xace client dontaudits
xace client dontaudits

i suspect they shouldnt have to be able to receive generic input xevents and that this might allow them to monitor key strokes
i suspect they shouldnt have to be able to query security x_extensions

DefenSec/dssp2-standard