Skip to content

Harden and package the Plasma desktop session #5

Closed as not planned
Closed as not planned

Description

@55515-code

Goal

Turn the live Plasma prototype into a reproducible package with a normal unprivileged desktop user and narrow host integration.

Acceptance criteria

  • No unrestricted sudo or broad host /dev, /proc, /sys, or /run bind mounts.
  • Full-screen handheld and HDMI behavior is deterministic.
  • Built-in Deck controls and DualSense provide cursor, click, scroll, OSK, and exit mappings after reconnect.
  • Logout and crashes return to EmulationStation through a supervisor.
  • KDE applications are discoverable and privileged changes use reviewed brokers.

Activity

  1. added
    securityPublic security hardening work only
    architectureRequires architecture or RFC review
    on Jul 19, 2026
  2. 55515-code commented on Jul 30, 2026

    @55515-code
    OwnerAuthor

    Archived after the LuigiOS architecture transition merged in #11. The Batocera/Steam Deck/Plasma assumptions in this issue no longer describe the product on main. Current work targets the CachyOS/COSMIC developer workstation, transactional recovery, and rootless SDK. See #12 and the current roadmap for active contribution lanes. This issue remains public as historical context; it is not an active commitment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    architectureRequires architecture or RFC reviewsecurityPublic security hardening work only

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions