Clipboard Access

The policy in Figure 1 allows a client application to access the cut buffers, which consist of 8 properties on the root window. They are intended for use as a simple 8-slot clipboard [3].

Line 1 grants the domain access to cut buffer properties, while line 2 allows reading and writing of properties on the root window. Removing the chprop and write permissions would permit reading from the clipboard only.

X Windows provides another clipboard mechanism, selections, which is more complex than cut buffers. Policy coverage of selections is possible but not covered here.