CEF X Server dependency

[aleitner]

Our current setup allows users to create individual browsing sessions, each running in their own separate CEF process. Yet, due to CEF's inherent dependency on an X11 server, all these separate CEF processes end up sharing a single Xvfb service.

We are keen to understand more about this and have a couple of questions:

Dependency on X11 Server: We're curious about the nature of this X11 dependency. Specifically, why does CEF require an X11 server? Can it operate in a purely headless mode without any X11 dependency?

Potential Security Risks: Perhaps more importantly, we're concerned about potential security risks. In a multi-user environment where individual CEF processes share a single Xvfb service, could this pose a security risk? For instance, can one user's session interfere with or observe another user’s session via the shared X server?

Looking forward to hearing your thoughts. Thanks!

[magreenblatt]

Chromium supports alternatives to X11 via ozone. See https://chromium.googlesource.com/chrom ... verview.md