Auto-Rotation on KDE Plasma ( Wayland ) – Lenovo ThinkPad X1 Tablet Gen 3

CONTEXT -------- Debian 13 (Trixie) + KDE Plasma 5.27 on Wayland.   Lenovo ThinkPad X1 Tablet Gen 3 (QHD 3000×2000, i7-8550U).   iio-sensor-proxy detects the accelerometer but doesn’t publish orientation on DBus.   Solution: use raw accelerometer values and rotate via kscreen-doctor (KDE’s Wayland tool). REQUIREMENTS ------------- sudo apt install kscreen   Accelerometer visible at /sys/bus/iio/devices/iio:device*/in_accel_x_raw FINAL SCRIPT — ~/.local/bin/autorotate-wayland.sh ------------------------------------------------- #!/usr/bin/env bash # Auto-rotate for KDE Plasma (Wayland) – ThinkPad X1 Tablet Gen 3 # Reads raw accelerometer data and rotates screen via kscreen-doctor. # Touch/pen mapping handled automatically by Wayland. # Create ~/.config/autorotate.lock to disable rotation temporarily. OUTPUT_ID="output.1"                                 # from `kscr...

Process and device isolation

Process isolation

Linux isolates the processes, and each of them can't access others' ones, even of they're running under the same user's privileges.

Other system Linux uses to enhance security and protection:

  • Control Groups (cgroups)
    Administrators can group processes and associate a limit of resources to each cgroup.
  • Containers
    It runs multiple isolated Linux systems (containers) on a single system based on cgroups.
  • Virtualisation
    Entire systems can run simultaneously as isolated and insulated guests (virtual machines) on one physical host.

Device isolation

Hardware and devices are not directly accessible. There is a file system layer which creates a file called node in /dev/ for every device of hardware. Each device special file has a standard owner, group and world permission fields. Security is the same like a normal file.


Comments