maemachinebroke/hakurei
1
0
Fork 0
forked from security/hakurei
Code Pull Requests Activity
528 Commits 1 Branch 12 Tags
83c8f0488b168be5f374d3ad9eef58dde4d144ef
Commit Graph

528 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ophestra
83c8f0488b ldd: pass absolute path to bwrap 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 17:46:22 +09:00
Ophestra
478b27922c fortify: handle errors via MustParse 
The errSuccess behaviour is kept for beforeExit.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 12:57:59 +09:00
Ophestra
ba1498cd18 command: filter parse errors 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 12:55:10 +09:00
Ophestra
eda4d612c2 fortify: keep external files alive 
This should eliminate sporadic failures, like the known double close in "seccomp".

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 03:24:37 +09:00
Ophestra
2e7e160683 release: 0.2.17 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:59:31 +09:00
Ophestra
79957f8ea7 fortify: test help message 
This helps catch regressions in "command".

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:51:35 +09:00
Ophestra
7e52463445 fortify: integrate command handler 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:35:02 +09:00
Ophestra
89970f5197 command/flag: implement repeatable flag 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:25:31 +09:00
Ophestra
35037705a9 command/flag: implement integer flag 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:02:01 +09:00
Ophestra
647c6ea21b command: hide internal commands 
This marks commands as internal via a magic usage string.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 01:36:48 +09:00
Ophestra
416d93e880 command: expose print help 
This is useful for custom help commands.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 01:17:57 +09:00
Ophestra
312753924b command: root early handler func special case 
This allows for early initialisation with access to flags on the root node. This can be useful for configuring global state used by subcommands.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 00:55:18 +09:00
Ophestra
54308f79d2 command: expose command with direct handling 
This exposes flag set on commands with direct handling.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 00:24:03 +09:00
Ophestra
dfa3217037 command: implement builder and parser 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-22 23:11:17 +09:00
Ophestra
8000a2febb command: implement help builder 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-22 22:43:37 +09:00
Ophestra
7bd48d3489 command: implement node structure 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-22 20:30:49 +09:00
Ophestra
b5eaeac11a command: declare command interface 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-22 20:29:47 +09:00
Ophestra
a9986aab6a system: document I methods 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 19:51:12 +09:00
Ophestra
ff30a5ab5d fst: remove empty file 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 19:27:08 +09:00
Ophestra
eb0c16dd8c cmd/fpkg: rename buildPackage file 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 18:13:34 +09:00
Ophestra
4fa1e97026 cmd/fpkg: rename shell to shellPath 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 17:50:20 +09:00
Ophestra
64b6dc41ba nix: split integration test 
For adding tests for fpkg.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 17:05:17 +09:00
Ophestra
c64b8163e7 app: separate instance from process state 
This works better for the implementation.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 16:06:24 +09:00
Ophestra
9d9a165379 release: 0.2.16 
Mostly refactor and cleanup, but also contains major fix to process lifecycle management.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 23:39:16 +09:00
Ophestra
d0dff1cac9 wl: check against null character 
Wayland library takes null terminated strings.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 23:35:49 +09:00
Ophestra
3c80fd2b0f app: defer system.I revert 
Just returning an error after a successful call of commit will leave garbage behind with no way for the caller to clean them. This change ensures revert is always called after successful commit with at least per-process state enabled.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 21:12:11 +09:00
Ophestra
ef81828e0c app: remove share method 
This is yet another implementation detail from before system.I, getting rid of this vastly cuts down on redundant seal state.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 16:20:25 +09:00
Ophestra
2978a6f046 app: separate appSeal finalise method 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 12:33:51 +09:00
Ophestra
dfd9467523 app: merge seal with sys 
The existence of the appSealSys struct was an implementation detail obsolete since system.I was integrated in 084cd84f36.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 01:36:29 +09:00
Ophestra
53571f030e app: embed appSeal in app struct 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 01:10:37 +09:00
Ophestra
aa164081e1 app/seal: improve documentation 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 01:04:14 +09:00
Ophestra
9a10eeab90 app/seal: embed enablements 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 00:41:51 +09:00
Ophestra
d1f83f40d6 helper/bwrap: rename Write to WriteFile 
In case this might want to be an io.Writer.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 00:34:19 +09:00
Ophestra
a748d40745 app: store values with string representation 
Improves code readability without changing memory layout.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 00:25:00 +09:00
Ophestra
648e1d641a app: separate interface from implementation 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 23:07:28 +09:00
Ophestra
3c327084d3 fst: declare wrappers for sandbox config 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 23:04:13 +09:00
Ophestra
ffaa12b9d8 sys: wrap log methods 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 22:52:09 +09:00
Ophestra
bf95127332 fst: move App interface declaration 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 22:36:45 +09:00
Ophestra
e0f321b2c4 sys: rename from linux 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 18:47:48 +09:00
Ophestra
2c9c7fee5b linux: wrap fsu lookup error 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 17:39:53 +09:00
Ophestra
d0400f3c81 fmsg: PrintBaseError skip empty message 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 17:01:26 +09:00
Ophestra
e9b0f9faef fmsg: export logBaseError function 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 13:02:51 +09:00
Ophestra
e85be67fd9 acl: implement Update in C 
The original implementation was effectively just writing C in Go.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 21:39:14 +09:00
Ophestra
7e69893264 acl: rename UpdatePerms to Update 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 20:33:18 +09:00
Ophestra
38a3e6af03 system: make xcb internal 
This package is hauntingly ugly. Move this to internal until it is removed or replaced.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 19:07:53 +09:00
Ophestra
90cb01b274 system: move out of internal 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 19:00:43 +09:00
Ophestra
b1e1d5627e system: wrap console output functions 
This eliminates all fmsg imports from internal/system.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 18:17:55 +09:00
Ophestra
3ae2ab652e system/wayland: sync file at caller specified address 
Storing this in sys is incredibly ugly: sys should be stateless and Ops must keep track of their state.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 13:24:17 +09:00
Ophestra
db71fbe22b system/tmpfiles: fail gracefully in API misuse 
Panicking here leaves garbage behind. Not ideal if this package is going to be exported.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 12:17:01 +09:00
Ophestra
83e72c2b59 release: 0.2.15 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 00:13:04 +09:00