maemachinebroke/hakurei
1
0
Fork 0
forked from rosa/hakurei
Code Pull Requests Activity

Commit Graph

  • e431ab3c24 app: check username length against LOGIN_NAME_MAX cat 2025-02-14 12:44:55 +09:00
  • 3fba33687b fortify: print line after ps output cat 2025-02-14 12:23:20 +09:00
  • 820f48ef94 release: 0.2.13 cat 2025-02-13 23:39:29 +09:00
  • fe7d208cf7 helper: use generic extra files interface cat 2025-02-13 23:15:34 +09:00
  • 60c2873750 helper/proc: cancel ec on parent ctx cat 2025-02-13 23:08:28 +09:00
  • d1d20c06fb helper/seccomp: use sync.Once for closeWrite cat 2025-02-13 22:49:16 +09:00
  • 1e6a059668 helper/seccomp: benchmark exporter cat 2025-02-13 22:37:51 +09:00
  • 318df0f7e1 nix: test syscall filter cat 2025-02-13 22:01:16 +09:00
  • 58eb8f971d proc/pipe: implement args and stat file cat 2025-02-13 19:57:24 +09:00
  • 0a1d7c01cd helper/proc: count dispatched errs cat 2025-02-13 19:55:37 +09:00
  • 60ca1c6c55 helper/proc: store file addresses in linked list cat 2025-02-13 17:42:12 +09:00
  • 099da78af5 helper/seccomp: eliminate data race on pfd cat 2025-02-13 10:40:51 +09:00
  • 18466cfd02 helper/proc: declare generic extra files interface cat 2025-02-11 16:34:47 +09:00
  • e14923ae53 helper/proc: move package out of internal cat 2025-02-08 13:03:45 +09:00
  • 7aff3ead3a nix: vm test remove unnecessary setup cat 2025-02-07 22:29:56 +09:00
  • 72fb13dccc dbus: lock for read in public args interface cat 2025-02-07 13:42:17 +09:00
  • a48386bd56 system/dbus: dump messages on early fault cat 2025-02-07 13:20:56 +09:00
  • 2e52191404 system/dbus: dump method prints msgbuf cat 2025-02-07 13:16:54 +09:00
  • 568d7758d5 helper/seccomp: panic on invalid closeWrite use cat 2025-02-07 12:58:20 +09:00
  • 5b7b3fa9a4 helper/seccomp: implement reader interface via pipe cat 2025-02-03 18:10:29 +09:00
  • d58fb8c6ee workflows: fix nix store cache cat 2025-02-01 21:05:18 +09:00
  • 5808fe61c3 nix: vm test set sway background cat 2025-01-25 22:28:04 +09:00
  • f338d3bb4b nix: update flake lock cat 2025-01-25 19:46:33 +09:00
  • 8d04dd72f1 nix: mount nvidia devices cat 2025-01-25 18:05:18 +09:00
  • 21735a8abe release: 0.2.12 cat 2025-01-25 13:40:48 +09:00
  • 34272672b1 nix: verify silent output when not running with -v cat 2025-01-25 13:38:18 +09:00
  • 7b96cd6ded helper/seccomp: do not call F_println if not verbose cat 2025-01-25 13:19:38 +09:00
  • 163f15e93f helper/seccomp: separate seccomp package cat 2025-01-25 12:59:11 +09:00
  • 016da20443 nix: expose compat flag in nixos module cat 2025-01-25 12:42:48 +09:00
  • 37780456a7 helper: block more unusual/privileged syscalls cat 2025-01-25 12:35:47 +09:00
  • efacaa40fa nix: set deny_devel correctly cat 2025-01-24 00:50:35 +09:00
  • ad6d0ee55f workflows: rename integration test artifact cat 2025-01-24 00:30:39 +09:00
  • cf791469d8 workflows: gc store and purge old caches cat 2025-01-24 00:25:57 +09:00
  • be14421775 workflows: merge test build job into test cat 2025-01-24 00:22:44 +09:00
  • 045983d7f4 wl: separate inline C cat 2025-01-23 22:06:29 +09:00
  • 7106b00968 release: 0.2.11 cat 2025-01-23 20:49:49 +09:00
  • 96d5d8a396 nix: apply shared home config to reserved aid cat 2025-01-23 20:48:04 +09:00
  • 8a00a83c71 nix: expose syscall filter policy cat 2025-01-23 17:24:42 +09:00
  • 134247b57d nix: configure target users via nixos cat 2025-01-23 17:04:19 +09:00
  • b5bb7654da nix: redirect sway output to journal cat 2025-01-23 16:08:22 +09:00
  • cc1efa22e2 fst: add missing fields to template cat 2025-01-22 12:09:25 +09:00
  • 580128922b cmd/fpkg: expose syscall policy options cat 2025-01-22 12:01:30 +09:00
  • 23e1152baa app/share: clean BaseError message cat 2025-01-22 11:54:16 +09:00
  • 8c51012ef5 dbus: enable syscall filter cat 2025-01-22 02:01:01 +09:00
  • 5a64cdaf4f ldd: enable syscall filter cat 2025-01-22 02:00:49 +09:00
  • a30f5e1226 fortify: set up seccomp verbose logging early cat 2025-01-22 01:58:54 +09:00
  • 9a239fa1a5 helper/bwrap: integrate seccomp into helper interface cat 2025-01-22 01:51:10 +09:00
  • 82029948e6 proc: append to ExtraFiles slice pointer cat 2025-01-21 12:51:39 +09:00
  • dfcdc5ce20 state: store config in separate gob stream cat 2025-01-21 12:10:58 +09:00
  • fa0616b274 fortify: print permissive defaults warning early cat 2025-01-21 11:59:15 +09:00
  • 20a3d4c458 proc/priv/shim: resolve and load seccomp rules cat 2025-01-20 23:52:56 +09:00
  • 3df344828f proc/priv/shim: seccomp bpf filter via libseccomp cat 2025-01-20 23:39:47 +09:00
  • 27f5922d5c fst: include syscall filter configuration cat 2025-01-20 21:12:39 +09:00
  • 2cf1f46ea2 nix: test show without --short cat 2025-01-20 21:10:24 +09:00
  • 3c55fc8e86 proc/priv/shim: do not log bwrap args cat 2025-01-20 19:51:28 +09:00
  • eb0ef2d115 helper/bwrap: generic extra file interface cat 2025-01-19 19:18:22 +09:00
  • 2f70506865 helper/bwrap: move sync to helper state cat 2025-01-19 18:38:13 +09:00
  • cae567c109 proc/priv/shim: remove unnecessary state cat 2025-01-19 18:05:53 +09:00
  • 1ec901f79e release: 0.2.10 cat 2025-01-18 22:50:08 +09:00
  • 715addaccd helper/bwrap: append --sync-fd before -- cat 2025-01-18 12:30:03 +09:00
  • b31d055e20 proc/priv/init: early init check cat 2025-01-18 12:23:07 +09:00
  • 7baca66a56 proc: remove duplicate compile-time fortify reference cat 2025-01-18 11:59:33 +09:00
  • 27d2914286 proc/priv/init: merge init into main program cat 2025-01-18 11:47:01 +09:00
  • ea8f228af3 proc/priv/shim: merge shim into main program cat 2025-01-17 23:43:32 +09:00
  • 16db3dabe2 internal: do PR_SET_PDEATHSIG once cat 2025-01-17 23:08:46 +09:00
  • c4de450217 nix: do not force static linking on nix cat 2025-01-17 22:56:16 +09:00
  • b60c01f440 fortify: switch to static linking cat 2025-01-16 17:32:52 +09:00
  • 124743ffd3 app: expose single run method cat 2025-01-15 23:39:51 +09:00
  • be4d8b6300 release: 0.2.9 cat 2025-01-15 13:14:43 +09:00
  • 3e11ce6868 helper/bwrap: separate sequential/static args cat 2025-01-15 10:57:10 +09:00
  • 562f5ed797 fst: hide sockets exposed via Filesystem cat 2025-01-15 10:07:51 +09:00
  • db03565614 fst: move sandbox struct to separate file cat 2025-01-15 09:42:44 +09:00
  • 7d99e45b88 helper/bwrap: register OverlayConfig with gob cat 2025-01-14 12:25:10 +09:00
  • 1651eb06df dbus: implement dbus_parse_address cat 2025-01-12 23:24:03 +09:00
  • ac543a1ce8 dbus: rename makeTestCases cat 2025-01-12 23:21:28 +09:00
  • e2489059c1 helper/bwrap: implement overlayfs builder cat 2025-01-05 20:09:35 +09:00
  • 2e3f6a4c51 helper/bwrap: move test out of bwrap package cat 2025-01-05 19:45:24 +09:00
  • 2162029f46 helper/bwrap: add json struct tag to filesystem cat 2025-01-05 19:41:04 +09:00
  • a1148edd00 fst/config: allocate filesystem slice cat 2025-01-04 00:16:41 +09:00
  • 6acd0d4e88 linux/std: handle fsu exit status 1 cat 2025-01-01 21:34:57 +09:00
  • 35b7142317 fortify: show system info when instance is not specified cat 2025-01-01 19:28:58 +09:00
  • c4d6651cae update reverse-DNS style identifiers cat 2024-12-31 16:16:38 +09:00
  • 22a4b99674 cmd/fpkg/install: deduplicate nix store cat 2024-12-30 02:13:28 +09:00
  • 1464ef774b cmd/fpkg: expose nixGL wrappers cat 2024-12-30 02:02:20 +09:00
  • 66ba4cea5c cmd/fpkg: remove workDir acl from activation cat 2024-12-29 23:48:45 +09:00
  • f8d0786509 cmd/fpkg: include nixGL source in inner store cat 2024-12-29 23:37:11 +09:00
  • 56a73bb019 nix: create nixpkgs symlink cat 2024-12-29 23:23:11 +09:00
  • fb8abf63db nix: update flake lock cat 2024-12-29 23:14:16 +09:00
  • 63802c5f0d nix: nixos test create parent directory cat 2024-12-29 22:36:53 +09:00
  • aff80b6b00 cmd/fpkg: optional network access when invoking with nix daemon cat 2024-12-29 18:32:44 +09:00
  • a98a176907 cmd/fpkg: bind and document more gpu devices cat 2024-12-29 18:25:26 +09:00
  • 5302879b88 cmd/fpkg: improve readability of fortify invocations cat 2024-12-29 17:55:56 +09:00
  • 891b3cbde7 cmd/fpkg: compare all three store paths cat 2024-12-29 17:10:41 +09:00
  • c795293f36 cmd/fpkg: clean up broken links before activation cat 2024-12-29 15:21:40 +09:00
  • 42e1043300 nix: set home-manager user information cat 2024-12-29 15:11:36 +09:00
  • 5416b07daa nix: remove unused argument 'self' cat 2024-12-29 14:49:55 +09:00
  • e57a0e9bf2 nix: rename fortifyBundle to buildPackage cat 2024-12-29 14:35:37 +09:00
  • ab48706ebe dist: install fpkg to /usr/bin cat 2024-12-29 01:04:53 +09:00
  • c1a459a0b1 cmd/fpkg/start: correct drop to shell wording cat 2024-12-29 00:56:14 +09:00
  • 5125e96ecf nix: generate application package build script cat 2024-12-29 00:42:21 +09:00