maemachinebroke/hakurei
1
0
Fork 0
forked from rosa/hakurei
Code Pull Requests Activity

Commit Graph

  • c21168a741 system: move enablements from state package cat 2024-10-16 14:38:57 +09:00
  • 084cd84f36 app: port app to use the system package cat 2024-10-16 01:38:59 +09:00
  • 430f1a5b4e system: isolate app/system into generic implementation cat 2024-10-16 01:31:23 +09:00
  • 0fd63e85e7 fmsg/errors: isolate app/error into a separate package cat 2024-10-16 01:29:44 +09:00
  • 33cf0bed54 dbus: various accessors for dbus.Proxy internal fields cat 2024-10-16 01:27:49 +09:00
  • 689f5bed57 release: 0.0.4 cat 2024-10-15 02:56:49 +09:00
  • 184a5f29fa helper/bwrap: add fortify permissive default test case cat 2024-10-15 02:56:13 +09:00
  • 3015266e5a helper/bwrap: sort SetEnv arguments cat 2024-10-15 02:55:48 +09:00
  • aa5dd2313c app: filter /tmp from permissive default cat 2024-10-15 02:54:50 +09:00
  • 2faf510146 helper/bwrap: ordered filesystem args cat 2024-10-15 02:15:55 +09:00
  • a0db19b9ad helper/bwrap: format mode in octal cat 2024-10-14 13:47:50 +09:00
  • aaed5080f4 fortify: move PR_SET_DUMPABLE to the beginning of main cat 2024-10-14 02:48:37 +09:00
  • 41a7eb567e release: 0.0.3 cat 2024-10-14 02:31:11 +09:00
  • 1302bcede0 init: custom init process inside sandbox cat 2024-10-14 02:27:02 +09:00
  • 315c9b8849 fortify: refuse to run as root cat 2024-10-13 20:06:47 +09:00
  • 3739b56504 shim: update payload comment cat 2024-10-13 17:19:50 +09:00
  • 77f2c320a6 shim: re-exec self on startup cat 2024-10-13 16:56:10 +09:00
  • b470941911 shim: get rid of insane launch condition cat 2024-10-13 12:09:38 +09:00
  • e4536b87ad app: generate and replace passwd and group files cat 2024-10-13 02:43:00 +09:00
  • 65a5f8fb08 app/config: map bwrap tmpfs in app config cat 2024-10-13 02:39:27 +09:00
  • aee96b0fdf helper/bwrap: allow pushing generic arguments to the end of argument stream cat 2024-10-13 02:26:01 +09:00
  • 655020eb5d app/config: always use nobody UID within sandbox cat 2024-10-13 00:50:24 +09:00
  • f320dfc2ee fortify: set SUID_DUMP_DISABLE after flag parse cat 2024-10-13 00:09:14 +09:00
  • c818ea649a app/seal: skip /mnt in permissive default cat 2024-10-13 00:07:48 +09:00
  • b091260fd3 update README document cat 2024-10-13 00:07:10 +09:00
  • b9d5fe49cb nix: pass $SHELL for shell interpreter cat 2024-10-12 23:01:06 +09:00
  • d37dcff2fc app/seal: allow GPU access in permissive default when either X11/Wayland is enabled cat 2024-10-12 22:55:53 +09:00
  • 805ef99f9b app: filesystem struct that maps to all bwrap bind options cat 2024-10-12 22:33:04 +09:00
  • 283bcba05b fortify/config: flag to print template config serialised as JSON cat 2024-10-12 19:46:40 +09:00
  • 2e019e48c1 app: supply template config cat 2024-10-12 19:46:07 +09:00
  • d5c26ae593 fortify: move error handling to separate file cat 2024-10-12 02:11:43 +09:00
  • 61b473a06f fortify: clean up config loading cat 2024-10-12 01:51:06 +09:00
  • d2575b6708 fortify: move flag handling to separate files cat 2024-10-12 01:28:22 +09:00
  • 8d82446d97 helper: remove unused bwrap config field cat 2024-10-12 00:55:14 +09:00
  • 0f421644be dbus: improve unsealed behaviour coverage cat 2024-10-12 00:53:08 +09:00
  • 662f2a9d2c app: integrate bwrap into environment setup cat 2024-10-11 04:18:15 +09:00
  • 3ddfd76cdf shim: use bwrap config as it is cat 2024-10-11 04:13:56 +09:00
  • 713872a5cd helper/bwrap: move interfaceArgs before stringArgs cat 2024-10-11 04:12:47 +09:00
  • 6220f7e197 app: migrate to new shim implementation cat 2024-10-11 02:01:03 +09:00
  • b86fa6b4c9 shim: new shim implementation cat 2024-10-11 01:55:33 +09:00
  • 6eb712aec7 verbose: overridable prefix cat 2024-10-11 01:49:11 +09:00
  • 101e49a48b helper/bwrap: proc, dev and mqueue as string arguments cat 2024-10-11 01:30:11 +09:00
  • a3aadd4146 app: tag ACL operations for revert cat 2024-10-10 14:33:58 +09:00
  • 86cb5ac1db app: hardlink sockets to process-specific share local to XDG_RUNTIME_DIR cat 2024-10-10 12:44:08 +09:00
  • 2220055e26 state/simple: prefix store path cat 2024-10-10 11:03:31 +09:00
  • f4c44a9441 release: 0.0.2 cat 2024-10-10 00:13:06 +09:00
  • 8f03ddc3fa app: remove bubblewrap launch method cat 2024-10-10 00:11:04 +09:00
  • d41b9d2d9c ldd: separate Parse from Exec and trim space cat 2024-10-09 23:51:15 +09:00
  • 22dfa73efe release: 0.0.1 cat 2024-10-09 20:48:38 +09:00
  • 753c5191b1 dbus/run: support running xdg-dbus-proxy in a restrictive bubblewrap sandbox cat 2024-10-09 20:41:42 +09:00
  • 6232291cae ldd: implement strict ldd output parser cat 2024-10-09 20:39:27 +09:00
  • b99ed94386 helper/bwrap: pass --unshare-user when unshare everything cat 2024-10-09 00:22:48 +09:00
  • c201c30c7f helper/bwrap: check args only for internal tests cat 2024-10-09 00:21:31 +09:00
  • 7c7999e9e5 helper: implementation of helper.Helper using bwrap cat 2024-10-08 18:02:38 +09:00
  • c6223771db helper: generalise helper.Helper test cat 2024-10-08 14:02:54 +09:00
  • 3c5185d770 helper: move test sample data out of direct cat 2024-10-07 22:51:08 +09:00
  • 55a5b6f242 dbus: use name resolved by exec.Command cat 2024-10-07 16:55:27 +09:00
  • 85407dd3c0 helper: helper.Helper interface cat 2024-10-07 15:37:52 +09:00
  • 6a2802cf30 helper: move bwrap into helper cat 2024-10-07 14:40:35 +09:00
  • 0fb9e40191 helper/args: MustNewCheckedArgs for cleaner hardcoded args cat 2024-10-07 13:33:18 +09:00
  • 9647eb6a6b helper: separate pipes from Helper cat 2024-10-07 12:48:20 +09:00
  • 18d9ce733e helper: test non-existent helpers cat 2024-10-06 16:00:59 +09:00
  • ba76e2919b bwrap: implement argument builder cat 2024-09-30 00:23:57 +09:00
  • df29068d16 verbose: test verbose behaviour cat 2024-09-29 16:36:59 +09:00
  • d1415305ae dbus: test child process handling behaviour via helper stub cat 2024-09-29 15:49:32 +09:00
  • 98f9fdb7cc dbus: configurable xdg-dbus-proxy output cat 2024-09-29 15:27:29 +09:00
  • dc59f20d7b dbus: toggleable xdg-dbus-proxy output cat 2024-09-29 15:24:54 +09:00
  • 7e7327ebf8 helper: export internal stub functions for cross-package testing cat 2024-09-29 15:22:35 +09:00
  • 3bf456da65 helper: test child process handling cat 2024-09-29 14:59:39 +09:00
  • 61ba841c88 helper: remove unreachable check cat 2024-09-29 14:48:38 +09:00
  • d530a9e9f9 helper: stub helper for tests cat 2024-09-29 14:40:01 +09:00
  • 0e7849fac2 dbus: add more test cases cat 2024-09-28 19:19:31 +09:00
  • 342c66aae8 dbus: replace test suffix * with + cat 2024-09-28 17:47:15 +09:00
  • cf182d1fbe dbus: seal test error check for correct error returned cat 2024-09-28 17:00:20 +09:00
  • 996bf67ac2 release: 0.0.0-beta.5 cat 2024-09-28 00:21:21 +09:00
  • 1038af98f0 dbus: add tests cat 2024-09-28 00:06:16 +09:00
  • aa2be18f47 dbus/config: implement file loading functions cat 2024-09-27 23:53:08 +09:00
  • 84d8c27b5f dbus: return exported error for nil config cat 2024-09-27 23:52:38 +09:00
  • ee2f5ed6ac dbus/config: remove unused method cat 2024-09-27 12:04:28 +09:00
  • 8492239cba helper/args: simplify argument parsing and eliminate excess memory copies cat 2024-09-25 14:00:30 +09:00
  • a8b4b3634b dbus: use generalised helper.Helper for xdg-dbus-proxy cat 2024-09-25 01:17:38 +09:00
  • 97bab6c406 helper: clean up and separate helper process management from dbus cat 2024-09-25 01:16:06 +09:00
  • 831b1aad6f helper/args: hold a read lock in WriteTo cat 2024-09-24 20:22:37 +09:00
  • be83ad838c dbus: assert fmt.Stringer instead of helper.Args on argument seal cat 2024-09-24 19:37:50 +09:00
  • b722adc4dd dbus: seal as io.WriterTo interface cat 2024-09-24 18:02:56 +09:00
  • 000607da5f helper: separate helper args fd builder from dbus cat 2024-09-24 16:11:08 +09:00
  • 1cb90c0840 app: improve dbus proxy verbose messages cat 2024-09-24 13:44:42 +09:00
  • a75229991c nix: make bubblewrap available in PATH cat 2024-09-23 18:21:12 +09:00
  • ced31a7257 state: round printed uptime to the second cat 2024-09-22 16:15:21 +09:00
  • 61628dabb7 nix: remove obnoxious shell hook cat 2024-09-22 16:08:11 +09:00
  • 9a9fcdb9ec release: 0.0.0-beta.4 cat 2024-09-22 01:18:47 +09:00
  • 62cb8a91b6 app: clean up interactions and handle all application state and setup/teardown cat 2024-09-22 00:29:36 +09:00
  • 11832a9379 acl: define Go type alias for acl_perm_t cat 2024-09-21 22:25:03 +09:00
  • 2763ec730e release: 0.0.0-beta.3 cat 2024-09-17 23:17:39 +09:00
  • 3d963b9f67 nix: include package buildInputs in devShells cat 2024-09-17 23:15:33 +09:00
  • 4b7d616862 exit: move final and early code to internal package cat 2024-09-17 13:48:42 +09:00
  • 6a6f62efa6 release: 0.0.0-beta.2 cat 2024-09-16 20:41:02 +09:00
  • 03c24c5122 move acl and xcb binding packages to top level cat 2024-09-16 20:32:07 +09:00
  • 8bdae74ebe final: refactor for removal of system package and reduction of interactions to state package cat 2024-09-16 20:31:15 +09:00
  • d49b97b1d4 nix: pass method string directly cat 2024-09-13 11:54:23 +09:00