hakurei

Author	SHA1	Message	Date
cat	cafed5f234	shim: abort setup on failed start and process exit test / test (push) Successful in 25s Details Shim setup listens on a socket in the process share, if shim setup hasn't happened on exit revert will fail. This change makes sure shim setup is aborted on a doomed launch. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-21 21:23:56 +09:00
cat	42e0b168e3	fmsg: produce all output through fmsg test / test (push) Successful in 17s Details The behaviour of print functions from package fmt is not thread safe. Functions provided by fmsg wrap around Logger methods. This makes prefix much cleaner and makes it easy to deal with future changes to logging. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-21 20:47:02 +09:00
cat	380d1f4585	app: move wayland mediation to shim package test / test (push) Successful in 29s Details Values used in the Wayland mediation implementation is stored in various struct fields strewn across multiple app structs and checks are messy and confusing. This commit unifies them into a single struct and access it using much better looking methods. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-21 18:46:06 +09:00
cat	65af1684e3	migrate to git.ophivana.moe/security/fortify test / test (push) Successful in 14s Details Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-20 19:50:13 +09:00
cat	2faf510146	helper/bwrap: ordered filesystem args The argument builder was written based on the incorrect assumption that bwrap arguments are unordered. The argument builder is replaced in this commit to correct that mistake. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-15 02:15:55 +09:00
cat	1302bcede0	init: custom init process inside sandbox Bubblewrap as init is a bit awkward and don't support a few setup actions fortify will need, such as starting/supervising nscd. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-14 02:27:02 +09:00
cat	3739b56504	shim: update payload comment Generating permissive default no longer happens in shim. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-13 17:19:50 +09:00
cat	77f2c320a6	shim: re-exec self on startup Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-13 16:56:10 +09:00
cat	b470941911	shim: get rid of insane launch condition Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-13 12:09:38 +09:00
cat	e4536b87ad	app: generate and replace passwd and group files This ensures libc functions get correct user information. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-13 02:43:00 +09:00
cat	3ddfd76cdf	shim: use bwrap config as it is Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-11 04:13:56 +09:00
cat	b86fa6b4c9	shim: new shim implementation This implementation of shim accepts configuration as a gob stream over a unix socket, with support for mediating access to wayland via WAYLAND_SOCKET fd. All configuration is now included in the payload, and child is started inside bwrap configured with supplied bwrap.Config. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-11 01:55:33 +09:00