Ophestra Umiker 8fa791a2f8

app/seal: symlink /etc entries in permissive default ...

Fortify overrides /etc/passwd and /etc/group in the sandbox. Bind mounting /etc results in them being replaced when the passwd database is updated on host.

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>

2024-10-25 13:31:57 +09:00

..

app.go

internal: wrap calls to os standard library functions

2024-10-23 21:46:21 +09:00

config.go

app/config: support creating symlinks within sandbox

2024-10-25 13:29:01 +09:00

id.go

app: move app ID to app struct

2024-10-20 00:22:18 +09:00

launch.machinectl.go

internal: wrap calls to os standard library functions

2024-10-23 21:46:21 +09:00

launch.sudo.go

internal: wrap calls to os standard library functions

2024-10-23 21:46:21 +09:00

seal.go

app/seal: symlink /etc entries in permissive default

2024-10-25 13:31:57 +09:00

share.dbus.go

migrate to git.ophivana.moe/security/fortify

2024-10-20 19:50:13 +09:00

share.display.go

internal: wrap calls to os standard library functions

2024-10-23 21:46:21 +09:00

share.pulse.go

internal: wrap calls to os standard library functions

2024-10-23 21:46:21 +09:00

share.runtime.go

internal: wrap calls to os standard library functions

2024-10-23 21:46:21 +09:00

share.system.go

internal: wrap calls to os standard library functions

2024-10-23 21:46:21 +09:00

start.go

shim: kill shim if setup becomes impossible

2024-10-25 13:19:37 +09:00

system.go

internal: wrap calls to os standard library functions

2024-10-23 21:46:21 +09:00