Commit Graph

Select branches

Hide Pull Requests

develop

fpkg

fsu-bypass

master

staging

v0.0.1

Mono Color

• aaebb8f3ab
  
  fortify: check print behaviour Ophestra 2025-02-14 14:44:28 +09:00
• 1f74b636d3
  
  state/join: use Join method when available Ophestra 2025-02-14 14:11:02 +09:00
• e431ab3c24
  
  app: check username length against LOGIN_NAME_MAX Ophestra 2025-02-14 12:44:55 +09:00
• 3fba33687b
  
  fortify: print line after ps output Ophestra 2025-02-14 12:23:20 +09:00
• 820f48ef94
  
  release: 0.2.13 Ophestra 2025-02-13 23:39:29 +09:00
• fe7d208cf7
  
  helper: use generic extra files interface Ophestra 2025-02-13 23:15:34 +09:00
• 60c2873750
  
  helper/proc: cancel ec on parent ctx Ophestra 2025-02-13 23:08:28 +09:00
• d1d20c06fb
  
  helper/seccomp: use sync.Once for closeWrite Ophestra 2025-02-13 22:49:16 +09:00
• 1e6a059668
  
  helper/seccomp: benchmark exporter Ophestra 2025-02-13 22:37:51 +09:00
• 318df0f7e1
  
  nix: test syscall filter Ophestra 2025-02-13 22:01:16 +09:00
• 58eb8f971d
  
  proc/pipe: implement args and stat file Ophestra 2025-02-13 19:57:24 +09:00
• 0a1d7c01cd
  
  helper/proc: count dispatched errs Ophestra 2025-02-13 19:55:37 +09:00
• 60ca1c6c55
  
  helper/proc: store file addresses in linked list Ophestra 2025-02-13 17:42:12 +09:00
• 099da78af5
  
  helper/seccomp: eliminate data race on pfd Ophestra 2025-02-13 10:40:51 +09:00
• 18466cfd02
  
  helper/proc: declare generic extra files interface Ophestra 2025-02-11 16:34:47 +09:00
• e14923ae53
  
  helper/proc: move package out of internal Ophestra 2025-02-08 13:03:45 +09:00
• 7aff3ead3a
  
  nix: vm test remove unnecessary setup Ophestra 2025-02-07 22:29:56 +09:00
• 72fb13dccc
  
  dbus: lock for read in public args interface Ophestra 2025-02-07 13:42:17 +09:00
• a48386bd56
  
  system/dbus: dump messages on early fault Ophestra 2025-02-07 13:20:56 +09:00
• 2e52191404
  
  system/dbus: dump method prints msgbuf Ophestra 2025-02-07 13:16:54 +09:00
• 568d7758d5
  
  helper/seccomp: panic on invalid closeWrite use Ophestra 2025-02-07 12:58:20 +09:00
• 5b7b3fa9a4
  
  helper/seccomp: implement reader interface via pipe Ophestra 2025-02-03 18:10:29 +09:00
• d58fb8c6ee
  
  workflows: fix nix store cache Ophestra 2025-02-01 21:05:18 +09:00
• 5808fe61c3
  
  nix: vm test set sway background Ophestra 2025-01-25 22:28:04 +09:00
• f338d3bb4b
  
  nix: update flake lock Ophestra 2025-01-25 19:46:33 +09:00
• 8d04dd72f1
  
  nix: mount nvidia devices Ophestra 2025-01-25 18:05:18 +09:00
• 21735a8abe
  
  release: 0.2.12 Ophestra 2025-01-25 13:40:48 +09:00
• 34272672b1
  
  nix: verify silent output when not running with -v Ophestra 2025-01-25 13:38:18 +09:00
• 7b96cd6ded
  
  helper/seccomp: do not call F_println if not verbose Ophestra 2025-01-25 13:19:38 +09:00
• 163f15e93f
  
  helper/seccomp: separate seccomp package Ophestra 2025-01-25 12:59:11 +09:00
• 016da20443
  
  nix: expose compat flag in nixos module Ophestra 2025-01-25 12:42:48 +09:00
• 37780456a7
  
  helper: block more unusual/privileged syscalls Ophestra 2025-01-25 12:35:47 +09:00
• efacaa40fa
  
  nix: set deny_devel correctly Ophestra 2025-01-24 00:50:35 +09:00
• ad6d0ee55f
  
  workflows: rename integration test artifact Ophestra 2025-01-24 00:30:39 +09:00
• cf791469d8
  
  workflows: gc store and purge old caches Ophestra 2025-01-24 00:25:57 +09:00
• be14421775
  
  workflows: merge test build job into test Ophestra 2025-01-24 00:22:44 +09:00
• 045983d7f4
  
  wl: separate inline C Ophestra 2025-01-23 22:06:29 +09:00
• 7106b00968
  
  release: 0.2.11 Ophestra 2025-01-23 20:49:49 +09:00
• 96d5d8a396
  
  nix: apply shared home config to reserved aid Ophestra 2025-01-23 20:48:04 +09:00
• 8a00a83c71
  
  nix: expose syscall filter policy Ophestra 2025-01-23 17:24:42 +09:00
• 134247b57d
  
  nix: configure target users via nixos Ophestra 2025-01-23 17:04:19 +09:00
• b5bb7654da
  
  nix: redirect sway output to journal Ophestra 2025-01-23 16:08:22 +09:00
• cc1efa22e2
  
  fst: add missing fields to template Ophestra 2025-01-22 12:09:25 +09:00
• 580128922b
  
  cmd/fpkg: expose syscall policy options Ophestra 2025-01-22 12:01:30 +09:00
• 23e1152baa
  
  app/share: clean BaseError message Ophestra 2025-01-22 11:54:16 +09:00
• 8c51012ef5
  
  dbus: enable syscall filter Ophestra 2025-01-22 02:01:01 +09:00
• 5a64cdaf4f
  
  ldd: enable syscall filter Ophestra 2025-01-22 02:00:49 +09:00
• a30f5e1226
  
  fortify: set up seccomp verbose logging early Ophestra 2025-01-22 01:58:54 +09:00
• 9a239fa1a5
  
  helper/bwrap: integrate seccomp into helper interface Ophestra 2025-01-22 01:51:10 +09:00
• 82029948e6
  
  proc: append to ExtraFiles slice pointer Ophestra 2025-01-21 12:51:39 +09:00
• dfcdc5ce20
  
  state: store config in separate gob stream Ophestra 2025-01-21 12:10:58 +09:00
• fa0616b274
  
  fortify: print permissive defaults warning early Ophestra 2025-01-21 11:59:15 +09:00
• 20a3d4c458
  
  proc/priv/shim: resolve and load seccomp rules Ophestra 2025-01-20 23:52:56 +09:00
• 3df344828f
  
  proc/priv/shim: seccomp bpf filter via libseccomp Ophestra 2025-01-20 23:39:47 +09:00
• 27f5922d5c
  
  fst: include syscall filter configuration Ophestra 2025-01-20 21:12:39 +09:00
• 2cf1f46ea2
  
  nix: test show without --short Ophestra 2025-01-20 21:10:24 +09:00
• 3c55fc8e86
  
  proc/priv/shim: do not log bwrap args Ophestra 2025-01-20 19:51:28 +09:00
• eb0ef2d115
  
  helper/bwrap: generic extra file interface Ophestra 2025-01-19 19:18:22 +09:00
• 2f70506865
  
  helper/bwrap: move sync to helper state Ophestra 2025-01-19 18:38:13 +09:00
• cae567c109
  
  proc/priv/shim: remove unnecessary state Ophestra 2025-01-19 18:05:53 +09:00
• 1ec901f79e
  
  release: 0.2.10 Ophestra 2025-01-18 22:50:08 +09:00
• 715addaccd
  
  helper/bwrap: append --sync-fd before -- Ophestra 2025-01-18 12:30:03 +09:00
• b31d055e20
  
  proc/priv/init: early init check Ophestra 2025-01-18 12:23:07 +09:00
• 7baca66a56
  
  proc: remove duplicate compile-time fortify reference Ophestra 2025-01-18 11:59:33 +09:00
• 27d2914286
  
  proc/priv/init: merge init into main program Ophestra 2025-01-18 11:47:01 +09:00
• ea8f228af3
  
  proc/priv/shim: merge shim into main program Ophestra 2025-01-17 23:43:32 +09:00
• 16db3dabe2
  
  internal: do PR_SET_PDEATHSIG once Ophestra 2025-01-17 23:08:46 +09:00
• c4de450217
  
  nix: do not force static linking on nix Ophestra 2025-01-17 22:56:16 +09:00
• b60c01f440
  
  fortify: switch to static linking Ophestra 2025-01-16 17:32:52 +09:00
• 124743ffd3
  
  app: expose single run method Ophestra 2025-01-15 23:39:51 +09:00
• be4d8b6300
  
  release: 0.2.9 Ophestra 2025-01-15 13:14:43 +09:00
• 3e11ce6868
  
  helper/bwrap: separate sequential/static args Ophestra 2025-01-15 10:57:10 +09:00
• 562f5ed797
  
  fst: hide sockets exposed via Filesystem Ophestra 2025-01-15 10:07:51 +09:00
• db03565614
  
  fst: move sandbox struct to separate file Ophestra 2025-01-15 09:42:44 +09:00
• 7d99e45b88
  
  helper/bwrap: register OverlayConfig with gob Ophestra 2025-01-14 12:25:10 +09:00
• 1651eb06df
  
  dbus: implement dbus_parse_address Ophestra 2025-01-12 23:24:03 +09:00
• ac543a1ce8
  
  dbus: rename makeTestCases Ophestra 2025-01-12 23:21:28 +09:00
• e2489059c1
  
  helper/bwrap: implement overlayfs builder Ophestra 2025-01-05 20:09:35 +09:00
• 2e3f6a4c51
  
  helper/bwrap: move test out of bwrap package Ophestra 2025-01-05 19:45:24 +09:00
• 2162029f46
  
  helper/bwrap: add json struct tag to filesystem Ophestra 2025-01-05 19:41:04 +09:00
• a1148edd00
  
  fst/config: allocate filesystem slice Ophestra 2025-01-04 00:16:41 +09:00
• 6acd0d4e88
  
  linux/std: handle fsu exit status 1 Ophestra 2025-01-01 21:34:57 +09:00
• 35b7142317
  
  fortify: show system info when instance is not specified Ophestra 2025-01-01 19:28:58 +09:00
• c4d6651cae
  
  update reverse-DNS style identifiers Ophestra 2024-12-31 16:16:38 +09:00
• 22a4b99674
  
  cmd/fpkg/install: deduplicate nix store Ophestra 2024-12-30 02:13:28 +09:00
• 1464ef774b
  
  cmd/fpkg: expose nixGL wrappers Ophestra 2024-12-30 02:02:20 +09:00
• 66ba4cea5c
  
  cmd/fpkg: remove workDir acl from activation Ophestra 2024-12-29 23:48:45 +09:00
• f8d0786509
  
  cmd/fpkg: include nixGL source in inner store Ophestra 2024-12-29 23:37:11 +09:00
• 56a73bb019
  
  nix: create nixpkgs symlink Ophestra 2024-12-29 23:23:11 +09:00
• fb8abf63db
  
  nix: update flake lock Ophestra 2024-12-29 23:14:16 +09:00
• 63802c5f0d
  
  nix: nixos test create parent directory Ophestra 2024-12-29 22:36:53 +09:00
• aff80b6b00
  
  cmd/fpkg: optional network access when invoking with nix daemon Ophestra 2024-12-29 18:32:44 +09:00
• a98a176907
  
  cmd/fpkg: bind and document more gpu devices Ophestra 2024-12-29 18:25:26 +09:00
• 5302879b88
  
  cmd/fpkg: improve readability of fortify invocations Ophestra 2024-12-29 17:55:56 +09:00
• 891b3cbde7
  
  cmd/fpkg: compare all three store paths Ophestra 2024-12-29 17:10:41 +09:00
• c795293f36
  
  cmd/fpkg: clean up broken links before activation Ophestra 2024-12-29 15:21:40 +09:00
• 42e1043300
  
  nix: set home-manager user information Ophestra 2024-12-29 15:11:36 +09:00
• 5416b07daa
  
  nix: remove unused argument 'self' Ophestra 2024-12-29 14:49:55 +09:00
• e57a0e9bf2
  
  nix: rename fortifyBundle to buildPackage Ophestra 2024-12-29 14:35:37 +09:00
• ab48706ebe
  
  dist: install fpkg to /usr/bin Ophestra 2024-12-29 01:04:53 +09:00