Commit Graph

Select branches

Hide Pull Requests

develop

fpkg

fsu-bypass

master

staging

v0.0.1

v0.0.2

Mono Color

• cc816a1aaa
  
  proc: cleaner extra files Ophestra Umiker 2024-12-06 16:05:04 +09:00
• b3ef53b193
  
  app: integrate security-context-v1 Ophestra Umiker 2024-12-06 04:25:33 +09:00
• 8d0573405a
  
  helper/bwrap: implement sync fd Ophestra Umiker 2024-12-06 04:21:37 +09:00
• 38e92edb8e
  
  system/wayland: integrate security-context-v1 Ophestra Umiker 2024-12-06 04:20:15 +09:00
• 2d606b1f4b
  
  wl: implement security-context-v1 Ophestra Umiker 2024-12-06 03:34:13 +09:00
• 1b5b089c78
  
  fortify: rename --dbus-id to --id Ophestra Umiker 2024-12-06 03:26:09 +09:00
• 6b8ddca7b4
  
  nix: track nixos stable 24.11 Ophestra Umiker 2024-12-06 00:44:04 +09:00
• 95668ac998
  
  nix: expose no_new_session in module Ophestra Umiker 2024-11-28 00:19:06 +09:00
• b291f0b710
  
  app: add nixos-based config test case Ophestra Umiker 2024-11-21 12:13:12 +09:00
• 3a20b149ce
  
  update README document Ophestra Umiker 2024-11-21 11:22:34 +09:00
• 30b8bce90a
  
  fortify: zsh completion Ophestra Umiker 2024-11-20 01:25:19 +09:00
• de0d78daae
  
  release: 0.2.1 Ophestra Umiker 2024-11-19 21:03:50 +09:00
• 6bf33ce507
  
  fortify: use resolved username Ophestra Umiker 2024-11-19 21:03:09 +09:00
• 9faf3b3596
  
  app: validate username Ophestra Umiker 2024-11-19 21:01:41 +09:00
• d99c8b1fb4
  
  release: 0.2.0 Ophestra Umiker 2024-11-19 18:15:09 +09:00
• 6e4870775f
  
  update README document Ophestra Umiker 2024-11-19 18:14:06 +09:00
• 0a546885e3
  
  nix: update options doc Ophestra Umiker 2024-11-19 18:12:35 +09:00
• 653d69da0a
  
  nix: module descriptions Ophestra Umiker 2024-11-19 18:10:57 +09:00
• f8256137ae
  
  nix: separate module options from implementation Ophestra Umiker 2024-11-19 17:08:22 +09:00
• 54b47b0315
  
  nix: copy pixmaps directory to share package Ophestra Umiker 2024-11-18 14:46:08 +09:00
• ae2628e57a
  
  cmd/fshim/ipc: install signal handler on shim start Ophestra Umiker 2024-11-18 13:33:46 +09:00
• c026a4b5dc
  
  fortify: permissive defaults resolve home directory from os Ophestra Umiker 2024-11-18 13:01:07 +09:00
• 748a0ae2c8
  
  nix: wrap program from libexec Ophestra Umiker 2024-11-18 12:58:47 +09:00
• 8f3f0c7bbf
  
  nix: integrate dynamic users Ophestra Umiker 2024-11-18 02:49:48 +09:00
• 05b7dbf066
  
  app: alternative inner home path Ophestra Umiker 2024-11-18 00:18:21 +09:00
• 866270ff05
  
  fmsg: add to wg prior to enqueue Ophestra Umiker 2024-11-17 23:50:02 +09:00
• c1fad649e8
  
  app/start: check for cleanup and abort condition Ophestra Umiker 2024-11-17 23:41:52 +09:00
• b5f01ef20b
  
  app: append # for ChangeHosts message with numerical uid Ophestra Umiker 2024-11-17 23:40:37 +09:00
• 2e23cef7bb
  
  cmd/fuserdb: generate group entries Ophestra Umiker 2024-11-17 23:31:06 +09:00
• 6a6d30af1f
  
  cmd/fuserdb: systemd userdb drop-in entries generator Ophestra Umiker 2024-11-17 02:03:18 +09:00
• df33123bd7
  
  app: integrate fsu Ophestra Umiker 2024-11-16 21:19:45 +09:00
• 1a09b55bd4
  
  nix: remove portal paths from default Ophestra Umiker 2024-11-10 22:24:17 +09:00
• 9a13b311ac
  
  app/config: rename map_real_uid from use_real_uid Ophestra Umiker 2024-11-09 11:57:36 +09:00
• 45fead18c3
  
  cmd/fshim: set no_new_privs flag Ophestra Umiker 2024-11-09 11:50:56 +09:00
• 431aa32291
  
  nix: remove absolute Exec paths Ophestra Umiker 2024-11-08 02:05:47 +09:00
• 3962705126
  
  nix: keep fshim and finit names Ophestra Umiker 2024-11-06 14:59:28 +09:00
• ad80be721b
  
  nix: improve start script Ophestra Umiker 2024-11-06 14:09:41 +09:00
• f831948bca
  
  release: 0.1.0 Ophestra Umiker 2024-11-06 04:37:43 +09:00
• 2e31b3d3a1
  
  update README document Ophestra Umiker 2024-11-06 04:35:52 +09:00
• 4d90e73366
  
  nix: generate strict sandbox configuration Ophestra Umiker 2024-11-06 04:25:15 +09:00
• 3dfc1fcd56
  
  app: support full /dev access Ophestra Umiker 2024-11-06 03:49:39 +09:00
• 89bafd0c22
  
  fortify: root check before command handling Ophestra Umiker 2024-11-05 12:57:03 +09:00
• 861bb1274f
  
  fortify: override default usage function Ophestra Umiker 2024-11-05 00:12:31 +09:00
• 714818c8aa
  
  fortify: implement cleaner argument structure Ophestra Umiker 2024-11-04 23:08:29 +09:00
• 69cc64ef56
  
  linux: provide access to stdout Ophestra Umiker 2024-11-04 22:55:46 +09:00
• fc25ac2523
  
  app: separate auto etc from permissive defaults Ophestra Umiker 2024-11-04 22:18:05 +09:00
• d909b1190a
  
  app/config: UseRealUID as true in template Ophestra Umiker 2024-11-04 19:45:31 +09:00
• cfd05b10f1
  
  release: 0.0.11 Ophestra Umiker 2024-11-04 13:46:47 +09:00
• aa067436a7
  
  workflows: build all packages with full ldflags Ophestra Umiker 2024-11-04 13:43:57 +09:00
• d7df24c999
  
  fmsg: drop messages when msgbuf is full during withhold Ophestra Umiker 2024-11-04 12:56:19 +09:00
• 88abcbe0b2
  
  cmd/fsu: remove import of internal package Ophestra Umiker 2024-11-04 12:32:14 +09:00
• af15b1c048
  
  app: support mapping target uid as privileged uid in sandbox Ophestra Umiker 2024-11-04 03:15:39 +09:00
• 7962681f4a
  
  app: format mapped uid instead of real uid Ophestra Umiker 2024-11-04 00:49:32 +09:00
• bfcce3ff75
  
  system/dbus: buffer xdg-dbus-proxy messages Ophestra Umiker 2024-11-03 03:07:02 +09:00
• 8cd3651bb6
  
  cmd/fshim/ipc: friendly setup timeout message Ophestra Umiker 2024-11-03 02:03:30 +09:00
• 422d8e00d5
  
  fortify: replace direct syscall with prctl wrapper Ophestra Umiker 2024-11-02 17:00:25 +09:00
• 584732f80a
  
  cmd: shim and init into separate binaries Ophestra Umiker 2024-11-02 03:03:44 +09:00
• 4b7b899bb3
  
  add package doc comments Ophestra Umiker 2024-10-28 20:57:59 +09:00
• 563c39c2d9
  
  release: 0.0.10 Ophestra Umiker 2024-10-28 20:38:10 +09:00
• aa1f96eeeb
  
  fsu: check parent executable path Ophestra Umiker 2024-10-28 18:52:23 +09:00
• 431dc095e5
  
  app/start: skip cleanup if shim is nil Ophestra Umiker 2024-10-28 14:21:15 +09:00
• 60e91b9b0f
  
  shim: expose checkPid in constructor Ophestra Umiker 2024-10-27 23:49:37 +09:00
• d9cb2a9f2b
  
  fsu: implement simple setuid user switcher Ophestra Umiker 2024-10-27 23:45:52 +09:00
• 09feda3783
  
  fortify: exit if seal returns error Ophestra Umiker 2024-10-27 23:18:16 +09:00
• 51e84ba8a5
  
  system/dbus: compare sealed value by string Ophestra Umiker 2024-10-27 11:56:20 +09:00
• 7df9d8d01d
  
  system: move sd_booted implementation to os abstraction Ophestra Umiker 2024-10-27 12:08:17 +09:00
• 6d8bcb63f2
  
  release: 0.0.9 Ophestra Umiker 2024-10-27 01:25:24 +09:00
• c7b77d6e5e
  
  fmsg: initialise dequeue prior to withhold/resume Ophestra Umiker 2024-10-27 01:24:30 +09:00
• 2f34627d37
  
  release: 0.0.8 Ophestra Umiker 2024-10-27 00:49:50 +09:00
• 1d6ea81205
  
  shim: user switcher process management struct Ophestra Umiker 2024-10-27 00:46:15 +09:00
• ae1a102882
  
  fmsg: support temporarily withholding output Ophestra Umiker 2024-10-26 23:09:32 +09:00
• 093e99d062
  
  app: separate nixos test cases from tests Ophestra Umiker 2024-10-25 17:44:29 +09:00
• ad7e389eee
  
  app: test app permissive defaults sealing behaviour Ophestra Umiker 2024-10-25 17:12:13 +09:00
• 5b249e4a66
  
  system: print number of ops completed at point of failure Ophestra Umiker 2024-10-25 17:08:21 +09:00
• 2a348c7f91
  
  system: include more info in ACL Stringer Ophestra Umiker 2024-10-25 16:23:22 +09:00
• eb767e7642
  
  app/start: cleaner command not found message Ophestra Umiker 2024-10-25 16:12:18 +09:00
• 3bfe8dbf5d
  
  internal: ReadDir wrapper return fs.DirEntry Ophestra Umiker 2024-10-25 14:56:29 +09:00
• 8fa791a2f8
  
  app/seal: symlink /etc entries in permissive default Ophestra Umiker 2024-10-25 13:31:57 +09:00
• b932ac8260
  
  app/config: support creating symlinks within sandbox Ophestra Umiker 2024-10-25 13:29:01 +09:00
• 050ffceb27
  
  helper/bwrap: register generic PermConfig types with gob Ophestra Umiker 2024-10-25 13:26:01 +09:00
• 31350d74e5
  
  shim: kill shim if setup becomes impossible Ophestra Umiker 2024-10-25 13:19:37 +09:00
• 3b82cc55de
  
  internal: use fallback paths when XDG_RUNTIME_DIR is not absolute Ophestra Umiker 2024-10-25 12:14:57 +09:00
• 6bc5be7e5a
  
  internal: wrap calls to os standard library functions Ophestra Umiker 2024-10-23 21:46:21 +09:00
• e35c5fe3ed
  
  system: sys comparison method Ophestra Umiker 2024-10-23 14:15:13 +09:00
• 20195ece47
  
  system: return sys in queueing methods Ophestra Umiker 2024-10-23 12:34:16 +09:00
• cafed5f234
  
  shim: abort setup on failed start and process exit Ophestra Umiker 2024-10-21 21:23:56 +09:00
• 42e0b168e3
  
  fmsg: produce all output through fmsg Ophestra Umiker 2024-10-21 20:47:02 +09:00
• 380d1f4585
  
  app: move wayland mediation to shim package Ophestra Umiker 2024-10-20 22:54:47 +09:00
• 133f23e0de
  
  release: 0.0.7 Ophestra Umiker 2024-10-20 19:50:59 +09:00
• 65af1684e3
  
  migrate to git.ophivana.moe/security/fortify Ophestra Umiker 2024-10-20 19:50:13 +09:00
• cdda33555c
  
  update README document Ophestra Umiker 2024-10-20 00:24:50 +09:00
• ad0034b09a
  
  app: move app ID to app struct Ophestra Umiker 2024-10-20 00:07:48 +09:00
• 1da845d78b
  
  workflows: call apt-get without sudo Ophestra Umiker 2024-10-18 22:56:49 +09:00
• 55bb348d5f
  
  state: store launch method instead of launcher path Ophestra Umiker 2024-10-18 22:25:09 +09:00
• ecce832d93
  
  release: 0.0.6 Ophestra Umiker 2024-10-18 01:26:42 +09:00
• 65bd7d18db
  
  app/share: fix order to ensure SharePath before any of its subdirectories Ophestra Umiker 2024-10-18 01:21:58 +09:00
• 4ebb98649e
  
  release: 0.0.5 Ophestra Umiker 2024-10-17 20:48:41 +09:00
• 919e5b5cd5
  
  init: start timeout only if reaped PID is the initial process Ophestra Umiker 2024-10-17 20:46:25 +09:00
• 40161c5938
  
  nix: remove fortify package from default devShell Ophestra Umiker 2024-10-17 20:35:10 +09:00
• 679e719f9e
  
  system: tests for all Op implementations except DBus Ophestra Umiker 2024-10-17 20:28:55 +09:00