Commit Graph

Select branches

Hide Pull Requests

develop

fpkg

fsu-bypass

master

staging

v0.0.1

v0.0.2

Mono Color

• 064db9f020
  
  system/mkdir: type label in String method Ophestra Umiker 2024-10-17 16:37:23 +09:00
• 73a698c7cb
  
  ldd: run ldd with read-only filesystem and unshared net Ophestra Umiker 2024-10-17 15:37:27 +09:00
• 57c1b3eda6
  
  system: handle invalid enablement in String method Ophestra Umiker 2024-10-17 14:31:13 +09:00
• 5401882ed0
  
  init: post initial process death exit timeout Ophestra Umiker 2024-10-17 02:38:24 +09:00
• dd78728fb3
  
  workflows: test workflow to run tests every commit Ophestra Umiker 2024-10-17 00:18:20 +09:00
• 354c23dd28
  
  workflows: add lines between steps Ophestra Umiker 2024-10-17 00:17:40 +09:00
• c21168a741
  
  system: move enablements from state package Ophestra Umiker 2024-10-16 14:38:57 +09:00
• 084cd84f36
  
  app: port app to use the system package Ophestra Umiker 2024-10-16 01:38:59 +09:00
• 430f1a5b4e
  
  system: isolate app/system into generic implementation Ophestra Umiker 2024-10-16 01:31:23 +09:00
• 0fd63e85e7
  
  fmsg/errors: isolate app/error into a separate package Ophestra Umiker 2024-10-16 01:29:44 +09:00
• 33cf0bed54
  
  dbus: various accessors for dbus.Proxy internal fields Ophestra Umiker 2024-10-16 01:27:49 +09:00
• 689f5bed57
  
  release: 0.0.4 Ophestra Umiker 2024-10-15 02:56:49 +09:00
• 184a5f29fa
  
  helper/bwrap: add fortify permissive default test case Ophestra Umiker 2024-10-15 02:56:13 +09:00
• 3015266e5a
  
  helper/bwrap: sort SetEnv arguments Ophestra Umiker 2024-10-15 02:55:48 +09:00
• aa5dd2313c
  
  app: filter /tmp from permissive default Ophestra Umiker 2024-10-15 02:54:50 +09:00
• 2faf510146
  
  helper/bwrap: ordered filesystem args Ophestra Umiker 2024-10-15 02:15:55 +09:00
• a0db19b9ad
  
  helper/bwrap: format mode in octal Ophestra Umiker 2024-10-14 13:47:50 +09:00
• aaed5080f4
  
  fortify: move PR_SET_DUMPABLE to the beginning of main Ophestra Umiker 2024-10-14 02:48:37 +09:00
• 41a7eb567e
  
  release: 0.0.3 Ophestra Umiker 2024-10-14 02:31:11 +09:00
• 1302bcede0
  
  init: custom init process inside sandbox Ophestra Umiker 2024-10-14 02:27:02 +09:00
• 315c9b8849
  
  fortify: refuse to run as root Ophestra Umiker 2024-10-13 20:06:47 +09:00
• 3739b56504
  
  shim: update payload comment Ophestra Umiker 2024-10-13 17:19:50 +09:00
• 77f2c320a6
  
  shim: re-exec self on startup Ophestra Umiker 2024-10-13 16:56:10 +09:00
• b470941911
  
  shim: get rid of insane launch condition Ophestra Umiker 2024-10-13 12:09:38 +09:00
• e4536b87ad
  
  app: generate and replace passwd and group files Ophestra Umiker 2024-10-13 02:43:00 +09:00
• 65a5f8fb08
  
  app/config: map bwrap tmpfs in app config Ophestra Umiker 2024-10-13 02:39:27 +09:00
• aee96b0fdf
  
  helper/bwrap: allow pushing generic arguments to the end of argument stream Ophestra Umiker 2024-10-13 02:26:01 +09:00
• 655020eb5d
  
  app/config: always use nobody UID within sandbox Ophestra Umiker 2024-10-13 00:50:24 +09:00
• f320dfc2ee
  
  fortify: set SUID_DUMP_DISABLE after flag parse Ophestra Umiker 2024-10-13 00:09:14 +09:00
• c818ea649a
  
  app/seal: skip /mnt in permissive default Ophestra Umiker 2024-10-13 00:07:48 +09:00
• b091260fd3
  
  update README document Ophestra Umiker 2024-10-13 00:07:10 +09:00
• b9d5fe49cb
  
  nix: pass $SHELL for shell interpreter Ophestra Umiker 2024-10-12 23:01:06 +09:00
• d37dcff2fc
  
  app/seal: allow GPU access in permissive default when either X11/Wayland is enabled Ophestra Umiker 2024-10-12 22:55:53 +09:00
• 805ef99f9b
  
  app: filesystem struct that maps to all bwrap bind options Ophestra Umiker 2024-10-12 22:33:04 +09:00
• 283bcba05b
  
  fortify/config: flag to print template config serialised as JSON Ophestra Umiker 2024-10-12 19:46:40 +09:00
• 2e019e48c1
  
  app: supply template config Ophestra Umiker 2024-10-12 19:46:07 +09:00
• d5c26ae593
  
  fortify: move error handling to separate file Ophestra Umiker 2024-10-12 02:11:43 +09:00
• 61b473a06f
  
  fortify: clean up config loading Ophestra Umiker 2024-10-12 01:51:06 +09:00
• d2575b6708
  
  fortify: move flag handling to separate files Ophestra Umiker 2024-10-12 01:28:22 +09:00
• 8d82446d97
  
  helper: remove unused bwrap config field Ophestra Umiker 2024-10-12 00:55:14 +09:00
• 0f421644be
  
  dbus: improve unsealed behaviour coverage Ophestra Umiker 2024-10-12 00:53:08 +09:00
• 662f2a9d2c
  
  app: integrate bwrap into environment setup Ophestra Umiker 2024-10-11 04:18:15 +09:00
• 3ddfd76cdf
  
  shim: use bwrap config as it is Ophestra Umiker 2024-10-11 04:13:56 +09:00
• 713872a5cd
  
  helper/bwrap: move interfaceArgs before stringArgs Ophestra Umiker 2024-10-11 04:12:47 +09:00
• 6220f7e197
  
  app: migrate to new shim implementation Ophestra Umiker 2024-10-11 02:01:03 +09:00
• b86fa6b4c9
  
  shim: new shim implementation Ophestra Umiker 2024-10-11 01:55:33 +09:00
• 6eb712aec7
  
  verbose: overridable prefix Ophestra Umiker 2024-10-11 01:49:11 +09:00
• 101e49a48b
  
  helper/bwrap: proc, dev and mqueue as string arguments Ophestra Umiker 2024-10-11 01:30:11 +09:00
• a3aadd4146
  
  app: tag ACL operations for revert Ophestra Umiker 2024-10-10 14:33:58 +09:00
• 86cb5ac1db
  
  app: hardlink sockets to process-specific share local to XDG_RUNTIME_DIR Ophestra Umiker 2024-10-10 12:44:08 +09:00
• 2220055e26
  
  state/simple: prefix store path Ophestra Umiker 2024-10-10 11:03:31 +09:00
• f4c44a9441
  
  release: 0.0.2 Ophestra Umiker 2024-10-10 00:13:06 +09:00
• 8f03ddc3fa
  
  app: remove bubblewrap launch method Ophestra Umiker 2024-10-10 00:11:04 +09:00
• d41b9d2d9c
  
  ldd: separate Parse from Exec and trim space Ophestra Umiker 2024-10-09 23:51:15 +09:00
• 22dfa73efe
  
  release: 0.0.1 Ophestra Umiker 2024-10-09 20:48:38 +09:00
• 753c5191b1
  
  dbus/run: support running xdg-dbus-proxy in a restrictive bubblewrap sandbox Ophestra Umiker 2024-10-09 20:41:42 +09:00
• 6232291cae
  
  ldd: implement strict ldd output parser Ophestra Umiker 2024-10-09 20:39:27 +09:00
• b99ed94386
  
  helper/bwrap: pass --unshare-user when unshare everything Ophestra Umiker 2024-10-09 00:22:48 +09:00
• c201c30c7f
  
  helper/bwrap: check args only for internal tests Ophestra Umiker 2024-10-09 00:21:31 +09:00
• 7c7999e9e5
  
  helper: implementation of helper.Helper using bwrap Ophestra Umiker 2024-10-08 18:02:38 +09:00
• c6223771db
  
  helper: generalise helper.Helper test Ophestra Umiker 2024-10-08 14:02:54 +09:00
• 3c5185d770
  
  helper: move test sample data out of direct Ophestra Umiker 2024-10-07 22:51:08 +09:00
• 55a5b6f242
  
  dbus: use name resolved by exec.Command Ophestra Umiker 2024-10-07 16:55:27 +09:00
• 85407dd3c0
  
  helper: helper.Helper interface Ophestra Umiker 2024-10-07 15:37:52 +09:00
• 6a2802cf30
  
  helper: move bwrap into helper Ophestra Umiker 2024-10-07 14:40:35 +09:00
• 0fb9e40191
  
  helper/args: MustNewCheckedArgs for cleaner hardcoded args Ophestra Umiker 2024-10-07 13:33:18 +09:00
• 9647eb6a6b
  
  helper: separate pipes from Helper Ophestra Umiker 2024-10-07 12:48:20 +09:00
• 18d9ce733e
  
  helper: test non-existent helpers Ophestra Umiker 2024-10-06 16:00:59 +09:00
• ba76e2919b
  
  bwrap: implement argument builder Ophestra Umiker 2024-09-30 00:23:57 +09:00
• df29068d16
  
  verbose: test verbose behaviour Ophestra Umiker 2024-09-29 16:36:59 +09:00
• d1415305ae
  
  dbus: test child process handling behaviour via helper stub Ophestra Umiker 2024-09-29 15:49:32 +09:00
• 98f9fdb7cc
  
  dbus: configurable xdg-dbus-proxy output Ophestra Umiker 2024-09-29 15:27:29 +09:00
• dc59f20d7b
  
  dbus: toggleable xdg-dbus-proxy output Ophestra Umiker 2024-09-29 15:24:54 +09:00
• 7e7327ebf8
  
  helper: export internal stub functions for cross-package testing Ophestra Umiker 2024-09-29 15:22:35 +09:00
• 3bf456da65
  
  helper: test child process handling Ophestra Umiker 2024-09-29 14:59:39 +09:00
• 61ba841c88
  
  helper: remove unreachable check Ophestra Umiker 2024-09-29 14:48:38 +09:00
• d530a9e9f9
  
  helper: stub helper for tests Ophestra Umiker 2024-09-29 14:40:01 +09:00
• 0e7849fac2
  
  dbus: add more test cases Ophestra Umiker 2024-09-28 19:19:31 +09:00
• 342c66aae8
  
  dbus: replace test suffix * with + Ophestra Umiker 2024-09-28 17:47:15 +09:00
• cf182d1fbe
  
  dbus: seal test error check for correct error returned Ophestra Umiker 2024-09-28 17:00:20 +09:00
• 996bf67ac2
  
  release: 0.0.0-beta.5 Ophestra Umiker 2024-09-28 00:21:21 +09:00
• 1038af98f0
  
  dbus: add tests Ophestra Umiker 2024-09-28 00:06:16 +09:00
• aa2be18f47
  
  dbus/config: implement file loading functions Ophestra Umiker 2024-09-27 23:53:08 +09:00
• 84d8c27b5f
  
  dbus: return exported error for nil config Ophestra Umiker 2024-09-27 23:52:38 +09:00
• ee2f5ed6ac
  
  dbus/config: remove unused method Ophestra Umiker 2024-09-27 12:04:28 +09:00
• 8492239cba
  
  helper/args: simplify argument parsing and eliminate excess memory copies Ophestra Umiker 2024-09-25 14:00:30 +09:00
• a8b4b3634b
  
  dbus: use generalised helper.Helper for xdg-dbus-proxy Ophestra Umiker 2024-09-25 01:17:38 +09:00
• 97bab6c406
  
  helper: clean up and separate helper process management from dbus Ophestra Umiker 2024-09-25 01:16:06 +09:00
• 831b1aad6f
  
  helper/args: hold a read lock in WriteTo Ophestra Umiker 2024-09-24 20:22:37 +09:00
• be83ad838c
  
  dbus: assert fmt.Stringer instead of helper.Args on argument seal Ophestra Umiker 2024-09-24 19:37:50 +09:00
• b722adc4dd
  
  dbus: seal as io.WriterTo interface Ophestra Umiker 2024-09-24 18:02:56 +09:00
• 000607da5f
  
  helper: separate helper args fd builder from dbus Ophestra Umiker 2024-09-24 16:11:08 +09:00
• 1cb90c0840
  
  app: improve dbus proxy verbose messages Ophestra Umiker 2024-09-24 13:44:42 +09:00
• a75229991c
  
  nix: make bubblewrap available in PATH Ophestra Umiker 2024-09-23 18:21:12 +09:00
• ced31a7257
  
  state: round printed uptime to the second Ophestra Umiker 2024-09-22 16:15:21 +09:00
• 61628dabb7
  
  nix: remove obnoxious shell hook Ophestra Umiker 2024-09-22 16:08:11 +09:00
• 9a9fcdb9ec
  
  release: 0.0.0-beta.4 Ophestra Umiker 2024-09-22 01:18:47 +09:00
• 62cb8a91b6
  
  app: clean up interactions and handle all application state and setup/teardown Ophestra Umiker 2024-09-22 00:29:36 +09:00
• 11832a9379
  
  acl: define Go type alias for acl_perm_t Ophestra Umiker 2024-09-21 22:25:03 +09:00
• 2763ec730e
  
  release: 0.0.0-beta.3 Ophestra Umiker 2024-09-17 23:17:39 +09:00