Commit Graph

Select branches

Hide Pull Requests

develop

master

staging

#1

v0.1.0

v0.1.1

v0.1.2

v0.1.3

v0.2.0

v0.2.1

v0.2.2

Mono Color

• ed8ee5eb4b
  
  nix: filter nix files from src Ophestra 2024-12-21 17:39:42 +09:00
• af4d92b785
  
  nix: test dbus proxy Ophestra 2024-12-21 14:19:50 +09:00
• ce04dd52ca
  
  nix: background go test Ophestra 2024-12-21 13:58:57 +09:00
• 3d042f4992
  
  nix: remove workspace switching Ophestra 2024-12-21 13:52:05 +09:00
• 68660a2ad4
  
  fortify: config/state pretty-print subcommand Ophestra 2024-12-21 00:32:34 +09:00
• b9cc318314
  
  system: implement Enablements String method Ophestra 2024-12-20 23:21:19 +09:00
• ed10574dea
  
  state: store join util Ophestra 2024-12-20 19:05:39 +09:00
• 195b717e01
  
  release: 0.2.5 Ophestra Umiker 2024-12-20 00:28:48 +09:00
• df6fc298f6
  
  migrate to git.gensokyo.uk/security/fortify Ophestra Umiker 2024-12-20 00:20:02 +09:00
• eae3034260
  
  state: expose aids and use instance id as key Ophestra Umiker 2024-12-19 21:36:17 +09:00
• 5ea7333431
  
  fst: implement app id parser Ophestra Umiker 2024-12-19 18:19:47 +09:00
• f796622c35
  
  state: rename simple store implementation Ophestra Umiker 2024-12-19 11:48:48 +09:00
• 5d25bee786
  
  fortify: remove systemd check Ophestra Umiker 2024-12-19 11:14:31 +09:00
• b48ece3bb0
  
  acl: use test-managed tmpdir Ophestra Umiker 2024-12-19 11:08:13 +09:00
• 9f95f60400
  
  release: 0.2.4 Ophestra Umiker 2024-12-18 23:52:52 +09:00
• 90dd57f75d
  
  workflows: cache nix store Ophestra Umiker 2024-12-18 23:20:25 +09:00
• 141f2e3685
  
  workflows: cache apt packages Ophestra Umiker 2024-12-18 22:00:08 +09:00
• 73aa285e8f
  
  workflows: upload nixos test output Ophestra Umiker 2024-12-18 20:32:40 +09:00
• 6e87fc02dd
  
  workflows: build and upload test distribution Ophestra Umiker 2024-12-18 19:57:03 +09:00
• 52f21a19f3
  
  cmd/fshim: switch to setup pipe Ophestra Umiker 2024-12-18 19:39:25 +09:00
• 7be53a2438
  
  cmd/fshim: switch to generic setup func Ophestra Umiker 2024-12-18 17:20:31 +09:00
• 7f29b37a32
  
  proc: setup payload send Ophestra Umiker 2024-12-18 17:20:01 +09:00
• f69e8e753e
  
  cmd/finit: switch to generic receive func Ophestra Umiker 2024-12-18 16:49:19 +09:00
• ef8fd37e9d
  
  proc: setup payload receive Ophestra Umiker 2024-12-18 16:48:41 +09:00
• 2f676c9d6e
  
  fst: rename from fipc Ophestra Umiker 2024-12-18 15:50:46 +09:00
• bbace8f84b
  
  nix: increase cpu count Ophestra Umiker 2024-12-18 15:32:52 +09:00
• 2efedf56c0
  
  nix: collect fortify ps output Ophestra Umiker 2024-12-18 13:48:39 +09:00
• b752ec4468
  
  fipc: export config struct Ophestra Umiker 2024-12-18 13:45:55 +09:00
• 5d00805a7c
  
  nix: check acl rollback Ophestra Umiker 2024-12-18 12:49:32 +09:00
• 7b6052a473
  
  nix: run Go tests in nixos Ophestra Umiker 2024-12-17 21:16:55 +09:00
• 38653c6ab5
  
  release: 0.2.3 Ophestra Umiker 2024-12-17 14:06:17 +09:00
• b5cbbeab90
  
  dist: generate distribution tarball Ophestra Umiker 2024-12-17 14:02:54 +09:00
• c3ba0c3cce
  
  nix: rename nixos test Ophestra Umiker 2024-12-17 13:02:12 +09:00
• b453f70ca2
  
  cmd/fsu: check uid range before syscall Ophestra Umiker 2024-12-17 13:01:36 +09:00
• c2b178e626
  
  xcb: refactor and clean up Ophestra Umiker 2024-12-17 12:46:36 +09:00
• aeda40fc92
  
  nix: test x11 permissive defaults Ophestra Umiker 2024-12-17 12:40:18 +09:00
• 65dc39956f
  
  workflows: set action names Ophestra Umiker 2024-12-17 11:06:23 +09:00
• 35505c8a26
  
  workflows: invoke nix flake checks Ophestra Umiker 2024-12-16 23:18:17 +09:00
• 3f993021f8
  
  nix: permissive defaults nixos test Ophestra Umiker 2024-12-16 22:56:10 +09:00
• 4d3bd5338f
  
  nix: implement flake checks Ophestra Umiker 2024-12-16 20:54:28 +09:00
• 138666d753
  
  nix: skip acl test Ophestra Umiker 2024-12-16 19:29:01 +09:00
• f4628e181b
  
  acl: create test file in tmpdir Ophestra Umiker 2024-12-16 18:58:09 +09:00
• c8a90666c5
  
  acl: refactor and clean up Ophestra Umiker 2024-12-16 18:27:19 +09:00
• ee41b37606
  
  acl: add tests Ophestra Umiker 2024-12-16 15:57:00 +09:00
• e3f1d7ba60
  
  release: 0.2.2 Ophestra Umiker 2024-12-07 21:47:22 +09:00
• 39e3ac3ccd
  
  nix: require /etc/userdb nix-daemon Ophestra Umiker 2024-12-07 21:07:57 +09:00
• 33c95b80ca
  
  cmd/fuserdb: rename home directories Ophestra Umiker 2024-12-07 20:23:46 +09:00
• 40cc8a68d1
  
  nix: rename home directories Ophestra Umiker 2024-12-07 20:15:37 +09:00
• f773c92411
  
  system: prevent duplicate Wayland op Ophestra Umiker 2024-12-07 19:45:37 +09:00
• 16ab734fcd
  
  update README document Ophestra Umiker 2024-12-06 17:04:36 +09:00
• cc816a1aaa
  
  proc: cleaner extra files Ophestra Umiker 2024-12-06 16:05:04 +09:00
• b3ef53b193
  
  app: integrate security-context-v1 Ophestra Umiker 2024-12-06 04:25:33 +09:00
• 8d0573405a
  
  helper/bwrap: implement sync fd Ophestra Umiker 2024-12-06 04:21:37 +09:00
• 38e92edb8e
  
  system/wayland: integrate security-context-v1 Ophestra Umiker 2024-12-06 04:20:15 +09:00
• 2d606b1f4b
  
  wl: implement security-context-v1 Ophestra Umiker 2024-12-06 03:34:13 +09:00
• 1b5b089c78
  
  fortify: rename --dbus-id to --id Ophestra Umiker 2024-12-06 03:26:09 +09:00
• 6b8ddca7b4
  
  nix: track nixos stable 24.11 Ophestra Umiker 2024-12-06 00:44:04 +09:00
• 95668ac998
  
  nix: expose no_new_session in module Ophestra Umiker 2024-11-28 00:19:06 +09:00
• b291f0b710
  
  app: add nixos-based config test case Ophestra Umiker 2024-11-21 12:13:12 +09:00
• 3a20b149ce
  
  update README document Ophestra Umiker 2024-11-21 11:22:34 +09:00
• 30b8bce90a
  
  fortify: zsh completion Ophestra Umiker 2024-11-20 01:25:19 +09:00
• de0d78daae
  
  release: 0.2.1 Ophestra Umiker 2024-11-19 21:03:50 +09:00
• 6bf33ce507
  
  fortify: use resolved username Ophestra Umiker 2024-11-19 21:03:09 +09:00
• 9faf3b3596
  
  app: validate username Ophestra Umiker 2024-11-19 21:01:41 +09:00
• d99c8b1fb4
  
  release: 0.2.0 Ophestra Umiker 2024-11-19 18:15:09 +09:00
• 6e4870775f
  
  update README document Ophestra Umiker 2024-11-19 18:14:06 +09:00
• 0a546885e3
  
  nix: update options doc Ophestra Umiker 2024-11-19 18:12:35 +09:00
• 653d69da0a
  
  nix: module descriptions Ophestra Umiker 2024-11-19 18:10:57 +09:00
• f8256137ae
  
  nix: separate module options from implementation Ophestra Umiker 2024-11-19 17:08:22 +09:00
• 54b47b0315
  
  nix: copy pixmaps directory to share package Ophestra Umiker 2024-11-18 14:46:08 +09:00
• ae2628e57a
  
  cmd/fshim/ipc: install signal handler on shim start Ophestra Umiker 2024-11-18 13:33:46 +09:00
• c026a4b5dc
  
  fortify: permissive defaults resolve home directory from os Ophestra Umiker 2024-11-18 13:01:07 +09:00
• 748a0ae2c8
  
  nix: wrap program from libexec Ophestra Umiker 2024-11-18 12:58:47 +09:00
• 8f3f0c7bbf
  
  nix: integrate dynamic users Ophestra Umiker 2024-11-18 02:49:48 +09:00
• 05b7dbf066
  
  app: alternative inner home path Ophestra Umiker 2024-11-18 00:18:21 +09:00
• 866270ff05
  
  fmsg: add to wg prior to enqueue Ophestra Umiker 2024-11-17 23:50:02 +09:00
• c1fad649e8
  
  app/start: check for cleanup and abort condition Ophestra Umiker 2024-11-17 23:41:52 +09:00
• b5f01ef20b
  
  app: append # for ChangeHosts message with numerical uid Ophestra Umiker 2024-11-17 23:40:37 +09:00
• 2e23cef7bb
  
  cmd/fuserdb: generate group entries Ophestra Umiker 2024-11-17 23:31:06 +09:00
• 6a6d30af1f
  
  cmd/fuserdb: systemd userdb drop-in entries generator Ophestra Umiker 2024-11-17 02:03:18 +09:00
• df33123bd7
  
  app: integrate fsu Ophestra Umiker 2024-11-16 21:19:45 +09:00
• 1a09b55bd4
  
  nix: remove portal paths from default Ophestra Umiker 2024-11-10 22:24:17 +09:00
• 9a13b311ac
  
  app/config: rename map_real_uid from use_real_uid Ophestra Umiker 2024-11-09 11:57:36 +09:00
• 45fead18c3
  
  cmd/fshim: set no_new_privs flag Ophestra Umiker 2024-11-09 11:50:56 +09:00
• 431aa32291
  
  nix: remove absolute Exec paths Ophestra Umiker 2024-11-08 02:05:47 +09:00
• 3962705126
  
  nix: keep fshim and finit names Ophestra Umiker 2024-11-06 14:59:28 +09:00
• ad80be721b
  
  nix: improve start script Ophestra Umiker 2024-11-06 14:09:41 +09:00
• f831948bca
  
  release: 0.1.0 Ophestra Umiker 2024-11-06 04:37:43 +09:00
• 2e31b3d3a1
  
  update README document Ophestra Umiker 2024-11-06 04:35:52 +09:00
• 4d90e73366
  
  nix: generate strict sandbox configuration Ophestra Umiker 2024-11-06 04:25:15 +09:00
• 3dfc1fcd56
  
  app: support full /dev access Ophestra Umiker 2024-11-06 03:49:39 +09:00
• 89bafd0c22
  
  fortify: root check before command handling Ophestra Umiker 2024-11-05 12:57:03 +09:00
• 861bb1274f
  
  fortify: override default usage function Ophestra Umiker 2024-11-05 00:12:31 +09:00
• 714818c8aa
  
  fortify: implement cleaner argument structure Ophestra Umiker 2024-11-04 23:08:29 +09:00
• 69cc64ef56
  
  linux: provide access to stdout Ophestra Umiker 2024-11-04 22:55:46 +09:00
• fc25ac2523
  
  app: separate auto etc from permissive defaults Ophestra Umiker 2024-11-04 22:18:05 +09:00
• d909b1190a
  
  app/config: UseRealUID as true in template Ophestra Umiker 2024-11-04 19:45:31 +09:00
• cfd05b10f1
  
  release: 0.0.11 Ophestra Umiker 2024-11-04 13:46:47 +09:00
• aa067436a7
  
  workflows: build all packages with full ldflags Ophestra Umiker 2024-11-04 13:43:57 +09:00
• d7df24c999
  
  fmsg: drop messages when msgbuf is full during withhold Ophestra Umiker 2024-11-04 12:56:19 +09:00