WIP: internal/pipewire: integrate pw_security_context #28

Closed

ophestra wants to merge 2 commits from pipewire into staging

pull from: pipewire

merge into: security:staging

security:master

security:develop

security:staging

Conversation 2 Commits 2 Files Changed 12 +775 -4

ophestra commented 2025-11-18 22:45:06 +09:00

Owner

Copy Link

This is required for securely providing access to PipeWire.

This change has already been manually tested and confirmed to work correctly.

This is required for securely providing access to PipeWire. This change has already been manually tested and confirmed to work correctly.

👍 1 ❤️ 1 🎉 1

ophestra added 2 commits 2025-11-18 22:45:07 +09:00

treewide: drop static linking requirement ... 1f10717480

This will likely not be merged, but is required for linking libpipewire-0.3.

This breaks the dist tarball.

Signed-off-by: Ophestra <cat@gensokyo.uk>

internal/pipewire: integrate pw_security_context ... 2a6c8ba51b

This is required for securely providing access to PipeWire.

This change has already been manually tested and confirmed to work correctly.

This unfortunately cannot be upstreamed in its current state as libpipewire-0.3 breaks static linking.

Signed-off-by: Ophestra <cat@gensokyo.uk>

ophestra commented 2025-11-18 22:45:14 +09:00

Author

Owner

Copy Link

This unfortunately cannot be upstreamed in its current state as libpipewire-0.3 breaks static linking.

This unfortunately cannot be upstreamed in its current state as libpipewire-0.3 breaks static linking.

👍 1

ophestra added a new dependency 2025-11-18 22:46:07 +09:00

#26 Harden access to PipeWire via `pw_security_context`

cat force-pushed pipewire from 2a6c8ba51b to 81430987e7 2025-11-19 06:37:43 +09:00 Compare

cat force-pushed pipewire from 81430987e7 to df389e239f 2025-11-19 06:56:58 +09:00 Compare

cat force-pushed pipewire from df389e239f to 2c323cdf5d 2025-11-19 07:04:11 +09:00 Compare

ophestra commented 2025-11-23 16:25:01 +09:00

Author

Owner

Copy Link

Superseded by internal implementation of protocol native.

Superseded by internal implementation of protocol native.

ophestra closed this pull request 2025-11-23 16:25:01 +09:00

ophestra deleted branch pipewire 2025-11-23 16:25:14 +09:00

ophestra removed a dependency 2025-12-06 21:20:57 +09:00

#26 Harden access to PipeWire via `pw_security_context`

All checks were successful

Hide all checks

Test / Create distribution (push) Successful in 37s

Details

Test / Sandbox (push) Successful in 2m28s

Details

Test / Hakurei (push) Successful in 3m26s

Details

Test / Hpkg (push) Successful in 4m15s

Details

Test / Sandbox (race detector) (push) Successful in 4m24s

Details

Test / Hakurei (race detector) (push) Successful in 5m14s

Details

Test / Flake checks (push) Successful in 1m31s

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

Compat

Breaking

Breaking change that won't be backward compatible

Kind

Bug

Something is not working

Kind

Documentation

Documentation changes

Kind

Enhancement

Improve existing functionality

Kind

Feature

New functionality

Kind

Security

This is security issue

Kind

Testing

Issue or pull request related to testing

Priority

Critical

The priority is critical

Priority

High

The priority is high

Priority

Low

The priority is low

Priority

Medium

The priority is medium

Reviewed

Confirmed

Issue has been confirmed

Reviewed

Duplicate

This issue or pull request already exists

Reviewed

Invalid

Invalid issue

Reviewed

Won't Fix

This issue won't be fixed

Status

Abandoned

Somebody has started to work on this but abandoned work

Status

Blocked

Something is blocking this issue or pull request

Status

Need More Info

Feedback is required to reproduce issue or to continue work

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

cat maemachinebroke noir ophestra

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: security/hakurei#28