Ophestra e4801d0e23

app: set up acl on X11 socket ...

The socket is typically owned by the priv-user, and inaccessible by the target user, so just allowing access to the directory is not enough. This change fixes this oversight and add checks that will also be useful for merging #1.

Signed-off-by: Ophestra <cat@gensokyo.uk>

# Conflicts:
#	test/sandbox/case/device.nix
#	test/sandbox/case/tty.nix

2025-08-18 11:56:18 +09:00

..

acl

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

dbus

container: use absolute for pathname

2025-08-11 04:56:42 +09:00

internal/xcb

system: make xcb internal

2025-02-17 19:07:53 +09:00

wayland

system: move system access packages

2025-07-02 21:52:07 +09:00

acl_test.go

app: set up acl on X11 socket

2025-08-18 11:56:18 +09:00

acl.go

app: set up acl on X11 socket

2025-08-18 11:56:18 +09:00

dbus.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

enablement_test.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

enablement.go

system: optimise string formatting

2025-03-25 04:42:30 +09:00

link.go

sandbox: wrap fmsg interface

2025-03-17 02:44:07 +09:00

mkdir_test.go

container: use more reliable nonexistence

2025-07-18 23:18:26 +09:00

mkdir.go

system: optimise string formatting

2025-03-25 04:42:30 +09:00

op_internal_test.go

system: optimise string formatting

2025-03-25 04:42:30 +09:00

op_test.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

op.go

system: optimise string formatting

2025-03-25 04:42:30 +09:00

output.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

tmpfiles_test.go

treewide: rename to hakurei

2025-06-25 04:57:41 +09:00

tmpfiles.go

sandbox: wrap fmsg interface

2025-03-17 02:44:07 +09:00

wayland.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

xhost_test.go

system: move out of internal

2025-02-17 19:00:43 +09:00

xhost.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00