hakurei/cmd/fsu, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/cmd/fsu?h=develop2025-06-24T19:57:41Ztreewide: rename to hakurei2025-06-24T19:57:41ZOphestracat@gensokyo.uk2025-06-24T18:59:52Zurn:sha1:87e008d56de974947ebb99c2cc40b25d3c2cf43e
Fortify makes little sense for a container tool.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: update flake lock2025-06-04T19:05:39ZOphestracat@gensokyo.uk2025-06-02T09:53:28Zurn:sha1:b7e991de5bfa81bff474d07142555df51202640a
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fsu: allow switch from fpkg2025-02-26T10:42:28ZOphestracat@gensokyo.uk2025-02-26T10:42:28Zurn:sha1:45ad788c6d03bf368010fa8e2a39028bdf0fc078
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: separate fsu from package2025-02-23T09:13:37ZOphestracat@gensokyo.uk2025-02-23T09:13:06Zurn:sha1:8bf162820b291cc3889fd05f4ba7cd4fcbc1d15d
This appears to be the only way to build them with different configuration. This enables static linking in the main package.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fsu: check parse behaviour2025-02-14T07:43:55ZOphestracat@gensokyo.uk2025-02-14T07:43:55Zurn:sha1:1fd571d5619459bd29077b84418d913a8c5462a0
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fsu: revert offset in error message2025-02-14T06:31:39ZOphestracat@gensokyo.uk2025-02-14T06:31:39Zurn:sha1:be30e2f11ebc94fb8a78abe61a5d5531c38805b7
Signed-off-by: Ophestra <cat@gensokyo.uk>
proc/priv/shim: merge shim into main program2025-01-17T14:43:32ZOphestracat@gensokyo.uk2025-01-17T14:43:32Zurn:sha1:ea8f228af36b2c9ae9918f7760c3af4f1e21cfa2
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fshim: switch to setup pipe2024-12-18T10:39:25ZOphestra Umikercat@ophivana.moe2024-12-18T10:39:25Zurn:sha1:52f21a19f3230e62387bebb88d45d51b6375ac8d
The socket-based approach is no longer necessary as fsu allows extra files and sudo compatibility is no longer relevant.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
cmd/fsu: check uid range before syscall2024-12-17T04:01:36ZOphestra Umikercat@ophivana.moe2024-12-17T04:01:36Zurn:sha1:b453f70ca2016d8ab791968a3f2bc9ba2425bd2f
This limits potential exploits to the fortify uid range.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app: integrate fsu2024-11-16T12:19:45ZOphestra Umikercat@ophivana.moe2024-11-16T12:19:45Zurn:sha1:df33123bd7f1e0cb4e98580b7e63818c82aa7206
This removes the dependency on external user switchers like sudo/machinectl and decouples fortify user ids from the passwd database.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>