hakurei/internal/app/system.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/internal/app/system.go?h=develop2025-02-18T16:36:29Zapp: merge seal with sys2025-02-18T16:36:29ZOphestracat@gensokyo.uk2025-02-18T16:36:07Zurn:sha1:dfd94675236844ebcec9ea51f2547ad4fd049357
The existence of the appSealSys struct was an implementation detail obsolete since system.I was integrated in 084cd84f36a1d608541b4aa4e1e95334395d8953.
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: store values with string representation2025-02-18T15:25:00ZOphestracat@gensokyo.uk2025-02-18T15:25:00Zurn:sha1:a748d40745611b471ee2a8dd79656aaa174eb03c
Improves code readability without changing memory layout.
Signed-off-by: Ophestra <cat@gensokyo.uk>
system: move out of internal2025-02-17T10:00:43ZOphestracat@gensokyo.uk2025-02-17T10:00:43Zurn:sha1:90cb01b2748550228d0bc179691a19ebb996fc36
Signed-off-by: Ophestra <cat@gensokyo.uk>
system/wayland: sync file at caller specified address2025-02-17T04:24:17ZOphestracat@gensokyo.uk2025-02-17T04:24:17Zurn:sha1:3ae2ab652e9cd1d6250dbde8ae0f9b9fe90afc72
Storing this in sys is incredibly ugly: sys should be stateless and Ops must keep track of their state.
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: merge share methods2024-12-28T02:12:35ZOphestracat@gensokyo.uk2024-12-28T02:12:35Zurn:sha1:0107620d8c174dcf9237c16d4b4b7b2f6955a214
This significantly increases readability and makes order of ops more obvious.
Signed-off-by: Ophestra <cat@gensokyo.uk>
migrate to git.gensokyo.uk/security/fortify2024-12-19T15:20:02ZOphestra Umikercat@ophivana.moe2024-12-19T15:20:02Zurn:sha1:df6fc298f608eb106229efc742f0ef8ce9f78e8b
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app: alternative inner home path2024-11-17T15:18:21ZOphestra Umikercat@ophivana.moe2024-11-17T15:18:21Zurn:sha1:05b7dbf066cb74d2901ff9acb3a42662a2af722e
Support binding home to an alternative path in the mount namespace.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app: integrate fsu2024-11-16T12:19:45ZOphestra Umikercat@ophivana.moe2024-11-16T12:19:45Zurn:sha1:df33123bd7f1e0cb4e98580b7e63818c82aa7206
This removes the dependency on external user switchers like sudo/machinectl and decouples fortify user ids from the passwd database.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app: support mapping target uid as privileged uid in sandbox2024-11-03T18:15:39ZOphestra Umikercat@ophivana.moe2024-11-03T18:15:39Zurn:sha1:af15b1c048e97c092f7a5eeb30f20d13cd972486
Chromium's D-Bus client implementation refuses to work when its getuid call returns a different value than what the D-Bus server is running as. The reason behind this is not fully understood, but this workaround is implemented to support chromium and electron apps. This is not used by default since it has many side effects that break many other programs, like SSH on NixOS.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
cmd: shim and init into separate binaries2024-11-01T18:13:57ZOphestra Umikercat@ophivana.moe2024-11-01T18:03:44Zurn:sha1:584732f80ab91afb349720cfb8e9979ed2ba173e
This change also fixes a deadlock when shim fails to connect and complete the setup.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>