aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2024-10-14release: 0.0.3Ophestra Umiker
2024-10-14init: custom init process inside sandboxOphestra Umiker
2024-10-13fortify: refuse to run as rootOphestra Umiker
2024-10-13shim: update payload commentOphestra Umiker
2024-10-13shim: re-exec self on startupOphestra Umiker
2024-10-13shim: get rid of insane launch conditionOphestra Umiker
2024-10-13app: generate and replace passwd and group filesOphestra Umiker
2024-10-13app/config: map bwrap tmpfs in app configOphestra Umiker
2024-10-13helper/bwrap: allow pushing generic arguments to the end of argument streamOphestra Umiker
2024-10-13app/config: always use nobody UID within sandboxOphestra Umiker
2024-10-13fortify: set SUID_DUMP_DISABLE after flag parseOphestra Umiker
2024-10-13app/seal: skip /mnt in permissive defaultOphestra Umiker
2024-10-13update README documentOphestra Umiker
2024-10-12nix: pass $SHELL for shell interpreterOphestra Umiker
2024-10-12app/seal: allow GPU access in permissive default when either X11/Wayland is e...Ophestra Umiker
2024-10-12app: filesystem struct that maps to all bwrap bind optionsOphestra Umiker
2024-10-12fortify/config: flag to print template config serialised as JSONOphestra Umiker
2024-10-12app: supply template configOphestra Umiker
2024-10-12fortify: move error handling to separate fileOphestra Umiker
2024-10-12fortify: clean up config loadingOphestra Umiker
2024-10-12fortify: move flag handling to separate filesOphestra Umiker
2024-10-12helper: remove unused bwrap config fieldOphestra Umiker
2024-10-12dbus: improve unsealed behaviour coverageOphestra Umiker
2024-10-11app: integrate bwrap into environment setupOphestra Umiker
2024-10-11shim: use bwrap config as it isOphestra Umiker
2024-10-11helper/bwrap: move interfaceArgs before stringArgsOphestra Umiker
2024-10-11app: migrate to new shim implementationOphestra Umiker
2024-10-11shim: new shim implementationOphestra Umiker
2024-10-11verbose: overridable prefixOphestra Umiker
2024-10-11helper/bwrap: proc, dev and mqueue as string argumentsOphestra Umiker
2024-10-10app: tag ACL operations for revertOphestra Umiker
2024-10-10app: hardlink sockets to process-specific share local to XDG_RUNTIME_DIROphestra Umiker
2024-10-10state/simple: prefix store pathOphestra Umiker
2024-10-10release: 0.0.2Ophestra Umiker
2024-10-10app: remove bubblewrap launch methodOphestra Umiker
2024-10-09ldd: separate Parse from Exec and trim spaceOphestra Umiker
2024-10-09release: 0.0.1Ophestra Umiker
2024-10-09dbus/run: support running xdg-dbus-proxy in a restrictive bubblewrap sandboxOphestra Umiker
2024-10-09ldd: implement strict ldd output parserOphestra Umiker
2024-10-09helper/bwrap: pass --unshare-user when unshare everythingOphestra Umiker
2024-10-09helper/bwrap: check args only for internal testsOphestra Umiker
2024-10-08helper: implementation of helper.Helper using bwrapOphestra Umiker
2024-10-08helper: generalise helper.Helper testOphestra Umiker
2024-10-07helper: move test sample data out of directOphestra Umiker
2024-10-07dbus: use name resolved by exec.CommandOphestra Umiker
2024-10-07helper: helper.Helper interfaceOphestra Umiker
2024-10-07helper: move bwrap into helperOphestra Umiker
2024-10-07helper/args: MustNewCheckedArgs for cleaner hardcoded argsOphestra Umiker
2024-10-07helper: separate pipes from HelperOphestra Umiker
2024-10-06helper: test non-existent helpersOphestra Umiker
generated by cgit v1.3.1 (git 2.54.0) at 2026-08-30 23:44:29 +0000