aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2024-10-25system: print number of ops completed at point of failureOphestra Umiker
2024-10-25system: include more info in ACL StringerOphestra Umiker
2024-10-25app/start: cleaner command not found messageOphestra Umiker
2024-10-25internal: ReadDir wrapper return fs.DirEntryOphestra Umiker
2024-10-25app/seal: symlink /etc entries in permissive defaultOphestra Umiker
2024-10-25app/config: support creating symlinks within sandboxOphestra Umiker
2024-10-25helper/bwrap: register generic PermConfig types with gobOphestra Umiker
2024-10-25shim: kill shim if setup becomes impossibleOphestra Umiker
2024-10-25internal: use fallback paths when XDG_RUNTIME_DIR is not absoluteOphestra Umiker
2024-10-23internal: wrap calls to os standard library functionsOphestra Umiker
2024-10-23system: sys comparison methodOphestra Umiker
2024-10-23system: return sys in queueing methodsOphestra Umiker
2024-10-21shim: abort setup on failed start and process exitOphestra Umiker
2024-10-21fmsg: produce all output through fmsgOphestra Umiker
2024-10-21app: move wayland mediation to shim packageOphestra Umiker
2024-10-20release: 0.0.7Ophestra Umiker
2024-10-20migrate to git.ophivana.moe/security/fortifyOphestra Umiker
2024-10-20update README documentOphestra Umiker
2024-10-20app: move app ID to app structOphestra Umiker
2024-10-18workflows: call apt-get without sudoOphestra Umiker
2024-10-18state: store launch method instead of launcher pathOphestra Umiker
2024-10-18release: 0.0.6Ophestra Umiker
2024-10-18app/share: fix order to ensure SharePath before any of its subdirectoriesOphestra Umiker
2024-10-17release: 0.0.5Ophestra Umiker
2024-10-17init: start timeout only if reaped PID is the initial processOphestra Umiker
2024-10-17nix: remove fortify package from default devShellOphestra Umiker
2024-10-17system: tests for all Op implementations except DBusOphestra Umiker
2024-10-17system/mkdir: type label in String methodOphestra Umiker
2024-10-17ldd: run ldd with read-only filesystem and unshared netOphestra Umiker
2024-10-17system: handle invalid enablement in String methodOphestra Umiker
2024-10-17init: post initial process death exit timeoutOphestra Umiker
2024-10-17workflows: test workflow to run tests every commitOphestra Umiker
2024-10-17workflows: add lines between stepsOphestra Umiker
2024-10-16system: move enablements from state packageOphestra Umiker
2024-10-16app: port app to use the system packageOphestra Umiker
2024-10-16system: isolate app/system into generic implementationOphestra Umiker
2024-10-16fmsg/errors: isolate app/error into a separate packageOphestra Umiker
2024-10-16dbus: various accessors for dbus.Proxy internal fieldsOphestra Umiker
2024-10-15release: 0.0.4Ophestra Umiker
2024-10-15helper/bwrap: add fortify permissive default test caseOphestra Umiker
2024-10-15helper/bwrap: sort SetEnv argumentsOphestra Umiker
2024-10-15app: filter /tmp from permissive defaultOphestra Umiker
2024-10-15helper/bwrap: ordered filesystem argsOphestra Umiker
2024-10-14helper/bwrap: format mode in octalOphestra Umiker
2024-10-14fortify: move PR_SET_DUMPABLE to the beginning of mainOphestra Umiker
2024-10-14release: 0.0.3Ophestra Umiker
2024-10-14init: custom init process inside sandboxOphestra Umiker
2024-10-13fortify: refuse to run as rootOphestra Umiker
2024-10-13shim: update payload commentOphestra Umiker
2024-10-13shim: re-exec self on startupOphestra Umiker