aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2024-10-17init: start timeout only if reaped PID is the initial processOphestra Umiker
2024-10-17nix: remove fortify package from default devShellOphestra Umiker
2024-10-17system: tests for all Op implementations except DBusOphestra Umiker
2024-10-17system/mkdir: type label in String methodOphestra Umiker
2024-10-17ldd: run ldd with read-only filesystem and unshared netOphestra Umiker
2024-10-17system: handle invalid enablement in String methodOphestra Umiker
2024-10-17init: post initial process death exit timeoutOphestra Umiker
2024-10-17workflows: test workflow to run tests every commitOphestra Umiker
2024-10-17workflows: add lines between stepsOphestra Umiker
2024-10-16system: move enablements from state packageOphestra Umiker
2024-10-16app: port app to use the system packageOphestra Umiker
2024-10-16system: isolate app/system into generic implementationOphestra Umiker
2024-10-16fmsg/errors: isolate app/error into a separate packageOphestra Umiker
2024-10-16dbus: various accessors for dbus.Proxy internal fieldsOphestra Umiker
2024-10-15release: 0.0.4Ophestra Umiker
2024-10-15helper/bwrap: add fortify permissive default test caseOphestra Umiker
2024-10-15helper/bwrap: sort SetEnv argumentsOphestra Umiker
2024-10-15app: filter /tmp from permissive defaultOphestra Umiker
2024-10-15helper/bwrap: ordered filesystem argsOphestra Umiker
2024-10-14helper/bwrap: format mode in octalOphestra Umiker
2024-10-14fortify: move PR_SET_DUMPABLE to the beginning of mainOphestra Umiker
2024-10-14release: 0.0.3Ophestra Umiker
2024-10-14init: custom init process inside sandboxOphestra Umiker
2024-10-13fortify: refuse to run as rootOphestra Umiker
2024-10-13shim: update payload commentOphestra Umiker
2024-10-13shim: re-exec self on startupOphestra Umiker
2024-10-13shim: get rid of insane launch conditionOphestra Umiker
2024-10-13app: generate and replace passwd and group filesOphestra Umiker
2024-10-13app/config: map bwrap tmpfs in app configOphestra Umiker
2024-10-13helper/bwrap: allow pushing generic arguments to the end of argument streamOphestra Umiker
2024-10-13app/config: always use nobody UID within sandboxOphestra Umiker
2024-10-13fortify: set SUID_DUMP_DISABLE after flag parseOphestra Umiker
2024-10-13app/seal: skip /mnt in permissive defaultOphestra Umiker
2024-10-13update README documentOphestra Umiker
2024-10-12nix: pass $SHELL for shell interpreterOphestra Umiker
2024-10-12app/seal: allow GPU access in permissive default when either X11/Wayland is e...Ophestra Umiker
2024-10-12app: filesystem struct that maps to all bwrap bind optionsOphestra Umiker
2024-10-12fortify/config: flag to print template config serialised as JSONOphestra Umiker
2024-10-12app: supply template configOphestra Umiker
2024-10-12fortify: move error handling to separate fileOphestra Umiker
2024-10-12fortify: clean up config loadingOphestra Umiker
2024-10-12fortify: move flag handling to separate filesOphestra Umiker
2024-10-12helper: remove unused bwrap config fieldOphestra Umiker
2024-10-12dbus: improve unsealed behaviour coverageOphestra Umiker
2024-10-11app: integrate bwrap into environment setupOphestra Umiker
2024-10-11shim: use bwrap config as it isOphestra Umiker
2024-10-11helper/bwrap: move interfaceArgs before stringArgsOphestra Umiker
2024-10-11app: migrate to new shim implementationOphestra Umiker
2024-10-11shim: new shim implementationOphestra Umiker
2024-10-11verbose: overridable prefixOphestra Umiker
generated by cgit v1.3.1 (git 2.54.0) at 2026-09-01 16:10:14 +0000