aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2024-11-03system/dbus: buffer xdg-dbus-proxy messagesOphestra Umiker
2024-11-03cmd/fshim/ipc: friendly setup timeout messageOphestra Umiker
2024-11-02fortify: replace direct syscall with prctl wrapperOphestra Umiker
2024-11-02cmd: shim and init into separate binariesOphestra Umiker
2024-10-28add package doc commentsOphestra Umiker
2024-10-28release: 0.0.10Ophestra Umiker
2024-10-28fsu: check parent executable pathOphestra Umiker
2024-10-28app/start: skip cleanup if shim is nilOphestra Umiker
2024-10-28shim: expose checkPid in constructorOphestra Umiker
2024-10-28fsu: implement simple setuid user switcherOphestra Umiker
2024-10-27fortify: exit if seal returns errorOphestra Umiker
2024-10-27system/dbus: compare sealed value by stringOphestra Umiker
2024-10-27system: move sd_booted implementation to os abstractionOphestra Umiker
2024-10-27release: 0.0.9Ophestra Umiker
2024-10-27fmsg: initialise dequeue prior to withhold/resumeOphestra Umiker
2024-10-27release: 0.0.8Ophestra Umiker
2024-10-27shim: user switcher process management structOphestra Umiker
2024-10-26fmsg: support temporarily withholding outputOphestra Umiker
2024-10-25app: separate nixos test cases from testsOphestra Umiker
2024-10-25app: test app permissive defaults sealing behaviourOphestra Umiker
2024-10-25system: print number of ops completed at point of failureOphestra Umiker
2024-10-25system: include more info in ACL StringerOphestra Umiker
2024-10-25app/start: cleaner command not found messageOphestra Umiker
2024-10-25internal: ReadDir wrapper return fs.DirEntryOphestra Umiker
2024-10-25app/seal: symlink /etc entries in permissive defaultOphestra Umiker
2024-10-25app/config: support creating symlinks within sandboxOphestra Umiker
2024-10-25helper/bwrap: register generic PermConfig types with gobOphestra Umiker
2024-10-25shim: kill shim if setup becomes impossibleOphestra Umiker
2024-10-25internal: use fallback paths when XDG_RUNTIME_DIR is not absoluteOphestra Umiker
2024-10-23internal: wrap calls to os standard library functionsOphestra Umiker
2024-10-23system: sys comparison methodOphestra Umiker
2024-10-23system: return sys in queueing methodsOphestra Umiker
2024-10-21shim: abort setup on failed start and process exitOphestra Umiker
2024-10-21fmsg: produce all output through fmsgOphestra Umiker
2024-10-21app: move wayland mediation to shim packageOphestra Umiker
2024-10-20release: 0.0.7Ophestra Umiker
2024-10-20migrate to git.ophivana.moe/security/fortifyOphestra Umiker
2024-10-20update README documentOphestra Umiker
2024-10-20app: move app ID to app structOphestra Umiker
2024-10-18workflows: call apt-get without sudoOphestra Umiker
2024-10-18state: store launch method instead of launcher pathOphestra Umiker
2024-10-18release: 0.0.6Ophestra Umiker
2024-10-18app/share: fix order to ensure SharePath before any of its subdirectoriesOphestra Umiker
2024-10-17release: 0.0.5Ophestra Umiker
2024-10-17init: start timeout only if reaped PID is the initial processOphestra Umiker
2024-10-17nix: remove fortify package from default devShellOphestra Umiker
2024-10-17system: tests for all Op implementations except DBusOphestra Umiker
2024-10-17system/mkdir: type label in String methodOphestra Umiker
2024-10-17ldd: run ldd with read-only filesystem and unshared netOphestra Umiker
2024-10-17system: handle invalid enablement in String methodOphestra Umiker