aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2024-11-18fortify: permissive defaults resolve home directory from osOphestra Umiker
2024-11-18nix: wrap program from libexecOphestra Umiker
2024-11-18nix: integrate dynamic usersOphestra Umiker
2024-11-18app: alternative inner home pathOphestra Umiker
2024-11-17fmsg: add to wg prior to enqueueOphestra Umiker
2024-11-17app/start: check for cleanup and abort conditionOphestra Umiker
2024-11-17app: append # for ChangeHosts message with numerical uidOphestra Umiker
2024-11-17cmd/fuserdb: generate group entriesOphestra Umiker
2024-11-17cmd/fuserdb: systemd userdb drop-in entries generatorOphestra Umiker
2024-11-16app: integrate fsuOphestra Umiker
2024-11-10nix: remove portal paths from defaultOphestra Umiker
2024-11-09app/config: rename map_real_uid from use_real_uidOphestra Umiker
2024-11-09cmd/fshim: set no_new_privs flagOphestra Umiker
2024-11-08nix: remove absolute Exec pathsOphestra Umiker
2024-11-06nix: keep fshim and finit namesOphestra Umiker
2024-11-06nix: improve start scriptOphestra Umiker
2024-11-06release: 0.1.0Ophestra Umiker
2024-11-06update README documentOphestra Umiker
2024-11-06nix: generate strict sandbox configurationOphestra Umiker
2024-11-06app: support full /dev accessOphestra Umiker
2024-11-05fortify: root check before command handlingOphestra Umiker
2024-11-05fortify: override default usage functionOphestra Umiker
2024-11-05fortify: implement cleaner argument structureOphestra Umiker
2024-11-04linux: provide access to stdoutOphestra Umiker
2024-11-04app: separate auto etc from permissive defaultsOphestra Umiker
2024-11-04app/config: UseRealUID as true in templateOphestra Umiker
2024-11-04release: 0.0.11Ophestra Umiker
2024-11-04workflows: build all packages with full ldflagsOphestra Umiker
2024-11-04fmsg: drop messages when msgbuf is full during withholdOphestra Umiker
2024-11-04cmd/fsu: remove import of internal packageOphestra Umiker
2024-11-04app: support mapping target uid as privileged uid in sandboxOphestra Umiker
2024-11-04app: format mapped uid instead of real uidOphestra Umiker
2024-11-03system/dbus: buffer xdg-dbus-proxy messagesOphestra Umiker
2024-11-03cmd/fshim/ipc: friendly setup timeout messageOphestra Umiker
2024-11-02fortify: replace direct syscall with prctl wrapperOphestra Umiker
2024-11-02cmd: shim and init into separate binariesOphestra Umiker
2024-10-28add package doc commentsOphestra Umiker
2024-10-28release: 0.0.10Ophestra Umiker
2024-10-28fsu: check parent executable pathOphestra Umiker
2024-10-28app/start: skip cleanup if shim is nilOphestra Umiker
2024-10-28shim: expose checkPid in constructorOphestra Umiker
2024-10-28fsu: implement simple setuid user switcherOphestra Umiker
2024-10-27fortify: exit if seal returns errorOphestra Umiker
2024-10-27system/dbus: compare sealed value by stringOphestra Umiker
2024-10-27system: move sd_booted implementation to os abstractionOphestra Umiker
2024-10-27release: 0.0.9Ophestra Umiker
2024-10-27fmsg: initialise dequeue prior to withhold/resumeOphestra Umiker
2024-10-27release: 0.0.8Ophestra Umiker
2024-10-27shim: user switcher process management structOphestra Umiker
2024-10-26fmsg: support temporarily withholding outputOphestra Umiker