aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2024-10-23system: sys comparison methodOphestra Umiker
2024-10-23system: return sys in queueing methodsOphestra Umiker
2024-10-21shim: abort setup on failed start and process exitOphestra Umiker
2024-10-21fmsg: produce all output through fmsgOphestra Umiker
2024-10-21app: move wayland mediation to shim packageOphestra Umiker
2024-10-20release: 0.0.7Ophestra Umiker
2024-10-20migrate to git.ophivana.moe/security/fortifyOphestra Umiker
2024-10-20update README documentOphestra Umiker
2024-10-20app: move app ID to app structOphestra Umiker
2024-10-18workflows: call apt-get without sudoOphestra Umiker
2024-10-18state: store launch method instead of launcher pathOphestra Umiker
2024-10-18release: 0.0.6Ophestra Umiker
2024-10-18app/share: fix order to ensure SharePath before any of its subdirectoriesOphestra Umiker
2024-10-17release: 0.0.5Ophestra Umiker
2024-10-17init: start timeout only if reaped PID is the initial processOphestra Umiker
2024-10-17nix: remove fortify package from default devShellOphestra Umiker
2024-10-17system: tests for all Op implementations except DBusOphestra Umiker
2024-10-17system/mkdir: type label in String methodOphestra Umiker
2024-10-17ldd: run ldd with read-only filesystem and unshared netOphestra Umiker
2024-10-17system: handle invalid enablement in String methodOphestra Umiker
2024-10-17init: post initial process death exit timeoutOphestra Umiker
2024-10-17workflows: test workflow to run tests every commitOphestra Umiker
2024-10-17workflows: add lines between stepsOphestra Umiker
2024-10-16system: move enablements from state packageOphestra Umiker
2024-10-16app: port app to use the system packageOphestra Umiker
2024-10-16system: isolate app/system into generic implementationOphestra Umiker
2024-10-16fmsg/errors: isolate app/error into a separate packageOphestra Umiker
2024-10-16dbus: various accessors for dbus.Proxy internal fieldsOphestra Umiker
2024-10-15release: 0.0.4Ophestra Umiker
2024-10-15helper/bwrap: add fortify permissive default test caseOphestra Umiker
2024-10-15helper/bwrap: sort SetEnv argumentsOphestra Umiker
2024-10-15app: filter /tmp from permissive defaultOphestra Umiker
2024-10-15helper/bwrap: ordered filesystem argsOphestra Umiker
2024-10-14helper/bwrap: format mode in octalOphestra Umiker
2024-10-14fortify: move PR_SET_DUMPABLE to the beginning of mainOphestra Umiker
2024-10-14release: 0.0.3Ophestra Umiker
2024-10-14init: custom init process inside sandboxOphestra Umiker
2024-10-13fortify: refuse to run as rootOphestra Umiker
2024-10-13shim: update payload commentOphestra Umiker
2024-10-13shim: re-exec self on startupOphestra Umiker
2024-10-13shim: get rid of insane launch conditionOphestra Umiker
2024-10-13app: generate and replace passwd and group filesOphestra Umiker
2024-10-13app/config: map bwrap tmpfs in app configOphestra Umiker
2024-10-13helper/bwrap: allow pushing generic arguments to the end of argument streamOphestra Umiker
2024-10-13app/config: always use nobody UID within sandboxOphestra Umiker
2024-10-13fortify: set SUID_DUMP_DISABLE after flag parseOphestra Umiker
2024-10-13app/seal: skip /mnt in permissive defaultOphestra Umiker
2024-10-13update README documentOphestra Umiker
2024-10-12nix: pass $SHELL for shell interpreterOphestra Umiker
2024-10-12app/seal: allow GPU access in permissive default when either X11/Wayland is e...Ophestra Umiker
generated by cgit v1.3.1 (git 2.54.0) at 2026-08-31 15:34:00 +0000