index
:
hakurei
develop
master
staging
wip-openssl4
low-level userspace tooling for Rosa OS
about
summary
refs
log
tree
commit
diff
homepage
log msg
author
committer
range
Age
Commit message (
Expand
)
Author
2024-10-17
init: post initial process death exit timeout
Ophestra Umiker
2024-10-17
workflows: test workflow to run tests every commit
Ophestra Umiker
2024-10-17
workflows: add lines between steps
Ophestra Umiker
2024-10-16
system: move enablements from state package
Ophestra Umiker
2024-10-16
app: port app to use the system package
Ophestra Umiker
2024-10-16
system: isolate app/system into generic implementation
Ophestra Umiker
2024-10-16
fmsg/errors: isolate app/error into a separate package
Ophestra Umiker
2024-10-16
dbus: various accessors for dbus.Proxy internal fields
Ophestra Umiker
2024-10-15
release: 0.0.4
Ophestra Umiker
2024-10-15
helper/bwrap: add fortify permissive default test case
Ophestra Umiker
2024-10-15
helper/bwrap: sort SetEnv arguments
Ophestra Umiker
2024-10-15
app: filter /tmp from permissive default
Ophestra Umiker
2024-10-15
helper/bwrap: ordered filesystem args
Ophestra Umiker
2024-10-14
helper/bwrap: format mode in octal
Ophestra Umiker
2024-10-14
fortify: move PR_SET_DUMPABLE to the beginning of main
Ophestra Umiker
2024-10-14
release: 0.0.3
Ophestra Umiker
2024-10-14
init: custom init process inside sandbox
Ophestra Umiker
2024-10-13
fortify: refuse to run as root
Ophestra Umiker
2024-10-13
shim: update payload comment
Ophestra Umiker
2024-10-13
shim: re-exec self on startup
Ophestra Umiker
2024-10-13
shim: get rid of insane launch condition
Ophestra Umiker
2024-10-13
app: generate and replace passwd and group files
Ophestra Umiker
2024-10-13
app/config: map bwrap tmpfs in app config
Ophestra Umiker
2024-10-13
helper/bwrap: allow pushing generic arguments to the end of argument stream
Ophestra Umiker
2024-10-13
app/config: always use nobody UID within sandbox
Ophestra Umiker
2024-10-13
fortify: set SUID_DUMP_DISABLE after flag parse
Ophestra Umiker
2024-10-13
app/seal: skip /mnt in permissive default
Ophestra Umiker
2024-10-13
update README document
Ophestra Umiker
2024-10-12
nix: pass $SHELL for shell interpreter
Ophestra Umiker
2024-10-12
app/seal: allow GPU access in permissive default when either X11/Wayland is e...
Ophestra Umiker
2024-10-12
app: filesystem struct that maps to all bwrap bind options
Ophestra Umiker
2024-10-12
fortify/config: flag to print template config serialised as JSON
Ophestra Umiker
2024-10-12
app: supply template config
Ophestra Umiker
2024-10-12
fortify: move error handling to separate file
Ophestra Umiker
2024-10-12
fortify: clean up config loading
Ophestra Umiker
2024-10-12
fortify: move flag handling to separate files
Ophestra Umiker
2024-10-12
helper: remove unused bwrap config field
Ophestra Umiker
2024-10-12
dbus: improve unsealed behaviour coverage
Ophestra Umiker
2024-10-11
app: integrate bwrap into environment setup
Ophestra Umiker
2024-10-11
shim: use bwrap config as it is
Ophestra Umiker
2024-10-11
helper/bwrap: move interfaceArgs before stringArgs
Ophestra Umiker
2024-10-11
app: migrate to new shim implementation
Ophestra Umiker
2024-10-11
shim: new shim implementation
Ophestra Umiker
2024-10-11
verbose: overridable prefix
Ophestra Umiker
2024-10-11
helper/bwrap: proc, dev and mqueue as string arguments
Ophestra Umiker
2024-10-10
app: tag ACL operations for revert
Ophestra Umiker
2024-10-10
app: hardlink sockets to process-specific share local to XDG_RUNTIME_DIR
Ophestra Umiker
2024-10-10
state/simple: prefix store path
Ophestra Umiker
2024-10-10
release: 0.0.2
Ophestra Umiker
2024-10-10
app: remove bubblewrap launch method
Ophestra Umiker
[next]