aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2024-10-17init: post initial process death exit timeoutOphestra Umiker
2024-10-17workflows: test workflow to run tests every commitOphestra Umiker
2024-10-17workflows: add lines between stepsOphestra Umiker
2024-10-16system: move enablements from state packageOphestra Umiker
2024-10-16app: port app to use the system packageOphestra Umiker
2024-10-16system: isolate app/system into generic implementationOphestra Umiker
2024-10-16fmsg/errors: isolate app/error into a separate packageOphestra Umiker
2024-10-16dbus: various accessors for dbus.Proxy internal fieldsOphestra Umiker
2024-10-15release: 0.0.4Ophestra Umiker
2024-10-15helper/bwrap: add fortify permissive default test caseOphestra Umiker
2024-10-15helper/bwrap: sort SetEnv argumentsOphestra Umiker
2024-10-15app: filter /tmp from permissive defaultOphestra Umiker
2024-10-15helper/bwrap: ordered filesystem argsOphestra Umiker
2024-10-14helper/bwrap: format mode in octalOphestra Umiker
2024-10-14fortify: move PR_SET_DUMPABLE to the beginning of mainOphestra Umiker
2024-10-14release: 0.0.3Ophestra Umiker
2024-10-14init: custom init process inside sandboxOphestra Umiker
2024-10-13fortify: refuse to run as rootOphestra Umiker
2024-10-13shim: update payload commentOphestra Umiker
2024-10-13shim: re-exec self on startupOphestra Umiker
2024-10-13shim: get rid of insane launch conditionOphestra Umiker
2024-10-13app: generate and replace passwd and group filesOphestra Umiker
2024-10-13app/config: map bwrap tmpfs in app configOphestra Umiker
2024-10-13helper/bwrap: allow pushing generic arguments to the end of argument streamOphestra Umiker
2024-10-13app/config: always use nobody UID within sandboxOphestra Umiker
2024-10-13fortify: set SUID_DUMP_DISABLE after flag parseOphestra Umiker
2024-10-13app/seal: skip /mnt in permissive defaultOphestra Umiker
2024-10-13update README documentOphestra Umiker
2024-10-12nix: pass $SHELL for shell interpreterOphestra Umiker
2024-10-12app/seal: allow GPU access in permissive default when either X11/Wayland is e...Ophestra Umiker
2024-10-12app: filesystem struct that maps to all bwrap bind optionsOphestra Umiker
2024-10-12fortify/config: flag to print template config serialised as JSONOphestra Umiker
2024-10-12app: supply template configOphestra Umiker
2024-10-12fortify: move error handling to separate fileOphestra Umiker
2024-10-12fortify: clean up config loadingOphestra Umiker
2024-10-12fortify: move flag handling to separate filesOphestra Umiker
2024-10-12helper: remove unused bwrap config fieldOphestra Umiker
2024-10-12dbus: improve unsealed behaviour coverageOphestra Umiker
2024-10-11app: integrate bwrap into environment setupOphestra Umiker
2024-10-11shim: use bwrap config as it isOphestra Umiker
2024-10-11helper/bwrap: move interfaceArgs before stringArgsOphestra Umiker
2024-10-11app: migrate to new shim implementationOphestra Umiker
2024-10-11shim: new shim implementationOphestra Umiker
2024-10-11verbose: overridable prefixOphestra Umiker
2024-10-11helper/bwrap: proc, dev and mqueue as string argumentsOphestra Umiker
2024-10-10app: tag ACL operations for revertOphestra Umiker
2024-10-10app: hardlink sockets to process-specific share local to XDG_RUNTIME_DIROphestra Umiker
2024-10-10state/simple: prefix store pathOphestra Umiker
2024-10-10release: 0.0.2Ophestra Umiker
2024-10-10app: remove bubblewrap launch methodOphestra Umiker