aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2025-02-07dbus: lock for read in public args interfaceOphestra
2025-02-07system/dbus: dump messages on early faultOphestra
2025-02-07system/dbus: dump method prints msgbufOphestra
2025-02-07helper/seccomp: panic on invalid closeWrite useOphestra
2025-02-03helper/seccomp: implement reader interface via pipeOphestra
2025-02-01workflows: fix nix store cacheOphestra
2025-01-25nix: vm test set sway backgroundOphestra
2025-01-25nix: update flake lockOphestra
2025-01-25nix: mount nvidia devicesOphestra
2025-01-25release: 0.2.12Ophestra
2025-01-25nix: verify silent output when not running with -vOphestra
2025-01-25helper/seccomp: do not call F_println if not verboseOphestra
2025-01-25helper/seccomp: separate seccomp packageOphestra
2025-01-25nix: expose compat flag in nixos moduleOphestra
2025-01-25helper: block more unusual/privileged syscallsOphestra
2025-01-24nix: set deny_devel correctlyOphestra
2025-01-24workflows: rename integration test artifactOphestra
2025-01-24workflows: gc store and purge old cachesOphestra
2025-01-24workflows: merge test build job into testOphestra
2025-01-23wl: separate inline COphestra
2025-01-23release: 0.2.11Ophestra
2025-01-23nix: apply shared home config to reserved aidOphestra
2025-01-23nix: expose syscall filter policyOphestra
2025-01-23nix: configure target users via nixosOphestra
2025-01-23nix: redirect sway output to journalOphestra
2025-01-22fst: add missing fields to templateOphestra
2025-01-22cmd/fpkg: expose syscall policy optionsOphestra
2025-01-22app/share: clean BaseError messageOphestra
2025-01-22dbus: enable syscall filterOphestra
2025-01-22ldd: enable syscall filterOphestra
2025-01-22fortify: set up seccomp verbose logging earlyOphestra
2025-01-22helper/bwrap: integrate seccomp into helper interfaceOphestra
2025-01-21proc: append to ExtraFiles slice pointerOphestra
2025-01-21state: store config in separate gob streamOphestra
2025-01-21fortify: print permissive defaults warning earlyOphestra
2025-01-20proc/priv/shim: resolve and load seccomp rulesOphestra
2025-01-20proc/priv/shim: seccomp bpf filter via libseccompOphestra
2025-01-20fst: include syscall filter configurationOphestra
2025-01-20nix: test show without --shortOphestra
2025-01-20proc/priv/shim: do not log bwrap argsOphestra
2025-01-20helper/bwrap: generic extra file interfaceOphestra
2025-01-19helper/bwrap: move sync to helper stateOphestra
2025-01-19proc/priv/shim: remove unnecessary stateOphestra
2025-01-18release: 0.2.10Ophestra
2025-01-18helper/bwrap: append --sync-fd before --Ophestra
2025-01-18proc/priv/init: early init checkOphestra
2025-01-18proc: remove duplicate compile-time fortify referenceOphestra
2025-01-18proc/priv/init: merge init into main programOphestra
2025-01-17proc/priv/shim: merge shim into main programOphestra
2025-01-17internal: do PR_SET_PDEATHSIG onceOphestra