aboutsummaryrefslogtreecommitdiffhomepage
path: root/cmd
AgeCommit message (Expand)Author
2025-01-23nix: configure target users via nixosOphestra
2025-01-22cmd/fpkg: expose syscall policy optionsOphestra
2025-01-18proc: remove duplicate compile-time fortify referenceOphestra
2025-01-18proc/priv/init: merge init into main programOphestra
2025-01-17proc/priv/shim: merge shim into main programOphestra
2025-01-15app: expose single run methodOphestra
2024-12-30cmd/fpkg/install: deduplicate nix storeOphestra
2024-12-30cmd/fpkg: expose nixGL wrappersOphestra
2024-12-29cmd/fpkg: remove workDir acl from activationOphestra
2024-12-29cmd/fpkg: include nixGL source in inner storeOphestra
2024-12-29cmd/fpkg: optional network access when invoking with nix daemonOphestra
2024-12-29cmd/fpkg: bind and document more gpu devicesOphestra
2024-12-29cmd/fpkg: improve readability of fortify invocationsOphestra
2024-12-29cmd/fpkg: compare all three store pathsOphestra
2024-12-29cmd/fpkg: clean up broken links before activationOphestra
2024-12-29cmd/fpkg/start: correct drop to shell wordingOphestra
2024-12-26cmd/fpkg: app bundle helperOphestra
2024-12-28cmd/fshim: ensure data directoryOphestra
2024-12-27cmd/fshim: bind finit inside sandboxOphestra
2024-12-20migrate to git.gensokyo.uk/security/fortifyOphestra Umiker
2024-12-18cmd/fshim: switch to setup pipeOphestra Umiker
2024-12-18cmd/fshim: switch to generic setup funcOphestra Umiker
2024-12-18cmd/finit: switch to generic receive funcOphestra Umiker
2024-12-17cmd/fsu: check uid range before syscallOphestra Umiker
2024-12-07cmd/fuserdb: rename home directoriesOphestra Umiker
2024-12-06proc: cleaner extra filesOphestra Umiker
2024-12-06app: integrate security-context-v1Ophestra Umiker
2024-11-18cmd/fshim/ipc: install signal handler on shim startOphestra Umiker
2024-11-17cmd/fuserdb: generate group entriesOphestra Umiker
2024-11-17cmd/fuserdb: systemd userdb drop-in entries generatorOphestra Umiker
2024-11-16app: integrate fsuOphestra Umiker
2024-11-09cmd/fshim: set no_new_privs flagOphestra Umiker
2024-11-04cmd/fsu: remove import of internal packageOphestra Umiker
2024-11-03cmd/fshim/ipc: friendly setup timeout messageOphestra Umiker
2024-11-02cmd: shim and init into separate binariesOphestra Umiker
2024-10-28fsu: check parent executable pathOphestra Umiker
2024-10-28fsu: implement simple setuid user switcherOphestra Umiker