aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app/seal.go
AgeCommit message (Expand)Author
2025-09-25internal: remove sys packageOphestra
2025-09-24internal/app: handle LookupGroup errorOphestra
2025-09-24internal/app: unexport outcome, remove app structOphestra
2025-09-24internal/app: do not return from shim startOphestra
2025-09-15hst: replace internal/app errorOphestra
2025-09-12internal/hlog: remove error wrappingOphestra
2025-09-02system: update doc commands and remove mutexOphestra
2025-09-02container/dispatcher: stub.Call initialisation helper functionOphestra
2025-08-28internal/app: remove seal interfaceOphestra
2025-04-12app: rename app implementation packageOphestra
2025-04-11sandbox: relative autoetc linksOphestra
2025-04-01app: wayland socket in process shareOphestra
2025-04-01app: share path setup on demandOphestra
2025-03-31fst: optional configured shell pathOphestra
2025-03-27app/seal: check for '=' in envvOphestra
2025-03-27app: pass through $SHELLOphestra
2025-03-26app: create XDG_RUNTIME_DIR with perm 0700Ophestra
2025-03-25sandbox/wl: move into sandboxOphestra
2025-03-25system: optimise string formattingOphestra
2025-03-25app: run in native sandboxOphestra
2025-03-17sandbox: wrap fmsg interfaceOphestra
2025-03-13internal/app: rename init to init0Ophestra
2025-02-21app: separate instance from process stateOphestra
2025-02-19app: defer system.I revertOphestra
2025-02-19app: remove share methodOphestra
2025-02-19app: separate appSeal finalise methodOphestra
2025-02-19app: merge seal with sysOphestra
2025-02-19app: embed appSeal in app structOphestra
2025-02-19app/seal: improve documentationOphestra
2025-02-19app/seal: embed enablementsOphestra
2025-02-19app: store values with string representationOphestra
2025-02-18app: separate interface from implementationOphestra
2025-02-18sys: rename from linuxOphestra
2025-02-18linux: wrap fsu lookup errorOphestra
2025-02-17system: move out of internalOphestra
2025-02-17system: wrap console output functionsOphestra
2025-02-16fmsg: implement suspend in writerOphestra
2025-02-14app: check username length against LOGIN_NAME_MAXOphestra
2025-02-07system/dbus: dump method prints msgbufOphestra
2025-01-22helper/bwrap: integrate seccomp into helper interfaceOphestra
2025-01-21state: store config in separate gob streamOphestra
2025-01-20fst: include syscall filter configurationOphestra
2025-01-15fst: hide sockets exposed via FilesystemOphestra
2024-12-28app: ensure extra pathsOphestra
2024-12-28app: extra acl entries from configurationOphestra
2024-12-28app: merge share methodsOphestra
2024-12-22app: mount /dev/kvm in permissive defaultsOphestra
2024-12-20migrate to git.gensokyo.uk/security/fortifyOphestra Umiker
2024-12-19state: expose aids and use instance id as keyOphestra Umiker
2024-12-18fst: rename from fipcOphestra Umiker