aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app/seal.go
AgeCommit message (Expand)Author
2025-03-17sandbox: wrap fmsg interfaceOphestra
2025-03-13internal/app: rename init to init0Ophestra
2025-02-21app: separate instance from process stateOphestra
2025-02-19app: defer system.I revertOphestra
2025-02-19app: remove share methodOphestra
2025-02-19app: separate appSeal finalise methodOphestra
2025-02-19app: merge seal with sysOphestra
2025-02-19app: embed appSeal in app structOphestra
2025-02-19app/seal: improve documentationOphestra
2025-02-19app/seal: embed enablementsOphestra
2025-02-19app: store values with string representationOphestra
2025-02-18app: separate interface from implementationOphestra
2025-02-18sys: rename from linuxOphestra
2025-02-18linux: wrap fsu lookup errorOphestra
2025-02-17system: move out of internalOphestra
2025-02-17system: wrap console output functionsOphestra
2025-02-16fmsg: implement suspend in writerOphestra
2025-02-14app: check username length against LOGIN_NAME_MAXOphestra
2025-02-07system/dbus: dump method prints msgbufOphestra
2025-01-22helper/bwrap: integrate seccomp into helper interfaceOphestra
2025-01-21state: store config in separate gob streamOphestra
2025-01-20fst: include syscall filter configurationOphestra
2025-01-15fst: hide sockets exposed via FilesystemOphestra
2024-12-28app: ensure extra pathsOphestra
2024-12-28app: extra acl entries from configurationOphestra
2024-12-28app: merge share methodsOphestra
2024-12-22app: mount /dev/kvm in permissive defaultsOphestra
2024-12-20migrate to git.gensokyo.uk/security/fortifyOphestra Umiker
2024-12-19state: expose aids and use instance id as keyOphestra Umiker
2024-12-18fst: rename from fipcOphestra Umiker
2024-12-18fipc: export config structOphestra Umiker
2024-12-06app: integrate security-context-v1Ophestra Umiker
2024-11-19app: validate usernameOphestra Umiker
2024-11-18app: alternative inner home pathOphestra Umiker
2024-11-16app: integrate fsuOphestra Umiker
2024-11-09app/config: rename map_real_uid from use_real_uidOphestra Umiker
2024-11-04app: separate auto etc from permissive defaultsOphestra Umiker
2024-11-04app: support mapping target uid as privileged uid in sandboxOphestra Umiker
2024-11-04app: format mapped uid instead of real uidOphestra Umiker
2024-11-03system/dbus: buffer xdg-dbus-proxy messagesOphestra Umiker
2024-11-02cmd: shim and init into separate binariesOphestra Umiker
2024-10-27system: move sd_booted implementation to os abstractionOphestra Umiker
2024-10-25app/seal: symlink /etc entries in permissive defaultOphestra Umiker
2024-10-23internal: wrap calls to os standard library functionsOphestra Umiker
2024-10-21fmsg: produce all output through fmsgOphestra Umiker
2024-10-21app: move wayland mediation to shim packageOphestra Umiker
2024-10-20migrate to git.ophivana.moe/security/fortifyOphestra Umiker
2024-10-20app: move app ID to app structOphestra Umiker
2024-10-18state: store launch method instead of launcher pathOphestra Umiker
2024-10-16system: move enablements from state packageOphestra Umiker
generated by cgit v1.3.1 (git 2.54.0) at 2026-09-09 01:11:44 +0000