aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app
AgeCommit message (Expand)Author
2025-02-17system/wayland: sync file at caller specified addressOphestra
2025-02-17system/tmpfiles: implement private tmpfilesOphestra
2025-02-16app/shim/manager: return error on bad fsu pathOphestra
2025-02-16fmsg: implement suspend in writerOphestra
2025-02-16internal: move shim and init into appOphestra
2025-02-15app: improve WAYLAND_DISPLAY correctnessOphestra
2025-02-15app: remove wayland socket hard linkOphestra
2025-02-15app: port passwd and group files to copyOphestra
2025-02-15priv/shim: move /sbin/init setup to appOphestra
2025-02-14app: check username length against LOGIN_NAME_MAXOphestra
2025-02-13helper: use generic extra files interfaceOphestra
2025-02-08helper/proc: move package out of internalOphestra
2025-02-07system/dbus: dump method prints msgbufOphestra
2025-01-22app/share: clean BaseError messageOphestra
2025-01-22helper/bwrap: integrate seccomp into helper interfaceOphestra
2025-01-21state: store config in separate gob streamOphestra
2025-01-20fst: include syscall filter configurationOphestra
2025-01-19helper/bwrap: move sync to helper stateOphestra
2025-01-19proc/priv/shim: remove unnecessary stateOphestra
2025-01-17proc/priv/shim: merge shim into main programOphestra
2025-01-15app: expose single run methodOphestra
2025-01-15fst: hide sockets exposed via FilesystemOphestra
2024-12-31update reverse-DNS style identifiersOphestra
2024-12-28cmd/fshim: ensure data directoryOphestra
2024-12-28app: ensure extra pathsOphestra
2024-12-28app: extra acl entries from configurationOphestra
2024-12-28app: merge share methodsOphestra
2024-12-22app: mount /dev/kvm in permissive defaultsOphestra
2024-12-21app: rename /fortify to /.fortifyOphestra
2024-12-21app: do not fail on missing cookieOphestra
2024-12-20migrate to git.gensokyo.uk/security/fortifyOphestra Umiker
2024-12-19state: expose aids and use instance id as keyOphestra Umiker
2024-12-18cmd/fshim: switch to setup pipeOphestra Umiker
2024-12-18fst: rename from fipcOphestra Umiker
2024-12-18fipc: export config structOphestra Umiker
2024-12-06app: integrate security-context-v1Ophestra Umiker
2024-11-21app: add nixos-based config test caseOphestra Umiker
2024-11-19app: validate usernameOphestra Umiker
2024-11-18cmd/fshim/ipc: install signal handler on shim startOphestra Umiker
2024-11-18app: alternative inner home pathOphestra Umiker
2024-11-17app/start: check for cleanup and abort conditionOphestra Umiker
2024-11-17app: append # for ChangeHosts message with numerical uidOphestra Umiker
2024-11-16app: integrate fsuOphestra Umiker
2024-11-09app/config: rename map_real_uid from use_real_uidOphestra Umiker
2024-11-06app: support full /dev accessOphestra Umiker
2024-11-04linux: provide access to stdoutOphestra Umiker
2024-11-04app: separate auto etc from permissive defaultsOphestra Umiker
2024-11-04app/config: UseRealUID as true in templateOphestra Umiker
2024-11-04app: support mapping target uid as privileged uid in sandboxOphestra Umiker
2024-11-04app: format mapped uid instead of real uidOphestra Umiker