aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app
AgeCommit message (Expand)Author
2024-12-06app: integrate security-context-v1Ophestra Umiker
2024-11-21app: add nixos-based config test caseOphestra Umiker
2024-11-19app: validate usernameOphestra Umiker
2024-11-18cmd/fshim/ipc: install signal handler on shim startOphestra Umiker
2024-11-18app: alternative inner home pathOphestra Umiker
2024-11-17app/start: check for cleanup and abort conditionOphestra Umiker
2024-11-17app: append # for ChangeHosts message with numerical uidOphestra Umiker
2024-11-16app: integrate fsuOphestra Umiker
2024-11-09app/config: rename map_real_uid from use_real_uidOphestra Umiker
2024-11-06app: support full /dev accessOphestra Umiker
2024-11-04linux: provide access to stdoutOphestra Umiker
2024-11-04app: separate auto etc from permissive defaultsOphestra Umiker
2024-11-04app/config: UseRealUID as true in templateOphestra Umiker
2024-11-04app: support mapping target uid as privileged uid in sandboxOphestra Umiker
2024-11-04app: format mapped uid instead of real uidOphestra Umiker
2024-11-03system/dbus: buffer xdg-dbus-proxy messagesOphestra Umiker
2024-11-02cmd: shim and init into separate binariesOphestra Umiker
2024-10-28app/start: skip cleanup if shim is nilOphestra Umiker
2024-10-28shim: expose checkPid in constructorOphestra Umiker
2024-10-27system/dbus: compare sealed value by stringOphestra Umiker
2024-10-27system: move sd_booted implementation to os abstractionOphestra Umiker
2024-10-27shim: user switcher process management structOphestra Umiker
2024-10-25app: separate nixos test cases from testsOphestra Umiker
2024-10-25app: test app permissive defaults sealing behaviourOphestra Umiker
2024-10-25app/start: cleaner command not found messageOphestra Umiker
2024-10-25app/seal: symlink /etc entries in permissive defaultOphestra Umiker
2024-10-25app/config: support creating symlinks within sandboxOphestra Umiker
2024-10-25shim: kill shim if setup becomes impossibleOphestra Umiker
2024-10-23internal: wrap calls to os standard library functionsOphestra Umiker
2024-10-21shim: abort setup on failed start and process exitOphestra Umiker
2024-10-21fmsg: produce all output through fmsgOphestra Umiker
2024-10-21app: move wayland mediation to shim packageOphestra Umiker
2024-10-20migrate to git.ophivana.moe/security/fortifyOphestra Umiker
2024-10-20app: move app ID to app structOphestra Umiker
2024-10-18state: store launch method instead of launcher pathOphestra Umiker
2024-10-18app/share: fix order to ensure SharePath before any of its subdirectoriesOphestra Umiker
2024-10-16system: move enablements from state packageOphestra Umiker
2024-10-16app: port app to use the system packageOphestra Umiker
2024-10-15app: filter /tmp from permissive defaultOphestra Umiker
2024-10-15helper/bwrap: ordered filesystem argsOphestra Umiker
2024-10-14init: custom init process inside sandboxOphestra Umiker
2024-10-13shim: get rid of insane launch conditionOphestra Umiker
2024-10-13app: generate and replace passwd and group filesOphestra Umiker
2024-10-13app/config: map bwrap tmpfs in app configOphestra Umiker
2024-10-13app/config: always use nobody UID within sandboxOphestra Umiker
2024-10-13app/seal: skip /mnt in permissive defaultOphestra Umiker
2024-10-12app/seal: allow GPU access in permissive default when either X11/Wayland is e...Ophestra Umiker
2024-10-12app: filesystem struct that maps to all bwrap bind optionsOphestra Umiker
2024-10-12app: supply template configOphestra Umiker
2024-10-11app: integrate bwrap into environment setupOphestra Umiker
generated by cgit v1.3.1 (git 2.54.0) at 2026-08-30 16:17:10 +0000