aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal
AgeCommit message (Expand)Author
2024-10-25app/seal: symlink /etc entries in permissive defaultOphestra Umiker
2024-10-25app/config: support creating symlinks within sandboxOphestra Umiker
2024-10-25shim: kill shim if setup becomes impossibleOphestra Umiker
2024-10-25internal: use fallback paths when XDG_RUNTIME_DIR is not absoluteOphestra Umiker
2024-10-23internal: wrap calls to os standard library functionsOphestra Umiker
2024-10-23system: sys comparison methodOphestra Umiker
2024-10-23system: return sys in queueing methodsOphestra Umiker
2024-10-21shim: abort setup on failed start and process exitOphestra Umiker
2024-10-21fmsg: produce all output through fmsgOphestra Umiker
2024-10-21app: move wayland mediation to shim packageOphestra Umiker
2024-10-20migrate to git.ophivana.moe/security/fortifyOphestra Umiker
2024-10-20app: move app ID to app structOphestra Umiker
2024-10-18state: store launch method instead of launcher pathOphestra Umiker
2024-10-18app/share: fix order to ensure SharePath before any of its subdirectoriesOphestra Umiker
2024-10-17init: start timeout only if reaped PID is the initial processOphestra Umiker
2024-10-17system: tests for all Op implementations except DBusOphestra Umiker
2024-10-17system/mkdir: type label in String methodOphestra Umiker
2024-10-17system: handle invalid enablement in String methodOphestra Umiker
2024-10-17init: post initial process death exit timeoutOphestra Umiker
2024-10-16system: move enablements from state packageOphestra Umiker
2024-10-16app: port app to use the system packageOphestra Umiker
2024-10-16system: isolate app/system into generic implementationOphestra Umiker
2024-10-16fmsg/errors: isolate app/error into a separate packageOphestra Umiker
2024-10-15app: filter /tmp from permissive defaultOphestra Umiker
2024-10-15helper/bwrap: ordered filesystem argsOphestra Umiker
2024-10-14init: custom init process inside sandboxOphestra Umiker
2024-10-13shim: update payload commentOphestra Umiker
2024-10-13shim: re-exec self on startupOphestra Umiker
2024-10-13shim: get rid of insane launch conditionOphestra Umiker
2024-10-13app: generate and replace passwd and group filesOphestra Umiker
2024-10-13app/config: map bwrap tmpfs in app configOphestra Umiker
2024-10-13app/config: always use nobody UID within sandboxOphestra Umiker
2024-10-13app/seal: skip /mnt in permissive defaultOphestra Umiker
2024-10-12app/seal: allow GPU access in permissive default when either X11/Wayland is e...Ophestra Umiker
2024-10-12app: filesystem struct that maps to all bwrap bind optionsOphestra Umiker
2024-10-12app: supply template configOphestra Umiker
2024-10-11app: integrate bwrap into environment setupOphestra Umiker
2024-10-11shim: use bwrap config as it isOphestra Umiker
2024-10-11app: migrate to new shim implementationOphestra Umiker
2024-10-11shim: new shim implementationOphestra Umiker
2024-10-11verbose: overridable prefixOphestra Umiker
2024-10-10app: tag ACL operations for revertOphestra Umiker
2024-10-10app: hardlink sockets to process-specific share local to XDG_RUNTIME_DIROphestra Umiker
2024-10-10state/simple: prefix store pathOphestra Umiker
2024-10-10app: remove bubblewrap launch methodOphestra Umiker
2024-10-09dbus/run: support running xdg-dbus-proxy in a restrictive bubblewrap sandboxOphestra Umiker
2024-10-07dbus: use name resolved by exec.CommandOphestra Umiker
2024-09-29verbose: test verbose behaviourOphestra Umiker
2024-09-29dbus: configurable xdg-dbus-proxy outputOphestra Umiker
2024-09-29dbus: toggleable xdg-dbus-proxy outputOphestra Umiker
generated by cgit v1.3.1 (git 2.54.0) at 2026-08-31 05:13:13 +0000