aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal
AgeCommit message (Expand)Author
2025-01-15app: expose single run methodOphestra
2025-01-15fst: hide sockets exposed via FilesystemOphestra
2025-01-01linux/std: handle fsu exit status 1Ophestra
2024-12-31update reverse-DNS style identifiersOphestra
2024-12-26internal: include path to fortify main programOphestra
2024-12-28cmd/fshim: ensure data directoryOphestra
2024-12-28app: ensure extra pathsOphestra
2024-12-28app: extra acl entries from configurationOphestra
2024-12-28app: merge share methodsOphestra
2024-12-27system/dbus: fix inverted system bus stateOphestra
2024-12-22app: mount /dev/kvm in permissive defaultsOphestra
2024-12-21fortify: clean up ps formatting codeOphestra
2024-12-21app: rename /fortify to /.fortifyOphestra
2024-12-21app: do not fail on missing cookieOphestra
2024-12-20system: implement Enablements String methodOphestra
2024-12-20state: store join utilOphestra
2024-12-20migrate to git.gensokyo.uk/security/fortifyOphestra Umiker
2024-12-19state: expose aids and use instance id as keyOphestra Umiker
2024-12-19state: rename simple store implementationOphestra Umiker
2024-12-19fortify: remove systemd checkOphestra Umiker
2024-12-18cmd/fshim: switch to setup pipeOphestra Umiker
2024-12-18proc: setup payload sendOphestra Umiker
2024-12-18proc: setup payload receiveOphestra Umiker
2024-12-18fst: rename from fipcOphestra Umiker
2024-12-18fipc: export config structOphestra Umiker
2024-12-07system: prevent duplicate Wayland opOphestra Umiker
2024-12-06proc: cleaner extra filesOphestra Umiker
2024-12-06app: integrate security-context-v1Ophestra Umiker
2024-12-06system/wayland: integrate security-context-v1Ophestra Umiker
2024-11-21app: add nixos-based config test caseOphestra Umiker
2024-11-19app: validate usernameOphestra Umiker
2024-11-18cmd/fshim/ipc: install signal handler on shim startOphestra Umiker
2024-11-18app: alternative inner home pathOphestra Umiker
2024-11-17fmsg: add to wg prior to enqueueOphestra Umiker
2024-11-17app/start: check for cleanup and abort conditionOphestra Umiker
2024-11-17app: append # for ChangeHosts message with numerical uidOphestra Umiker
2024-11-16app: integrate fsuOphestra Umiker
2024-11-09app/config: rename map_real_uid from use_real_uidOphestra Umiker
2024-11-06app: support full /dev accessOphestra Umiker
2024-11-04linux: provide access to stdoutOphestra Umiker
2024-11-04app: separate auto etc from permissive defaultsOphestra Umiker
2024-11-04app/config: UseRealUID as true in templateOphestra Umiker
2024-11-04fmsg: drop messages when msgbuf is full during withholdOphestra Umiker
2024-11-04cmd/fsu: remove import of internal packageOphestra Umiker
2024-11-04app: support mapping target uid as privileged uid in sandboxOphestra Umiker
2024-11-04app: format mapped uid instead of real uidOphestra Umiker
2024-11-03system/dbus: buffer xdg-dbus-proxy messagesOphestra Umiker
2024-11-02cmd: shim and init into separate binariesOphestra Umiker
2024-10-28app/start: skip cleanup if shim is nilOphestra Umiker
2024-10-28shim: expose checkPid in constructorOphestra Umiker