security
/
fortify
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 14 Wiki Activity

migrate to git.ophivana.moe/security/fortify
test / test (push) Successful in 14s Details 

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
This commit is contained in:
Ophestra Umiker 2024-10-20 19:50:13 +09:00
parent cdda33555c
commit 65af1684e3
Signed by: cat
SSH Key Fingerprint: SHA256:vQhTOP4tHcsFb0365dxe6HJBKpv7PZ0KZNFx2AjBnRI
49 changed files with 102 additions and 102 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
README.md
View File

@ -1,7 +1,7 @@
Fortify Fortify
======= =======
[![Go Reference](https://pkg.go.dev/badge/git.ophivana.moe/cat/fortify.svg)](https://pkg.go.dev/git.ophivana.moe/cat/fortify) [![Go Reference](https://pkg.go.dev/badge/git.ophivana.moe/security/fortify.svg)](https://pkg.go.dev/git.ophivana.moe/security/fortify)
Lets you run graphical applications as another user in a confined environment with a nice NixOS Lets you run graphical applications as another user in a confined environment with a nice NixOS
module to configure target users and provide launchers and desktop files for your privileged user. module to configure target users and provide launchers and desktop files for your privileged user.
@ -26,7 +26,7 @@ There are a few different things to set up for this to work:
If you have a flakes-enabled nix environment, you can try out the tool by running: If you have a flakes-enabled nix environment, you can try out the tool by running:
```shell ```shell
nix run git+https://git.ophivana.moe/cat/fortify -- -h nix run git+https://git.ophivana.moe/security/fortify -- -h
``` ```
## Module usage ## Module usage
@ -41,7 +41,7 @@ To use the module, import it into your configuration with
nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.05"; nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.05";
fortify = { fortify = {
url = "git+https://git.ophivana.moe/cat/fortify"; url = "git+https://git.ophivana.moe/security/fortify";
# Optional but recommended to limit the size of your system closure. # Optional but recommended to limit the size of your system closure.
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";

8
config.go
View File

@ -6,10 +6,10 @@ import (
"fmt" "fmt"
"os" "os"
"git.ophivana.moe/cat/fortify/dbus" "git.ophivana.moe/security/fortify/dbus"
"git.ophivana.moe/cat/fortify/internal" "git.ophivana.moe/security/fortify/internal"
"git.ophivana.moe/cat/fortify/internal/app" "git.ophivana.moe/security/fortify/internal/app"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
var ( var (

2
dbus/config_test.go
View File

@ -9,7 +9,7 @@ import (
"strings" "strings"
"testing" "testing"
"git.ophivana.moe/cat/fortify/dbus" "git.ophivana.moe/security/fortify/dbus"
) )
func TestConfig_Args(t *testing.T) { func TestConfig_Args(t *testing.T) {

4
dbus/dbus_test.go
View File

@ -5,8 +5,8 @@ import (
"strings" "strings"
"testing" "testing"
"git.ophivana.moe/cat/fortify/dbus" "git.ophivana.moe/security/fortify/dbus"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
) )
func TestNew(t *testing.T) { func TestNew(t *testing.T) {

4
dbus/proxy.go
View File

@ -6,8 +6,8 @@ import (
"io" "io"
"sync" "sync"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
"git.ophivana.moe/cat/fortify/helper/bwrap" "git.ophivana.moe/security/fortify/helper/bwrap"
) )
// ProxyName is the file name or path to the proxy program. // ProxyName is the file name or path to the proxy program.

6
dbus/run.go
View File

@ -9,9 +9,9 @@ import (
"strconv" "strconv"
"strings" "strings"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
"git.ophivana.moe/cat/fortify/helper/bwrap" "git.ophivana.moe/security/fortify/helper/bwrap"
"git.ophivana.moe/cat/fortify/ldd" "git.ophivana.moe/security/fortify/ldd"
) )
// Start launches the D-Bus proxy and sets up the Wait method. // Start launches the D-Bus proxy and sets up the Wait method.

2
dbus/samples_test.go
View File

@ -3,7 +3,7 @@ package dbus_test
import ( import (
"sync" "sync"
"git.ophivana.moe/cat/fortify/dbus" "git.ophivana.moe/security/fortify/dbus"
) )
var samples = []dbusTestCase{ var samples = []dbusTestCase{

2
dbus/stub_test.go
View File

@ -3,7 +3,7 @@ package dbus_test
import ( import (
"testing" "testing"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
) )
func TestHelperChildStub(t *testing.T) { func TestHelperChildStub(t *testing.T) {

4
error.go
View File

@ -5,8 +5,8 @@ import (
"fmt" "fmt"
"os" "os"
"git.ophivana.moe/cat/fortify/internal/app" "git.ophivana.moe/security/fortify/internal/app"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
) )
func logWaitError(err error) { func logWaitError(err error) {

2
go.mod
View File

@ -1,3 +1,3 @@
module git.ophivana.moe/cat/fortify module git.ophivana.moe/security/fortify
go 1.22 go 1.22

2
helper/args_test.go
View File

@ -6,7 +6,7 @@ import (
"strings" "strings"
"testing" "testing"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
) )
func Test_argsFD_String(t *testing.T) { func Test_argsFD_String(t *testing.T) {

2
helper/bwrap.go
View File

@ -7,7 +7,7 @@ import (
"strconv" "strconv"
"sync" "sync"
"git.ophivana.moe/cat/fortify/helper/bwrap" "git.ophivana.moe/security/fortify/helper/bwrap"
) )
// BubblewrapName is the file name or path to bubblewrap. // BubblewrapName is the file name or path to bubblewrap.

4
helper/bwrap_test.go
View File

@ -7,8 +7,8 @@ import (
"strings" "strings"
"testing" "testing"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
"git.ophivana.moe/cat/fortify/helper/bwrap" "git.ophivana.moe/security/fortify/helper/bwrap"
) )
func TestBwrap(t *testing.T) { func TestBwrap(t *testing.T) {

2
helper/direct_test.go
View File

@ -5,7 +5,7 @@ import (
"os" "os"
"testing" "testing"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
) )
func TestDirect(t *testing.T) { func TestDirect(t *testing.T) {

2
helper/helper_test.go
View File

@ -6,7 +6,7 @@ import (
"testing" "testing"
"time" "time"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
) )
var ( var (

2
helper/stub.go
View File

@ -10,7 +10,7 @@ import (
"syscall" "syscall"
"testing" "testing"
"git.ophivana.moe/cat/fortify/helper/bwrap" "git.ophivana.moe/security/fortify/helper/bwrap"
) )
// InternalChildStub is an internal function but exported because it is cross-package; // InternalChildStub is an internal function but exported because it is cross-package;

2
helper/stub_test.go
View File

@ -3,7 +3,7 @@ package helper_test
import ( import (
"testing" "testing"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
) )
func TestHelperChildStub(t *testing.T) { func TestHelperChildStub(t *testing.T) {

6
internal/app/config.go
View File

@ -4,9 +4,9 @@ import (
"encoding/gob" "encoding/gob"
"os" "os"
"git.ophivana.moe/cat/fortify/dbus" "git.ophivana.moe/security/fortify/dbus"
"git.ophivana.moe/cat/fortify/helper/bwrap" "git.ophivana.moe/security/fortify/helper/bwrap"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
func init() { func init() {

2
internal/app/launch.machinectl.go
View File

@ -4,7 +4,7 @@ import (
"os/exec" "os/exec"
"strings" "strings"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
func (a *app) commandBuilderMachineCtl(shimEnv string) (args []string) { func (a *app) commandBuilderMachineCtl(shimEnv string) (args []string) {

2
internal/app/launch.sudo.go
View File

@ -3,7 +3,7 @@ package app
import ( import (
"os" "os"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
const ( const (

12
internal/app/seal.go
View File

@ -8,12 +8,12 @@ import (
"path" "path"
"strconv" "strconv"
"git.ophivana.moe/cat/fortify/dbus" "git.ophivana.moe/security/fortify/dbus"
"git.ophivana.moe/cat/fortify/internal" "git.ophivana.moe/security/fortify/internal"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
"git.ophivana.moe/cat/fortify/internal/state" "git.ophivana.moe/security/fortify/internal/state"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
const ( const (

6
internal/app/share.dbus.go
View File

@ -3,9 +3,9 @@ package app
import ( import (
"path" "path"
"git.ophivana.moe/cat/fortify/acl" "git.ophivana.moe/security/fortify/acl"
"git.ophivana.moe/cat/fortify/dbus" "git.ophivana.moe/security/fortify/dbus"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
const ( const (

6
internal/app/share.display.go
View File

@ -5,9 +5,9 @@ import (
"os" "os"
"path" "path"
"git.ophivana.moe/cat/fortify/acl" "git.ophivana.moe/security/fortify/acl"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
const ( const (

4
internal/app/share.pulse.go
View File

@ -7,8 +7,8 @@ import (
"os" "os"
"path" "path"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
const ( const (

4
internal/app/share.runtime.go
View File

@ -3,8 +3,8 @@ package app
import ( import (
"path" "path"
"git.ophivana.moe/cat/fortify/acl" "git.ophivana.moe/security/fortify/acl"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
const ( const (

4
internal/app/share.system.go
View File

@ -4,8 +4,8 @@ import (
"os" "os"
"path" "path"
"git.ophivana.moe/cat/fortify/acl" "git.ophivana.moe/security/fortify/acl"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
const ( const (

12
internal/app/start.go
View File

@ -11,12 +11,12 @@ import (
"strings" "strings"
"time" "time"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
"git.ophivana.moe/cat/fortify/internal/shim" "git.ophivana.moe/security/fortify/internal/shim"
"git.ophivana.moe/cat/fortify/internal/state" "git.ophivana.moe/security/fortify/internal/state"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
// Start starts the fortified child // Start starts the fortified child

10
internal/app/system.go
View File

@ -3,11 +3,11 @@ package app
import ( import (
"os/user" "os/user"
"git.ophivana.moe/cat/fortify/dbus" "git.ophivana.moe/security/fortify/dbus"
"git.ophivana.moe/cat/fortify/helper/bwrap" "git.ophivana.moe/security/fortify/helper/bwrap"
"git.ophivana.moe/cat/fortify/internal" "git.ophivana.moe/security/fortify/internal"
"git.ophivana.moe/cat/fortify/internal/state" "git.ophivana.moe/security/fortify/internal/state"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
// appSeal seals the application with child-related information // appSeal seals the application with child-related information

2
internal/environ.go
View File

@ -7,7 +7,7 @@ import (
"strconv" "strconv"
"sync" "sync"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
// state that remain constant for the lifetime of the process // state that remain constant for the lifetime of the process

2
internal/init/main.go
View File

@ -13,7 +13,7 @@ import (
"syscall" "syscall"
"time" "time"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
const ( const (

6
internal/shim/main.go
View File

@ -11,9 +11,9 @@ import (
"strconv" "strconv"
"syscall" "syscall"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
init0 "git.ophivana.moe/cat/fortify/internal/init" init0 "git.ophivana.moe/security/fortify/internal/init"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
// everything beyond this point runs as target user // everything beyond this point runs as target user

4
internal/shim/parent.go
View File

@ -8,8 +8,8 @@ import (
"os" "os"
"syscall" "syscall"
"git.ophivana.moe/cat/fortify/acl" "git.ophivana.moe/security/fortify/acl"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
// called in the parent process // called in the parent process

2
internal/shim/payload.go
View File

@ -1,6 +1,6 @@
package shim package shim
import "git.ophivana.moe/cat/fortify/helper/bwrap" import "git.ophivana.moe/security/fortify/helper/bwrap"
const EnvShim = "FORTIFY_SHIM" const EnvShim = "FORTIFY_SHIM"

4
internal/state/print.go
View File

@ -10,8 +10,8 @@ import (
"text/tabwriter" "text/tabwriter"
"time" "time"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
// MustPrintLauncherStateSimpleGlobal prints active launcher states of all simple stores // MustPrintLauncherStateSimpleGlobal prints active launcher states of all simple stores

2
internal/state/state.go
View File

@ -3,7 +3,7 @@ package state
import ( import (
"time" "time"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
type Store interface { type Store interface {

6
internal/system/acl.go
View File

@ -4,9 +4,9 @@ import (
"fmt" "fmt"
"slices" "slices"
"git.ophivana.moe/cat/fortify/acl" "git.ophivana.moe/security/fortify/acl"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
// UpdatePerm appends an ephemeral acl update Op. // UpdatePerm appends an ephemeral acl update Op.

2
internal/system/acl_test.go
View File

@ -3,7 +3,7 @@ package system
import ( import (
"testing" "testing"
"git.ophivana.moe/cat/fortify/acl" "git.ophivana.moe/security/fortify/acl"
) )
func TestUpdatePerm(t *testing.T) { func TestUpdatePerm(t *testing.T) {

6
internal/system/dbus.go
View File

@ -5,9 +5,9 @@ import (
"fmt" "fmt"
"os" "os"
"git.ophivana.moe/cat/fortify/dbus" "git.ophivana.moe/security/fortify/dbus"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
var ( var (

4
internal/system/mkdir.go
View File

@ -5,8 +5,8 @@ import (
"fmt" "fmt"
"os" "os"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
// Ensure the existence and mode of a directory. // Ensure the existence and mode of a directory.

2
internal/system/op_test.go
View File

@ -4,7 +4,7 @@ import (
"strconv" "strconv"
"testing" "testing"
"git.ophivana.moe/cat/fortify/internal/system" "git.ophivana.moe/security/fortify/internal/system"
) )
func TestNew(t *testing.T) { func TestNew(t *testing.T) {

6
internal/system/tmpfiles.go
View File

@ -7,9 +7,9 @@ import (
"os" "os"
"strconv" "strconv"
"git.ophivana.moe/cat/fortify/acl" "git.ophivana.moe/security/fortify/acl"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
// CopyFile registers an Op that copies path dst from src. // CopyFile registers an Op that copies path dst from src.

2
internal/system/tmpfiles_test.go
View File

@ -4,7 +4,7 @@ import (
"strconv" "strconv"
"testing" "testing"
"git.ophivana.moe/cat/fortify/acl" "git.ophivana.moe/security/fortify/acl"
) )
func TestCopyFile(t *testing.T) { func TestCopyFile(t *testing.T) {

6
internal/system/xhost.go
View File

@ -3,9 +3,9 @@ package system
import ( import (
"fmt" "fmt"
"git.ophivana.moe/cat/fortify/internal/fmsg" "git.ophivana.moe/security/fortify/internal/fmsg"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
"git.ophivana.moe/cat/fortify/xcb" "git.ophivana.moe/security/fortify/xcb"
) )
// ChangeHosts appends an X11 ChangeHosts command Op. // ChangeHosts appends an X11 ChangeHosts command Op.

2
internal/verbose/print_test.go
View File

@ -7,7 +7,7 @@ import (
"strings" "strings"
"testing" "testing"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
const ( const (

2
internal/verbose/state_test.go
View File

@ -3,7 +3,7 @@ package verbose_test
import ( import (
"testing" "testing"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
func TestGetSet(t *testing.T) { func TestGetSet(t *testing.T) {

4
ldd/exec.go
View File

@ -6,8 +6,8 @@ import (
"os/exec" "os/exec"
"strings" "strings"
"git.ophivana.moe/cat/fortify/helper" "git.ophivana.moe/security/fortify/helper"
"git.ophivana.moe/cat/fortify/helper/bwrap" "git.ophivana.moe/security/fortify/helper/bwrap"
) )
func Exec(p string) ([]*Entry, error) { func Exec(p string) ([]*Entry, error) {

2
ldd/ldd_test.go
View File

@ -6,7 +6,7 @@ import (
"strings" "strings"
"testing" "testing"
"git.ophivana.moe/cat/fortify/ldd" "git.ophivana.moe/security/fortify/ldd"
) )
func TestParseError(t *testing.T) { func TestParseError(t *testing.T) {

10
main.go
View File

@ -6,11 +6,11 @@ import (
"os" "os"
"syscall" "syscall"
"git.ophivana.moe/cat/fortify/internal" "git.ophivana.moe/security/fortify/internal"
"git.ophivana.moe/cat/fortify/internal/app" "git.ophivana.moe/security/fortify/internal/app"
init0 "git.ophivana.moe/cat/fortify/internal/init" init0 "git.ophivana.moe/security/fortify/internal/init"
"git.ophivana.moe/cat/fortify/internal/shim" "git.ophivana.moe/security/fortify/internal/shim"
"git.ophivana.moe/cat/fortify/internal/verbose" "git.ophivana.moe/security/fortify/internal/verbose"
) )
var ( var (

4
state.go
View File

@ -6,8 +6,8 @@ import (
"os" "os"
"text/tabwriter" "text/tabwriter"
"git.ophivana.moe/cat/fortify/internal" "git.ophivana.moe/security/fortify/internal"
"git.ophivana.moe/cat/fortify/internal/state" "git.ophivana.moe/security/fortify/internal/state"
) )
var ( var (