security
/
fortify
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 14 Wiki Activity
133 Commits 3 Branches 14 Tags 896 KiB
Commit Graph

26 Commits

Author SHA1 Message Date
Ophestra Umiker 0f421644be
dbus: improve unsealed behaviour coverage 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-10-12 00:53:08 +09:00
Ophestra Umiker d41b9d2d9c
ldd: separate Parse from Exec and trim space 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-10-09 23:51:15 +09:00
Ophestra Umiker 753c5191b1
dbus/run: support running xdg-dbus-proxy in a restrictive bubblewrap sandbox 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-10-09 20:41:42 +09:00
Ophestra Umiker 55a5b6f242
dbus: use name resolved by exec.Command 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-10-07 16:55:27 +09:00
Ophestra Umiker 85407dd3c0
helper: helper.Helper interface 
For upcoming bwrap implementation of helper.Helper

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-10-07 15:37:52 +09:00
Ophestra Umiker 9647eb6a6b
helper: separate pipes from Helper 
Upcoming bwrap helper implementation requires two sets of pipes to be managed, fd will also no longer be constant.

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-10-07 12:48:20 +09:00
Ophestra Umiker d1415305ae
dbus: test child process handling behaviour via helper stub 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-29 15:49:32 +09:00
Ophestra Umiker 98f9fdb7cc
dbus: configurable xdg-dbus-proxy output 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-29 15:27:29 +09:00
Ophestra Umiker dc59f20d7b
dbus: toggleable xdg-dbus-proxy output 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-29 15:24:54 +09:00
Ophestra Umiker 0e7849fac2
dbus: add more test cases 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-28 19:19:31 +09:00
Ophestra Umiker 342c66aae8
dbus: replace test suffix * with + 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-28 17:47:15 +09:00
Ophestra Umiker cf182d1fbe
dbus: seal test error check for correct error returned 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-28 17:00:20 +09:00
Ophestra Umiker 1038af98f0
dbus: add tests 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-28 00:06:16 +09:00
Ophestra Umiker aa2be18f47
dbus/config: implement file loading functions 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-27 23:53:08 +09:00
Ophestra Umiker 84d8c27b5f
dbus: return exported error for nil config 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-27 23:52:38 +09:00
Ophestra Umiker ee2f5ed6ac
dbus/config: remove unused method 
Null checking is replaced by helper/args while string building is no longer required.

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-27 12:04:28 +09:00
Ophestra Umiker 8492239cba
helper/args: simplify argument parsing and eliminate excess memory copies 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-25 14:00:30 +09:00
Ophestra Umiker a8b4b3634b
dbus: use generalised helper.Helper for xdg-dbus-proxy 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-25 01:17:38 +09:00
Ophestra Umiker be83ad838c
dbus: assert fmt.Stringer instead of helper.Args on argument seal 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-24 19:37:50 +09:00
Ophestra Umiker b722adc4dd
dbus: seal as io.WriterTo interface 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-24 18:03:05 +09:00
Ophestra Umiker 000607da5f
helper: separate helper args fd builder from dbus 
This method of passing arguments is used in bubblewrap as well as other tools, this commit separates the argument builder/writer to the helper package and generalise it as an interface.

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-24 16:11:08 +09:00
Ophestra Umiker 8223a9ee66
enable filter in README example 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-11 16:35:23 +09:00
Ophestra Umiker 20c0e66d8f
dbus/config: seal with session and system bus proxy 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-09 21:13:00 +09:00
Ophestra Umiker e5918ba3b3
dbus/config: fix builtin defaults 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-09 19:20:37 +09:00
Ophestra Umiker 35d040590b
dbus/config: document fields and add --call and --broadcast 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-09 13:27:31 +09:00
Ophestra Umiker 357cc4ce4d
dbus: implement xdg-dbus-proxy wrapper 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
 2024-09-09 03:11:50 +09:00