fortify/internal/app
Ophestra Umiker af15b1c048
test / test (push) Successful in 40s Details
app: support mapping target uid as privileged uid in sandbox
Chromium's D-Bus client implementation refuses to work when its getuid call returns a different value than what the D-Bus server is running as. The reason behind this is not fully understood, but this workaround is implemented to support chromium and electron apps. This is not used by default since it has many side effects that break many other programs, like SSH on NixOS.

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-11-04 03:15:39 +09:00
..
app.go cmd: shim and init into separate binaries 2024-11-02 03:13:57 +09:00
app_nixos_test.go app: format mapped uid instead of real uid 2024-11-04 00:49:32 +09:00
app_test.go cmd: shim and init into separate binaries 2024-11-02 03:13:57 +09:00
config.go app: support mapping target uid as privileged uid in sandbox 2024-11-04 03:15:39 +09:00
export_test.go cmd: shim and init into separate binaries 2024-11-02 03:13:57 +09:00
id.go app: move app ID to app struct 2024-10-20 00:22:18 +09:00
launch.machinectl.go cmd: shim and init into separate binaries 2024-11-02 03:13:57 +09:00
launch.sudo.go cmd: shim and init into separate binaries 2024-11-02 03:13:57 +09:00
seal.go app: support mapping target uid as privileged uid in sandbox 2024-11-04 03:15:39 +09:00
share.dbus.go system/dbus: buffer xdg-dbus-proxy messages 2024-11-03 03:07:02 +09:00
share.display.go cmd: shim and init into separate binaries 2024-11-02 03:13:57 +09:00
share.pulse.go cmd: shim and init into separate binaries 2024-11-02 03:13:57 +09:00
share.runtime.go internal: wrap calls to os standard library functions 2024-10-23 21:46:21 +09:00
share.system.go app: support mapping target uid as privileged uid in sandbox 2024-11-04 03:15:39 +09:00
start.go system/dbus: buffer xdg-dbus-proxy messages 2024-11-03 03:07:02 +09:00
system.go app: support mapping target uid as privileged uid in sandbox 2024-11-04 03:15:39 +09:00