Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | rename layout init | 2018-03-29 | ||
| | ||||
* | move tree includes to their own directory | 2018-03-29 | ||
| | ||||
* | fix typos in comments/messages; add shutting down message | 2018-01-05 | ||
| | ||||
* | Consolidate WLR and Sway logging | 2017-12-31 | ||
| | | | | See #1390 | |||
* | Merge branch 'wlroots' into feature/input | 2017-12-16 | ||
|\ | ||||
| * | Add output config | 2017-12-06 | ||
| | | ||||
* | | xkb config | 2017-12-15 | ||
| | | ||||
* | | working xcursor | 2017-12-09 | ||
|/ | ||||
* | Add minimal config subsystem | 2017-12-05 | ||
| | ||||
* | log env after ipc init | 2017-12-02 | ||
| | ||||
* | remove nvidia support claim | 2017-11-28 | ||
| | ||||
* | Wire up IPC server | 2017-11-22 | ||
| | ||||
* | Add outputs to the tree | 2017-11-19 | ||
| | ||||
* | Move everything to sway/old/ | 2017-11-18 | ||
| | ||||
* | Initialize outputs from backend and add to tree | 2017-11-11 | ||
| | ||||
* | Fire up the wlroots backend and run the event loop | 2017-11-11 | ||
| | ||||
* | nvidia: Validate the nvidia_drm module options | 2017-10-24 | ||
| | | | | | When the proprietary nvidia driver is used, ensure the modeset option is set instead of checking /proc/cmdline for nvidia-drm.modeset=1. | |||
* | Check for Raspberry Pi | 2017-08-14 | ||
| | ||||
* | FreeBSD fixes | 2017-06-06 | ||
| | | | | | | | Increase _POSIX_SOURCE value where needed. Increase _XOPEN_SOURCE value where needed. Conditionally link to libcap (only on Linux). Possibly some trailing whitespace fixes (automatic). | |||
* | Terminate when both suid bit and filecaps are set | 2017-05-11 | ||
| | ||||
* | Initialise logging earlier | 2017-05-11 | ||
| | ||||
* | Add -DVERSION flag for release version numbers | 2017-04-26 | ||
| | ||||
* | Implement more thourough nvidia config check | 2017-04-12 | ||
| | ||||
* | Downgrade nvidia proprietary driver warning | 2017-04-12 | ||
| | ||||
* | Add libcap check to CMake | 2017-04-07 | ||
| | | | | | | | | | | | - Moved ``<sys/capability.h>`` include inside `__linux__` guard, because all uses are similarly guarded. - <sys/capability.h> is part of an optional devel package, at least in fedora. CMake now explicitly checks that libcap devel files are available. - Added libcap to the list of install packages in .travis.yml, to make the dependency explicit. travis-ci installs the package by default, which is why this hasn't surfaced previously. | |||
* | UnGNUify the codebase | 2017-03-10 | ||
| | ||||
* | Move env logging to earlier than wlc_init | 2017-02-23 | ||
| | ||||
* | Read configs from /etc/sway/security.d/* | 2017-02-20 | ||
| | ||||
* | Unset LD_LIBRARY_PATH, unless specified | 2017-01-16 | ||
| | ||||
* | Log capability dropping | 2017-01-12 | ||
| | ||||
* | Keep CAP_SYS_PTRACE with suid binary | 2017-01-12 | ||
| | ||||
* | Change how security config is loaded0.11-rc3 | 2016-12-17 | ||
| | ||||
* | Handle malloc failures from read_line | 2016-12-15 | ||
| | ||||
* | Fix build on FreeBSD | 2016-12-09 | ||
| | | | | | | | | | - Make sure CMake always finds absolute paths for Cairo, Pango and GdkPixbuf - Add forgotten json-c include path to swaymsg/CMakeLists.txt - Disable -Werror because of assert warnings - Add correct /proc/pid/file path for FreeBSD - Use libepoll-shim on FreeBSD - Only use Linux capabilities on, well, Linux | |||
* | Decrement expected_len | 2016-12-04 | ||
| | ||||
* | Drop restart command from sanity check | 2016-12-04 | ||
| | | | | Since we don't actually have one of those | |||
* | Check for CAP_SYS_PTRACE | 2016-12-02 | ||
| | ||||
* | Deal with LD_LIBRARY_PATH | 2016-12-02 | ||
| | ||||
* | Unset LD_PRELOAD on startup (before dropping root) | 2016-12-02 | ||
| | | | | | | LD_PRELOAD enables keyloggers to easily be made. This solution isn't perfect - really a secure system wouldn't have LD_PRELOAD at all. It was a stupid idea in the first place. | |||
* | Flesh out security_sanity_check | 2016-12-02 | ||
| | ||||
* | Shut Clang up | 2016-12-01 | ||
| | ||||
* | Write example security config, start on code | 2016-12-01 | ||
| | ||||
* | Log LD_LIBRARY_PATH | 2016-10-27 | ||
| | ||||
* | Remove duplicate redhat-release line | 2016-10-27 | ||
| | ||||
* | Log uname -a on startup | 2016-10-27 | ||
| | ||||
* | Log contents of distro version files | 2016-10-27 | ||
| | ||||
* | Log important env vars on startup | 2016-10-27 | ||
| | ||||
* | moved ipc_init above config file processing. | 2016-10-02 | ||
| | | | | | | | This is necessary because commands in the config file (mode for instance) emit ipc events, and if ipc_init has not been called the ipc_clients_list is not initialized, and we segfault. This fixes that bug. | |||
* | Split setgid and setuid, add privilege check | 2016-09-20 | ||
| | | | | | | | This commit deals with issue #884. I consulted the following sources: https://www.securecoding.cert.org/confluence/display/c/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges and https://www.securecoding.cert.org/confluence/display/c/POS37-C.+Ensure+that+privilege+relinquishment+is+successful | |||
* | Reorganize includes | 2016-09-01 | ||
| |