Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Fix swaylock w/shadow on glibc, improve security | 2018-10-06 | |
| | | | | | | | | | Today I learned that GNU flaunts the POSIX standard in yet another creative way. Additionally, this adds some security improvements, namely: - Zeroing out password buffers in the privileged child process - setuid/setgid after reading /etc/shadow | ||
* | swaylock: Support keyboard and pointer disconnects and reconnects | 2018-10-06 | |
| | |||
* | Add support for installing binaries with DT_RPATH | 2018-09-30 | |
| | | | | | | | | | | | | | | It's better to use DT_RPATH dynamic section of the elf binary to store the paths of libraries to load instead of overwriting LD_LIBRARY_PATH for the whole environment, causing surprises. This solution is much more transparent and perfectly suitable for running contained installations of wayland/wlroots/sway. The code unsetting the LD_LIBRARY_PATH/LD_PRELOAD was also deleted as it's a placebo security at best - we should trust the execution path that leads us to running sway, and it's way too late to care about those variables since we already started executing our compositor, thus we would be compromised anyway. | ||
* | Turn funcs() into funcs(void) | 2018-09-30 | |
| | | | | If they really do not take undefined number of arguments. | ||
* | Add support for building swaylock without PAM | 2018-09-28 | |
| | | | | | | This involves setuid'ing swaylock, which then forks and drops perms on the parent process. The child process remains root and listens on a pipe for requests to validate passwords against /etc/shadow. | ||
* | swaybar, swaylock, & tree/container: Set cairo font options to render text ↵ | 2018-09-22 | |
| | | | | and lines with subpixel hinting (if available). | ||
* | Add FreeBSD-specific PAM configuration | 2018-08-30 | |
| | | | | | | | | The "login" PAM configuration means somathing entirely different on FreeBSD than on Linux: if you try to authenticate as the calling user, it OKs the request without prompting for password. The "passwd" config implements the desired functionality, therefore it should be used by swaylock. | ||
* | Fix swaylock arguments | 2018-07-17 | |
| | |||
* | Switch to using getopt_long for config flag | 2018-07-16 | |
| | |||
* | Remove leftover parens | 2018-07-16 | |
| | |||
* | Remove int cast after changing to size_t | 2018-07-16 | |
| | |||
* | Change to size_t in swaylock's get_config_path | 2018-07-16 | |
| | |||
* | Implement swaylock configuration file parsing | 2018-07-16 | |
| | |||
* | Change formatting of swaylock usage in the code | 2018-07-10 | |
| | |||
* | Implement swaylock customization flags | 2018-07-10 | |
| | |||
* | Update for swaywm/wlroots#1126 | 2018-07-09 | |
| | |||
* | swaylock: daemonize after locking | 2018-07-07 | |
| | |||
* | swaylock: fix the displaying of "verified" | 2018-07-07 | |
| | | | | | Displaying verified after damaging state needs more than one roundtrip, so keep looping until surfaces are not dirty anymore | ||
* | Detect opaque lockscreen when using a solid color | 2018-07-07 | |
| | |||
* | Use infinite opaque region in swaylock | 2018-07-07 | |
| | |||
* | Use opaque region to determine if frame done should be sent | 2018-07-07 | |
| | |||
* | Fix transparency in background images in swaylock | 2018-07-04 | |
| | |||
* | Fix #1857 | 2018-07-04 | |
| | |||
* | swaylock daemonize: fix leak of devnull fd | 2018-07-02 | |
| | |||
* | swaylock: implement ^U to clear buffer | 2018-06-08 | |
| | | | | | | | The whole state->xcb.modifiers thing didn't work at all (always 0) The xkb doc says "[xkb_state_serialize_mods] should not be used in regular clients; please use the xkb_state_mod_*_is_active API instead" so here it is | ||
* | swaylock: implement a proper render loop | 2018-05-27 | |
| | |||
* | Delete old asciidoc man pages | 2018-05-25 | |
| | |||
* | swaylock: remove unused field | 2018-05-23 | |
| | |||
* | swaylock: don't try to render unconfigured surfaces | 2018-05-23 | |
| | |||
* | Merge branch 'master' into fix-swaylock-hotplugging | 2018-05-23 | |
|\ | |||
| * | Swaylock: Use calloc instead of malloc | 2018-05-20 | |
| | | |||
| * | Swaylock: Log error if multiple images are defined for the same output | 2018-05-20 | |
| | | |||
| * | Swaylock: Allow per-output images | 2018-05-20 | |
| | | |||
* | | Fix output hotplugging | 2018-05-18 | |
| | | |||
* | | Fix swaylock crashing when unplugging output | 2018-05-18 | |
|/ | |||
* | Add swaylock(1) and swaymsg(1) | 2018-05-11 | |
| | |||
* | Improved key handling in swaylock | 2018-04-24 | |
| | | | | | | Make escape clear buffer Add indicator states for ctrl,shift,super et al Add CapsLock indicator | ||
* | [swaylock] Install pam module | 2018-04-20 | |
| | |||
* | swaylock: Securely zero-out password. | 2018-04-12 | |
| | | | | | | | | - Replace char* with static array. Any chars > 1024 will be discarded. - mlock() password buffer so it can't be written to swap. - Clear password buffer after auth succeeds or fails. This is basically the same treatment I gave the 0.15 branch in https://github.com/swaywm/sway/pull/1519 | ||
* | Error handling in swaylock daemonize() | 2018-04-05 | |
| | | | | Fixes #1741 | ||
* | Address review feedback from @emersion | 2018-04-04 | |
| | |||
* | exit() needs stdlib.h | 2018-04-04 | |
| | | | | inb4 acrisci | ||
* | Import stdlib.h and define POSIX macro for rand() | 2018-04-04 | |
| | |||
* | Move extra roundtrip into password.c | 2018-04-04 | |
| | |||
* | Add hidpi support to swaylock | 2018-04-04 | |
| | |||
* | Implement input-inhibit in sway, swaylock | 2018-04-04 | |
| | |||
* | Actually let's not do that TODO | 2018-04-04 | |
| | |||
* | R E N D E R I N G | 2018-04-04 | |
| | |||
* | Verify passwords | 2018-04-04 | |
| | |||
* | Add password buffer, refactor rendering/surfaces | 2018-04-04 | |
| |