aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-12-15Handle border-related malloc failuresDrew DeVault
2016-12-15Always log filename and line numberDrew DeVault
2016-12-15Handle malloc failures from read_lineDrew DeVault
2016-12-15Handle malloc failure in ipc_recv_responseDrew DeVault
2016-12-14Merge pull request #991 from barfoo1/registry_fixDrew DeVault
minor logic error in registry.c:seat_handle_capabilities()
2016-12-14minor logic errorbarfoo1
2016-12-11Merge pull request #985 from myfreeweb/masterDrew DeVault
Fix build on FreeBSD
2016-12-09Fix build on FreeBSDGreg V
- Make sure CMake always finds absolute paths for Cairo, Pango and GdkPixbuf - Add forgotten json-c include path to swaymsg/CMakeLists.txt - Disable -Werror because of assert warnings - Add correct /proc/pid/file path for FreeBSD - Use libepoll-shim on FreeBSD - Only use Linux capabilities on, well, Linux
2016-12-06Use return value of writeDrew DeVault
2016-12-04Decrement expected_lenDrew DeVault
2016-12-04Change name of ld-library-path cmake variableDrew DeVault
2016-12-04Mention setcap in manual install instructionsDrew DeVault
2016-12-04Add link to security features issue in readmeDrew DeVault
2016-12-04Fix to sway-security(7)Drew DeVault
2016-12-04Drop restart command from sanity checkDrew DeVault
Since we don't actually have one of those
2016-12-04Fix minor issues with default security configDrew DeVault
2016-12-04fix layout switching (was broken because of workspace_layout)D.B
For workspace containers, swayc_change_layout also changes ->layout alongside ->workspace_layout when it's a sensible thing to do. There is an additional test for 'layout toggle' command which ensures that containers will be tiled horizontally after toggling from tabbed or stacked.
2016-12-04wrap some views under workspacesD.B
If workspace layout is set to tabbed or stacked, its C_VIEW children should get wrapped in a container. Alongside that, move_container was modified to retain previous functionality.
2016-12-04add workspace_layout to containerD.B
Add swayc_change_layout function, which changes either layout or workspace_layout, depending on the container type.
2016-12-04Merge pull request #981 from SirCmpwn/securityDrew DeVault
Security features
2016-12-03Disallow everything by defaultDrew DeVault
And update config.d/security to configure sane defaults
2016-12-02Fix use-after-freeDrew DeVault
2016-12-02Fix clang issuesDrew DeVault
2016-12-02Check for CAP_SYS_PTRACEDrew DeVault
2016-12-02Add ipc connection feature policy controlsDrew DeVault
2016-12-02Enforce IPC security policyDrew DeVault
2016-12-02Add IPC security policy command handlersDrew DeVault
2016-12-02Add IPC policy to configDrew DeVault
Also reduces enum abuse, cc @minus7
2016-12-02Drop -Denable-binding-eventDrew DeVault
2016-12-02Run config files through sed and install to /etcDrew DeVault
2016-12-02Clarify lock permission consequencesDrew DeVault
2016-12-02Clarify that executable has to be a full pathDrew DeVault
2016-12-02Soften up environment securityDrew DeVault
So no one gets their feewings hurt
2016-12-02Deal with LD_LIBRARY_PATHDrew DeVault
2016-12-02Clarify when keyboard/mouse features workDrew DeVault
2016-12-02Add docs on what features sway programs requireDrew DeVault
2016-12-02Add sway-security(7)Drew DeVault
2016-12-02Unset LD_PRELOAD on startup (before dropping root)Drew DeVault
LD_PRELOAD enables keyloggers to easily be made. This solution isn't perfect - really a secure system wouldn't have LD_PRELOAD at all. It was a stupid idea in the first place.
2016-12-02Flesh out security_sanity_checkDrew DeVault
2016-12-02Enforce command policiesDrew DeVault
2016-12-02Add support for command policies in config fileDrew DeVault
2016-12-01Enforce mouse permissionsDrew DeVault
2016-12-01Enforce keyboard permissionsDrew DeVault
2016-12-01Enforce fullscreen permissionsDrew DeVault
2016-12-01Shut Clang upDrew DeVault
2016-12-01Add security checks for background, panel, lockDrew DeVault
2016-12-01Implement permit and reject commandsDrew DeVault
2016-12-01Memory leakDrew DeVault
2016-12-01Implement policy lookupsDrew DeVault
2016-12-01Add config related code and initial headersDrew DeVault