Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-12-06 | Add output config | emersion | |
2017-12-05 | Add minimal config subsystem | emersion | |
2017-12-02 | log env after ipc init | Tony Crisci | |
2017-11-28 | remove nvidia support claim | Tony Crisci | |
2017-11-22 | Wire up IPC server | Drew DeVault | |
2017-11-19 | Add outputs to the tree | Drew DeVault | |
2017-11-18 | Move everything to sway/old/ | Drew DeVault | |
2017-11-11 | Initialize outputs from backend and add to tree | Drew DeVault | |
2017-11-11 | Fire up the wlroots backend and run the event loop | Drew DeVault | |
2017-10-24 | nvidia: Validate the nvidia_drm module options | Dan Robertson | |
When the proprietary nvidia driver is used, ensure the modeset option is set instead of checking /proc/cmdline for nvidia-drm.modeset=1. | |||
2017-08-14 | Check for Raspberry Pi | azarus | |
2017-06-06 | FreeBSD fixes | johalun | |
Increase _POSIX_SOURCE value where needed. Increase _XOPEN_SOURCE value where needed. Conditionally link to libcap (only on Linux). Possibly some trailing whitespace fixes (automatic). | |||
2017-05-11 | Terminate when both suid bit and filecaps are set | Mykyta Holubakha | |
2017-05-11 | Initialise logging earlier | Mykyta Holubakha | |
2017-04-26 | Add -DVERSION flag for release version numbers | Sebastian Noack | |
2017-04-12 | Implement more thourough nvidia config check | Drew DeVault | |
2017-04-12 | Downgrade nvidia proprietary driver warning | Drew DeVault | |
2017-04-07 | Add libcap check to CMake | JerziKaminsky | |
- Moved ``<sys/capability.h>`` include inside `__linux__` guard, because all uses are similarly guarded. - <sys/capability.h> is part of an optional devel package, at least in fedora. CMake now explicitly checks that libcap devel files are available. - Added libcap to the list of install packages in .travis.yml, to make the dependency explicit. travis-ci installs the package by default, which is why this hasn't surfaced previously. | |||
2017-03-10 | UnGNUify the codebase | Drew DeVault | |
2017-02-23 | Move env logging to earlier than wlc_init | Drew DeVault | |
2017-02-20 | Read configs from /etc/sway/security.d/* | Drew DeVault | |
2017-01-16 | Unset LD_LIBRARY_PATH, unless specified | Mykyta Holubakha | |
2017-01-12 | Log capability dropping | Mykyta Holubakha | |
2017-01-12 | Keep CAP_SYS_PTRACE with suid binary | Mykyta Holubakha | |
2016-12-17 | Change how security config is loaded | Drew DeVault | |
2016-12-15 | Handle malloc failures from read_line | Drew DeVault | |
2016-12-09 | Fix build on FreeBSD | Greg V | |
- Make sure CMake always finds absolute paths for Cairo, Pango and GdkPixbuf - Add forgotten json-c include path to swaymsg/CMakeLists.txt - Disable -Werror because of assert warnings - Add correct /proc/pid/file path for FreeBSD - Use libepoll-shim on FreeBSD - Only use Linux capabilities on, well, Linux | |||
2016-12-04 | Decrement expected_len | Drew DeVault | |
2016-12-04 | Drop restart command from sanity check | Drew DeVault | |
Since we don't actually have one of those | |||
2016-12-02 | Check for CAP_SYS_PTRACE | Drew DeVault | |
2016-12-02 | Deal with LD_LIBRARY_PATH | Drew DeVault | |
2016-12-02 | Unset LD_PRELOAD on startup (before dropping root) | Drew DeVault | |
LD_PRELOAD enables keyloggers to easily be made. This solution isn't perfect - really a secure system wouldn't have LD_PRELOAD at all. It was a stupid idea in the first place. | |||
2016-12-02 | Flesh out security_sanity_check | Drew DeVault | |
2016-12-01 | Shut Clang up | Drew DeVault | |
2016-12-01 | Write example security config, start on code | Drew DeVault | |
2016-10-27 | Log LD_LIBRARY_PATH | Drew DeVault | |
2016-10-27 | Remove duplicate redhat-release line | Drew DeVault | |
2016-10-27 | Log uname -a on startup | Drew DeVault | |
2016-10-27 | Log contents of distro version files | Drew DeVault | |
2016-10-27 | Log important env vars on startup | Drew DeVault | |
2016-10-02 | moved ipc_init above config file processing. | Patrick Sauter | |
This is necessary because commands in the config file (mode for instance) emit ipc events, and if ipc_init has not been called the ipc_clients_list is not initialized, and we segfault. This fixes that bug. | |||
2016-09-20 | Split setgid and setuid, add privilege check | D.B | |
This commit deals with issue #884. I consulted the following sources: https://www.securecoding.cert.org/confluence/display/c/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges and https://www.securecoding.cert.org/confluence/display/c/POS37-C.+Ensure+that+privilege+relinquishment+is+successful | |||
2016-09-01 | Reorganize includes | Drew DeVault | |
2016-05-05 | sway/main.c: simplify free'ing by switching to the helper method | Daniel Lockyer | |
2016-04-16 | Update to wlc 0.0.2 | Drew DeVault | |
2016-03-26 | Implement include command | Mikkel Oscar Lyderik | |
The include command (`include <path>`) makes it possible to include sub config files from the main config file (or from within other sub config files). The include command uses the following rules for including config files: * the `path` can be either a full path or a path that is relative to the parent config. Shell expansion is supported, so it's possible to do `include ~/.config/sway.d/*`. * The same config file can only be included once (to prevent include cycles). If a config is included multiple times it will just be ignored after it has been included once. * Including a sub config file is the same as inserting the content of that file into the parent config, thus rules about overwriting bindsyms etc. works the same as for a single config. Implement #542 | |||
2016-03-24 | Gracefully exit when config is not found | Mikkel Oscar Lyderik | |
This makes sure that sway will gracefully exit if the config is not found or sway is unable to read it. | |||
2016-03-24 | Make the nvidia warning louder | Drew DeVault | |
2016-03-24 | Don't set WLC_DIM on startup | Drew DeVault | |
2016-03-24 | Update to new WLC API | Drew DeVault | |