aboutsummaryrefslogtreecommitdiff
path: root/sway/main.c
AgeCommit message (Collapse)Author
2017-12-02log env after ipc initTony Crisci
2017-11-28remove nvidia support claimTony Crisci
2017-11-22Wire up IPC serverDrew DeVault
2017-11-19Add outputs to the treeDrew DeVault
2017-11-18Move everything to sway/old/Drew DeVault
2017-11-11Initialize outputs from backend and add to treeDrew DeVault
2017-11-11Fire up the wlroots backend and run the event loopDrew DeVault
2017-10-24nvidia: Validate the nvidia_drm module optionsDan Robertson
When the proprietary nvidia driver is used, ensure the modeset option is set instead of checking /proc/cmdline for nvidia-drm.modeset=1.
2017-08-14Check for Raspberry Piazarus
2017-06-06FreeBSD fixesjohalun
Increase _POSIX_SOURCE value where needed. Increase _XOPEN_SOURCE value where needed. Conditionally link to libcap (only on Linux). Possibly some trailing whitespace fixes (automatic).
2017-05-11Terminate when both suid bit and filecaps are setMykyta Holubakha
2017-05-11Initialise logging earlierMykyta Holubakha
2017-04-26Add -DVERSION flag for release version numbersSebastian Noack
2017-04-12Implement more thourough nvidia config checkDrew DeVault
2017-04-12Downgrade nvidia proprietary driver warningDrew DeVault
2017-04-07Add libcap check to CMakeJerziKaminsky
- Moved ``<sys/capability.h>`` include inside `__linux__` guard, because all uses are similarly guarded. - <sys/capability.h> is part of an optional devel package, at least in fedora. CMake now explicitly checks that libcap devel files are available. - Added libcap to the list of install packages in .travis.yml, to make the dependency explicit. travis-ci installs the package by default, which is why this hasn't surfaced previously.
2017-03-10UnGNUify the codebaseDrew DeVault
2017-02-23Move env logging to earlier than wlc_initDrew DeVault
2017-02-20Read configs from /etc/sway/security.d/*Drew DeVault
2017-01-16Unset LD_LIBRARY_PATH, unless specifiedMykyta Holubakha
2017-01-12Log capability droppingMykyta Holubakha
2017-01-12Keep CAP_SYS_PTRACE with suid binaryMykyta Holubakha
2016-12-17Change how security config is loadedDrew DeVault
2016-12-15Handle malloc failures from read_lineDrew DeVault
2016-12-09Fix build on FreeBSDGreg V
- Make sure CMake always finds absolute paths for Cairo, Pango and GdkPixbuf - Add forgotten json-c include path to swaymsg/CMakeLists.txt - Disable -Werror because of assert warnings - Add correct /proc/pid/file path for FreeBSD - Use libepoll-shim on FreeBSD - Only use Linux capabilities on, well, Linux
2016-12-04Decrement expected_lenDrew DeVault
2016-12-04Drop restart command from sanity checkDrew DeVault
Since we don't actually have one of those
2016-12-02Check for CAP_SYS_PTRACEDrew DeVault
2016-12-02Deal with LD_LIBRARY_PATHDrew DeVault
2016-12-02Unset LD_PRELOAD on startup (before dropping root)Drew DeVault
LD_PRELOAD enables keyloggers to easily be made. This solution isn't perfect - really a secure system wouldn't have LD_PRELOAD at all. It was a stupid idea in the first place.
2016-12-02Flesh out security_sanity_checkDrew DeVault
2016-12-01Shut Clang upDrew DeVault
2016-12-01Write example security config, start on codeDrew DeVault
2016-10-27Log LD_LIBRARY_PATHDrew DeVault
2016-10-27Remove duplicate redhat-release lineDrew DeVault
2016-10-27Log uname -a on startupDrew DeVault
2016-10-27Log contents of distro version filesDrew DeVault
2016-10-27Log important env vars on startupDrew DeVault
2016-10-02moved ipc_init above config file processing.Patrick Sauter
This is necessary because commands in the config file (mode for instance) emit ipc events, and if ipc_init has not been called the ipc_clients_list is not initialized, and we segfault. This fixes that bug.
2016-09-20Split setgid and setuid, add privilege checkD.B
This commit deals with issue #884. I consulted the following sources: https://www.securecoding.cert.org/confluence/display/c/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges and https://www.securecoding.cert.org/confluence/display/c/POS37-C.+Ensure+that+privilege+relinquishment+is+successful
2016-09-01Reorganize includesDrew DeVault
2016-05-05sway/main.c: simplify free'ing by switching to the helper methodDaniel Lockyer
2016-04-16Update to wlc 0.0.2Drew DeVault
2016-03-26Implement include commandMikkel Oscar Lyderik
The include command (`include <path>`) makes it possible to include sub config files from the main config file (or from within other sub config files). The include command uses the following rules for including config files: * the `path` can be either a full path or a path that is relative to the parent config. Shell expansion is supported, so it's possible to do `include ~/.config/sway.d/*`. * The same config file can only be included once (to prevent include cycles). If a config is included multiple times it will just be ignored after it has been included once. * Including a sub config file is the same as inserting the content of that file into the parent config, thus rules about overwriting bindsyms etc. works the same as for a single config. Implement #542
2016-03-24Gracefully exit when config is not foundMikkel Oscar Lyderik
This makes sure that sway will gracefully exit if the config is not found or sway is unable to read it.
2016-03-24Make the nvidia warning louderDrew DeVault
2016-03-24Don't set WLC_DIM on startupDrew DeVault
2016-03-24Update to new WLC APIDrew DeVault
2016-02-27Free config before exiting sway.Mikkel Oscar Lyderik
Apart from freeing the sway_config struct, this also terminates the swaybars spawned by sway, since they are linked by PID to the bar config structs.
2016-02-26Correctly exit sway on errors.Mikkel Oscar Lyderik
Calling `exit` in sway_terminate prevents sway from correctly shutting down (freeing data, cleanly terminating the ipc server, etc.). A better way is to exit straight away if the failure occurs before `wlc_run` and use sway_abort as usual if it occur when wlc is running.