Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-06-19 | Perform (partial) server initialization before dropping privileges. | Tobias Blass | |
Some operations during backend creation (e.g. becoming DRM master) require CAP_SYS_ADMIN privileges. At this point, sway has dropped them already, though. This patch splits the privileged part of server_init into its own function and calls it before dropping its privileges. This fixes the bug with minimal security implications. | |||
2018-06-05 | Remove suspicious unconditional return | Tobias Blass | |
This return effectively disables the log_kernel function | |||
2018-05-16 | sway: run commands without waiting for Xwayland | Dominique Martinet | |
Xwayland is lazy now, there is no need to wait at all | |||
2018-04-06 | Add debug tree view | Drew DeVault | |
2018-03-31 | temporarily add LD_LIBRARY_PATH stuff | Tony Crisci | |
2018-03-29 | Revert "Merge pull request #1653 from swaywm/revert-1647-refactor-tree" | Tony Crisci | |
This reverts commit 472e81f35d689d67cda241acafda91c688d61046, reversing changes made to 6b7841b11ff4cd35f54d69dc92029855893e5ce0. | |||
2018-03-29 | Revert "Refactor tree" | Drew DeVault | |
2018-03-29 | rename layout init | Tony Crisci | |
2018-03-29 | move tree includes to their own directory | Tony Crisci | |
2018-01-05 | fix typos in comments/messages; add shutting down message | Dominique Martinet | |
2017-12-31 | Consolidate WLR and Sway logging | Calvin Lee | |
See #1390 | |||
2017-12-16 | Merge branch 'wlroots' into feature/input | Tony Crisci | |
2017-12-15 | xkb config | Tony Crisci | |
2017-12-09 | working xcursor | Tony Crisci | |
2017-12-06 | Add output config | emersion | |
2017-12-05 | Add minimal config subsystem | emersion | |
2017-12-02 | log env after ipc init | Tony Crisci | |
2017-11-28 | remove nvidia support claim | Tony Crisci | |
2017-11-22 | Wire up IPC server | Drew DeVault | |
2017-11-19 | Add outputs to the tree | Drew DeVault | |
2017-11-18 | Move everything to sway/old/ | Drew DeVault | |
2017-11-11 | Initialize outputs from backend and add to tree | Drew DeVault | |
2017-11-11 | Fire up the wlroots backend and run the event loop | Drew DeVault | |
2017-10-24 | nvidia: Validate the nvidia_drm module options | Dan Robertson | |
When the proprietary nvidia driver is used, ensure the modeset option is set instead of checking /proc/cmdline for nvidia-drm.modeset=1. | |||
2017-08-14 | Check for Raspberry Pi | azarus | |
2017-06-06 | FreeBSD fixes | johalun | |
Increase _POSIX_SOURCE value where needed. Increase _XOPEN_SOURCE value where needed. Conditionally link to libcap (only on Linux). Possibly some trailing whitespace fixes (automatic). | |||
2017-05-11 | Terminate when both suid bit and filecaps are set | Mykyta Holubakha | |
2017-05-11 | Initialise logging earlier | Mykyta Holubakha | |
2017-04-26 | Add -DVERSION flag for release version numbers | Sebastian Noack | |
2017-04-12 | Implement more thourough nvidia config check | Drew DeVault | |
2017-04-12 | Downgrade nvidia proprietary driver warning | Drew DeVault | |
2017-04-07 | Add libcap check to CMake | JerziKaminsky | |
- Moved ``<sys/capability.h>`` include inside `__linux__` guard, because all uses are similarly guarded. - <sys/capability.h> is part of an optional devel package, at least in fedora. CMake now explicitly checks that libcap devel files are available. - Added libcap to the list of install packages in .travis.yml, to make the dependency explicit. travis-ci installs the package by default, which is why this hasn't surfaced previously. | |||
2017-03-10 | UnGNUify the codebase | Drew DeVault | |
2017-02-23 | Move env logging to earlier than wlc_init | Drew DeVault | |
2017-02-20 | Read configs from /etc/sway/security.d/* | Drew DeVault | |
2017-01-16 | Unset LD_LIBRARY_PATH, unless specified | Mykyta Holubakha | |
2017-01-12 | Log capability dropping | Mykyta Holubakha | |
2017-01-12 | Keep CAP_SYS_PTRACE with suid binary | Mykyta Holubakha | |
2016-12-17 | Change how security config is loaded | Drew DeVault | |
2016-12-15 | Handle malloc failures from read_line | Drew DeVault | |
2016-12-09 | Fix build on FreeBSD | Greg V | |
- Make sure CMake always finds absolute paths for Cairo, Pango and GdkPixbuf - Add forgotten json-c include path to swaymsg/CMakeLists.txt - Disable -Werror because of assert warnings - Add correct /proc/pid/file path for FreeBSD - Use libepoll-shim on FreeBSD - Only use Linux capabilities on, well, Linux | |||
2016-12-04 | Decrement expected_len | Drew DeVault | |
2016-12-04 | Drop restart command from sanity check | Drew DeVault | |
Since we don't actually have one of those | |||
2016-12-02 | Check for CAP_SYS_PTRACE | Drew DeVault | |
2016-12-02 | Deal with LD_LIBRARY_PATH | Drew DeVault | |
2016-12-02 | Unset LD_PRELOAD on startup (before dropping root) | Drew DeVault | |
LD_PRELOAD enables keyloggers to easily be made. This solution isn't perfect - really a secure system wouldn't have LD_PRELOAD at all. It was a stupid idea in the first place. | |||
2016-12-02 | Flesh out security_sanity_check | Drew DeVault | |
2016-12-01 | Shut Clang up | Drew DeVault | |
2016-12-01 | Write example security config, start on code | Drew DeVault | |
2016-10-27 | Log LD_LIBRARY_PATH | Drew DeVault | |