Commit Graph

  • 8f8769642f run: Don't allow chroot() Simon McVittie 2021-09-01 14:21:04 +01:00
  • 758b8ca8c8 run: Don't allow unmounting filesystems Simon McVittie 2021-09-01 14:20:29 +01:00
  • a01fc5f335 run: Block setns() Simon McVittie 2021-09-01 14:19:31 +01:00
  • db4ccf768e run: Disallow recently-added mount-manipulation syscalls Simon McVittie 2021-09-01 12:45:54 +01:00
  • 08c65cdfec run: Block clone3() in sandbox Simon McVittie 2021-09-01 11:59:00 +01:00
  • cf9cdd9aec common: Add a list of recently-added Linux syscalls Simon McVittie 2021-09-01 14:17:04 +01:00
  • 13d34f91eb run: Add cross-references for some other seccomp syscall filters Simon McVittie 2021-09-01 12:44:04 +01:00
  • 89f9bb78a9 run: Add an errno value to seccomp filters Simon McVittie 2021-09-01 11:53:23 +01:00
  • 7c5aec474c tests: Add basic test coverage for our seccomp filters Simon McVittie 2021-10-21 17:41:08 +01:00
  • 4ce251882c tests: Add try-syscall helper Simon McVittie 2021-10-21 17:39:08 +01:00
  • 2181f4f171 .gitignore: Update for recent changes Phaedrus Leeds 2021-10-25 14:59:54 -07:00
  • 71a09d47d5 doc/flatpakrepo: Fix a typo Phaedrus Leeds 2021-10-25 14:10:43 -07:00
  • 01c2b79ad0 Merge pull request #4501 from gasinvein/build-init-sdk-ext-arch Phaedrus Leeds 2021-10-25 10:39:19 -07:00
  • 2ae3631fc2 Merge pull request #4504 from smcv/regen-test-matrix Phaedrus Leeds 2021-10-22 18:37:05 -07:00
  • 93d3cb4704 Pedantic typo fix Phaedrus Leeds 2021-10-21 17:30:01 -07:00
  • df3d85e753 testlibrary: Add test for remote nodeps option Phaedrus Leeds 2021-10-15 13:13:06 -07:00
  • 6de22f0e62 Include extensions in listing origin remote refs Phaedrus Leeds 2021-10-15 12:24:15 -07:00
  • 7f3556d92c Fix implementation of xa.noenumerate remote option Phaedrus Leeds 2021-10-15 09:38:10 -07:00
  • ef05925700 dir: Don't mask the main ref of a noenumerate remote Phaedrus Leeds 2021-10-14 15:47:06 -07:00
  • f6da902b38 common: Improve a few REF_NOT_FOUND error messages Phaedrus Leeds 2021-10-13 11:52:19 -07:00
  • dd48e78652 testlibrary: Make remote existence assertions more friendly Phaedrus Leeds 2021-10-14 17:38:19 -07:00
  • f753dd214c testlibrary: Add missing cleanup Phaedrus Leeds 2021-10-14 17:08:12 -07:00
  • 8f85f77ff9 testlibrary: Tweak some helper functions Phaedrus Leeds 2021-10-14 15:45:44 -07:00
  • 0258fc82bb testlibrary: Don't use g_assert() Phaedrus Leeds 2021-10-14 15:13:34 -07:00
  • 647c51380c tests: Generate Makefile-test-matrix.am.inc in $(srcdir) Simon McVittie 2021-10-21 17:39:57 +01:00
  • 30964d2bac build-init: Use SDK arch for SDK extensions... gasinvein 2021-10-21 00:05:23 +03:00
  • 14b375e09a Merge pull request #4496 from jtojnar/test-exports-binary-path Phaedrus Leeds 2021-10-19 17:13:00 -07:00
  • cd023ed091 README: update documentation of subdirectories Phaedrus Leeds 2021-10-19 16:31:49 -07:00
  • 438fd6b109 Merge pull request #4493 from piotrdrag/piotrdrag/pl-update-211017-1.12.x Phaedrus Leeds 2021-10-19 11:43:05 -07:00
  • 12c4584593 Update Polish translation Piotr Drąg 2021-10-17 13:02:00 +02:00
  • 5f30403d2b CI: Add 1.12 branch Phaedrus Leeds 2021-10-19 10:57:06 -07:00
  • 179b45928c CI: Add 1.12 branch Phaedrus Leeds 2021-10-19 10:57:06 -07:00
  • 5f868aa312 Merge pull request #4494 from piotrdrag/piotrdrag/pl-update-211017-master Phaedrus Leeds 2021-10-18 18:31:46 -07:00
  • 96dbe28cfa tests: Allow FLATPAK_BINARY=flatpak for exports Jan Tojnar 2021-10-17 20:49:22 +02:00
  • 968cfbe29f Update Polish translation Piotr Drąg 2021-10-17 13:06:21 +02:00
  • b098191252 Fix capitalization of "false" in flatpakref keyfiles Phaedrus Leeds 2021-10-14 14:11:49 -07:00
  • f94721bef2 doc: Clarify default setting of noenumerate/nodeps options Phaedrus Leeds 2021-10-13 13:23:44 -07:00
  • 4f6c13e751 Merge pull request #4327 from ericcurtin/warn_unused_result Phaedrus Leeds 2021-10-12 14:31:43 -07:00
  • c6845ad70b Fix some warn_unused_result warnings Eric Curtin 2021-06-22 10:15:08 +01:00
  • 23ce2b1bc6 NEWS: Fix typo in 1.10.4 notes Phaedrus Leeds 2021-10-12 12:15:37 -07:00
  • 083730f59b Write NEWS so far for 1.10.6 Simon McVittie 2021-10-11 14:19:55 +01:00
  • 0717aa5535 NEWS: Clarify what was fixed in 1.12.1 and 1.10.5 Simon McVittie 2021-10-11 14:07:35 +01:00
  • ee4a9c4e1c NEWS: Mention CVE-2021-41133 Simon McVittie 2021-10-11 14:24:22 +01:00
  • 7ea10dc919 run: Improve error handling/diagnostics for calls into libseccomp Simon McVittie 2021-10-08 19:06:13 +01:00
  • 2448522422 Fix handling of syscalls only allowed by --devel Simon McVittie 2021-10-08 19:00:13 +01:00
  • 0a8d217750 Merge pull request #4480 from TheEvilSkeleton/github-forms Phaedrus Leeds 2021-10-12 11:55:17 -07:00
  • 80a0a2ebe4 Merge NEWS from tag '1.12.2' Simon McVittie 2021-10-12 18:10:57 +01:00
  • 96aafda476 Regenerate .po files for release 1.12.2 Simon McVittie 2021-10-12 11:16:30 +01:00
  • f4db077a52 Set version number to 1.12.2 Simon McVittie 2021-10-12 10:54:34 +01:00
  • 80fc916332 Switch to GitHub forms TheEvilSkeleton 2021-08-29 17:31:18 -04:00
  • 23d60d2225 po: Update Ukrainian translation Yuri Chornoivan 2021-10-11 19:49:22 +03:00
  • 58f9ed8aac Merge NEWS from branch 'flatpak-1.12.x' Simon McVittie 2021-10-11 14:18:29 +01:00
  • 666dc8dbcd NEWS: Add changes so far for 1.12.2 Simon McVittie 2021-10-11 14:17:28 +01:00
  • 486b978b44 NEWS: Clarify the user-facing feature enabled by improved subsandboxing Simon McVittie 2021-10-11 14:11:47 +01:00
  • ff0c48c780 NEWS: Mention CVE-2021-41133 Simon McVittie 2021-10-11 14:11:23 +01:00
  • 89fb54123a NEWS: Clarify what was fixed in 1.12.1 Simon McVittie 2021-10-11 14:11:02 +01:00
  • 72c38fe0bd common: Backport g_get_language_names_with_category() more thoroughly Simon McVittie 2021-10-10 16:02:56 +01:00
  • bd2c58fc27 run: Improve error handling/diagnostics for calls into libseccomp Simon McVittie 2021-10-08 19:06:13 +01:00
  • 97e128c2c1 Fix handling of syscalls only allowed by --devel Simon McVittie 2021-10-08 19:00:13 +01:00
  • d9dc5a27f6 dir: Refuse to export .desktop files with suspicious uses of @@ tokens Simon McVittie 2021-03-05 13:51:33 +00:00
  • ec569bb64d dir: Reserve the whole @@ prefix Simon McVittie 2021-03-05 13:49:36 +00:00
  • 5b4880cea4 Disallow @@ and @@u usage in desktop files Ryan Gonzalez 2021-03-02 13:20:07 -06:00
  • e4a3969dd2 Update Polish translation Piotr Drąg 2021-10-09 15:17:44 +02:00
  • d30d1398ad Update Polish translation Piotr Drąg 2021-10-09 15:28:08 +02:00
  • 946dd5d8a8 Update Polish translation Piotr Drąg 2021-10-09 15:28:08 +02:00
  • 53bde36585 run: Improve error handling/diagnostics for calls into libseccomp Simon McVittie 2021-10-08 19:06:13 +01:00
  • 3fc8c67267 Fix handling of syscalls only allowed by --devel Simon McVittie 2021-10-08 19:00:13 +01:00
  • ae59fb7aca common: Backport g_get_language_names_with_category() more thoroughly Simon McVittie 2021-10-10 16:02:56 +01:00
  • a07ac9772f Merge pull request #4463 from Mejans/patch-1 Phaedrus Leeds 2021-10-08 14:49:29 -07:00
  • 03f525b92d NEWS: Fix typo of 1.12.0 Phaedrus Leeds 2021-10-08 14:19:23 -07:00
  • cbbe6a106a NEWS: Fix a typo Phaedrus Leeds 2021-10-08 14:18:06 -07:00
  • 03e24b3e9b NEWS: Fix a typo Phaedrus Leeds 2021-10-08 14:18:06 -07:00
  • 042e2aa013 some more transaltions Mejans 2021-10-08 20:51:01 +02:00
  • c88587af73 Update pofiles 1.10.5 Alexander Larsson 2021-10-08 19:26:20 +02:00
  • 4da2ec4923 Bump version to 1.10.5 Alexander Larsson 2021-10-08 19:18:19 +02:00
  • 878d0d5a82 Update NEWS for 1.10.5 Alexander Larsson 2021-10-08 19:18:08 +02:00
  • 0929483fed run: Handle unknown syscalls as intended Simon McVittie 2021-10-08 17:05:07 +01:00
  • afb3575d31 Update pofiles for release 1.12.1 Alexander Larsson 2021-10-08 19:12:18 +02:00
  • f968334ea3 Bump version to 1.2.1 Alexander Larsson 2021-10-08 18:58:28 +02:00
  • 270701f900 run: Handle unknown syscalls as intended Simon McVittie 2021-10-08 17:05:07 +01:00
  • d419fa6703 run: Handle unknown syscalls as intended Simon McVittie 2021-10-08 17:05:07 +01:00
  • b57b680cbb Bump version to 1.13.1 on master Alexander Larsson 2021-10-08 13:31:56 +02:00
  • 0cfd72442d Update pofiles for release 1.12.0 Alexander Larsson 2021-10-08 13:20:58 +02:00
  • e4a41716d8 Update pofiles for release 1.10.4 Alexander Larsson 2021-10-08 13:05:42 +02:00
  • 48b808e4c2 Bump version to 1.12.0 Alexander Larsson 2021-10-08 12:14:39 +02:00
  • d8b8dff670 Update NEWS for release Alexander Larsson 2021-10-08 12:14:10 +02:00
  • 462fca2c66 run: Don't allow chroot() Simon McVittie 2021-09-01 14:21:04 +01:00
  • 1330662f33 run: Don't allow unmounting filesystems Simon McVittie 2021-09-01 14:20:29 +01:00
  • 4c34815784 run: Block setns() Simon McVittie 2021-09-01 14:19:31 +01:00
  • 9766ee05b1 run: Disallow recently-added mount-manipulation syscalls Simon McVittie 2021-09-01 12:45:54 +01:00
  • a10f52a756 run: Block clone3() in sandbox Simon McVittie 2021-09-01 11:59:00 +01:00
  • 26b12484eb common: Add a list of recently-added Linux syscalls Simon McVittie 2021-09-01 14:17:04 +01:00
  • 89ae9fe74c run: Add cross-references for some other seccomp syscall filters Simon McVittie 2021-09-01 12:44:04 +01:00
  • e26ac7586c run: Add an errno value to seccomp filters Simon McVittie 2021-09-01 11:53:23 +01:00
  • d92add03df Bump version to 1.10.4 Alexander Larsson 2021-10-08 12:38:44 +02:00
  • 9a39a35a0c Update NEWS for 1.10.4 Alexander Larsson 2021-10-08 12:37:58 +02:00
  • 8a6a22e24a tests: Fix test-sideload.sh if ostree is built with curl backend Alexander Larsson 2021-10-08 11:48:13 +02:00
  • 7059882069 run: Don't allow chroot() Simon McVittie 2021-09-01 14:21:04 +01:00
  • 8fc2d96393 run: Don't allow unmounting filesystems Simon McVittie 2021-09-01 14:20:29 +01:00
  • aacfed4b0b run: Block setns() Simon McVittie 2021-09-01 14:19:31 +01:00