Alexander Larsson 81abe2a37d When starting non-static command using bwrap use "--" ...

This ensures that the command is not taken to be a bwrap option.

Resolves: CVE-2024-32462
Resolves: GHSA-phv6-cpc2-2fgj
Signed-off-by: Alexander Larsson <alexl@redhat.com>
[smcv: Fix DISABLE_SANDBOXED_TRIGGERS code path]
[smcv: Make flatpak_run_maybe_start_dbus_proxy() more obviously correct]
Signed-off-by: Simon McVittie <smcv@collabora.com>

2024-04-17 18:13:39 +01:00

..

flatpak-appdata-private.h

…

flatpak-appdata.c

…

flatpak-auth-private.h

…

flatpak-auth.c

…

flatpak-bundle-ref.c

decompose: Use FlatpakDecomposed for bundles

2020-11-10 14:32:13 +01:00

flatpak-bundle-ref.h

Add G_BEGIN_DECLS/G_END_DECLS to public headers

2021-02-12 15:58:09 +01:00

flatpak-bwrap-private.h

run: Create a shared XDG_RUNTIME_DIR for each app-ID

2021-04-16 09:13:18 +02:00

flatpak-bwrap.c

run: Create a shared XDG_RUNTIME_DIR for each app-ID

2021-04-16 09:13:18 +02:00

flatpak-chain-input-stream-private.h

…

flatpak-chain-input-stream.c

…

flatpak-common-types-private.h

Add an option to share the pid namespace with the parent flatpak

2021-01-12 09:55:23 +01:00

flatpak-context-private.h

context: Introduce new --nofilesystem=host:reset

2022-01-18 16:35:28 +00:00

flatpak-context.c

Reject paths given to --filesystem/--persist with special characters

2023-03-16 09:55:31 +00:00

flatpak-dir-private.h

Change how automatic pinning is implemented

2022-01-11 11:51:02 +01:00

flatpak-dir.c

When starting non-static command using bwrap use "--"

2024-04-17 18:13:39 +01:00

flatpak-enum-types.c.template

Fix build with GCC 11

2021-01-11 11:05:57 +01:00

flatpak-enum-types.h.template

…

flatpak-error.c

…

flatpak-error.h

common: Tweak error code docs

2021-02-09 09:36:59 +01:00

flatpak-exports-private.h

tests: Exercise failure to export a broken autofs

2021-08-02 08:37:25 +02:00

flatpak-exports.c

Handle /var/tmp mounts when it is a symlink

2021-09-23 09:57:33 +02:00

flatpak-installation-private.h

…

flatpak-installation.c

Change how automatic pinning is implemented

2022-01-11 11:51:02 +01:00

flatpak-installation.h

flatpak-installation: Fix some typos in documentation comments

2021-06-14 15:30:59 +01:00

flatpak-installed-ref-private.h

installation: Use the FlatpakDecomposed APIs to create FlatpakRef:s

2020-11-05 10:43:10 +01:00

flatpak-installed-ref.c

flatpak-installed-ref: Add annotation to content rating table

2020-12-14 11:25:16 +01:00

flatpak-installed-ref.h

Add G_BEGIN_DECLS/G_END_DECLS to public headers

2021-02-12 15:58:09 +01:00

flatpak-instance-private.h

run: Create a shared XDG_RUNTIME_DIR for each app-ID

2021-04-16 09:13:18 +02:00

flatpak-instance.c

run: Create a shared XDG_RUNTIME_DIR for each app-ID

2021-04-16 09:13:18 +02:00

flatpak-instance.h

Add G_BEGIN_DECLS/G_END_DECLS to public headers

2021-02-12 15:58:09 +01:00

flatpak-json-oci-private.h

…

flatpak-json-oci.c

…

flatpak-json-private.h

…

flatpak-json.c

…

flatpak-oci-registry-private.h

…

flatpak-oci-registry.c

oci-registry: Fix error reporting

2021-04-16 14:49:15 +02:00

flatpak-parental-controls-private.h

…

flatpak-parental-controls.c

…

flatpak-portal-error.c

…

flatpak-portal-error.h

…

flatpak-progress-private.h

…

flatpak-progress.c

common: Fix several memory leaks

2021-05-04 10:23:13 +02:00

flatpak-prune-private.h

Add (and use) custom, high-perfomance prune implementation

2021-04-26 10:30:14 +02:00

flatpak-prune.c

Add (and use) custom, high-perfomance prune implementation

2021-04-26 10:30:14 +02:00

flatpak-ref-utils-private.h

history: Fix printing refs

2022-02-08 10:12:24 -08:00

flatpak-ref-utils.c

ref-utils: Remove dead store

2021-04-19 09:09:04 +02:00

flatpak-ref.c

common: Update FlatpakRef docs with respect to uniqueness

2021-02-09 09:34:47 +01:00

flatpak-ref.h

Add G_BEGIN_DECLS/G_END_DECLS to public headers

2021-02-12 15:58:09 +01:00

flatpak-related-ref-private.h

…

flatpak-related-ref.c

Pedantic typo fix

2022-01-04 11:43:51 +00:00

flatpak-related-ref.h

Add G_BEGIN_DECLS/G_END_DECLS to public headers

2021-02-12 15:58:09 +01:00

flatpak-remote-private.h

…

flatpak-remote-ref-private.h

installation: Use the FlatpakDecomposed APIs to create FlatpakRef:s

2020-11-05 10:43:10 +01:00

flatpak-remote-ref.c

installation: Use the FlatpakDecomposed APIs to create FlatpakRef:s

2020-11-05 10:43:10 +01:00

flatpak-remote-ref.h

Add G_BEGIN_DECLS/G_END_DECLS to public headers

2021-02-12 15:58:09 +01:00

flatpak-remote.c

More fully reset remote in unit tests

2020-07-21 08:59:22 +02:00

flatpak-remote.h

Add G_BEGIN_DECLS/G_END_DECLS to public headers

2021-02-12 15:58:09 +01:00

flatpak-run-private.h

run: Support parsing non-local X11 addresses

2022-03-10 09:41:08 -08:00

flatpak-run.c

When starting non-static command using bwrap use "--"

2024-04-17 18:13:39 +01:00

flatpak-syscalls-private.h

common: Add a list of recently-added Linux syscalls

2021-10-08 12:53:20 +02:00

flatpak-transaction-private.h

Transaction: Ensure we download the subsummary for the arch of added refs

2021-05-19 09:49:30 +02:00

flatpak-transaction.c

Transaction: Fail the resolve if xa.metadata invalid or missing

2022-01-12 11:52:21 +01:00

flatpak-transaction.h

Add G_BEGIN_DECLS/G_END_DECLS to public headers

2021-02-12 15:58:09 +01:00

flatpak-utils-base-private.h

common: Add a backport of G_DBUS_METHOD_INVOCATION_HANDLED

2020-12-09 08:34:19 +01:00

flatpak-utils-base.c

utils: Document that flatpak_canonicalize_filename() does not do I/O

2021-08-02 08:37:25 +02:00

flatpak-utils-http-private.h

http-utils: Stop exporting an internal error quark

2020-08-10 15:20:59 +02:00

flatpak-utils-http.c

Re-enable HTTP compression

2022-01-11 11:51:02 +01:00

flatpak-utils-private.h

Reject paths given to --filesystem/--persist with special characters

2023-03-16 09:55:31 +00:00

flatpak-utils.c

Reject paths given to --filesystem/--persist with special characters

2023-03-16 09:55:31 +00:00

flatpak-version-macros.h.in

…

flatpak-zstd-decompressor-private.h

…

flatpak-zstd-decompressor.c

…

flatpak.c

…

flatpak.h

…

Makefile.am.inc

common: Add a list of recently-added Linux syscalls

2021-10-08 12:53:20 +02:00

test-lib.c

Avoid shadowing local variables

2020-09-15 08:58:49 +02:00

valgrind-private.h

…