mirror/flatpak
1
0
Fork 0
mirror of https://github.com/flatpak/flatpak.git synced 2026-07-02 04:07:07 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
b74dcd136f4246d29984c10b3af60cea7b579cfb
flatpak/common
History
Simon McVittie b74dcd136f run: Block clone3() in sandbox 
clone3() can be used to implement clone() with CLONE_NEWUSER, allowing
a sandboxed process to get CAP_SYS_ADMIN in a new namespace and
manipulate its root directory. We need to block this so that AF_UNIX-based
socket servers (X11, Wayland, etc.) can rely on
/proc/PID/root/.flatpak-info existing for all Flatpak-sandboxed apps.

Partially fixes GHSA-67h7-w3jq-vh4q.

Thanks: an anonymous reporter
Signed-off-by: Simon McVittie <smcv@collabora.com>
2021-10-08 12:25:16 +02:00
..
flatpak-appdata-private.h
flatpak-appdata: Add support for extracting app content ratings
2019-10-03 10:42:04 +02:00
flatpak-appdata.c
appdata: Fix leak of id string.
2019-12-19 16:52:58 +01:00
flatpak-auth-private.h
authenticator: Fix sandboxed authenticators
2019-12-19 10:33:21 +01:00
flatpak-auth.c
By default, always try to auth to OCI remotes
2020-05-04 16:32:22 +02:00
flatpak-bundle-ref.c
decompose: Use FlatpakDecomposed for bundles
2020-11-10 14:32:13 +01:00
flatpak-bundle-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-19 09:16:10 +01:00
flatpak-bwrap-private.h
run: Convert all environment variables into bwrap arguments
2021-01-14 09:33:24 +01:00
flatpak-bwrap.c
run: Convert all environment variables into bwrap arguments
2021-01-14 09:33:24 +01:00
flatpak-chain-input-stream-private.h
Don't use deprecated g_type_class_add_private API
2019-09-19 16:53:11 +00:00
flatpak-chain-input-stream.c
Don't use deprecated g_type_class_add_private API
2019-09-19 16:53:11 +00:00
flatpak-common-types-private.h
Add an option to share the pid namespace with the parent flatpak
2021-01-12 09:55:23 +01:00
flatpak-context-private.h
context: Expose flatpak_context_parse_filesystem for testing
2020-08-27 17:48:50 +02:00
flatpak-context.c
common: Fix Spawn portal method not working with UTF-8 files
2021-03-10 11:13:38 +01:00
flatpak-dir-private.h
Ensure deploy files have complete metadata
2020-12-21 10:30:22 +01:00
flatpak-dir.c
flatpak-dir: Fix parental controls checks for root
2021-09-29 11:39:39 +01:00
flatpak-enum-types.c.template
Fix build with GCC 11
2021-01-11 11:05:57 +01:00
flatpak-enum-types.h.template
Merge lib/* into common
2018-05-24 11:59:52 +00:00
flatpak-error.c
Run uncrustify
2019-02-25 18:12:30 +00:00
flatpak-error.h
common: Tweak error code docs
2021-02-09 09:36:59 +01:00
flatpak-exports-private.h
exports: Allow redirecting /etc, /usr from the host to an alternative
2020-09-14 11:12:25 +02:00
flatpak-exports.c
Update common/flatpak-exports.c
2020-12-09 08:31:45 +01:00
flatpak-installation-private.h
Export (private) flatpak_installation_get_dir()
2019-10-02 14:57:11 +02:00
flatpak-installation.c
flatpak-installation: Fix a leak of the content rating hash table
2021-02-03 17:13:01 +00:00
flatpak-installation.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-19 09:16:10 +01:00
flatpak-installed-ref-private.h
installation: Use the FlatpakDecomposed APIs to create FlatpakRef:s
2020-11-05 10:43:10 +01:00
flatpak-installed-ref.c
flatpak-installed-ref: Add annotation to content rating table
2020-12-14 11:25:16 +01:00
flatpak-installed-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-19 09:16:10 +01:00
flatpak-instance-private.h
Clean up duplicated instance collection code
2020-06-05 16:36:13 +02:00
flatpak-instance.c
instance: Add missing nullable annotation
2020-12-21 09:11:08 +01:00
flatpak-instance.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-19 09:16:10 +01:00
flatpak-json-oci-private.h
oci: Add helpers to parse OCI delta index and manifest
2020-06-05 09:35:30 +02:00
flatpak-json-oci.c
OCI: Also look for the docker media type when looking manifests
2020-06-11 15:57:39 +02:00
flatpak-json-private.h
Cache the downloaded registry index in compressed form
2018-08-09 12:49:36 +00:00
flatpak-json.c
common: Don't shadow parameter variables
2020-03-16 09:29:31 +01:00
flatpak-oci-registry-private.h
oci: Handle io.github.containers.DeltaUrl in index
2020-06-05 09:35:30 +02:00
flatpak-oci-registry.c
OCI: Switch to pax format for tar archives
2021-09-23 10:19:39 +02:00
flatpak-parental-controls-private.h
dir: Support filtering app installs/upgrades by user’s OARS settings
2019-10-03 10:42:04 +02:00
flatpak-parental-controls.c
parental-controls: fix read of uninitialized variable
2019-11-08 00:30:44 +09:00
flatpak-portal-error.c
common: Move flatpak-portal-error.[ch] back to common code
2018-04-26 07:41:17 +00:00
flatpak-portal-error.h
doc: Document FlatpakPortalError
2019-12-01 14:04:59 -05:00
flatpak-progress-private.h
FlatpakProgress: Clean up APIs for handling extra data
2020-03-27 17:23:13 +01:00
flatpak-progress.c
Fix extra-data progress reporting
2020-10-29 17:19:38 +01:00
flatpak-ref-utils-private.h
decomposed: Add flatpak_decomposed_id_is_subref_of()
2020-11-16 11:23:10 +01:00
flatpak-ref-utils.c
decomposed: Add flatpak_decomposed_id_is_subref_of()
2020-11-16 11:23:10 +01:00
flatpak-ref.c
common: Update FlatpakRef docs with respect to uniqueness
2021-02-09 09:34:47 +01:00
flatpak-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-19 09:16:10 +01:00
flatpak-related-ref-private.h
Drop more collection_id use
2020-03-23 17:58:04 +01:00
flatpak-related-ref.c
Drop more collection_id use
2020-03-23 17:58:04 +01:00
flatpak-related-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-19 09:16:10 +01:00
flatpak-remote-private.h
lib: Only support FLATPAK_REMOTE_TYPE_STATIC remote types
2020-03-25 08:52:28 +01:00
flatpak-remote-ref-private.h
installation: Use the FlatpakDecomposed APIs to create FlatpakRef:s
2020-11-05 10:43:10 +01:00
flatpak-remote-ref.c
installation: Use the FlatpakDecomposed APIs to create FlatpakRef:s
2020-11-05 10:43:10 +01:00
flatpak-remote-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-19 09:16:10 +01:00
flatpak-remote.c
More fully reset remote in unit tests
2020-07-21 08:59:22 +02:00
flatpak-remote.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-19 09:16:10 +01:00
flatpak-run-private.h
context: Add --unset-env option and a corresponding override
2021-01-14 09:33:24 +01:00
flatpak-run.c
run: Block clone3() in sandbox
2021-10-08 12:25:16 +02:00
flatpak-syscalls-private.h
common: Add a list of recently-added Linux syscalls
2021-10-08 12:25:16 +02:00
flatpak-transaction-private.h
transaction: Add private getter for the FlatpakDecomposed of the op
2020-11-10 14:32:13 +01:00
flatpak-transaction.c
common: Upgrade deploy data when necessary
2020-12-21 10:30:22 +01:00
flatpak-transaction.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-19 09:16:10 +01:00
flatpak-utils-base-private.h
common: Add a backport of G_DBUS_METHOD_INVOCATION_HANDLED
2020-12-09 08:34:19 +01:00
flatpak-utils-base.c
run: Always expose host /usr/share/zoneinfo (if possible)
2020-06-23 09:37:30 +02:00
flatpak-utils-http-private.h
http-utils: Stop exporting an internal error quark
2020-08-10 15:20:59 +02:00
flatpak-utils-http.c
Remove should-retry debug spew
2020-11-03 12:57:37 +01:00
flatpak-utils-private.h
extra-data: Resolve runtime from the target installation
2020-12-09 16:12:25 +01:00
flatpak-utils.c
Fix several memory leaks
2021-06-16 10:13:37 +01:00
flatpak-version-macros.h.in
doc: Fix a duplicate section
2019-12-02 07:45:51 -05:00
flatpak-zstd-decompressor-private.h
Add FlatpakZstdDecompressor converter (and libzstd dep)
2020-06-05 09:35:30 +02:00
flatpak-zstd-decompressor.c
oci: Make libzstd optional (and disable OCI deltas if not there)
2020-06-05 09:35:30 +02:00
flatpak.c
Merge lib/* into common
2018-05-24 11:59:52 +00:00
flatpak.h
Make FlatpakInstance api public
2018-10-08 08:36:23 +00:00
Makefile.am.inc
common: Add a list of recently-added Linux syscalls
2021-10-08 12:25:16 +02:00
test-lib.c
Avoid shadowing local variables
2020-09-15 08:58:49 +02:00
valgrind-private.h
Fix misspellings
2019-04-08 12:50:42 +00:00