Alexander Larsson bc5ea57226 Run: Make sure all mounted sources are read-only ...

It turned out that some sources where bind-mounted read-write
which should have been read-only:

 * Extensions
 * Fonts
 * resolv.conf
 * localtime
 * machine-id

Many of these are not generally writable by the user, but
some are, which is pretty bad. For instance if the an
app is user-installed it will be able to write to its
locale data.

We fix this by using --ro-bind where needed.

2017-01-26 18:19:46 +01:00

..

gvdb

Rename lib/ to common/ in preparation for public xdg-app library

2015-11-26 22:05:38 +01:00

flatpak-chain-input-stream.c

Fix license headers

2016-07-29 14:27:49 -04:00

flatpak-chain-input-stream.h

Fix license headers

2016-07-29 14:27:49 -04:00

flatpak-common-types.h

Add flatpak_pull_from_oci helper

2016-12-09 14:44:25 +01:00

flatpak-db.c

Rename everything but the on-disk location to flatpak

2016-05-09 11:11:55 +02:00

flatpak-db.h

Rename everything but the on-disk location to flatpak

2016-05-09 11:11:55 +02:00

flatpak-dir.c

install: handle arch when installing from a flatpakref

2017-01-20 15:28:11 +01:00

flatpak-dir.h

install: handle arch when installing from a flatpakref

2017-01-20 15:28:11 +01:00

flatpak-json-oci.c

Import OCI initial support to common/*

2016-12-08 17:43:03 +01:00

flatpak-json-oci.h

Import OCI initial support to common/*

2016-12-08 17:43:03 +01:00

flatpak-json.c

OCI: Stop using json-glib apis that don't exist in 1.0.x

2016-12-21 14:20:28 +01:00

flatpak-json.h

Import OCI initial support to common/*

2016-12-08 17:43:03 +01:00

flatpak-oci-registry.c

OCI: Create all-readable layer blobs

2017-01-11 22:37:26 +01:00

flatpak-oci-registry.h

Support flatpak install --oci to install apps from OCI

2016-12-12 16:22:16 +01:00

flatpak-portal-error.c

Change portal error names to not contain Flatpak

2016-05-12 22:03:09 +02:00

flatpak-portal-error.h

Rename everything but the on-disk location to flatpak

2016-05-09 11:11:55 +02:00

flatpak-run.c

Run: Make sure all mounted sources are read-only

2017-01-26 18:19:46 +01:00

flatpak-run.h

Make /etc writable when building a runtime

2017-01-25 15:28:42 +01:00

flatpak-utils.c

flatpak_resolve_symlink: Properly make paths absolute

2017-01-19 15:36:06 +01:00

flatpak-utils.h

Don't break if exporting paths or symlinks to files in the runtime

2017-01-19 10:43:17 +01:00

Makefile.am.inc

Import OCI initial support to common/*

2016-12-08 17:43:03 +01:00