Alessandro Astone
0ad842a015
Revert "Mount proc with the hidepid=2 option"
...
We were implicitly using proc:mixed to mount /proc/sys as read-only.
Without the automount the whole /proc was mounted as read-write which
we want to avoid.
I'm unable to replicate the proc:mixed logic with lxc.mount.entry
so revert this change until a solution is found.
This reverts commit f5543df686 .
Fixes : #642
2022-12-14 14:32:07 +01:00
Jami Kettunen
061a9fb06c
net: Fix vnic name selection for LXC <=2
...
The "default to waydroid0" was broken as awk never returned a non-zero
exit code if the file exists but no match was found. Also account for
the key being named lxc.network.link on older LXC versions so one still
has the ability to have a flexible Waydroid network configuration.
2022-12-07 22:05:36 +01:00
Alessandro Astone
527f073e4a
lxc: Fixup LXC config versioning
...
What used to be called 'config_2' was actually meant to be used with
LXC 3.0 and later, so call it config_3 and fix the logic.
Also lxc.pty.max is an LXC 3.0 feature
2022-12-07 20:00:26 +01:00
Alessandro Astone
a11d894d8c
apparmor: Remove unnecessary includes
2022-11-21 22:51:40 +01:00
Азалия Смарагдова
da599d3196
* Makefile adjustments
...
* AppArmor profile texts have been moved into a dedicated directory
2022-11-18 15:19:17 +01:00
Азалия Смарагдова
ad285f35a9
AppArmor policy setup has been moved to the Makefile
2022-11-18 15:19:17 +01:00
Азалия Смарагдова
d26e47b96b
Policies have been adjusted for Android 11.
2022-11-18 15:19:17 +01:00
Азалия Смарагдова
8a66de6410
Temporarily switching all profiles to "complain" mode in order to work out policy mistakes.
2022-11-18 15:19:17 +01:00
Азалия Смарагдова
0b73886b71
Adding AppArmor profiles for the container.
2022-11-18 15:19:17 +01:00
Sebastian Krzyszkowiak
c71d3e7810
desktop: Mark as compatible with mobile form factor
...
This allows environments like Phosh to consider Waydroid launchers as
mobile-compatible, so they get displayed in default app list when undocked.
2022-11-11 15:48:41 +01:00
Азалия Смарагдова
f5543df686
Mount proc with the hidepid=2 option
2022-10-31 09:54:58 +01:00
Азалия Смарагдова
883fc4edf9
Remove CAP_SYS_MODULE from the capability bounding set.
2022-10-31 09:53:56 +01:00
Alessandro Astone
45ff58a649
lxc: Finer-grained config control
...
Split config files into snippets isolating new LXC features by version.
Move `seccomp.allow_nesting` to version 4 or higher.
NOTE: this currently assumes that new LXC versions will keep compatibility
with old config options. The only exception to this was LXC 1.x -> 2.x
2022-09-22 13:56:13 +02:00
Азалия Смарагдова
7046fb2fd3
A seccomp profile for the entire container has been added.
2022-09-07 00:21:13 +02:00
Азалия Смарагдова
2c63dbf6c2
Container capabilities have been restricted.
2022-09-06 23:52:18 +02:00
Азалия Смарагдова
abef133b8a
A "No New Privileges" has been enabled for the container.
2022-09-06 23:48:35 +02:00
Alessandro Astone
a6747e250f
Add appstream metadata
2022-08-06 13:37:43 +02:00
Alessandro Astone
55e0266795
Add first-launch command [v2]
2022-07-23 09:56:34 +02:00
Alessandro Astone
2845360137
Revert "Add first-launch command"
...
Will revisit later to not depend on polkit and xwayland
This reverts commit a2804841ed .
2022-07-19 10:46:41 +02:00
Alessandro Astone
a2804841ed
Add first-launch command
...
Add a graphical init to be run as root, which we can use in
first-launch through pkexec
2022-07-18 01:34:12 +02:00
Mitchel Stewart
5f808b2614
make waydroid-net more flexible ( #267 )
2022-07-14 19:52:55 +02:00
Alessandro Astone
e0ffcec1b9
Fixup market:// handler
2022-07-06 22:34:04 +04:30
Wachid Adi Nugroho
b6b6c0930b
waydroid.market.desktop: use waydroid app intent
...
Depends:
- https://github.com/waydroid/waydroid/pull/433
- https://github.com/waydroid/android_vendor_waydroid/pull/12
2022-07-06 21:15:14 +04:30
Wachid Adi Nugroho
86b27f4789
waydroid.market.desktop: update some properties
2022-07-06 21:15:14 +04:30
Wachid Adi Nugroho
7814b71d71
Add Android Market Protocol Handler
...
When clicking market:// protocol on Linux distro host, then open it on Waydroid.
Related: https://github.com/waydroid/waydroid/issues/412
2022-07-06 21:15:14 +04:30
Mitchel Stewart
5111dc987b
Allows waydroid to create PTY ( #349 )
2022-07-06 20:52:53 +04:30
Florian Franzen
0f64f618e6
scripts: make sure misc subfolder exists
2022-01-10 09:04:21 +03:30
Erfan Abdi
22f671bf05
net: Disable NFT by default
2021-10-19 05:46:55 +03:30
Erfan Abdi
a75e738943
data: Update app logo
2021-09-06 20:37:33 +04:30
Bart Ribbers
eef036b3f8
config: Store data in /var/lib/waydroid rather than /home/.waydroid
2021-09-04 23:46:45 +04:30
Erfan Abdi
9447b7cfcc
data: Install Waydroid launcher by default
2021-09-04 07:18:19 +04:30
Erfan Abdi
1f0393876d
Waydroid: Initial commit
2021-08-27 20:10:54 +04:30