Commit Graph

32 Commits

Author SHA1 Message Date
Alessandro Astone
0ad842a015 Revert "Mount proc with the hidepid=2 option"
We were implicitly using proc:mixed to mount /proc/sys as read-only.
Without the automount the whole /proc was mounted as read-write which
we want to avoid.

I'm unable to replicate the proc:mixed logic with lxc.mount.entry
so revert this change until a solution is found.

This reverts commit f5543df686.
Fixes: #642
2022-12-14 14:32:07 +01:00
Jami Kettunen
061a9fb06c net: Fix vnic name selection for LXC <=2
The "default to waydroid0" was broken as awk never returned a non-zero
exit code if the file exists but no match was found. Also account for
the key being named lxc.network.link on older LXC versions so one still
has the ability to have a flexible Waydroid network configuration.
2022-12-07 22:05:36 +01:00
Alessandro Astone
527f073e4a lxc: Fixup LXC config versioning
What used to be called 'config_2' was actually meant to be used with
LXC 3.0 and later, so call it config_3 and fix the logic.

Also lxc.pty.max is an LXC 3.0 feature
2022-12-07 20:00:26 +01:00
Alessandro Astone
a11d894d8c apparmor: Remove unnecessary includes 2022-11-21 22:51:40 +01:00
Азалия Смарагдова
da599d3196 * Makefile adjustments
* AppArmor profile texts have been moved into a dedicated directory
2022-11-18 15:19:17 +01:00
Азалия Смарагдова
ad285f35a9 AppArmor policy setup has been moved to the Makefile 2022-11-18 15:19:17 +01:00
Азалия Смарагдова
d26e47b96b Policies have been adjusted for Android 11. 2022-11-18 15:19:17 +01:00
Азалия Смарагдова
8a66de6410 Temporarily switching all profiles to "complain" mode in order to work out policy mistakes. 2022-11-18 15:19:17 +01:00
Азалия Смарагдова
0b73886b71 Adding AppArmor profiles for the container. 2022-11-18 15:19:17 +01:00
Sebastian Krzyszkowiak
c71d3e7810 desktop: Mark as compatible with mobile form factor
This allows environments like Phosh to consider Waydroid launchers as
mobile-compatible, so they get displayed in default app list when undocked.
2022-11-11 15:48:41 +01:00
Азалия Смарагдова
f5543df686 Mount proc with the hidepid=2 option 2022-10-31 09:54:58 +01:00
Азалия Смарагдова
883fc4edf9 Remove CAP_SYS_MODULE from the capability bounding set. 2022-10-31 09:53:56 +01:00
Alessandro Astone
45ff58a649 lxc: Finer-grained config control
Split config files into snippets isolating new LXC features by version.
Move `seccomp.allow_nesting` to version 4 or higher.

NOTE: this currently assumes that new LXC versions will keep compatibility
with old config options. The only exception to this was LXC 1.x -> 2.x
2022-09-22 13:56:13 +02:00
Азалия Смарагдова
7046fb2fd3 A seccomp profile for the entire container has been added. 2022-09-07 00:21:13 +02:00
Азалия Смарагдова
2c63dbf6c2 Container capabilities have been restricted. 2022-09-06 23:52:18 +02:00
Азалия Смарагдова
abef133b8a A "No New Privileges" has been enabled for the container. 2022-09-06 23:48:35 +02:00
Alessandro Astone
a6747e250f Add appstream metadata 2022-08-06 13:37:43 +02:00
Alessandro Astone
55e0266795 Add first-launch command [v2] 2022-07-23 09:56:34 +02:00
Alessandro Astone
2845360137 Revert "Add first-launch command"
Will revisit later to not depend on polkit and xwayland

This reverts commit a2804841ed.
2022-07-19 10:46:41 +02:00
Alessandro Astone
a2804841ed Add first-launch command
Add a graphical init to be run as root, which we can use in
first-launch through pkexec
2022-07-18 01:34:12 +02:00
Mitchel Stewart
5f808b2614 make waydroid-net more flexible (#267) 2022-07-14 19:52:55 +02:00
Alessandro Astone
e0ffcec1b9 Fixup market:// handler 2022-07-06 22:34:04 +04:30
Wachid Adi Nugroho
b6b6c0930b waydroid.market.desktop: use waydroid app intent
Depends:
- https://github.com/waydroid/waydroid/pull/433
- https://github.com/waydroid/android_vendor_waydroid/pull/12
2022-07-06 21:15:14 +04:30
Wachid Adi Nugroho
86b27f4789 waydroid.market.desktop: update some properties 2022-07-06 21:15:14 +04:30
Wachid Adi Nugroho
7814b71d71 Add Android Market Protocol Handler
When clicking market:// protocol on Linux distro host, then open it on Waydroid.

Related: https://github.com/waydroid/waydroid/issues/412
2022-07-06 21:15:14 +04:30
Mitchel Stewart
5111dc987b Allows waydroid to create PTY (#349) 2022-07-06 20:52:53 +04:30
Florian Franzen
0f64f618e6 scripts: make sure misc subfolder exists 2022-01-10 09:04:21 +03:30
Erfan Abdi
22f671bf05 net: Disable NFT by default 2021-10-19 05:46:55 +03:30
Erfan Abdi
a75e738943 data: Update app logo 2021-09-06 20:37:33 +04:30
Bart Ribbers
eef036b3f8 config: Store data in /var/lib/waydroid rather than /home/.waydroid 2021-09-04 23:46:45 +04:30
Erfan Abdi
9447b7cfcc data: Install Waydroid launcher by default 2021-09-04 07:18:19 +04:30
Erfan Abdi
1f0393876d Waydroid: Initial commit 2021-08-27 20:10:54 +04:30