Commits
Commit:
5edd158f8dabeeb47c8cc331bdd6a36585df004c
From:
Omar Polo <op@omarpolo.com>
Date:
Thu May 19 07:32:26 2022 UTC
don't include linux/prctl.h can conflict with sys/prctl.h, spotted while trying to build on alpine linux.
Commit:
f63b8f7342aefba6b3dac50d6790981987c8faa8
From:
Omar Polo <op@omarpolo.com>
Date:
Sun Apr 24 10:15:32 2022 UTC
merge the fs into the ui process The previous separation between the fs and ui process wasn't that good. The idea was to have a `ui' process tightly sandboxed, but it was a lie actually. `ui' was one imsg away from making internet connections and accessing data on the disk, so it wasn't really limited in (almost) any way. Furthermore, having to serialize data to/from the fs proc started to become not really maneagable. As a first step to fix this situation, join the fs and ui process.
Commit:
4cf6ba137fc2ca92f3066c390b89542d88735ef6
From:
Omar Polo <op@omarpolo.com>
Date:
Fri Feb 11 18:12:17 2022 UTC
remote open: open an url into telescope from outside of it if telescope is started with an url while there is already another instance of it running and the -S flag is not provided, the link will be automagically opened into the running instance of telescope. Telescope now listens on a UNIX domain socket in ~/.telescope/ctl (or ~/.cache/telescope/ctl if XDG is used) for commands.
Commit:
35ae81fd7c1505da0adf94dff9c36d9b167c6082
From:
Omar Polo <op@omarpolo.com>
Date:
Thu Feb 10 23:40:18 2022 UTC
fix landlock usage cf. gmid 1.8.1 and recent changes in game of trees. This doesn't warrant an immediate release since every action is limited to /tmp, ~/Downloads and {config,data,cache}_home.
Commit:
4ab3b651a90a89e18601e20c34a78f79ff86b268
From:
Omar Polo <op@omarpolo.com>
Via:
omar-polo <op@omarpolo.com>
Date:
Mon Nov 29 18:12:57 2021 UTC
don't fail if landlock is not available at runtime
Commit:
ed1d237e76633efa58d3dbcb22be64d2a720fa7e
From:
Omar Polo <op@omarpolo.com>
Date:
Sat Nov 27 09:04:11 2021 UTC
add comment on why don't landlock the net process
Commit:
7e76e0efa3f677f0a044330b98590f2128789d80
From:
Omar Polo <op@omarpolo.com>
Date:
Tue Nov 2 16:07:32 2021 UTC
fmt
Commit:
fced318dae9d565c2f0b870ca309153cadb03b34
From:
Omar Polo <op@omarpolo.com>
Date:
Fri Oct 8 20:29:51 2021 UTC
missing include
Commit:
4380c692998ad68d04e11f04f11cc202cc264cff
From:
Omar Polo <op@omarpolo.com>
Date:
Fri Oct 8 20:20:21 2021 UTC
don't fail if ~/Downloads doesn't exist
Commit:
e9cb759efd41aed81455fed9fa4911a7ec4974e8
From:
Omar Polo <op@omarpolo.com>
Date:
Fri Oct 8 20:11:06 2021 UTC
forgot to log the path for a unveil error code path
Commit:
a9d11f81b94d08e2c75dac892056b1071b182f9e
From:
Omar Polo <op@omarpolo.com>
Date:
Fri Oct 8 17:07:09 2021 UTC
add landlock support on linux landlock is applied only to the ui process to drop fs access and in the fs process to limit where telescope can read/write files. The network process is more difficult to landlock because while in theory it doesn't need *any* fs access, in practice it needs to read (at least) files inside /etc/ for DNS to work.
Commit:
fd0beb5314ccdf3ae1b4a9ab0b8b5279a6e1dac0
From:
Omar Polo <op@omarpolo.com>
Date:
Thu Oct 7 21:58:31 2021 UTC
improve unveil' error reporting
Commit:
4b877649af0f6237f46cf7d033fc896aa7cf8ca6
From:
Omar Polo <op@omarpolo.com>
Date:
Thu Oct 7 21:57:07 2021 UTC
fix sandbox wrt XDG-style directories
Commit:
6845bee7f63f19732c8f3ea0ccd5ba9fbbdd68de
From:
Omar Polo <op@omarpolo.com>
Date:
Mon Sep 13 10:37:03 2021 UTC
[openbsd] allow creation of files in ~/Downloads
Commit:
17c10c65d18de23daf7b7759aa0bc5f745fb84b3
From:
Omar Polo <op@omarpolo.com>
Date:
Mon Jul 12 18:29:13 2021 UTC
(process) network -> net rename
Omar Polo