Commits
- Commit:
4ab3b651a90a89e18601e20c34a78f79ff86b268
- From:
- Omar Polo <op@omarpolo.com>
- Via:
- omar-polo <op@omarpolo.com>
- Date:
don't fail if landlock is not available at runtime
- Commit:
ed1d237e76633efa58d3dbcb22be64d2a720fa7e
- From:
- Omar Polo <op@omarpolo.com>
- Date:
add comment on why don't landlock the net process
- Commit:
7e76e0efa3f677f0a044330b98590f2128789d80
- From:
- Omar Polo <op@omarpolo.com>
- Date:
fmt
- Commit:
fced318dae9d565c2f0b870ca309153cadb03b34
- From:
- Omar Polo <op@omarpolo.com>
- Date:
missing include
- Commit:
4380c692998ad68d04e11f04f11cc202cc264cff
- From:
- Omar Polo <op@omarpolo.com>
- Date:
don't fail if ~/Downloads doesn't exist
- Commit:
e9cb759efd41aed81455fed9fa4911a7ec4974e8
- From:
- Omar Polo <op@omarpolo.com>
- Date:
forgot to log the path for a unveil error code path
- Commit:
a9d11f81b94d08e2c75dac892056b1071b182f9e
- From:
- Omar Polo <op@omarpolo.com>
- Date:
add landlock support on linux
landlock is applied only to the ui process to drop fs access and in the
fs process to limit where telescope can read/write files.
The network process is more difficult to landlock because while in
theory it doesn't need *any* fs access, in practice it needs to read (at
least) files inside /etc/ for DNS to work.
- Commit:
fd0beb5314ccdf3ae1b4a9ab0b8b5279a6e1dac0
- From:
- Omar Polo <op@omarpolo.com>
- Date:
improve unveil' error reporting
- Commit:
4b877649af0f6237f46cf7d033fc896aa7cf8ca6
- From:
- Omar Polo <op@omarpolo.com>
- Date:
fix sandbox wrt XDG-style directories
- Commit:
6845bee7f63f19732c8f3ea0ccd5ba9fbbdd68de
- From:
- Omar Polo <op@omarpolo.com>
- Date:
[openbsd] allow creation of files in ~/Downloads
- Commit:
17c10c65d18de23daf7b7759aa0bc5f745fb84b3
- From:
- Omar Polo <op@omarpolo.com>
- Date:
(process) network -> net rename
- Commit:
de2a69bb424696abd9b1be5232fb7a89fa5f8767
- From:
- Omar Polo <op@omarpolo.com>
- Date:
ask to save a page when it can't be rendered
it's good for thing like images and text with weird encodings.
- Commit:
f4aa8eb5a5274991425a42d564cd909ac9a6569d
- From:
- Omar Polo <op@omarpolo.com>
- Date:
don't include <err.h>, use the compat layer
- Commit:
754622a2476761309d8b1a65ef3695c61cc43992
- From:
- Omar Polo <op@omarpolo.com>
- Date:
fix various warnings, no functional changes
now that we have a bounch of -Wxxx flags during compilation, let's fix
everything.
- Commit:
e98a72dfcad90436d2d2590757b55f78cd28601c
- From:
- Omar Polo <op@omarpolo.com>
- Date:
adjust fs sandbox: allow writing and creating stuff into ~/.telescope