Commit Graph

210 Commits (master)

Author SHA1 Message Date
Alexander Larsson 927e3cab48 Make xauth use optional
This is not needed on some Xservers, and not if you're only building stuff.
So, lets make it optional.
2016-01-28 12:01:08 +01:00
Alexander Larsson 6349b3ffc1 helper: Make user namespace support vs setuid a runtime, not build-time option
We now check at runtime if we have raised privs, and only if not so do we try
to use unprivileged user namespaces. This means you can build xdg-app however,
and then setuid/setcap the binary however you want afterwards.
2016-01-28 09:43:45 +01:00
Alexander Larsson cafc7fbba8 Bump version to 0.4.7 2016-01-25 10:39:20 +01:00
Alexander Larsson 7940a773ef Always build libxmlapp 2016-01-22 22:19:52 +01:00
Alexander Larsson 62b4ffaa72 builder: Use libelf to detect elf files
This additionally looks for already stripped files
2016-01-11 11:40:46 +01:00
Alexander Larsson 570ba8b55f Add --enable-libxdgapp configure flag and disable lib by default 2015-12-16 15:27:42 +01:00
Alexander Larsson 3e5019bc64 Bump version to 0.4.6 2015-12-16 13:18:28 +01:00
Emmanuele Bassi f23090a615 Generate the API reference for libxdg-app
We use the good old gtk-doc.
2015-12-04 15:00:35 +00:00
Emmanuele Bassi 92885b9ce2 Add introspection check 2015-12-04 09:36:30 +00:00
Alexander Larsson 132d1186d9 Initial version of libxdg-app
This is a highlevel library for working with xdg-app without using
the commandline interface. The primary usecase for this is for
creating a graphical frontend for app installation/update.
2015-12-03 22:41:16 +01:00
Alexander Larsson 106a5b06ec Rename lib/ to common/ in preparation for public xdg-app library 2015-11-26 22:05:38 +01:00
Alexander Larsson b2790349d6 Add xdg-app-builder
This is a tool that makes it easy to build applications and their
dependecies by automating the configure && make && make install steps.
2015-11-25 15:26:32 +01:00
Alexander Larsson 452c5d38c1 Add xdg-app.pc file with variable for interfaces_dir 2015-11-11 11:26:03 +01:00
Alexander Larsson e65ca6a18f Update to 0.4.5 2015-11-04 16:10:16 +01:00
Alexander Larsson dda045d808 Update for 0.4.4 release 2015-10-02 09:55:34 +02:00
Alexander Larsson 208eb7b1aa Propagate Xauthority details to the sandbox if X11 is enabled
Some xservers out there (like xorg 1.17.1) have a broken server interpreted
local xauth, which causes apps to fail to connect to the xserver.
This fixes that by propagating Xauthority data such as the MIT-MAGIC-COOKIE-1.
2015-10-01 21:23:23 +02:00
Alexander Larsson 82071b2cb8 Bump version to 0.4.3 2015-09-29 16:15:27 +02:00
Alexander Larsson 8cd95d2621 Make sure we build against older ostree (without gpg import)
This means we work on the f22 ostree version at least.
2015-09-29 16:12:37 +02:00
Alexander Larsson b25830d8f9 Add xdg-app dump-runtime command
This creates a tar of the runtime as set up by xdg-app
2015-09-28 10:48:47 +02:00
Alexander Larsson 26458d8da2 Release 0.4.2.1 2015-09-25 11:47:27 +02:00
Alexander Larsson 423c1131d8 Update to 0.4.2 2015-09-24 21:40:07 +02:00
Alexander Larsson 1917e1fd38 Make seccomp optional
Several architectures does not have seccomp yet.
2015-09-24 14:57:53 +02:00
Alexander Larsson f22c0edfd8 Update NEWS and version to 0.4.1 2015-09-18 16:47:49 +02:00
Alexander Larsson 8f445ee883 bump version to 0.4.0 2015-09-17 19:09:13 +02:00
Alexander Larsson d50284c7a6 Add check-valgrind target 2015-09-07 11:13:21 +02:00
Alexander Larsson 929071ad10 Import xdg-document-portal from github repo
This pulls in the daemon code from:
     https://github.com/alexlarsson/xdg-document-portal/

We need this in xdg-app because we need to set up the mounts correctly.
2015-07-10 16:56:39 +02:00
Alexander Larsson b0e1124f02 Bump version to 0.3.6 2015-07-10 12:39:54 +02:00
Alexander Larsson 302f88e69d Restructure directories and build
This moves a all source code into separate subdirs per binary. The
helper and the generic stuff goes into lib/ which is then used by all
the others. For now this is a completely internal library, but at
some point we will probably clean it up and expose some subset.

Also, we move the dbus proxy to libexecdir.
2015-07-10 12:15:45 +02:00
Alexander Larsson 4f73eaf10b Bump version to 0.3.5 2015-06-24 14:46:51 +02:00
Alexander Larsson 536f1e5e3e Bump version to 0.3.4 2015-06-23 10:54:39 +02:00
Alexander Larsson 9ae639ab77 Bump version to 0.3.3 2015-06-23 09:52:28 +02:00
Alexander Larsson d52c09165c configure: Add checks for docbook xsl/dtd 2015-06-17 17:10:41 +02:00
Alexander Larsson 53fc3413ea Bump version to 0.3.2 2015-06-16 16:34:49 +02:00
Alexander Larsson a39197c60c Bump version to 0.3.1 2015-06-04 16:03:26 +02:00
Alexander Larsson b1aa93a9d4 Use seccomp to limit allowed syscalls
We disallow any network family but inet, inet6, unix and netlink
as the rest are generally weird old unused things.

We also have a blacklist of syscalls, some are just old unnecessary
things, some are things that are "risky", like NUMA/VM control, and
setting up custom sub-namespaces.
2015-06-02 11:14:27 +02:00
Alexander Larsson 50b3de3728 helper: Optionally add back setuid support
If you don't have userns support in your kernel you can use this.
The future lies with userns though, so it is the default.
2015-05-29 10:46:10 +02:00
Alexander Larsson 2c0c21744f helper: Drop setuid and use user namespaces 2015-05-28 22:02:31 +02:00
Alexander Larsson c6b6ba5095 Bump version to 0.3.0 2015-05-26 13:53:11 +02:00
Alexander Larsson 3a68d242a6 Bump version to 0.2.1 2015-05-21 17:08:36 +02:00
Alexander Larsson 798f758969 Bump version to 0.2 2015-05-13 17:09:53 +02:00
Alexander Larsson 34d7c14394 Close any unexpectedly inherited fds in helper monitor and init. 2015-05-06 18:04:35 +02:00
Daniel Svensson 36645a680c Switch to using glibc xattrs.
Updates libglnx to reflect a similar change in that project.
2015-04-05 22:13:45 +02:00
Alexander Larsson 6b9f8407fe Merge pull request #62 from amigadave/attr-header
Check for libattr header
2015-03-23 12:10:52 +01:00
Alexander Larsson ee2edada58 Bump version to 0.1 2015-03-23 11:16:41 +01:00
Alexander Larsson b4c77b8c02 Require ostree 2015.3
This is latest version that is in fedora 21 atm. Its got some fixes
that are nice to have, but unfortunately deltas are not yet stable
in it.
2015-03-23 11:16:41 +01:00
Alexander Larsson 0eada3ef66 Fix dist 2015-03-23 11:16:41 +01:00
David King b025874806 Check for libattr header 2015-03-21 19:04:43 +01:00
Alexander Larsson c856556b8a Convert to g_autoptr 2015-03-20 16:33:18 +01:00
Alexander Larsson 22ac447fc6 Import libglnx 2015-03-20 15:57:22 +01:00
Alexander Larsson 957bf050bd Mount system fonts in /run/host/fonts 2015-03-06 11:26:07 +01:00
Alexander Larsson c40eba6e97 Check for sys/capability.h via AC_CHECK_HEADER instead 2015-03-02 12:36:56 +01:00
Alexander Larsson c7c201faa9 Revert "Look for libcap pkg-config file for cflags to ensure we have the headers"
This breaks gnome-continuous which doesn't have a pc file for libcap.

This reverts commit 26d9596730.
2015-03-02 12:27:09 +01:00
Alexander Larsson 26d9596730 Look for libcap pkg-config file for cflags to ensure we have the headers
We don't actually link to the library though.
2015-03-02 11:55:31 +01:00
Alexander Larsson 4ff10fee86 Add support for --with-priv-mode=caps
This allows you to set the privs for the helper via file
capabilities instead of setuid.
You can also set the mode to none, but then you have to
manually set either setuid or filecaps (for instance via
a packaging script).
2015-02-08 23:37:47 +01:00
Alexander Larsson fca4a16209 Add xdg-app-session-helper
This is a small app that makes copies of various system files to a directory
in /run so that the app sandbox can receive updates to these. This solves
the issue that we can't generally bind-mount say /etc/resolv.conf, because
it will be replaced with rename-over.
2015-01-28 20:03:13 +01:00
Matthias Clasen f62277e5af Use libsoup to load summary via http
We disable gvfs in xdg-app, so we need to use libsoup explicitly.
This is hopefully only temporary, until ostree grows api for dealing
with summaries.
2015-01-21 15:23:14 -05:00
Matthias Clasen 2232a6d066 Add man pages 2015-01-14 01:38:49 -05:00
Vadim Rutkovsky 4720d889f8 Use sudo only if --enable-sudo is passed 2015-01-13 14:56:14 +01:00
Alexander Larsson 3b1893aaaf Require latest ostree/libgsystem
This allows us to clean up some code and get the new static delta
support.
2015-01-12 15:31:12 +01:00
Alexander Larsson a640cd365b Initial version 2014-12-17 15:28:07 +01:00