Alexander Larsson
927e3cab48
Make xauth use optional
...
This is not needed on some Xservers, and not if you're only building stuff.
So, lets make it optional.
2016-01-28 12:01:08 +01:00
Alexander Larsson
6349b3ffc1
helper: Make user namespace support vs setuid a runtime, not build-time option
...
We now check at runtime if we have raised privs, and only if not so do we try
to use unprivileged user namespaces. This means you can build xdg-app however,
and then setuid/setcap the binary however you want afterwards.
2016-01-28 09:43:45 +01:00
Alexander Larsson
cafc7fbba8
Bump version to 0.4.7
2016-01-25 10:39:20 +01:00
Alexander Larsson
7940a773ef
Always build libxmlapp
2016-01-22 22:19:52 +01:00
Alexander Larsson
62b4ffaa72
builder: Use libelf to detect elf files
...
This additionally looks for already stripped files
2016-01-11 11:40:46 +01:00
Alexander Larsson
570ba8b55f
Add --enable-libxdgapp configure flag and disable lib by default
2015-12-16 15:27:42 +01:00
Alexander Larsson
3e5019bc64
Bump version to 0.4.6
2015-12-16 13:18:28 +01:00
Emmanuele Bassi
f23090a615
Generate the API reference for libxdg-app
...
We use the good old gtk-doc.
2015-12-04 15:00:35 +00:00
Emmanuele Bassi
92885b9ce2
Add introspection check
2015-12-04 09:36:30 +00:00
Alexander Larsson
132d1186d9
Initial version of libxdg-app
...
This is a highlevel library for working with xdg-app without using
the commandline interface. The primary usecase for this is for
creating a graphical frontend for app installation/update.
2015-12-03 22:41:16 +01:00
Alexander Larsson
106a5b06ec
Rename lib/ to common/ in preparation for public xdg-app library
2015-11-26 22:05:38 +01:00
Alexander Larsson
b2790349d6
Add xdg-app-builder
...
This is a tool that makes it easy to build applications and their
dependecies by automating the configure && make && make install steps.
2015-11-25 15:26:32 +01:00
Alexander Larsson
452c5d38c1
Add xdg-app.pc file with variable for interfaces_dir
2015-11-11 11:26:03 +01:00
Alexander Larsson
e65ca6a18f
Update to 0.4.5
2015-11-04 16:10:16 +01:00
Alexander Larsson
dda045d808
Update for 0.4.4 release
2015-10-02 09:55:34 +02:00
Alexander Larsson
208eb7b1aa
Propagate Xauthority details to the sandbox if X11 is enabled
...
Some xservers out there (like xorg 1.17.1) have a broken server interpreted
local xauth, which causes apps to fail to connect to the xserver.
This fixes that by propagating Xauthority data such as the MIT-MAGIC-COOKIE-1.
2015-10-01 21:23:23 +02:00
Alexander Larsson
82071b2cb8
Bump version to 0.4.3
2015-09-29 16:15:27 +02:00
Alexander Larsson
8cd95d2621
Make sure we build against older ostree (without gpg import)
...
This means we work on the f22 ostree version at least.
2015-09-29 16:12:37 +02:00
Alexander Larsson
b25830d8f9
Add xdg-app dump-runtime command
...
This creates a tar of the runtime as set up by xdg-app
2015-09-28 10:48:47 +02:00
Alexander Larsson
26458d8da2
Release 0.4.2.1
2015-09-25 11:47:27 +02:00
Alexander Larsson
423c1131d8
Update to 0.4.2
2015-09-24 21:40:07 +02:00
Alexander Larsson
1917e1fd38
Make seccomp optional
...
Several architectures does not have seccomp yet.
2015-09-24 14:57:53 +02:00
Alexander Larsson
f22c0edfd8
Update NEWS and version to 0.4.1
2015-09-18 16:47:49 +02:00
Alexander Larsson
8f445ee883
bump version to 0.4.0
2015-09-17 19:09:13 +02:00
Alexander Larsson
d50284c7a6
Add check-valgrind target
2015-09-07 11:13:21 +02:00
Alexander Larsson
929071ad10
Import xdg-document-portal from github repo
...
This pulls in the daemon code from:
https://github.com/alexlarsson/xdg-document-portal/
We need this in xdg-app because we need to set up the mounts correctly.
2015-07-10 16:56:39 +02:00
Alexander Larsson
b0e1124f02
Bump version to 0.3.6
2015-07-10 12:39:54 +02:00
Alexander Larsson
302f88e69d
Restructure directories and build
...
This moves a all source code into separate subdirs per binary. The
helper and the generic stuff goes into lib/ which is then used by all
the others. For now this is a completely internal library, but at
some point we will probably clean it up and expose some subset.
Also, we move the dbus proxy to libexecdir.
2015-07-10 12:15:45 +02:00
Alexander Larsson
4f73eaf10b
Bump version to 0.3.5
2015-06-24 14:46:51 +02:00
Alexander Larsson
536f1e5e3e
Bump version to 0.3.4
2015-06-23 10:54:39 +02:00
Alexander Larsson
9ae639ab77
Bump version to 0.3.3
2015-06-23 09:52:28 +02:00
Alexander Larsson
d52c09165c
configure: Add checks for docbook xsl/dtd
2015-06-17 17:10:41 +02:00
Alexander Larsson
53fc3413ea
Bump version to 0.3.2
2015-06-16 16:34:49 +02:00
Alexander Larsson
a39197c60c
Bump version to 0.3.1
2015-06-04 16:03:26 +02:00
Alexander Larsson
b1aa93a9d4
Use seccomp to limit allowed syscalls
...
We disallow any network family but inet, inet6, unix and netlink
as the rest are generally weird old unused things.
We also have a blacklist of syscalls, some are just old unnecessary
things, some are things that are "risky", like NUMA/VM control, and
setting up custom sub-namespaces.
2015-06-02 11:14:27 +02:00
Alexander Larsson
50b3de3728
helper: Optionally add back setuid support
...
If you don't have userns support in your kernel you can use this.
The future lies with userns though, so it is the default.
2015-05-29 10:46:10 +02:00
Alexander Larsson
2c0c21744f
helper: Drop setuid and use user namespaces
2015-05-28 22:02:31 +02:00
Alexander Larsson
c6b6ba5095
Bump version to 0.3.0
2015-05-26 13:53:11 +02:00
Alexander Larsson
3a68d242a6
Bump version to 0.2.1
2015-05-21 17:08:36 +02:00
Alexander Larsson
798f758969
Bump version to 0.2
2015-05-13 17:09:53 +02:00
Alexander Larsson
34d7c14394
Close any unexpectedly inherited fds in helper monitor and init.
2015-05-06 18:04:35 +02:00
Daniel Svensson
36645a680c
Switch to using glibc xattrs.
...
Updates libglnx to reflect a similar change in that project.
2015-04-05 22:13:45 +02:00
Alexander Larsson
6b9f8407fe
Merge pull request #62 from amigadave/attr-header
...
Check for libattr header
2015-03-23 12:10:52 +01:00
Alexander Larsson
ee2edada58
Bump version to 0.1
2015-03-23 11:16:41 +01:00
Alexander Larsson
b4c77b8c02
Require ostree 2015.3
...
This is latest version that is in fedora 21 atm. Its got some fixes
that are nice to have, but unfortunately deltas are not yet stable
in it.
2015-03-23 11:16:41 +01:00
Alexander Larsson
0eada3ef66
Fix dist
2015-03-23 11:16:41 +01:00
David King
b025874806
Check for libattr header
2015-03-21 19:04:43 +01:00
Alexander Larsson
c856556b8a
Convert to g_autoptr
2015-03-20 16:33:18 +01:00
Alexander Larsson
22ac447fc6
Import libglnx
2015-03-20 15:57:22 +01:00
Alexander Larsson
957bf050bd
Mount system fonts in /run/host/fonts
2015-03-06 11:26:07 +01:00
Alexander Larsson
c40eba6e97
Check for sys/capability.h via AC_CHECK_HEADER instead
2015-03-02 12:36:56 +01:00
Alexander Larsson
c7c201faa9
Revert "Look for libcap pkg-config file for cflags to ensure we have the headers"
...
This breaks gnome-continuous which doesn't have a pc file for libcap.
This reverts commit 26d9596730
.
2015-03-02 12:27:09 +01:00
Alexander Larsson
26d9596730
Look for libcap pkg-config file for cflags to ensure we have the headers
...
We don't actually link to the library though.
2015-03-02 11:55:31 +01:00
Alexander Larsson
4ff10fee86
Add support for --with-priv-mode=caps
...
This allows you to set the privs for the helper via file
capabilities instead of setuid.
You can also set the mode to none, but then you have to
manually set either setuid or filecaps (for instance via
a packaging script).
2015-02-08 23:37:47 +01:00
Alexander Larsson
fca4a16209
Add xdg-app-session-helper
...
This is a small app that makes copies of various system files to a directory
in /run so that the app sandbox can receive updates to these. This solves
the issue that we can't generally bind-mount say /etc/resolv.conf, because
it will be replaced with rename-over.
2015-01-28 20:03:13 +01:00
Matthias Clasen
f62277e5af
Use libsoup to load summary via http
...
We disable gvfs in xdg-app, so we need to use libsoup explicitly.
This is hopefully only temporary, until ostree grows api for dealing
with summaries.
2015-01-21 15:23:14 -05:00
Matthias Clasen
2232a6d066
Add man pages
2015-01-14 01:38:49 -05:00
Vadim Rutkovsky
4720d889f8
Use sudo only if --enable-sudo is passed
2015-01-13 14:56:14 +01:00
Alexander Larsson
3b1893aaaf
Require latest ostree/libgsystem
...
This allows us to clean up some code and get the new static delta
support.
2015-01-12 15:31:12 +01:00
Alexander Larsson
a640cd365b
Initial version
2014-12-17 15:28:07 +01:00