Commit Graph

93 Commits (f8ae525ce83bfb300cb2fa9b92c72fb15261ae07)

Author SHA1 Message Date
David King fc6282e865 bwrap: Move to under libexecdir
According to the FHS, applications which place internal libraries in
/usr/libexec should not also use /usr/lib for this purpose:

http://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s07.html

As several flatpak helpers are already installed in libexecdir, move
the bwrap helper to /usr/libexec/flatpak-bwrap.
2016-05-30 18:40:12 +02:00
Alexander Larsson 70c2da02ed Update PRIV_MODE_SETCAPS with the new required caps
We now need setuid/setgid caps too.
2016-05-24 09:44:48 +02:00
Alexander Larsson c635633e6b Add --with-system-install-dir option 2016-05-18 11:11:03 +02:00
Alexander Larsson aa11387031 tests: Add test-run-system.sh 2016-05-17 17:49:55 +02:00
Alexander Larsson 28b549156a Split out permission store from session helper
This is now available as org.freedesktop.impl.portal.PermissionStore
2016-05-09 14:07:22 +02:00
Alexander Larsson 5e9b247d26 Migrate ~/.local/share/xdg-app to ~/.local/share/flatpak 2016-05-09 12:21:28 +02:00
Alexander Larsson 8abbc0186e Rename everything but the on-disk location to flatpak 2016-05-09 11:11:55 +02:00
Alexander Larsson ba37b22d78 Rename library to libflatpak 2016-05-09 09:46:26 +02:00
Alexander Larsson 6a613d1fab Rename all non-autogenerated symbols to flatpak 2016-05-09 09:00:20 +02:00
Alexander Larsson 1df3e4845b Fix various distcheck issues 2016-05-03 09:36:33 +02:00
Alexander Larsson bffaa12301 Remove old gtester references 2016-05-03 09:25:05 +02:00
Alexander Larsson 4c3bf179e2 Use bubblewrap instead of xdg-app-helper
Bubblewrap is a new tool from project atomic. Its similar to the old
xdg-app-helper, but even more minimal, and a bit more generic. Its designed
to be easy to git submodule install, but at some point we will probably
support using the system installed version too.

Using bubblewraps lets us share the load of security mainainance and
allows other people to use bubblewrap to do their own unprivileged
sandboxes.
2016-04-29 15:52:44 +02:00
Alexander Larsson ee7be7f82d Build bwrap 2016-04-29 15:38:23 +02:00
Alexander Larsson 3d3ebf814d Support installed tests 2016-04-27 16:37:15 +02:00
Alexander Larsson 8ac40150a6 Initial (empty) version of system helper 2016-04-25 18:59:17 +02:00
Alexander Larsson 351c2d5bd2 Read system remotes from /etc/xdg-app/remotes.d/*.conf 2016-04-21 18:47:11 +02:00
Alexander Larsson 40feb18556 Set xdg-app as the log domain 2016-02-22 08:46:49 +01:00
Alexander Larsson 1fa367199a Allow overriding XDG_APP_BINDIR using make vars 2016-02-11 13:36:34 +01:00
Simon McVittie 0a813296d8 Remove unset variable from EXTRA_DIST
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-29 09:50:44 +01:00
Simon McVittie a0fc3c1df3 Distribute .service.in files in tarballs
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-29 09:50:30 +01:00
Alexander Larsson a754db12a2 Merge pull request #106 from smcv/symbol-hiding
Hide non-public symbols from libglnx and libxdgapp-common
2016-01-29 09:01:37 +01:00
Alexander Larsson 7f20b44679 Merge pull request #107 from smcv/sd-units
Add systemd user units
2016-01-29 09:00:36 +01:00
Alexander Larsson f0e87af929 Merge pull request #109 from smcv/fhs
Move XDG_APP_SYSTEMDIR to /var/lib/xdg-app or similar
2016-01-29 08:54:25 +01:00
Simon McVittie 8cfad98738 Move XDG_APP_SYSTEMDIR to /var/lib/xdg-app or similar
The FHS specifies a limited number of subdirectories for /var,
which do not include xdg-app. Packaging systems like RPM and dpkg
use a subdirectory of /var/lib, so it seems appropriate for system-wide
xdg-app runtimes and apps too.

Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-29 00:23:35 +01:00
Simon McVittie 9efe31e8d4 Add systemd user units corresponding to the D-Bus session services
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-28 23:45:47 +01:00
Simon McVittie 73b0adfe0a Hide non-public symbols from libglnx and libxdgapp-common
This avoids exporting glnx_*, calc_sizes(), etc. However, we do want to
export xdg_app_error_quark(), so do that.

Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-28 23:43:30 +01:00
Simon McVittie bc451c567e Build top-level directory before building documentation
Otherwise, we try to scan a library that we haven't yet built.

Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-28 23:40:15 +01:00
Alexander Larsson 570ba8b55f Add --enable-libxdgapp configure flag and disable lib by default 2015-12-16 15:27:42 +01:00
Emmanuele Bassi 52ba736518 Add introspection support to libxdg-app
We may want to use it from non-C languages.
2015-12-04 09:55:40 +00:00
Alexander Larsson 132d1186d9 Initial version of libxdg-app
This is a highlevel library for working with xdg-app without using
the commandline interface. The primary usecase for this is for
creating a graphical frontend for app installation/update.
2015-12-03 22:41:16 +01:00
Alexander Larsson 106a5b06ec Rename lib/ to common/ in preparation for public xdg-app library 2015-11-26 22:05:38 +01:00
Alexander Larsson b2790349d6 Add xdg-app-builder
This is a tool that makes it easy to build applications and their
dependecies by automating the configure && make && make install steps.
2015-11-25 15:26:32 +01:00
Alexander Larsson 452c5d38c1 Add xdg-app.pc file with variable for interfaces_dir 2015-11-11 11:26:03 +01:00
Alexander Larsson 3a47f0b282 Install dbus introspection files 2015-10-21 09:52:55 +02:00
Alexander Larsson 6e1c211a5c Correct capitalization on dbus interface filename 2015-10-21 09:48:53 +02:00
Alexander Larsson 645c433960 Fix distcheck issues 2015-09-17 20:24:04 +02:00
Alexander Larsson d79935bd4a Add minimal document portal tests 2015-09-07 17:17:44 +02:00
Alexander Larsson de004081ef Initial tests of the db 2015-08-25 13:16:34 +02:00
Alexander Larsson 929071ad10 Import xdg-document-portal from github repo
This pulls in the daemon code from:
     https://github.com/alexlarsson/xdg-document-portal/

We need this in xdg-app because we need to set up the mounts correctly.
2015-07-10 16:56:39 +02:00
Alexander Larsson 302f88e69d Restructure directories and build
This moves a all source code into separate subdirs per binary. The
helper and the generic stuff goes into lib/ which is then used by all
the others. For now this is a completely internal library, but at
some point we will probably clean it up and expose some subset.

Also, we move the dbus proxy to libexecdir.
2015-07-10 12:15:45 +02:00
Alexander Larsson 0774aa39e2 Add xdg-app.env file for gdm 2015-06-23 11:40:11 +02:00
Alexander Larsson b1aa93a9d4 Use seccomp to limit allowed syscalls
We disallow any network family but inet, inet6, unix and netlink
as the rest are generally weird old unused things.

We also have a blacklist of syscalls, some are just old unnecessary
things, some are things that are "risky", like NUMA/VM control, and
setting up custom sub-namespaces.
2015-06-02 11:14:27 +02:00
Alexander Larsson 50b3de3728 helper: Optionally add back setuid support
If you don't have userns support in your kernel you can use this.
The future lies with userns though, so it is the default.
2015-05-29 10:46:10 +02:00
Alexander Larsson 2c0c21744f helper: Drop setuid and use user namespaces 2015-05-28 22:02:31 +02:00
Colin Walters 290253b4e2 build: Fix srcdir != builddir from git
We could just `mkdir -p profile`, but it's saner to just drop it in
the builddir.
2015-05-19 12:36:34 -04:00
David King 27fdae4153 Add a simple profile.d snippet for XDG_DATA_DIRS
https://github.com/alexlarsson/xdg-app/issues/74
2015-05-15 17:00:38 +01:00
Alexander Larsson 01bd1a3dfd Make xdg-dbus-proxy talk command line args and install it 2015-05-06 15:01:55 +02:00
Alexander Larsson 7183917583 Break out dbus proxy implementation to separate file 2015-05-06 12:38:52 +02:00
Alexander Larsson 6048b38158 dbus proxy in progress 2015-05-05 17:23:57 +02:00
Alexander Larsson 0eada3ef66 Fix dist 2015-03-23 11:16:41 +01:00