David King
fc6282e865
bwrap: Move to under libexecdir
...
According to the FHS, applications which place internal libraries in
/usr/libexec should not also use /usr/lib for this purpose:
http://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s07.html
As several flatpak helpers are already installed in libexecdir, move
the bwrap helper to /usr/libexec/flatpak-bwrap.
2016-05-30 18:40:12 +02:00
Alexander Larsson
70c2da02ed
Update PRIV_MODE_SETCAPS with the new required caps
...
We now need setuid/setgid caps too.
2016-05-24 09:44:48 +02:00
Alexander Larsson
c635633e6b
Add --with-system-install-dir option
2016-05-18 11:11:03 +02:00
Alexander Larsson
aa11387031
tests: Add test-run-system.sh
2016-05-17 17:49:55 +02:00
Alexander Larsson
28b549156a
Split out permission store from session helper
...
This is now available as org.freedesktop.impl.portal.PermissionStore
2016-05-09 14:07:22 +02:00
Alexander Larsson
5e9b247d26
Migrate ~/.local/share/xdg-app to ~/.local/share/flatpak
2016-05-09 12:21:28 +02:00
Alexander Larsson
8abbc0186e
Rename everything but the on-disk location to flatpak
2016-05-09 11:11:55 +02:00
Alexander Larsson
ba37b22d78
Rename library to libflatpak
2016-05-09 09:46:26 +02:00
Alexander Larsson
6a613d1fab
Rename all non-autogenerated symbols to flatpak
2016-05-09 09:00:20 +02:00
Alexander Larsson
1df3e4845b
Fix various distcheck issues
2016-05-03 09:36:33 +02:00
Alexander Larsson
bffaa12301
Remove old gtester references
2016-05-03 09:25:05 +02:00
Alexander Larsson
4c3bf179e2
Use bubblewrap instead of xdg-app-helper
...
Bubblewrap is a new tool from project atomic. Its similar to the old
xdg-app-helper, but even more minimal, and a bit more generic. Its designed
to be easy to git submodule install, but at some point we will probably
support using the system installed version too.
Using bubblewraps lets us share the load of security mainainance and
allows other people to use bubblewrap to do their own unprivileged
sandboxes.
2016-04-29 15:52:44 +02:00
Alexander Larsson
ee7be7f82d
Build bwrap
2016-04-29 15:38:23 +02:00
Alexander Larsson
3d3ebf814d
Support installed tests
2016-04-27 16:37:15 +02:00
Alexander Larsson
8ac40150a6
Initial (empty) version of system helper
2016-04-25 18:59:17 +02:00
Alexander Larsson
351c2d5bd2
Read system remotes from /etc/xdg-app/remotes.d/*.conf
2016-04-21 18:47:11 +02:00
Alexander Larsson
40feb18556
Set xdg-app as the log domain
2016-02-22 08:46:49 +01:00
Alexander Larsson
1fa367199a
Allow overriding XDG_APP_BINDIR using make vars
2016-02-11 13:36:34 +01:00
Simon McVittie
0a813296d8
Remove unset variable from EXTRA_DIST
...
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-29 09:50:44 +01:00
Simon McVittie
a0fc3c1df3
Distribute .service.in files in tarballs
...
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-29 09:50:30 +01:00
Alexander Larsson
a754db12a2
Merge pull request #106 from smcv/symbol-hiding
...
Hide non-public symbols from libglnx and libxdgapp-common
2016-01-29 09:01:37 +01:00
Alexander Larsson
7f20b44679
Merge pull request #107 from smcv/sd-units
...
Add systemd user units
2016-01-29 09:00:36 +01:00
Alexander Larsson
f0e87af929
Merge pull request #109 from smcv/fhs
...
Move XDG_APP_SYSTEMDIR to /var/lib/xdg-app or similar
2016-01-29 08:54:25 +01:00
Simon McVittie
8cfad98738
Move XDG_APP_SYSTEMDIR to /var/lib/xdg-app or similar
...
The FHS specifies a limited number of subdirectories for /var,
which do not include xdg-app. Packaging systems like RPM and dpkg
use a subdirectory of /var/lib, so it seems appropriate for system-wide
xdg-app runtimes and apps too.
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-29 00:23:35 +01:00
Simon McVittie
9efe31e8d4
Add systemd user units corresponding to the D-Bus session services
...
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-28 23:45:47 +01:00
Simon McVittie
73b0adfe0a
Hide non-public symbols from libglnx and libxdgapp-common
...
This avoids exporting glnx_*, calc_sizes(), etc. However, we do want to
export xdg_app_error_quark(), so do that.
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-28 23:43:30 +01:00
Simon McVittie
bc451c567e
Build top-level directory before building documentation
...
Otherwise, we try to scan a library that we haven't yet built.
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-01-28 23:40:15 +01:00
Alexander Larsson
570ba8b55f
Add --enable-libxdgapp configure flag and disable lib by default
2015-12-16 15:27:42 +01:00
Emmanuele Bassi
52ba736518
Add introspection support to libxdg-app
...
We may want to use it from non-C languages.
2015-12-04 09:55:40 +00:00
Alexander Larsson
132d1186d9
Initial version of libxdg-app
...
This is a highlevel library for working with xdg-app without using
the commandline interface. The primary usecase for this is for
creating a graphical frontend for app installation/update.
2015-12-03 22:41:16 +01:00
Alexander Larsson
106a5b06ec
Rename lib/ to common/ in preparation for public xdg-app library
2015-11-26 22:05:38 +01:00
Alexander Larsson
b2790349d6
Add xdg-app-builder
...
This is a tool that makes it easy to build applications and their
dependecies by automating the configure && make && make install steps.
2015-11-25 15:26:32 +01:00
Alexander Larsson
452c5d38c1
Add xdg-app.pc file with variable for interfaces_dir
2015-11-11 11:26:03 +01:00
Alexander Larsson
3a47f0b282
Install dbus introspection files
2015-10-21 09:52:55 +02:00
Alexander Larsson
6e1c211a5c
Correct capitalization on dbus interface filename
2015-10-21 09:48:53 +02:00
Alexander Larsson
645c433960
Fix distcheck issues
2015-09-17 20:24:04 +02:00
Alexander Larsson
d79935bd4a
Add minimal document portal tests
2015-09-07 17:17:44 +02:00
Alexander Larsson
de004081ef
Initial tests of the db
2015-08-25 13:16:34 +02:00
Alexander Larsson
929071ad10
Import xdg-document-portal from github repo
...
This pulls in the daemon code from:
https://github.com/alexlarsson/xdg-document-portal/
We need this in xdg-app because we need to set up the mounts correctly.
2015-07-10 16:56:39 +02:00
Alexander Larsson
302f88e69d
Restructure directories and build
...
This moves a all source code into separate subdirs per binary. The
helper and the generic stuff goes into lib/ which is then used by all
the others. For now this is a completely internal library, but at
some point we will probably clean it up and expose some subset.
Also, we move the dbus proxy to libexecdir.
2015-07-10 12:15:45 +02:00
Alexander Larsson
0774aa39e2
Add xdg-app.env file for gdm
2015-06-23 11:40:11 +02:00
Alexander Larsson
b1aa93a9d4
Use seccomp to limit allowed syscalls
...
We disallow any network family but inet, inet6, unix and netlink
as the rest are generally weird old unused things.
We also have a blacklist of syscalls, some are just old unnecessary
things, some are things that are "risky", like NUMA/VM control, and
setting up custom sub-namespaces.
2015-06-02 11:14:27 +02:00
Alexander Larsson
50b3de3728
helper: Optionally add back setuid support
...
If you don't have userns support in your kernel you can use this.
The future lies with userns though, so it is the default.
2015-05-29 10:46:10 +02:00
Alexander Larsson
2c0c21744f
helper: Drop setuid and use user namespaces
2015-05-28 22:02:31 +02:00
Colin Walters
290253b4e2
build: Fix srcdir != builddir from git
...
We could just `mkdir -p profile`, but it's saner to just drop it in
the builddir.
2015-05-19 12:36:34 -04:00
David King
27fdae4153
Add a simple profile.d snippet for XDG_DATA_DIRS
...
https://github.com/alexlarsson/xdg-app/issues/74
2015-05-15 17:00:38 +01:00
Alexander Larsson
01bd1a3dfd
Make xdg-dbus-proxy talk command line args and install it
2015-05-06 15:01:55 +02:00
Alexander Larsson
7183917583
Break out dbus proxy implementation to separate file
2015-05-06 12:38:52 +02:00
Alexander Larsson
6048b38158
dbus proxy in progress
2015-05-05 17:23:57 +02:00
Alexander Larsson
0eada3ef66
Fix dist
2015-03-23 11:16:41 +01:00