summaryrefslogtreecommitdiff
path: root/common/flatpak-run.c
Commit message (Expand)AuthorAgeFilesLines
* common: Split up socket setup from flatpak-run into multiple filesSimon McVittie2023-05-151-1365/+6
* Use new --disable-userns bubblewrap feature when possibleAlexander Larsson2023-03-241-0/+32
* run: Prevent TIOCLINUX ioctl, the same as TIOCSTISimon McVittie2023-03-161-0/+4
* flatpak-run: Unset GDK_BACKENDDan Nicholson2023-02-131-0/+1
* run: Avoid double-free of gpgconf stdout streamSimon McVittie2023-02-071-1/+1
* common: Replace all flatpak_debug2() with g_debug()Simon McVittie2022-12-151-7/+7
* common: Use g_info() for messages that will be shown by flatpak -vSimon McVittie2022-12-151-39/+39
* flatpak-run: unset GIO_EXTRA_MODULESLeorize2022-12-071-0/+1
* flatpak-run: unset XKB_CONFIG_ROOTLeorize2022-12-011-0/+1
* Clear more temporary file paths from envErick5552022-11-101-1/+5
* Block KRB5CCNAME from inheriting into sandboxMichael Catanzaro2022-09-191-1/+3
* Bind gssproxy socket into sandbox environmentMichael Catanzaro2022-09-191-1/+17
* Allow the modify_ldt syscall when using multiarchJoaquim Monteiro2022-09-061-3/+17
* Add a vim modeline and .editorconfigPhaedrus Leeds2022-08-221-1/+1
* Add --socket=gpg-agentNick Reiley2022-08-161-0/+45
* run: Preserve X11 display number instead of redirecting it to :99Simon McVittie2022-08-161-15/+7
* utils: Put an Auto prefix on locally-defined autoptr cleanupsSimon McVittie2022-05-031-1/+1
* common: Decouple flatpak-context-private.h from xdg-dbus-proxySimon McVittie2022-04-111-1/+0
* build: Consistently include libglnx header as "libglnx.h"Simon McVittie2022-04-111-1/+1
* wayland: allow absolute path in WAYLAND_DISPLAYJulian Orth2022-02-161-1/+4
* run: Consistently create /.flatpak-info with mode 0600Simon McVittie2022-02-141-0/+2
* run: Create sandbox's XDG_RUNTIME_DIR with 0700 permissionsSimon McVittie2022-02-141-1/+1
* run: Interpret tcp: addresses for PulseAudioSimon McVittie2022-02-111-10/+30
* run: Allow remapping Xauthority entries for remote or forwarded X11Simon McVittie2022-02-111-20/+32
* run: Handle X11 over local abstract or TCP socketsSimon McVittie2022-02-111-11/+39
* run: Support parsing non-local X11 addressesSimon McVittie2022-02-111-5/+38
* run: Treat DISPLAY=unix:42 the same as :42Simon McVittie2022-02-111-1/+1
* run: Factor out parsing X11 displays into a helper functionSimon McVittie2022-02-111-9/+55
* run: Avoid signed/unsigned comparison in Xauth handlingSimon McVittie2022-02-111-1/+1
* run: Improve const-correctness of Xauth codeSimon McVittie2022-02-111-7/+8
* run: Avoid cast warning when built with -Wwrite-stringsSimon McVittie2022-02-111-1/+1
* run: Don't propagate GStreamer variables to the sandboxBastien Nocera2022-02-071-0/+12
* run: Avoid execve() when measuring test coverageSimon McVittie2022-01-171-2/+21
* app: Refuse to work with sudo and --userPhaedrus Leeds2022-01-041-23/+8
* run: Use URN for fontconfig DTDJan Tojnar2021-12-171-1/+1
* run: Always create .local/state directorySimon McVittie2021-11-151-0/+4
* run: Mention why we're using .local/stateSimon McVittie2021-11-151-0/+3
* Add XDG_STATE_HOME and HOST_XDG_STATE_HOME env variablesLionir2021-11-151-0/+5
* run: Document shortcomings of PulseAudio server string parsingWill Thompson2021-11-111-0/+6
* run: Add link to PulseAudio server string documentationWill Thompson2021-11-111-0/+5
* run: Support PulseAudio socket path without unix: prefixWill Thompson2021-11-111-0/+3
* run: Improve error handling/diagnostics for calls into libseccompSimon McVittie2021-10-111-6/+40
* Fix handling of syscalls only allowed by --develSimon McVittie2021-10-111-1/+1
* run: Handle unknown syscalls as intendedSimon McVittie2021-10-081-2/+15
* run: Don't allow chroot()Simon McVittie2021-10-081-0/+1
* run: Don't allow unmounting filesystemsSimon McVittie2021-10-081-0/+2
* run: Block setns()Simon McVittie2021-10-081-0/+1
* run: Disallow recently-added mount-manipulation syscallsSimon McVittie2021-10-081-0/+12
* run: Block clone3() in sandboxSimon McVittie2021-10-081-0/+6
* common: Add a list of recently-added Linux syscallsSimon McVittie2021-10-081-0/+2