summaryrefslogtreecommitdiff
path: root/revokefs
Commit message (Collapse)AuthorAgeFilesLines
* automake: Consistently include $(AM_CFLAGS) in target-specific CFLAGSSimon McVittie2022-10-271-2/+2
| | | | | | | When built for i386 with Autotools, this would have detected the format string issue fixed in #5148. Signed-off-by: Simon McVittie <smcv@collabora.com>
* revokefs: Remove incorrect libglnx include directorySimon McVittie2022-10-271-1/+1
| | | | | | | revokefs already gets the correct include directory from the AM_CPPFLAGS. This would also break the build with -Werror=missing-include-dirs. Signed-off-by: Simon McVittie <smcv@collabora.com>
* revokefs: Use correct format string for a ssize_tSimon McVittie2022-10-251-1/+1
| | | | | | | | | | This fixes the build on ILP32 architectures such as i386 with the Meson build system. The Autotools build system accidentally didn't build revokefs with -Werror=format, because it sets the target-specific CFLAGS for revokefs but does not include the $(AM_CFLAGS) in them. Fixes: aeecbb7d "revokefs: Split out the writing part from the fuse implementation" Signed-off-by: Simon McVittie <smcv@collabora.com>
* Add a Meson build systemSimon McVittie2022-10-242-0/+26
| | | | | Resolves: https://github.com/flatpak/flatpak/issues/2241 Signed-off-by: Simon McVittie <smcv@collabora.com>
* Add a vim modeline and .editorconfigPhaedrus Leeds2022-08-222-2/+2
| | | | | | | | | To make indentation work with less effort. The modeline was copied from libostree with minor modification and the .editorconfig from GLib. The advantage of having both a modeline and an editorconfig is we can work out of the box on more editor setups, and the modeline allows us to specify the style with a lot more fine grained control.
* revokefs: Use FUSE version 3 if possibleSimon McVittie2022-08-163-10/+61
| | | | | | | | | Based on a change contributed by Léo Stefanesco; but instead of unconditionally using FUSE 3, leave a fallback code path for FUSE 2 for older distros. Co-authored-by: Léo Stefanesco <leo.lveb@gmail.com> Signed-off-by: Simon McVittie <smcv@collabora.com>
* Fix some warn_unused_result warningsEric Curtin2021-10-121-1/+5
| | | | While building on gcc 9.3.0
* revokefs: Use the right variable name in an error messageSimon McVittie2021-04-161-1/+1
| | | | | | | scan-build detected that response_size is uninitialized here, presumably a typo for response_data_size. Signed-off-by: Simon McVittie <smcv@collabora.com>
* revokefs: Fix off-by-one array size in fuse implementationAlexander Larsson2019-09-181-1/+1
| | | | | | | | | The iovec write_vecs[] array on the stack was just 2 element, but we sometimes use 3 elements of it. This was causing random crashes due to corrupting the stack. Closes: #3110 Approved by: alexlarsson
* revokefs-fuse: Fix some build warningsRyan Gonzalez2019-06-131-7/+7
| | | | | Closes: #2952 Approved by: alexlarsson
* revokefs-fuse: Add --with-exit-fd arg to monitor parent process's exitUmang Jain2019-04-093-5/+31
| | | | | | | | | | | This is necessary so as to not leave the revokefs backend around when the system-helper exits abruptly (e.g. OOM killer). It would be a vulnerability if revokefs backend continues to live even after the system-helper is killed as it might lead to write access to the underlying directory. Closes: #2657 Approved by: alexlarsson
* revokefs: Add demo to show how to revoke permissionsAlexander Larsson2019-04-092-0/+86
| | | | | | | | | The demo starts two instances by the same users so the revoke doesn't really enforce any separation, but it demos how you would do it. Closes: #2657 Approved by: alexlarsson
* revokefs: Split out the writing part from the fuse implementationAlexander Larsson2019-04-094-122/+1115
| | | | | | | | | By default we just spawn a writer from the fuse implementation, but you can also do it manually with --backend and --socket, allowing you to start the two in different contexts. Closes: #2657 Approved by: alexlarsson
* revokefs: Initial non-revoking versionAlexander Larsson2019-04-092-0/+567
This is just a copy of rofiles-fuse with the write limits removed. Closes: #2657 Approved by: alexlarsson