124 Commits (531c175d3e60bf9dbfd538af1fd5eebb906c6f91)

Author	SHA1	Message	Date
Dominique Martinet	f5b33cb4b6	fix typos in comments/messages; add shutting down message	7 years ago
Calvin Lee	7196f59db0	Consolidate WLR and Sway logging ... See #1390	7 years ago
Tony Crisci	9fa70ce426	Merge branch 'wlroots' into feature/input	7 years ago
Tony Crisci	9eecbb5d8a	xkb config	7 years ago
Tony Crisci	9333a7eb53	working xcursor	7 years ago
emersion	aaae59026f	Add output config	7 years ago
emersion	90f7f1a0e6	Add minimal config subsystem	7 years ago
Tony Crisci	7152075681	log env after ipc init	7 years ago
Tony Crisci	9696f50eba	remove nvidia support claim	7 years ago
Drew DeVault	7753a0ec75	Wire up IPC server	7 years ago
Drew DeVault	db4fb1c85c	Add outputs to the tree	7 years ago
Drew DeVault	733993a651	Move everything to sway/old/	7 years ago
Drew DeVault	7eafcc75f6	Initialize outputs from backend and add to tree	7 years ago
Drew DeVault	7c448b4081	Fire up the wlroots backend and run the event loop	7 years ago
Dan Robertson	88d042ec49	nvidia: Validate the nvidia_drm module options ... When the proprietary nvidia driver is used, ensure the modeset option is set instead of checking /proc/cmdline for nvidia-drm.modeset=1.	7 years ago
azarus	5987f19eb2	Check for Raspberry Pi	7 years ago
johalun	7fef283044	FreeBSD fixes ... Increase _POSIX_SOURCE value where needed. Increase _XOPEN_SOURCE value where needed. Conditionally link to libcap (only on Linux). Possibly some trailing whitespace fixes (automatic).	8 years ago
Mykyta Holubakha	93cf21fb9a	Terminate when both suid bit and filecaps are set	8 years ago
Mykyta Holubakha	f736198c31	Initialise logging earlier	8 years ago
Sebastian Noack	173b338567	Add -DVERSION flag for release version numbers	8 years ago
Drew DeVault	b3541d9dc5	Implement more thourough nvidia config check	8 years ago
Drew DeVault	b036ad9b54	Downgrade nvidia proprietary driver warning	8 years ago
JerziKaminsky	aa6bd85da1	Add libcap check to CMake ... - Moved ``<sys/capability.h>`` include inside `__linux__` guard, because all uses are similarly guarded. - <sys/capability.h> is part of an optional devel package, at least in fedora. CMake now explicitly checks that libcap devel files are available. - Added libcap to the list of install packages in .travis.yml, to make the dependency explicit. travis-ci installs the package by default, which is why this hasn't surfaced previously.	8 years ago
Drew DeVault	9aed9d9359	UnGNUify the codebase	8 years ago
Drew DeVault	407ebe9cd3	Move env logging to earlier than wlc_init	8 years ago
Drew DeVault	126ce571da	Read configs from /etc/sway/security.d/*	8 years ago
Mykyta Holubakha	138bcd0cfa	Unset LD_LIBRARY_PATH, unless specified	8 years ago
Mykyta Holubakha	d9ba61d7e9	Log capability dropping	8 years ago
Mykyta Holubakha	ea1313d80d	Keep CAP_SYS_PTRACE with suid binary	8 years ago
Drew DeVault	1172566d4e	Change how security config is loaded	8 years ago
Drew DeVault	4c6c65e70c	Handle malloc failures from read_line	8 years ago
Greg V	da26d69cb1	Fix build on FreeBSD ... - Make sure CMake always finds absolute paths for Cairo, Pango and GdkPixbuf - Add forgotten json-c include path to swaymsg/CMakeLists.txt - Disable -Werror because of assert warnings - Add correct /proc/pid/file path for FreeBSD - Use libepoll-shim on FreeBSD - Only use Linux capabilities on, well, Linux	8 years ago
Drew DeVault	979878d8af	Decrement expected_len	8 years ago
Drew DeVault	cdecf3c495	Drop restart command from sanity check ... Since we don't actually have one of those	8 years ago
Drew DeVault	8577095db7	Check for CAP_SYS_PTRACE	8 years ago
Drew DeVault	a4e92ad272	Deal with LD_LIBRARY_PATH	8 years ago
Drew DeVault	10c2125040	Unset LD_PRELOAD on startup (before dropping root) ... LD_PRELOAD enables keyloggers to easily be made. This solution isn't perfect - really a secure system wouldn't have LD_PRELOAD at all. It was a stupid idea in the first place.	8 years ago
Drew DeVault	04fc10feeb	Flesh out security_sanity_check	8 years ago
Drew DeVault	dc4b57c868	Shut Clang up	8 years ago
Drew DeVault	5831f7ab68	Write example security config, start on code	8 years ago
Drew DeVault	d3e55f88ec	Log LD_LIBRARY_PATH	8 years ago
Drew DeVault	78b65e2317	Remove duplicate redhat-release line	8 years ago
Drew DeVault	7aef6e66ae	Log uname -a on startup	8 years ago
Drew DeVault	6ad2186f0e	Log contents of distro version files	8 years ago
Drew DeVault	0d6cbcacbe	Log important env vars on startup	8 years ago
Patrick Sauter	153620aefe	moved ipc_init above config file processing. ... This is necessary because commands in the config file (mode for instance) emit ipc events, and if ipc_init has not been called the ipc_clients_list is not initialized, and we segfault. This fixes that bug.	8 years ago
D.B	5e585f9603	Split setgid and setuid, add privilege check ... This commit deals with issue #884. I consulted the following sources: https://www.securecoding.cert.org/confluence/display/c/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges and https://www.securecoding.cert.org/confluence/display/c/POS37-C.+Ensure+that+privilege+relinquishment+is+successful	8 years ago
Drew DeVault	416417a54c	Reorganize includes	8 years ago
Daniel Lockyer	c9d634414a	sway/main.c: simplify free'ing by switching to the helper method	9 years ago
Drew DeVault	54c635ca16	Update to wlc 0.0.2	9 years ago