8577095db7
Check for CAP_SYS_PTRACE
8 years ago
d353da248b
Add ipc connection feature policy controls
8 years ago
62dad7148f
Enforce IPC security policy
8 years ago
c8dc4925d1
Add IPC security policy command handlers
8 years ago
e9e1a6a409
Add IPC policy to config
...
Also reduces enum abuse, cc @minus7
8 years ago
0a1b211e09
Drop -Denable-binding-event
8 years ago
25a4a85a59
Run config files through sed and install to /etc
8 years ago
751e6d2ab2
Clarify lock permission consequences
8 years ago
0c8dc0e6df
Clarify that executable has to be a full path
8 years ago
c61746a15b
Soften up environment security
...
So no one gets their feewings hurt
8 years ago
a4e92ad272
Deal with LD_LIBRARY_PATH
8 years ago
1a143e601b
Clarify when keyboard/mouse features work
8 years ago
4d312f753c
Add docs on what features sway programs require
8 years ago
3dbeb9c35c
Add sway-security(7)
8 years ago
10c2125040
Unset LD_PRELOAD on startup (before dropping root)
...
LD_PRELOAD enables keyloggers to easily be made. This solution isn't
perfect - really a secure system wouldn't have LD_PRELOAD at all. It was
a stupid idea in the first place.
8 years ago
04fc10feeb
Flesh out security_sanity_check
8 years ago
39cf9a82f7
Enforce command policies
8 years ago
f23880b1fd
Add support for command policies in config file
8 years ago
0d395681fe
Enforce mouse permissions
8 years ago
8aeeacf178
Enforce keyboard permissions
8 years ago
ffdbb9d050
Enforce fullscreen permissions
8 years ago
dc4b57c868
Shut Clang up
8 years ago
21e1b2bef3
Add security checks for background, panel, lock
8 years ago
76cab04b4d
Implement permit and reject commands
8 years ago
1a8a42f372
Memory leak
8 years ago
2675293200
Implement policy lookups
8 years ago
44cc0ef125
Add config related code and initial headers
8 years ago
5831f7ab68
Write example security config, start on code
8 years ago
05be14ff7c
change default layout toggle to L_HORIZ
...
After issuing 'layout toggle split' command from tabbed/stacked layout,
layout should have been horizontally split.
8 years ago
3d1b472b83
swap unnecessary function for strndup
8 years ago
58eb7ac19f
change bar colors from char[10] to *char
...
This commit removes has_* booleans from bar color struct. It also
generalizes of functions in commands/bar/colors.c.
8 years ago
ad4d21d60b
add bar colours for focused_(workspace|statusline|separator)
...
If these aren't defined in config, color settings without 'focused_'
prefix are used as a fallback.
8 years ago
39ee0ec552
use urgent_ws color in swaybar if binding_mode is undefined
8 years ago
d3e55f88ec
Log LD_LIBRARY_PATH
8 years ago
78b65e2317
Remove duplicate redhat-release line
8 years ago
7aef6e66ae
Log uname -a on startup
8 years ago
6ad2186f0e
Log contents of distro version files
8 years ago
0d6cbcacbe
Log important env vars on startup
8 years ago
e8d8abfbb5
Add left_handed support for input devices
...
Some users may want to switch buttons on their input devices, turns out
libinput already supports it. Let's add a support for it in our config.
Signed-off-by: Michał Winiarski <knr@hardline.pl>
8 years ago
2a24772c4b
config: set pango_markup default to false
8 years ago
67a9a94596
Overwrite alpha when drawing borders
...
This does two important things when using alpha:
1. At corners, borders don't double in opacity
2. Foreground elements (text) can be made transparent and you can see
fully through to the wallpaper
8 years ago
56a7e5fbce
Revert "Merge pull request #952 from SirCmpwn/revert-948-floating-titlebar-click"
...
This reverts commit 857eea8b63ce713efcd2
8 years ago
4cba91803e
Revert "Fixes dealing with workspace_layout and related bugs [rfc]"
8 years ago
f30f60dad8
Revert "also check floating cons in container_find"
8 years ago
ce713efcd2
Merge pull request #945 from thejan2009/workspace_layout
...
Fixes dealing with workspace_layout and related bugs [rfc]
8 years ago
166c2a3687
generalize wrapping views under workspaces
8 years ago
571321a1d8
add workspace_layout, ensure ws is always L_HORIZ
...
Add swayc_change_layout function, which changes either layout or
workspace_layout, depending on the container type. Workspace being
always L_HORIZ makes this much more i3-compatible.
8 years ago
0ddc4279d1
wrap workspace's child into a container if needed
...
If workspace has stacked/tabbed layout, its direct children should be
wrapped into a container which enables them to draw the titlebar.
8 years ago
24c3b86065
also check floating cons in container_find
8 years ago
5384d3effe
Can't move an empty workspace
8 years ago
Drew DeVault
D.B
Michał Winiarski
Mykyta Holubakha
Nicolas Cornu