Tony Crisci
874f009866
move tree includes to their own directory
7 years ago
Dominique Martinet
f5b33cb4b6
fix typos in comments/messages; add shutting down message
7 years ago
Calvin Lee
7196f59db0
Consolidate WLR and Sway logging
...
See #1390
7 years ago
Tony Crisci
9fa70ce426
Merge branch 'wlroots' into feature/input
7 years ago
Tony Crisci
9eecbb5d8a
xkb config
7 years ago
Tony Crisci
9333a7eb53
working xcursor
7 years ago
emersion
aaae59026f
Add output config
7 years ago
emersion
90f7f1a0e6
Add minimal config subsystem
7 years ago
Tony Crisci
7152075681
log env after ipc init
7 years ago
Tony Crisci
9696f50eba
remove nvidia support claim
7 years ago
Drew DeVault
7753a0ec75
Wire up IPC server
7 years ago
Drew DeVault
db4fb1c85c
Add outputs to the tree
7 years ago
Drew DeVault
733993a651
Move everything to sway/old/
7 years ago
Drew DeVault
7eafcc75f6
Initialize outputs from backend and add to tree
7 years ago
Drew DeVault
7c448b4081
Fire up the wlroots backend and run the event loop
7 years ago
Dan Robertson
88d042ec49
nvidia: Validate the nvidia_drm module options
...
When the proprietary nvidia driver is used, ensure the modeset option is
set instead of checking /proc/cmdline for nvidia-drm.modeset=1.
7 years ago
azarus
5987f19eb2
Check for Raspberry Pi
7 years ago
johalun
7fef283044
FreeBSD fixes
...
Increase _POSIX_SOURCE value where needed.
Increase _XOPEN_SOURCE value where needed.
Conditionally link to libcap (only on Linux).
Possibly some trailing whitespace fixes (automatic).
8 years ago
Mykyta Holubakha
93cf21fb9a
Terminate when both suid bit and filecaps are set
8 years ago
Mykyta Holubakha
f736198c31
Initialise logging earlier
8 years ago
Sebastian Noack
173b338567
Add -DVERSION flag for release version numbers
8 years ago
Drew DeVault
b3541d9dc5
Implement more thourough nvidia config check
8 years ago
Drew DeVault
b036ad9b54
Downgrade nvidia proprietary driver warning
8 years ago
JerziKaminsky
aa6bd85da1
Add libcap check to CMake
...
- Moved ``<sys/capability.h>`` include inside `__linux__` guard,
because all uses are similarly guarded.
- <sys/capability.h> is part of an optional devel package, at least
in fedora. CMake now explicitly checks that libcap devel files
are available.
- Added libcap to the list of install packages in .travis.yml, to
make the dependency explicit. travis-ci installs the package by
default, which is why this hasn't surfaced previously.
8 years ago
Drew DeVault
9aed9d9359
UnGNUify the codebase
8 years ago
Drew DeVault
407ebe9cd3
Move env logging to earlier than wlc_init
8 years ago
Drew DeVault
126ce571da
Read configs from /etc/sway/security.d/*
8 years ago
Mykyta Holubakha
138bcd0cfa
Unset LD_LIBRARY_PATH, unless specified
8 years ago
Mykyta Holubakha
d9ba61d7e9
Log capability dropping
8 years ago
Mykyta Holubakha
ea1313d80d
Keep CAP_SYS_PTRACE with suid binary
8 years ago
Drew DeVault
1172566d4e
Change how security config is loaded
8 years ago
Drew DeVault
4c6c65e70c
Handle malloc failures from read_line
8 years ago
Greg V
da26d69cb1
Fix build on FreeBSD
...
- Make sure CMake always finds absolute paths for Cairo, Pango and GdkPixbuf
- Add forgotten json-c include path to swaymsg/CMakeLists.txt
- Disable -Werror because of assert warnings
- Add correct /proc/pid/file path for FreeBSD
- Use libepoll-shim on FreeBSD
- Only use Linux capabilities on, well, Linux
8 years ago
Drew DeVault
979878d8af
Decrement expected_len
8 years ago
Drew DeVault
cdecf3c495
Drop restart command from sanity check
...
Since we don't actually have one of those
8 years ago
Drew DeVault
8577095db7
Check for CAP_SYS_PTRACE
8 years ago
Drew DeVault
a4e92ad272
Deal with LD_LIBRARY_PATH
8 years ago
Drew DeVault
10c2125040
Unset LD_PRELOAD on startup (before dropping root)
...
LD_PRELOAD enables keyloggers to easily be made. This solution isn't
perfect - really a secure system wouldn't have LD_PRELOAD at all. It was
a stupid idea in the first place.
8 years ago
Drew DeVault
04fc10feeb
Flesh out security_sanity_check
8 years ago
Drew DeVault
dc4b57c868
Shut Clang up
8 years ago
Drew DeVault
5831f7ab68
Write example security config, start on code
8 years ago
Drew DeVault
d3e55f88ec
Log LD_LIBRARY_PATH
8 years ago
Drew DeVault
78b65e2317
Remove duplicate redhat-release line
8 years ago
Drew DeVault
7aef6e66ae
Log uname -a on startup
8 years ago
Drew DeVault
6ad2186f0e
Log contents of distro version files
8 years ago
Drew DeVault
0d6cbcacbe
Log important env vars on startup
8 years ago
Patrick Sauter
153620aefe
moved ipc_init above config file processing.
...
This is necessary because commands in the config file (mode for
instance) emit ipc events, and if ipc_init has not been called the
ipc_clients_list is not initialized, and we segfault. This fixes that
bug.
8 years ago
D.B
5e585f9603
Split setgid and setuid, add privilege check
...
This commit deals with issue #884 . I consulted the following sources:
https://www.securecoding.cert.org/confluence/display/c/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges
and
https://www.securecoding.cert.org/confluence/display/c/POS37-C.+Ensure+that+privilege+relinquishment+is+successful
8 years ago
Drew DeVault
416417a54c
Reorganize includes
8 years ago
Daniel Lockyer
c9d634414a
sway/main.c: simplify free'ing by switching to the helper method
9 years ago