d93e53fd4b
Use return value of write
8 years ago
979878d8af
Decrement expected_len
9 years ago
cb0ca3c301
Change name of ld-library-path cmake variable
9 years ago
49fe25c106
Mention setcap in manual install instructions
9 years ago
1d39c22a38
Add link to security features issue in readme
9 years ago
1a509dcc29
Fix to sway-security(7)
9 years ago
cdecf3c495
Drop restart command from sanity check
...
Since we don't actually have one of those
9 years ago
6604bb67ea
Fix minor issues with default security config
9 years ago
35b8d185ac
fix layout switching (was broken because of workspace_layout)
...
For workspace containers, swayc_change_layout also changes ->layout alongside
->workspace_layout when it's a sensible thing to do. There is an additional test
for 'layout toggle' command which ensures that containers will be tiled
horizontally after toggling from tabbed or stacked.
9 years ago
4762bcb3b9
wrap some views under workspaces
...
If workspace layout is set to tabbed or stacked, its C_VIEW children
should get wrapped in a container. Alongside that, move_container was
modified to retain previous functionality.
9 years ago
6fb4b6737a
add workspace_layout to container
...
Add swayc_change_layout function, which changes either layout or
workspace_layout, depending on the container type.
9 years ago
5778c59a2f
Merge pull request #981 from SirCmpwn/security
...
Security features
9 years ago
e7a764fdf4
Disallow everything by default
...
And update config.d/security to configure sane defaults
9 years ago
93d99f3712
Fix use-after-free
9 years ago
d2d6fcd1ff
Fix clang issues
9 years ago
8577095db7
Check for CAP_SYS_PTRACE
9 years ago
d353da248b
Add ipc connection feature policy controls
9 years ago
62dad7148f
Enforce IPC security policy
9 years ago
c8dc4925d1
Add IPC security policy command handlers
9 years ago
e9e1a6a409
Add IPC policy to config
...
Also reduces enum abuse, cc @minus7
9 years ago
0a1b211e09
Drop -Denable-binding-event
9 years ago
25a4a85a59
Run config files through sed and install to /etc
9 years ago
751e6d2ab2
Clarify lock permission consequences
9 years ago
0c8dc0e6df
Clarify that executable has to be a full path
9 years ago
c61746a15b
Soften up environment security
...
So no one gets their feewings hurt
9 years ago
a4e92ad272
Deal with LD_LIBRARY_PATH
9 years ago
1a143e601b
Clarify when keyboard/mouse features work
9 years ago
4d312f753c
Add docs on what features sway programs require
9 years ago
3dbeb9c35c
Add sway-security(7)
9 years ago
10c2125040
Unset LD_PRELOAD on startup (before dropping root)
...
LD_PRELOAD enables keyloggers to easily be made. This solution isn't
perfect - really a secure system wouldn't have LD_PRELOAD at all. It was
a stupid idea in the first place.
9 years ago
04fc10feeb
Flesh out security_sanity_check
9 years ago
39cf9a82f7
Enforce command policies
9 years ago
f23880b1fd
Add support for command policies in config file
9 years ago
0d395681fe
Enforce mouse permissions
9 years ago
8aeeacf178
Enforce keyboard permissions
9 years ago
ffdbb9d050
Enforce fullscreen permissions
9 years ago
dc4b57c868
Shut Clang up
9 years ago
21e1b2bef3
Add security checks for background, panel, lock
9 years ago
76cab04b4d
Implement permit and reject commands
9 years ago
1a8a42f372
Memory leak
9 years ago
2675293200
Implement policy lookups
9 years ago
44cc0ef125
Add config related code and initial headers
9 years ago
5831f7ab68
Write example security config, start on code
9 years ago
cd5694fdb5
Fix memory leaks in swaybar
9 years ago
de79fee777
Minor README.md improvements
9 years ago
5c042c55ce
Merge pull request #966 from thejan2009/layout-toggle
...
Change layout toggle to default on horizontal split
9 years ago
05be14ff7c
change default layout toggle to L_HORIZ
...
After issuing 'layout toggle split' command from tabbed/stacked layout,
layout should have been horizontally split.
9 years ago
e9ac0492b7
Merge pull request #965 from thejan2009/swaybar-colours
...
Fix some colour settings in swaybar
9 years ago
3d1b472b83
swap unnecessary function for strndup
9 years ago
58eb7ac19f
change bar colors from char[10] to *char
...
This commit removes has_* booleans from bar color struct. It also
generalizes of functions in commands/bar/colors.c.
9 years ago
Drew DeVault
D.B