Colin
6365a58c3e
sanebox: avert a subshell in `removeSubpaths`
2024-05-18 08:10:34 +00:00
Colin
68275eeb85
rmDbusServices: preserve package `meta`
2024-05-18 06:31:44 +00:00
Colin
7bb7a24b22
sanebox: tidy up the quoting in a few more edge-cases
2024-05-18 00:00:03 +00:00
Colin
795786f46b
sanebox: prefer `case` statments over if/elif/elif... constructs
2024-05-17 23:32:51 +00:00
Colin
26aa68ee59
sanebox: replace short-circuit eval idiom with if/else
2024-05-17 23:21:36 +00:00
Colin
85c0e72bf1
sanebox: remove unnecessary quotes in case statement
2024-05-17 23:15:00 +00:00
Colin
bf98da0061
sanebox: remove extraneous quotes
...
probably some still remain
2024-05-17 23:01:24 +00:00
Colin
76434b6970
sanebox: make it more obvious what we substitute at build-time
2024-05-17 22:27:55 +00:00
Colin
0698d4be24
landlock-sandboxer: define meta.mainProgram
2024-05-17 22:26:55 +00:00
Colin
0003d79324
sane-tag-music: add a `print-missing` subcommand
2024-05-17 09:41:50 +00:00
Colin
e9bfc6cebd
sane-tag-music: fix help message formatting
2024-05-17 09:20:33 +00:00
Colin
aeed9ffd5b
sane-sync-music: prune directories left empty by sync
2024-05-17 08:59:36 +00:00
Colin
4de3c6d664
sanebox: fix tab typo when parsing the link cache
2024-05-16 00:15:57 +00:00
Colin
b5502ea401
sanebox: remove --sanebox-cache-symlink flag
2024-05-15 23:59:38 +00:00
Colin
b4229ecb1e
sanebox: load the link cache from a static /etc path instead of via CLI args
2024-05-15 23:55:15 +00:00
Colin
348837ff4a
programs: sandboxing: replace profiles with raw CLI args
2024-05-15 09:13:20 +00:00
Colin
17eaa7446a
sanebox: remove all profile-related features except for direct, path-based profile loading
2024-05-15 09:13:20 +00:00
Colin
d97f0f7300
sanebox: implement --sanebox-home-path and --sanebox-run-path flags
2024-05-15 08:05:00 +00:00
Colin
ee43fcdb89
rename LG TV -> Cuddlevision
2024-05-15 07:50:38 +00:00
Colin
adfaa7f9c1
sane-sandboxed -> sanebox
2024-05-15 01:41:40 +00:00
Colin
f9a6873ee9
signal-desktop: remove NIXOS_OZONE_WL=1 hack (no longer required)
2024-05-15 00:10:00 +00:00
Colin
b534af5203
signal-desktop: use nixpkgs' nodejs instead of the signal pin
...
it still seems stable
2024-05-14 23:12:41 +00:00
Colin
b06b75441c
signal-desktop: 7.0.0 -> 7.8.0
2024-05-14 23:05:00 +00:00
Colin
ffe9dcedf7
koreader: 2024.03 -> 2024.04
2024-05-14 22:12:23 +00:00
Colin
fc649de64c
fractal: remove dead code
2024-05-14 20:56:50 +00:00
Colin
1210696e3a
fractal: re-enable jpeg decoding
2024-05-14 20:56:37 +00:00
Colin
47ced34c84
fractal: 6-unstable-2024-01-31 -> 7
2024-05-14 20:15:27 +00:00
Colin
38c038f4f7
sane-sandboxed: fix typo in linkCache queries, which would otherwise break for paths containing spaces
2024-05-14 01:22:08 +00:00
Colin
9346a066d1
sane-sandboxed: fix typo in `derefOnce`
2024-05-13 06:49:43 +00:00
Colin
567531727e
sane-sandboxed: fix typos in `normPath`
2024-05-13 06:32:13 +00:00
Colin
6c65e4b313
sane-sandboxed: be a little more careful with out vars
2024-05-13 04:00:15 +00:00
Colin
e6b13adb61
sane-open: associate `rofi-applications.desktop` with keyboard
2024-05-13 03:19:03 +00:00
Colin
bd3e06982b
sane-sandboxed: tweak symlink caching to allow /run/current-system to be bind-mounted instead of symlinked
2024-05-13 02:11:47 +00:00
Colin
660ba94c7c
sane-sandboxed: introduce a symlink cache to reduce `readlink` calls even more
...
it's all a bit silly. i still do a bunch of -L tests: i just avoid the costly readlink fork :|
2024-05-13 01:31:30 +00:00
Colin
11ddce043d
sane-sandboxed: reduce forking (use out vars)
2024-05-12 22:35:05 +00:00
Colin
980fe6b33c
sane-sandboxed: use `local` where applicable
2024-05-12 22:15:34 +00:00
Colin
016df3ff74
sane-open: launch some .desktop files even when they point outside ~/.local/share/applications
...
an unfortunate reality is that symlinks tend to get dereferenced too
early by other programs.
2024-05-12 22:13:28 +00:00
Colin
d827235d31
sane-sandboxed: be more strict internally about keeping `paths` var as absolute-paths
2024-05-12 21:44:33 +00:00
Colin
f7a25d1421
sane-sandboxed: bwrap: expose symlinks to the sandbox directly, instead of binding
...
some things (e.g. `sane-open`) require the symlink, and lose too much
info when working only with the bind. having the sandboxed environment
stay similar to the out env sould make debugging things simpler
2024-05-12 21:42:31 +00:00
Colin
d148b19767
sane-sandboxed: expand symlinks before binding them into the sandbox
2024-05-12 21:41:49 +00:00
Colin
15a5afd2c4
sane-open: special-case how i open .desktop files to be compatible with portals
2024-05-12 19:46:03 +00:00
Colin
e63e359417
sane-open: fix so we can launch read-only files
2024-05-12 17:50:11 +00:00
Colin
eadf85f66d
sane-open: associate as the default launcher for .desktop files
2024-05-12 17:41:00 +00:00
Colin
536eb2154a
sane-open: add auto-keyboard action for a few more apps
2024-05-12 17:23:08 +00:00
Colin
e62365436c
sane-cast: implement `--device` option to choose a specific device non-interactively
2024-05-11 00:40:38 +00:00
Colin
def5816003
sane-vpn: fix "regions" printing to print all regions
2024-05-10 09:07:59 +00:00
Colin
6f2ae56126
sane-cast: add an --always-ask option
2024-05-10 07:01:16 +00:00
Colin
c0a7b831cd
sane-open: more robust auto-application/file detection
2024-05-05 05:19:07 +00:00
Colin
cf3cfc5249
sane-open: add debug logging
2024-05-05 05:03:22 +00:00
Colin
b7dd40e558
sane-open-desktop -> sane-open and have it auto-open/close the keyboard based on what an app wants
2024-04-30 19:22:37 +00:00
Colin