Commit Graph

6975 Commits

Author SHA1 Message Date
065aba0996 zfs: fix sandboxed build 2024-07-07 02:39:49 +00:00
c7425e792b todo.md: done sandboxing all programs except for the fuse stuff 2024-07-07 02:33:24 +00:00
74b7e90a34 check-uninsane: check zfs pool for errors 2024-07-07 02:32:44 +00:00
9f642980fd zfs: sandbox 2024-07-07 02:31:33 +00:00
c638218c07 servo: matrix-synapse: dont ship unused admin package 2024-07-07 02:23:18 +00:00
1ad933ad9c bitcoind: sandbox 2024-07-07 02:21:14 +00:00
3dc007448c wally-cli: sandbox 2024-07-07 02:10:53 +00:00
3487303216 clightning: sandbox 2024-07-07 01:18:55 +00:00
b74e797b13 clightning-sane: sandbox 2024-07-07 01:15:04 +00:00
bb3f148c32 scripts/check-uninsane: add a liveness test for my Bitcoing Lightning node 2024-07-07 01:00:50 +00:00
e235e09cf1 servo: ship clightning-sane 2024-07-07 00:58:29 +00:00
64610a5806 clightning-sane: define as sane.programs 2024-07-07 00:57:51 +00:00
15ca5fbfa4 clightning-sane: make it an actual package 2024-07-07 00:56:58 +00:00
997b841777 servo: clightning: fix deprecated config 2024-07-07 00:53:29 +00:00
9ced7bd3b5 sane-secrets-unlock: fix sandboxing (create directory before entering the sandbox) 2024-07-07 00:53:08 +00:00
2710f2b2ca docs: gnome-maps: mention some quirks 2024-07-07 00:50:29 +00:00
572a340c8a todo.md: make a list of the programs i've procrastinated on sandboxing 2024-07-06 19:31:19 +00:00
b844a9ef5d servo: disable unused CLI tools for freshrss/signald 2024-07-06 19:29:55 +00:00
d41d067405 servo: clightning: decrease logging from debug -> info 2024-07-06 19:22:06 +00:00
f8349a646b servo: lemmy: decrease logging from default -> warn 2024-07-06 19:21:53 +00:00
706667f403 servo: matrix-appservice-irc: decrease logging debug -> warn 2024-07-06 19:20:18 +00:00
99e0d5f03b servo: matrix-synapse: simplify logging config 2024-07-06 19:19:51 +00:00
3d82bc8c87 gitea: migrate away from deprecated email options 2024-07-06 18:56:34 +00:00
a3212f6955 gitea: bump registration timeout 4 -> 7 days 2024-07-06 18:56:09 +00:00
0d3e89a431 gitea: fix broken UI theme 2024-07-06 18:55:47 +00:00
b7c86d5867 mmcli: sandbox 2024-07-06 18:49:18 +00:00
5db8372b24 nixpkgs-wayland: 0-unstable-2024-07-03 -> 0-unstable-2024-07-05 2024-07-06 18:29:01 +00:00
da09ab3617 sops-nix: assets-unstable-2024-07-01 -> assets-unstable-2024-07-05 2024-07-06 18:28:44 +00:00
133744fa4b nixpkgs: 24.05-unstable-2024-07-03 -> 24.05-unstable-2024-07-06 2024-07-06 18:28:27 +00:00
bfd272b2c9 uassets: 0-unstable-2024-07-03 -> 0-unstable-2024-07-06 2024-07-06 18:28:10 +00:00
3edc8d87f4 firefox-extensions.ublock-origin: 1.58.1b11 -> 1.58.1b12 2024-07-06 18:27:16 +00:00
6824080f6b avahi: fix broken sandboxing 2024-07-06 03:08:36 +00:00
0786475c63 doc: mmcli: show how to sandbox... almost 2024-07-06 03:08:23 +00:00
ae082b1654 nwg-panel: fix the sandbox to allow Shutdown action 2024-07-06 03:07:58 +00:00
a77816e9de refactor: sane-scripts: use whitelistDbus where available 2024-07-06 03:07:21 +00:00
f50b10682f eg25-control: sandbox 2024-07-06 03:06:58 +00:00
b062610866 gps-share: sandbox 2024-07-06 03:06:33 +00:00
bce8a0d91f geoclue: dont place unsandboxed files on PATH 2024-07-06 03:05:49 +00:00
3c53bca156 vpn: log a message whenever the endpoint is updated
only as i'm actively working in this area. hopefully this log message can be less noisy in the future
2024-07-06 03:03:38 +00:00
46806e36f0 stop shipping some unused programs 2024-07-06 03:02:17 +00:00
4a8a5b309e satellite: sandbox 2024-07-05 23:27:51 +00:00
8f46bd5497 hping: sandbox 2024-07-05 23:13:40 +00:00
2c3239da8b mesa-demos (glxgears): sandbox 2024-07-05 23:12:46 +00:00
a08394edf1 callaudiod: sandbox 2024-07-05 23:12:16 +00:00
5e5ecfe81e nwg-panel: add a button to toggle the flashlight on moby 2024-07-05 23:11:55 +00:00
5048bd8d70 sanebox: fix that pasta-sandboxed programs would fail compile-time sandboxing test 2024-07-05 20:41:28 +00:00
c7d8d9ee86 nwg-panel: add the backlight back into the sandbox 2024-07-05 20:32:34 +00:00
2e49946c65 gnome-calls: tunnel traffic through my home ISP 2024-07-05 20:18:47 +00:00
a12aa02655 sane.programs: provide sandbox.net = "vpn.wg-home" to tunnel through my home ISP 2024-07-05 20:18:34 +00:00
6d66a5dbf8 vpn: add a service to auto-refresh wireguard endpoints 2024-07-05 20:06:16 +00:00