|
|
660ba94c7c
|
sane-sandboxed: introduce a symlink cache to reduce readlink calls even more
it's all a bit silly. i still do a bunch of -L tests: i just avoid the costly readlink fork :|
|
2024-05-13 01:31:30 +00:00 |
|
|
|
b0394d877d
|
modules/programs: rename allowedRootPaths -> allowedPaths
now that allowedHomePaths doesn't exist
|
2024-02-12 13:00:10 +00:00 |
|
|
|
14d8230821
|
modules/programs: sane-sandboxed: remove --sane-sandbox-home-path argument and plumbing
no longer needed, and mixing this with root paths is liable to cause troubles at this point, around symlink dereferencing/canonicalization/etc
|
2024-02-12 12:57:54 +00:00 |
|
|
|
f61cd17e99
|
modules/programs: sandboxing: specialize profiles per-user by expanding $HOME
|
2024-02-12 12:08:58 +00:00 |
|
|
|
7c05d221d6
|
modules/programs: split "make-sandbox-profile" out of "make-sandboxed"
|
2024-02-12 11:20:40 +00:00 |
|
