1131 Commits (26c5406e63a4fe160615f423e3b6461c1650ae9c)
 

Author SHA1 Message Date
Tomi Leppänen 26c5406e63 [launcherlib] Set cgroups of sandboxed apps correctly. Fixes JB#52187
Separate cgroups of sandboxed apps. Previously they were all put to the
same group with this change they are in separate groups.

Looking at invoker.c appName and fileName are the same and can be used
interchangeably.

Also change --desktop-file to have a bit more accurate description.

Signed-off-by: Tomi Leppänen <tomi.leppanen@jolla.com>
5 years ago
Tomi Leppänen 7091378e7d Merge branch 'jb52491_fix' into 'master'
[launcherlib] Use actual application name for sailjail'd apps. Fixes JB#52491

See merge request mer-core/mapplauncherd!24
5 years ago
Tomi Leppänen 5ae55df59e [launcherlib] Use actual application name for sailjail'd apps. Fixes JB#52491
Applications launched via sailjail have their appName set to
/usr/bin/sailjail and that is used to set single instance lock. That
results in not being able to launch multiple different applications
simultaneously via mapplauncher. Mitigate this by using actual
application name for single instance lock.

This implements a very simple way of deducing the application binary
path from sailjail's arguments. It works for most cases and the
remaining cases can be worked around.

Signed-off-by: Tomi Leppänen <tomi.leppanen@jolla.com>
5 years ago
Niels Breet 1b1d2c3798 Merge branch 'jb49681' into 'master'
[aarch64] Use macros, not hardcoded paths. Contributes to JB#49681

See merge request mer-core/mapplauncherd!21
6 years ago
Niels Breet e4cc3b8f79 [aarch64] Use macros, not hardcoded paths. Contributes to JB#49681 6 years ago
pvuorela 72f487f73a Merge branch 'master' into 'master'
[Packaging] Remove python2 requires

See merge request mer-core/mapplauncherd!20
6 years ago
Chupligin Sergey ef26653ca6 [Packaging] Remove python2 requires 6 years ago
Andrew Branson 3c78ac5d94 Merge branch 'jb49488' into 'master'
[priv] isPrivileged should return true if the file is listed with no privileges. JB#49488

See merge request mer-core/mapplauncherd!19
6 years ago
Andrew Branson e907e276f2 [priv] isPrivileged should return true if the file is listed with no privileges. JB#49488
Also remove leftover m_privileges member from Booster.
6 years ago
Andrew Branson 02bba3a3c6 Merge branch 'jb49488' into 'master'
[booster] Expose privilege values for use. JB#49488

See merge request mer-core/mapplauncherd!18
6 years ago
Andrew Branson a8dea6a958 [booster] Expose privilege values for use. JB#49488 6 years ago
Raine Makelainen 7e93b143a1 Merge branch 'jb49088' into 'master'
[booster] Always drop extra groups for non-privileged apps. Fixes JB#49088

See merge request mer-core/mapplauncherd!14
6 years ago
Igor Zhbanov 294cd4d37c [booster] Always drop extra groups for non-privileged apps. Fixes JB#49088
Don't trust to UID/GID received from untrusted invoker request when deciding
whether to drop extra groups for non-privileged apps. The application's
rights should depend only on the stated application's privileges and not
on the caller's process rights.

Drop setuid() because the boosters are launched under "nemo" user ID in
user session.

Signed-off-by: Igor Zhbanov <i.zhbanov@omprussia.ru>
6 years ago
Raine Makelainen f84e8e15e0 Bump version to 4.1.31 6 years ago
Raine Makelainen 16c9749dd6 Merge branch 'jb48847' into 'master'
[booster] Drop privileged SGID for non-privileged apps. Fixes JB#48847

See merge request mer-core/mapplauncherd!13
6 years ago
Igor Zhbanov b62ef0d2d4 [booster] Drop privileged SGID for non-privileged apps. Fixes JB#48847
Under Linux, setgid() is implemented like the POSIX version with the
_POSIX_SAVED_IDS feature. That means that after "setgid(nemo)" SGID
will be set to "privileged" instead of "nemo". So using "setresuid()"
instead.

Signed-off-by: Igor Zhbanov <i.zhbanov@omprussia.ru>
6 years ago
Andrew den Exter 6912348d5a Merge branch 'jb44214' into 'master'
[booster] Check for execute permissions before invoking a process. Fixes JB#44214

See merge request mer-core/mapplauncherd!12
7 years ago
Andrew den Exter a841302207 [booster] Check for execute permissions before invoking a process. Fixes JB#44214 7 years ago
Raine Makelainen db11a3a532 Merge branch 'jb42038' into 'master'
[mapplauncherd] Add booster cgroup mount service. Fixes MER#1916

See merge request mer-core/mapplauncherd!9
7 years ago
Aleksey Mikhaylov 2442117654 [mapplauncherd] Fixes MER#1916
Signed-off-by: Aleksey Mikhaylov <a.mikhaylov@omprussia.ru>
7 years ago
Raine Makelainen 6e72366257 Merge branch 'master' into 'master'
[mapplauncherd] Create cgroup for each process if possible. Fixes MER#1896

See merge request mer-core/mapplauncherd!7
8 years ago
Andrew den Exter 41a44c5ab4 Merge branch 'jb41671' into 'master'
[mapplauncherd] Fix race when in writing the daemon PID file and exiting. Contributes to JB#41671

See merge request mer-core/mapplauncherd!8
8 years ago
Andrew den Exter d57148540f [mapplauncherd] Fix race when in writing the daemon PID file and exiting. Contributes to JB#41671
The process forks twice when daemonizing, we need to wait for
the first fork to exit after it has written the PID of the second
fork before exiting the original process otherwise systemd may
try and read the file before it exists.
8 years ago
Aleksey Mikhaylov a480e5fd36 [mapplauncherd] Create cgroup for each process if possible. Fixes MER#1896
Signed-off-by: Aleksey Mikhaylov <a.mikhaylov@omprussia.ru>
8 years ago
Andrew den Exter 78d0dc16f1 Merge branch 'jb40880' into 'master'
[mapplauncherd] Support running boosters as forking systemd services. Contributes to JB#40880

See merge request mer-core/mapplauncherd!6
8 years ago
Andrew den Exter 95f0d02446 [mapplauncherd] Support running boosters as forking systemd services. Contributes to JB#40880
This enables the case where the booster itself is launcher via an
invoker.
8 years ago
pvuorela 6439643867 Merge branch 'master' into 'master'
Fix build with new systemd

See merge request !3
9 years ago
Slava Monich f35103e569 Version 4.1.24 9 years ago
Slava Monich b8170de1d4 Merge branch 'dir' into 'master'
Own the config directories

See merge request !4
9 years ago
Slava Monich b9c591ab8e [mapplauncherd] Own the config directories. Contributes to JB#38236 9 years ago
Sergey Chupligin fcac0eb973 Fix build with new systemd 9 years ago
Chris Adams 406794ce0c [mapplauncherd] Bump version with fix for MER#1607 9 years ago
chriadam 84ba4c7960 Merge branch 'master' into 'master'
Add support for multiple privileges file

Fixes MER#1607

See merge request !2
9 years ago
Lucien XU 3f64a9869e Add support for multiple privileges file
Fixes MER#1607
9 years ago
martinjones df3254d72e Merge branch 'jb34267' into 'master'
[mapplauncherd] Allow a list of booster types to be provided. Contributes to JB#34267

Allows fallback boosters to be specified, e.g.

invoker -s --type=silica-media,silica-qt5 /usr/bin/jolla-camera

See merge request !1
10 years ago
Martin Jones 627bc74e65 [mapplauncherd] Allow a list of booster types to be provided. Contributes to JB#34267
Allows fallback boosters to be specified, e.g.

invoker -s --type=silica-media,silica-qt5 /usr/bin/jolla-camera
10 years ago
Robin Burchell 45ed31bffd Merge pull request #34 from rburchell/master
Clean up some remnants of the single-process-applauncherd model.
10 years ago
Robin Burchell 0ee65f7fa9 [README] Update to match reality a little closer. 10 years ago
Robin Burchell cf20fde0a6 [launcherlib] Remove some dead code.
This is unused since the switch from single daemon to
library-plus-multiple-processes.

Closes #33.
10 years ago
Thomas Perl 01ef004c8c Merge pull request #32 from nemomobile/jb30107
[invoker] Reduce the default respawn delay. Contributes to JB#30107
10 years ago
Martin Jones 02c79d3da7 [invoker] Reduce the default respawn delay. Contributes to JB#30107
This was perhaps a reasonable default 5 years ago, but today 1s is plenty.
11 years ago
Thomas Perl d543d53b3f [rebuild] mapplauncherd C++ fixes (Fixes JB#27875) 11 years ago
Thomas Perl 4aa1314204 Merge pull request #31 from thp/fstream
[launcherlib] Use fstream for file I/O
11 years ago
Thomas Perl 2af3c8ea95 [launcherlib] Use fstream for file I/O 11 years ago
Thomas Perl b2fa57c0c4 Merge pull request #27 from nemomobile/systemd
Allow booster start earlier during the startup.
11 years ago
Marko Saukko 39c2f31aa6 Allow booster start earlier during the startup.
[systemd] Allow booster to start earlier in the bootup.
[packaging] Drop .yaml support.

Signed-off-by: Marko Saukko <marko.saukko@jolla.com>
11 years ago
Thomas Perl 9412d3fe3d Merge pull request #30 from nemomobile/cleanup
[spec] Remove old spectacle cruft
11 years ago
Thomas Perl 738bf5c0f9 [spec] Remove old spectacle cruft 11 years ago
Giulio Camuffo aaf1f0eec4 Merge pull request #28 from giucam/notifylaunch
[invoker] Use a DBus method to notify lipstick an app is started
11 years ago
Thomas Perl 6b3426a86e Merge pull request #29 from thp/invoker-read-crash
[launcherlib] Handle booster exception gracefully
11 years ago