Repository navigation

feat: sandboxing - #7758

Draft

aecsocket wants to merge 94 commits into

mainfrom

boris/sandbox

Draft

feat: sandboxing#7758
aecsocket wants to merge 94 commits into
mainfrom
boris/sandbox

Commits on Sep 22, 2026
- wip: sandboxing
  aecsocket
  committed
  f094fef
Commits on Sep 23, 2026
- wip: sandbox instances in the launcher
  aecsocket
  committed
  6894851
- fix up classpath in sandbox
  aecsocket
  committed
  34c39d5
- use OsString, remove unneeded sandbox params, more docs
  aecsocket
  committed
  d202849
- add instance data persistent dir
  aecsocket
  committed
  44c60f6
Commits on Sep 24, 2026
- Bubblewrap progress
  Moulberry
  committed
  77ca752
- move IO operations into spawn(), error handling
  aecsocket
  committed
  3ce9f6f
- start on flatpak-spawn impl
  aecsocket
  committed
  5b5ae88
- wip: flatpak-spawn portal impl
  aecsocket
  committed
  2c0bc2b
Commits on Sep 25, 2026
- Add seccomp filtering
  Moulberry
  committed
  26a43d3
- Fix race condition by waiting for xdg-dbus-proxy to start
  Moulberry
  committed
  46ffe11
- Properly set up bwrapinfo.json file on the host, with randomly generated instance-id
  Moulberry
  committed
  a31ac59
- Automatically clean up runtime files when BubblewrapSandboxChild is dropped
  Moulberry
  committed
  088e70b
- Reintroduce stdio (unix only)
  Moulberry
  committed
  f3a78ed
- revert SDL_VIDEO_DRIVER=wayland testing
  Moulberry
  committed
  ff8d91a
- wip: more flatpak work, reorg top-level sandbox items
  aecsocket
  committed
  ddd43a3
- rework sandboxchild, work on flatpak impl
  aecsocket
  committed
  8cc6555
- flatpak impl works
  aecsocket
  committed
  d8b311a
- reorganize and more docs
  aecsocket
  committed
  f015436
- wip: ffi
  aecsocket
  committed
  57887d3
- wip: macos sandbox
  aecsocket
  committed
  e8dad10
Commits on Sep 26, 2026
- Broken windows sandboxing
  Moulberry
  committed
  81904d1
- AppContainers working (just need to do self elevate)
  Moulberry
  committed
  e960033
Commits on Sep 28, 2026
- linux sandbox compiles again
  aecsocket
  committed
  c76e5c8
- expose sticky bit on tmp dir, pulse socket
  aecsocket
  committed
  3761171
- macos sandbox launches
  aecsocket
  committed
  871b57f
- fix linux compile
  aecsocket
  committed
  b301ad5
- fix macOS temp dir and hsperfdata handling
  aecsocket
  committed
  3814dd4
Commits on Sep 29, 2026
- wip: FFI progress
  aecsocket
  committed
  2e562fe
Commits on Sep 30, 2026
- Windows elevated callback
  Moulberry
  committed
  7352cc0
- Merge remote-tracking branch 'origin/boris/sandbox' into boris/sandbox
  Moulberry
  committed
  6728b6d
- Fix compilation on macos
  Moulberry
  committed
  0266aee
- Fix windows compilation issues
  Moulberry
  committed
  5661134
- Add firewall to windows feature flags
  Moulberry
  committed
  ca6259a
- More Windows compilation fixes
  Moulberry
  committed
  924662d
- Fix compile error with collecting args
  Moulberry
  committed
  6cde811
- Implemented kill for windows process
  Moulberry
  committed
  4a78f27
- More Windows compile fixes
  Moulberry
  committed
  ffc7526
- Fix windows compile errors in app-lib
  Moulberry
  committed
  696f3d8
Commits on Oct 1, 2026
- Windows: Use proc thread attributes for handle list and job list
  Moulberry
  committed
  272af86
- Add missing imports for Windows changes
  Moulberry
  committed
  cd0572c
Commits on Oct 2, 2026
- fix up compile and elevation
  aecsocket
  committed
  1e4d9ff
- fix rustdoc
  aecsocket
  committed
  f1ea7a7
- fix up app-lib
  aecsocket
  committed
  222f8d6
- fix: macos sandbox settings arg
  IMB11
  committed
  1467831
Commits on Oct 6, 2026
- improve FFI bindings
  aecsocket
  committed
  6e69614
- set up cbindgen and C run example
  aecsocket
  committed
  fc428e8
- create `NoSandbox` for interop
  aecsocket
  committed
  1d65cc2
Commits on Oct 8, 2026
- rename child stdin/out/err fields in C FFI
  aecsocket
  committed
  0a3e0c4
- update string FFI
  aecsocket
  committed
  9f4bc66
Commits on Oct 9, 2026
- make get_last_error char*
  aecsocket
  committed
  9faaa9b
Commits on Oct 12, 2026
- expose helper commands to C FFI
  aecsocket
  committed
  d81ba59
Commits on Oct 14, 2026
- make windows backend async
  aecsocket
  committed
  3582fb7
- unix cancel-safe waiting
  aecsocket
  committed
  5d23c3d
- delete useless test
  aecsocket
  committed
  5bb2921
- fix up windows elevation handling
  aecsocket
  committed
  db021bf
- set proper env vars for persistent data in app containers
  aecsocket
  committed
  81e4878
Commits on Oct 15, 2026
- Add sandbox agent
  Moulberry
  committed
  de1b25c
- Hook up SandboxHandle into sandbox service, pending impls for other platforms
  Moulberry
  committed
  4279366
Commits on Oct 16, 2026
- fmt
  aecsocket
  committed
  d13ef95
- split out sandbox/spawn logic in app-lib
  aecsocket
  committed
  538673f
- minecraft command java agent setup
  aecsocket
  committed
  0c092b1
- Implement requestAccess
  Moulberry
  committed
  10eece5
- Merge remote-tracking branch 'origin/boris/sandbox' into boris/sandbox
  Moulberry
  committed
  3a84d73
- cargo fmt
  Moulberry
  committed
  96d9974
- use std::fs again for sandbox agent jar write
  aecsocket
  committed
  9668104
- windows ACL write
  aecsocket
  committed
  f936c3d
- safer ACL additions/removals
  aecsocket
  committed
  e156962
- sandbox work
  aecsocket
  committed
  ae1f740
- adjust file watcher to fix reporting ACL edit as crash
  aecsocket
  committed
  994b6db
- fix up rebase
  aecsocket
  committed
  ac1771d
- safer ledger locking and txns
  aecsocket
  committed
  a882dbd
- human explanation for ACL stuff
  aecsocket
  committed
  c84e7a9
- clarify add/remove ordering
  aecsocket
  committed
  569ccb5
- remove from ACL idempotency
  aecsocket
  committed
  4174504
Commits on Oct 19, 2026
- get linux compile working with no-op flatpak/bwrap sandbox child impls
  aecsocket
  committed
  382d58e
- rw-mount assets/skins and fix bwrap mounting
  aecsocket
  committed
  923f007
- move when we create mounted dirs
  aecsocket
  committed
  35a0f0a
- fix writing temp files on linux backends
  aecsocket
  committed
  fd3c0ee
- allow rw to synced options
  aecsocket
  committed
  be9847b
Commits on Oct 22, 2026
- allow DnD on windows using expose path
  aecsocket
  committed
  a2c7481
- Implement file sharing for bubblewrap
  Moulberry
  committed
  0832589
- Merge
  Moulberry
  committed
  e17929e
- Add more transforms for older versions of the game
  Moulberry
  committed
  7c5d41f
- Add transformation so auth works on 1.15 and below
  Moulberry
  committed
  e8564bf
Commits on Oct 23, 2026
- Proxy all other requests to session/services endpoints
  Moulberry
  committed
  9c60379
- Implement launcher api overrides for SDL file dialogs
  Moulberry
  committed
  81a06c7
Commits on Oct 24, 2026
- Disable desktop transforms on macos since they are unnecessary
  Moulberry
  committed
  6427ff9
- Add transforms for NFD (NativeFileDialogs)
  Moulberry
  committed
  0f9ca90
- Don't try request access if we already have access to file
  Moulberry
  committed
  07873fe
Commits on Oct 27, 2026
- Fix compile errors on non-macos platforms and return an error instead
  Moulberry
  committed
  ccc4903
Commits on Oct 30, 2026
- Merge branch 'main' into boris/sandbox
  aecsocket
  committed
  e66e1a9
Commits on Oct 31, 2026
- fix: broken deps
  IMB11
  committed
  be890f3
- fix: dep changes
  IMB11
  committed
  dd04639

Commits

Commits on Sep 22, 2026

Commits on Sep 23, 2026

Commits on Sep 24, 2026

Commits on Sep 25, 2026

Commits on Sep 26, 2026

Commits on Sep 28, 2026

Commits on Sep 29, 2026

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 6, 2026

Commits on Oct 8, 2026

Commits on Oct 9, 2026

Commits on Oct 12, 2026

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 19, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 27, 2026

Commits on Oct 30, 2026

Commits on Oct 31, 2026