- Mar 15, 2023
-
-
segfault authored
The script is now a bash script, so $EUID is always set by the shell.
-
segfault authored
Makes debugging easier
-
segfault authored
Dumping all environment variables caused failure in the test suite where we use the environment dumped by amnesia in a root process. That caused the PATH variable to not include /sbin anymore. The environment variables we dump here are the same that were dumped in the old implementation in gnome.sh.
-
segfault authored
-
segfault authored
I had a case where "poweroff" did not cause the system to shut down but "systemctl poweroff" worked.
-
segfault authored
There are cases where we execute commands as a user when the user env file is not expected to be there, for example when we create files in persistent directories as the owner of the directory, which in case of the persistent greeter settings happens as the Debian-gdm but after login, so systemd already cleaned up the user env file for Debian-gdm.
-
segfault authored
-
segfault authored
-
segfault authored
The script doesn't need privileges, so we should run it unprivileged.
-
segfault authored
-
segfault authored
-
segfault authored
The environment we're dumping doesn't actually have anything to do with GNOME or GNOME Shell, it's the default environment of a user unit started by systemd plus some display related variables set by us in dump-user-env. The name user-env therefore better reflects its content. Also use the name exec-with-user-env instead of exec-in-user-env to make it more clear that we're not replacing the current environment.
-
segfault authored
-
segfault authored
The current user environment already contains all the needed variables, so we pass that instead of /run/user/1000/user-env.
-
segfault authored
-
segfault authored
The remaining usages are safe because they are used in unprivileged processes.
-
segfault authored
-
segfault authored
-
segfault authored
-
segfault authored
-
segfault authored
This removes all usages of the gnome.sh shell library in shell scripts to ensure that the gnome environment file is not exported in privileged processes. A new script, exec-in-gnome-env, is called instead, which exports the gnome environment in an unprivileged amnesia process and then executes some command.
-
segfault authored
There are scenarios in which amnesia can control the gnome-shell environment which is dumped at boot, so we have to ensure that only processes running as amnesia (or a less privileged user) export it in their environment. Since we have to do that, we can just store the env file as amnesia and drop the part where we copy the file as root.
-
segfault authored
-
segfault authored
That can lead to privilege escalation. Instead, we use /usr/local/lib/systemctl-user to start a systemd user service which has the required environment variables set.
-
segfault authored
The gnome_env function of the Python module is called in privileged processes, exporting the amnesia-controlled environment in those can lead to privilege escalation. refs #19464
-
segfault authored
-
segfault authored
-
boyska authored
Test suite: Fix step "the clearnet user has not sent packets out to the Internet" Closes #19370 See merge request tails/tails!1074
-
boyska authored
run_test_suite: Add --all-tests See merge request tails/tails!1076
-
boyska authored
Upgrade Tor Browser to 12.0.4-build1 Closes #19450 See merge request tails/tails!1078
-
boyska authored
refs #19450
-
- Mar 14, 2023
- Mar 13, 2023
-
-
Zen Fu authored
As discussed during a Sysadmin/FT sunc, this is a low-hanging-fruit attempt to deal with errors when cloning the source repository. refs sysadmin#11869
-
intrigeri authored
-
intrigeri authored
Remove custom window-center extension Closes #19489 See merge request tails/tails!1072
-