LadybirdBrowser/ladybird
1
1
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2024-11-15 16:48:24 +03:00
Code Issues Packages Projects Releases Wiki Activity
312946059b
ladybird/Base/etc/SystemServer.ini

201 lines
3.2 KiB
INI
Raw Normal View History

Services: Rename ProtocolServer to RequestServer The current ProtocolServer was really only used for requests, and with the recent introduction of the WebSocket service, long-lasting connections with another server are not part of it. To better reflect this, this commit renames it to RequestServer. This commit also changes the existing 'protocol' portal to 'request', the existing 'protocol' user and group to 'request', and most mentions of the 'download' aspect of the request to 'request' when relevant, to make everything consistent across the system. Note that LibProtocol still exists as-is, but the more generic Client class and the more specific Download class have both been renamed to a more accurate RequestClient and Request to match the new names. This commit only change names, not behaviors.
2021-04-23 23:45:52 +03:00
[RequestServer]
Socket=/tmp/portal/request
Base: Make anon's helper services run with 600 socket permissions Some of these were using 660 permissions which meant that other users in the "users" group could connect to anon's service processes. Let's tighten things up by not allowing that. :^)
2021-06-06 19:03:57 +03:00
SocketPermissions=600
SystemServer: Implement lazy spawning For services explicitly configured as lazy, SystemServer will now listen on the socket and only spawn the service once a client attempts to connect to the socket.
2019-11-26 19:41:16 +03:00
Lazy=1
ProtocolServer: Run with low priority Dr. Bugaev says this is the most appropriate priority. :^)
2020-07-06 16:40:39 +03:00
Priority=low
Base: Remove unnecessary UID separation of multi-process Browser After looking closely at this, I realized that we've been running all the service processes under separate user accounts even though there's actually no need to. Since we already use pledge() and unveil() to limit the scope and access of these programs, separating them to another UID doesn't achieve anything meaningful. So let's bring them back to the "anon" user account and simplify things. Programs affected: - ImageDecoder - RequestServer - WebContent - WebSocket Longer term, I'd like for all of these to get spawned for the current desktop user somehow, possibly by some kind of session manager, or perhaps by the Browser program itself. But for now they remain under SystemServer's control.
2021-05-06 13:54:01 +03:00
User=anon
Base/CI: Boot serenity in CI in a mode that runs tests on target Build a new version of Serenity in CI that doesn't have all the debug symbols on, or we'd be waiting a very long time to boot. Insert a TestRunner entry into SystemServer.ini that will run a shell script that runs tests in /bin and /usr/Tests and shuts down the system in the new self-test boot mode. Also make sure enough basic services are started in self-test such that the tests will actually run properly.
2021-02-04 05:04:22 +03:00
BootModes=text,graphical,self-test
ProtocolServer: Turn this into a multi-instance service Everyone who connects to ProtocolServer now gets his own instance. This means that different users can no longer talk to the same exact ProtocolServer process, enhanching security and stability.
2020-07-06 14:27:25 +03:00
MultiInstance=1
AcceptSocketConnections=1
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
FileSystemAccessServer: Add service for accessing veiled files nicely Adds new service FileSystemAccessServer which allows programs to request a file descriptor for any file on the file system. The user can be prompted to choose the path with a FilePicker, or the path can be provided by the application which will show a MessageBox showing the pid and name of the calling process and allows the user to approve or deny the request.
2021-07-05 10:38:25 +03:00
[FileSystemAccessServer]
Socket=/tmp/portal/filesystemaccess
SocketPermissions=660
Lazy=1
Priority=low
User=anon
BootModes=text,graphical,self-test
MultiInstance=1
AcceptSocketConnections=1
WebContent: Start work on browser process separation :^) The "WebContent" service provides a very restricted instance of LibWeb running as an unprivileged user account. This will be used to implement process separation in Browser, among other things. This first cut of the service only spawns a single WebContent process when someone connects to /tmp/portal/webcontent. We will soon switch this over to spawning a new process for each connection. Since this feature is very immature, we'll be bringing it up inside of Demos/WebView as a separate demo program. Eventually this will become a reusable widget that anyone can embed and easily get out-of-process web content in their GUI. This is pretty, pretty cool! :^)
2020-06-17 18:31:42 +03:00
[WebContent]
Socket=/tmp/portal/webcontent
Base: Make anon's helper services run with 600 socket permissions Some of these were using 660 permissions which meant that other users in the "users" group could connect to anon's service processes. Let's tighten things up by not allowing that. :^)
2021-06-06 19:03:57 +03:00
SocketPermissions=600
WebContent: Start work on browser process separation :^) The "WebContent" service provides a very restricted instance of LibWeb running as an unprivileged user account. This will be used to implement process separation in Browser, among other things. This first cut of the service only spawns a single WebContent process when someone connects to /tmp/portal/webcontent. We will soon switch this over to spawning a new process for each connection. Since this feature is very immature, we'll be bringing it up inside of Demos/WebView as a separate demo program. Eventually this will become a reusable widget that anyone can embed and easily get out-of-process web content in their GUI. This is pretty, pretty cool! :^)
2020-06-17 18:31:42 +03:00
Lazy=1
Base: Remove unnecessary UID separation of multi-process Browser After looking closely at this, I realized that we've been running all the service processes under separate user accounts even though there's actually no need to. Since we already use pledge() and unveil() to limit the scope and access of these programs, separating them to another UID doesn't achieve anything meaningful. So let's bring them back to the "anon" user account and simplify things. Programs affected: - ImageDecoder - RequestServer - WebContent - WebSocket Longer term, I'd like for all of these to get spawned for the current desktop user somehow, possibly by some kind of session manager, or perhaps by the Browser program itself. But for now they remain under SystemServer's control.
2021-05-06 13:54:01 +03:00
User=anon
WebContent: Start work on browser process separation :^) The "WebContent" service provides a very restricted instance of LibWeb running as an unprivileged user account. This will be used to implement process separation in Browser, among other things. This first cut of the service only spawns a single WebContent process when someone connects to /tmp/portal/webcontent. We will soon switch this over to spawning a new process for each connection. Since this feature is very immature, we'll be bringing it up inside of Demos/WebView as a separate demo program. Eventually this will become a reusable widget that anyone can embed and easily get out-of-process web content in their GUI. This is pretty, pretty cool! :^)
2020-06-17 18:31:42 +03:00
BootModes=graphical
WebContent: Turn it into a MultiInstance service :^) Port the WebContent service to the new MultiInstance mechanism that Sergey added. This means that every new WebContentView gets its very own segregated WebContent process.
2020-06-21 22:22:10 +03:00
MultiInstance=1
AcceptSocketConnections=1
WebContent: Start work on browser process separation :^) The "WebContent" service provides a very restricted instance of LibWeb running as an unprivileged user account. This will be used to implement process separation in Browser, among other things. This first cut of the service only spawns a single WebContent process when someone connects to /tmp/portal/webcontent. We will soon switch this over to spawning a new process for each connection. Since this feature is very immature, we'll be bringing it up inside of Demos/WebView as a separate demo program. Eventually this will become a reusable widget that anyone can embed and easily get out-of-process web content in their GUI. This is pretty, pretty cool! :^)
2020-06-17 18:31:42 +03:00
ImageDecoder: Add a new service for out-of-process image decoding :^) The new ImageDecoder service (available for members of "image" via /tmp/portal/image) allows you to decode images in a separate process. This will allow programs to confidently load untrusted images, since the bulk of the security concerns are sandboxed to a separate process. The only API right now is a synchronous IPC DecodeImage() call that takes a shbuf with encoded image data and returns a shared buffer and metadata for the decoded image. It also comes with a very simple library for interfacing with the ImageDecoder service: LibImageDecoderClient. The name is a bit of a mouthful but I guess we can rename it later if we think of something nicer to call it. There's obviously a bit of overhead to spawning a separate process for every image decode, so this is mostly only appropriate for untrusted images (e.g stuff downloaded from the web) and not necessary for trusted local images (e.g stuff in /res)
2020-06-22 22:35:22 +03:00
[ImageDecoder]
Socket=/tmp/portal/image
Base: Make anon's helper services run with 600 socket permissions Some of these were using 660 permissions which meant that other users in the "users" group could connect to anon's service processes. Let's tighten things up by not allowing that. :^)
2021-06-06 19:03:57 +03:00
SocketPermissions=600
ImageDecoder: Add a new service for out-of-process image decoding :^) The new ImageDecoder service (available for members of "image" via /tmp/portal/image) allows you to decode images in a separate process. This will allow programs to confidently load untrusted images, since the bulk of the security concerns are sandboxed to a separate process. The only API right now is a synchronous IPC DecodeImage() call that takes a shbuf with encoded image data and returns a shared buffer and metadata for the decoded image. It also comes with a very simple library for interfacing with the ImageDecoder service: LibImageDecoderClient. The name is a bit of a mouthful but I guess we can rename it later if we think of something nicer to call it. There's obviously a bit of overhead to spawning a separate process for every image decode, so this is mostly only appropriate for untrusted images (e.g stuff downloaded from the web) and not necessary for trusted local images (e.g stuff in /res)
2020-06-22 22:35:22 +03:00
Lazy=1
Base: Remove unnecessary UID separation of multi-process Browser After looking closely at this, I realized that we've been running all the service processes under separate user accounts even though there's actually no need to. Since we already use pledge() and unveil() to limit the scope and access of these programs, separating them to another UID doesn't achieve anything meaningful. So let's bring them back to the "anon" user account and simplify things. Programs affected: - ImageDecoder - RequestServer - WebContent - WebSocket Longer term, I'd like for all of these to get spawned for the current desktop user somehow, possibly by some kind of session manager, or perhaps by the Browser program itself. But for now they remain under SystemServer's control.
2021-05-06 13:54:01 +03:00
User=anon
ImageDecoder: Add a new service for out-of-process image decoding :^) The new ImageDecoder service (available for members of "image" via /tmp/portal/image) allows you to decode images in a separate process. This will allow programs to confidently load untrusted images, since the bulk of the security concerns are sandboxed to a separate process. The only API right now is a synchronous IPC DecodeImage() call that takes a shbuf with encoded image data and returns a shared buffer and metadata for the decoded image. It also comes with a very simple library for interfacing with the ImageDecoder service: LibImageDecoderClient. The name is a bit of a mouthful but I guess we can rename it later if we think of something nicer to call it. There's obviously a bit of overhead to spawning a separate process for every image decode, so this is mostly only appropriate for untrusted images (e.g stuff downloaded from the web) and not necessary for trusted local images (e.g stuff in /res)
2020-06-22 22:35:22 +03:00
BootModes=graphical
MultiInstance=1
AcceptSocketConnections=1
Services: Add a WebSocket service The WebSocket service isolates communication with a WebSocket to its own isolated process. Similar to other isolating services, it has its own user and group.
2021-04-24 02:46:49 +03:00
[WebSocket]
Socket=/tmp/portal/websocket
Base: Make anon's helper services run with 600 socket permissions Some of these were using 660 permissions which meant that other users in the "users" group could connect to anon's service processes. Let's tighten things up by not allowing that. :^)
2021-06-06 19:03:57 +03:00
SocketPermissions=600
Services: Add a WebSocket service The WebSocket service isolates communication with a WebSocket to its own isolated process. Similar to other isolating services, it has its own user and group.
2021-04-24 02:46:49 +03:00
Lazy=1
Priority=low
Base: Remove unnecessary UID separation of multi-process Browser After looking closely at this, I realized that we've been running all the service processes under separate user accounts even though there's actually no need to. Since we already use pledge() and unveil() to limit the scope and access of these programs, separating them to another UID doesn't achieve anything meaningful. So let's bring them back to the "anon" user account and simplify things. Programs affected: - ImageDecoder - RequestServer - WebContent - WebSocket Longer term, I'd like for all of these to get spawned for the current desktop user somehow, possibly by some kind of session manager, or perhaps by the Browser program itself. But for now they remain under SystemServer's control.
2021-05-06 13:54:01 +03:00
User=anon
Services: Add a WebSocket service The WebSocket service isolates communication with a WebSocket to its own isolated process. Similar to other isolating services, it has its own user and group.
2021-04-24 02:46:49 +03:00
BootModes=text,graphical,self-test
MultiInstance=1
AcceptSocketConnections=1
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
[LookupServer]
LookupServer: Port to socket takeover
2019-11-26 19:39:47 +03:00
Socket=/tmp/portal/lookup
Base: Add a "lookup" user+group that runs LookupServer LookupServer now runs as lookup:lookup, allowing connections from other members of the "lookup" group. This is enforced through file system permissions by having the service socket (/tmp/portal/lookup) be mode 0660. Now the LookupServer program can't overwrite other people's files if it starts misbehaving. That's pretty cool :^)
2020-01-09 23:36:17 +03:00
SocketPermissions=660
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
Priority=low
SystemServer: Implement keepalive When reaping a child, SystemServer will now match up child's pid with its own record of the services, and respawn the service if keepalive is enabled for it. For example, we want to restart the WindowServer if it crashes, but we wouldn't want to restart the Terminal if it gets closed.
2019-11-26 19:19:59 +03:00
KeepAlive=1
Base: Add a "lookup" user+group that runs LookupServer LookupServer now runs as lookup:lookup, allowing connections from other members of the "lookup" group. This is enforced through file system permissions by having the service socket (/tmp/portal/lookup) be mode 0660. Now the LookupServer program can't overwrite other people's files if it starts misbehaving. That's pretty cool :^)
2020-01-09 23:36:17 +03:00
User=lookup
Base/CI: Boot serenity in CI in a mode that runs tests on target Build a new version of Serenity in CI that doesn't have all the debug symbols on, or we'd be waiting a very long time to boot. Insert a TestRunner entry into SystemServer.ini that will run a shell script that runs tests in /bin and /usr/Tests and shuts down the system in the new self-test boot mode. Also make sure enough basic services are started in self-test such that the tests will actually run properly.
2021-02-04 05:04:22 +03:00
BootModes=text,graphical,self-test
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
Servers: Add a new DHCP client This adds a DHCPClient...Server that leases IPv4s.
2020-04-04 14:19:30 +03:00
[DHCPClient]
DHCPClient: Log errors and cleanup the code Prior to this, we ran the DHCP client as a high-priority service, but making the system feel laggy "for some network stuff" is not the greatest of ideas :^)
2020-04-06 09:20:46 +03:00
Priority=low
Servers: Add a new DHCP client This adds a DHCPClient...Server that leases IPv4s.
2020-04-04 14:19:30 +03:00
KeepAlive=1
User=root
Base/CI: Boot serenity in CI in a mode that runs tests on target Build a new version of Serenity in CI that doesn't have all the debug symbols on, or we'd be waiting a very long time to boot. Insert a TestRunner entry into SystemServer.ini that will run a shell script that runs tests in /bin and /usr/Tests and shuts down the system in the new self-test boot mode. Also make sure enough basic services are started in self-test such that the tests will actually run properly.
2021-02-04 05:04:22 +03:00
BootModes=text,graphical,self-test
Servers: Add a new DHCP client This adds a DHCPClient...Server that leases IPv4s.
2020-04-04 14:19:30 +03:00
NotificationServer: Add a system service for desktop notifications This patch adds NotificationServer, which runs as the "notify" user and provides an IPC API for desktop notifications. LibGUI gains the GUI::Notification class for showing notifications. NotificationServer is spawned on demand and will unspawn after dimissing all visible notifications. :^) Finally, this also comes with a small /bin/notify utility.
2020-02-16 21:28:08 +03:00
[NotificationServer]
Socket=/tmp/portal/notify
NotificationServer: Remove unnecessary UID separation This process is already sandboxed to the point where the UID doesn't matter, so let's just stop having the separate "notify" user.
2021-06-06 17:11:06 +03:00
SocketPermissions=600
NotificationServer: Add a system service for desktop notifications This patch adds NotificationServer, which runs as the "notify" user and provides an IPC API for desktop notifications. LibGUI gains the GUI::Notification class for showing notifications. NotificationServer is spawned on demand and will unspawn after dimissing all visible notifications. :^) Finally, this also comes with a small /bin/notify utility.
2020-02-16 21:28:08 +03:00
Lazy=1
Priority=low
KeepAlive=1
NotificationServer: Remove unnecessary UID separation This process is already sandboxed to the point where the UID doesn't matter, so let's just stop having the separate "notify" user.
2021-06-06 17:11:06 +03:00
User=anon
NotificationServer: Add a system service for desktop notifications This patch adds NotificationServer, which runs as the "notify" user and provides an IPC API for desktop notifications. LibGUI gains the GUI::Notification class for showing notifications. NotificationServer is spawned on demand and will unspawn after dimissing all visible notifications. :^) Finally, this also comes with a small /bin/notify utility.
2020-02-16 21:28:08 +03:00
LaunchServer: Add the LaunchServer to centralise file associations. Step one of moving DesktopServices::open handling out of process. This makes it easier to do things like read in associations for which program opens which files or protocols. This gives users the ability to modify the associations without having to rebuild :^)
2020-04-26 22:27:57 +03:00
[LaunchServer]
Socket=/tmp/portal/launch
LaunchServer: Run with portal permissions 600 The LaunchServer is personal to "anon" and we don't want other users accessing it to launch anything.
2020-05-09 16:16:16 +03:00
SocketPermissions=600
LaunchServer: Add the LaunchServer to centralise file associations. Step one of moving DesktopServices::open handling out of process. This makes it easier to do things like read in associations for which program opens which files or protocols. This gives users the ability to modify the associations without having to rebuild :^)
2020-04-26 22:27:57 +03:00
Lazy=1
User=anon
Base: Replace TTYServer with text mode Shell Now that we have SystemServer that can (re)spawn the Shell, we don't need a separate server just for that. The two shells (on tty0 and tty1) are configured to only be started when booting in text mode. This means you can now simply say boot_mode=text on the kernel command line, and SystemServer will set up the system and spawn a comfy root shell for you :^)
2020-05-27 00:42:46 +03:00
BootModes=text,graphical
LaunchServer: Add the LaunchServer to centralise file associations. Step one of moving DesktopServices::open handling out of process. This makes it easier to do things like read in associations for which program opens which files or protocols. This gives users the ability to modify the associations without having to rebuild :^)
2020-04-26 22:27:57 +03:00
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
[WindowServer]
LibGUI+WindowServer: Separate window manager IPC from regular IPC With this patch the window manager related functionality is split out onto a new endpoint pair named WindowManagerServer/Client. This allows window manager functionality to be potentially privilege separated in the future. To this end, a new client named WMConnectionClient is used to maintain a window manager connection. When a process connects to the endpoint and greets the WindowServer as a window manager (via Window::make_window_manager(int)), they're subscribed to the events they requested via the WM event mask. This patch also removes the hardcoding of the Taskbar WindowType to receive WM events automatically. However, being a window manager still requires having an active window, at the moment.
2021-04-15 00:38:53 +03:00
Socket=/tmp/portal/window,/tmp/portal/wm
Base: Run WindowServer as a separate "window" user This was actually rather painless and straightforward. WindowServer now runs as the "window" user. Users in the "window" group can connect to it via the socket in /tmp/portal/window as usual.
2020-02-16 21:26:31 +03:00
SocketPermissions=660
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
Priority=high
SystemServer: Implement keepalive When reaping a child, SystemServer will now match up child's pid with its own record of the services, and respawn the service if keepalive is enabled for it. For example, we want to restart the WindowServer if it crashes, but we wouldn't want to restart the Terminal if it gets closed.
2019-11-26 19:19:59 +03:00
KeepAlive=1
Base: Run WindowServer as a separate "window" user This was actually rather painless and straightforward. WindowServer now runs as the "window" user. Users in the "window" group can connect to it via the socket in /tmp/portal/window as usual.
2020-02-16 21:26:31 +03:00
User=window
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
Services: Add InspectorServer to reverse the direction of Inspector This service daemon will act as an intermediary between the Inspector program and the inspectable programs it wants to inspect. Programs can make themselves available for inspection by connecting to /tmp/portal/inspectables using the Core::EventLoop RPC protocol.
2021-05-13 23:34:57 +03:00
[InspectorServer]
Socket=/tmp/portal/inspector,/tmp/portal/inspectables
SocketPermissions=600,666
KeepAlive=1
User=anon
Clipboard: Move the system clipboard to a dedicated service process :^) This commit moves the clipboard from WindowServer into a new Clipboard service program. Clipboard runs as the unprivileged "clipboard" user and with a much tighter pledge than WindowServer. To keep things working as before, all GUI::Application users now make a connection to Clipboard after making the connection to WindowServer. It could be interesting to connect to Clipboard on demand, but right now that would necessitate expanding every GUI app's pledge to include "unix" and also unveiling the clipboard portal, which I prefer not to.
2020-05-14 23:51:15 +03:00
[Clipboard]
Socket=/tmp/portal/clipboard
Base: Make anon's helper services run with 600 socket permissions Some of these were using 660 permissions which meant that other users in the "users" group could connect to anon's service processes. Let's tighten things up by not allowing that. :^)
2021-06-06 19:03:57 +03:00
SocketPermissions=600
Base: Tweak SystemServer.ini Notably, adjust service priorities.
2020-05-20 16:03:02 +03:00
Priority=low
Clipboard: Remove unnecessary UID separation This process is already sandboxed to the point where the UID doesn't matter, so let's just stop having the separate "clipboard" user.
2021-06-06 18:50:45 +03:00
User=anon
Clipboard: Move the system clipboard to a dedicated service process :^) This commit moves the clipboard from WindowServer into a new Clipboard service program. Clipboard runs as the unprivileged "clipboard" user and with a much tighter pledge than WindowServer. To keep things working as before, all GUI::Application users now make a connection to Clipboard after making the connection to WindowServer. It could be interesting to connect to Clipboard on demand, but right now that would necessitate expanding every GUI app's pledge to include "unix" and also unveiling the clipboard portal, which I prefer not to.
2020-05-14 23:51:15 +03:00
Applets: Add DesktopPicker applet This applet displays a grid of desktops, and shows the user what virtual desktop they are on. When clicked, the desktop will be changed.
2021-07-18 21:45:59 +03:00
[DesktopPicker.Applet]
Priority=low
KeepAlive=1
User=anon
ResourceGraph.Applet: Host both CPU and memory applet in one process No reason we can't host these in the same process, and then we have one less process to dynamically link at boot. :^)
2021-04-04 19:14:48 +03:00
[ResourceGraph.Applet]
Arguments=--cpu=CPUGraph,#00bb00 --memory=MemoryGraph,#00bbbb
Base: Tweak SystemServer.ini Notably, adjust service priorities.
2020-05-20 16:03:02 +03:00
Priority=low
CPUGraph: Launch the CPUGraph menu applet on startup
2019-12-05 21:44:22 +03:00
KeepAlive=1
User=anon
Userland: Rename *.MenuApplet => *.Applet These are no longer displayed in the menu, so it doesn't make sense to call them menu applets. :^)
2021-04-04 13:25:01 +03:00
[Audio.Applet]
Base: Tweak SystemServer.ini Notably, adjust service priorities.
2020-05-20 16:03:02 +03:00
Priority=low
WindowServer+MenuApplets: Move the "Audio" applet to its own program This patch introduces the second MenuApplet: Audio. To make this work, menu applet windows now also receive mouse events. There's still some problem with mute/unmute via clicking not actually working, but the call goes from the applet program over IPC to the AudioServer, where something goes wrong with the state change message. Need to look at that separately. Anyways, it's pretty cool to have more applets running in their own separate processes. :^)
2019-12-16 17:33:42 +03:00
KeepAlive=1
User=anon
Userland: Rename *.MenuApplet => *.Applet These are no longer displayed in the menu, so it doesn't make sense to call them menu applets. :^)
2021-04-04 13:25:01 +03:00
[Network.Applet]
SystemServer.ini: Default to not showing network change notifications Until someone has time to implement something for not showing the very first network change at boot, let's turn off notifications for network changes by default altogether. Having to dismiss this notification at every boot gets old fast.
2021-01-20 18:31:17 +03:00
Arguments=--name=Network
MenuApplets: Add Network menu applet
2020-12-19 19:07:02 +03:00
Priority=low
KeepAlive=1
User=anon
Userland: Rename *.MenuApplet => *.Applet These are no longer displayed in the menu, so it doesn't make sense to call them menu applets. :^)
2021-04-04 13:25:01 +03:00
[ClipboardHistory.Applet]
ClipboardHistory: Add a clipboard history applet :^) It will listen for clipboard content changes in the backgroud. Once you click on its icon, it will pop up a window listing all recorded clipboard contents. You can then double-click on an item to copy it again.
2020-05-15 22:37:31 +03:00
Priority=low
KeepAlive=1
User=anon
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
[AudioServer]
Base: Minor cleanups in SystemServer.ini Fix up an outdated comment and remove some unnecessary Executable values (since those are implied by the group name anyway.)
2021-04-04 19:21:58 +03:00
# TODO: It would be nice to make this lazy, but Audio.Applet connects to it immediately on startup anyway.
AudioServer: Port to socket takeover
2019-11-26 19:33:48 +03:00
Socket=/tmp/portal/audio
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
Priority=high
SystemServer: Implement keepalive When reaping a child, SystemServer will now match up child's pid with its own record of the services, and respawn the service if keepalive is enabled for it. For example, we want to restart the WindowServer if it crashes, but we wouldn't want to restart the Terminal if it gets closed.
2019-11-26 19:19:59 +03:00
KeepAlive=1
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
User=anon
AudioServer: Make AudioServer boot in text mode This way, we can have Audio on the console :^)
2021-06-25 01:00:48 +03:00
BootModes=text,graphical
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
[Taskbar]
SystemServer: Implement keepalive When reaping a child, SystemServer will now match up child's pid with its own record of the services, and respawn the service if keepalive is enabled for it. For example, we want to restart the WindowServer if it crashes, but we wouldn't want to restart the Terminal if it gets closed.
2019-11-26 19:19:59 +03:00
KeepAlive=1
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
User=anon
Base: Start a desktop FileManager by default! :^)
2020-04-18 23:09:40 +03:00
[Desktop]
Executable=/bin/FileManager
Arguments=--desktop
KeepAlive=1
User=anon
SystemServer: Read service list from a config file This replaces the hardcoded services list with a very simple config file in /etc/SystemServer.ini :^) Closes https://github.com/SerenityOS/serenity/issues/610
2019-11-26 19:05:09 +03:00
[Terminal]
User=anon
SystemServer: Add WorkingDirectory support Services can now have their initial working directory configured via `SystemServer.ini`. This commit also configures Terminal's working directory to be /home/anon
2020-03-16 23:21:02 +03:00
WorkingDirectory=/home/anon
Base: Replace TTYServer with text mode Shell Now that we have SystemServer that can (re)spawn the Shell, we don't need a separate server just for that. The two shells (on tty0 and tty1) are configured to only be started when booting in text mode. This means you can now simply say boot_mode=text on the kernel command line, and SystemServer will set up the system and spawn a comfy root shell for you :^)
2020-05-27 00:42:46 +03:00
[Shell@tty0]
Executable=/bin/Shell
StdIO=/dev/tty0
Environment=TERM=xterm
KeepAlive=1
BootModes=text
[Shell@tty1]
Executable=/bin/Shell
StdIO=/dev/tty1
Environment=TERM=xterm
KeepAlive=1
BootModes=text
HackStudio: Add C++ Language Server The language server keeps track of the content of currently edited files by receiving updates about edit actions. Also, C++ autocompletion is no longer tied to HackStudio itself and moved to be part of the language server.
2020-09-28 16:37:37 +03:00
[CppLanguageServer]
Socket=/tmp/portal/language/cpp
Base: Make anon's helper services run with 600 socket permissions Some of these were using 660 permissions which meant that other users in the "users" group could connect to anon's service processes. Let's tighten things up by not allowing that. :^)
2021-06-06 19:03:57 +03:00
SocketPermissions=600
HackStudio: Add C++ Language Server The language server keeps track of the content of currently edited files by receiving updates about edit actions. Also, C++ autocompletion is no longer tied to HackStudio itself and moved to be part of the language server.
2020-09-28 16:37:37 +03:00
Lazy=1
User=anon
MultiInstance=1
AcceptSocketConnections=1
HackStudio: Add a Shell language server
2020-10-03 16:55:51 +03:00
[ShellLanguageServer]
Socket=/tmp/portal/language/shell
Base: Make anon's helper services run with 600 socket permissions Some of these were using 660 permissions which meant that other users in the "users" group could connect to anon's service processes. Let's tighten things up by not allowing that. :^)
2021-06-06 19:03:57 +03:00
SocketPermissions=600
HackStudio: Add a Shell language server
2020-10-03 16:55:51 +03:00
Lazy=1
User=anon
MultiInstance=1
AcceptSocketConnections=1
CrashDaemon: Add service that acts on new coredumps Currently we only print a backtrace. In the future, we could do something nice in the GUI.
2020-11-11 23:07:31 +03:00
SystemServer: Add entry for SQLServer in SystemServer.ini
2021-06-29 23:17:27 +03:00
[SQLServer]
Socket=/tmp/portal/sql
SocketPermissions=600
Priority=low
Lazy=1
User=anon
CrashDaemon: Add service that acts on new coredumps Currently we only print a backtrace. In the future, we could do something nice in the GUI.
2020-11-11 23:07:31 +03:00
[CrashDaemon]
KeepAlive=1
User=anon
Base/CI: Boot serenity in CI in a mode that runs tests on target Build a new version of Serenity in CI that doesn't have all the debug symbols on, or we'd be waiting a very long time to boot. Insert a TestRunner entry into SystemServer.ini that will run a shell script that runs tests in /bin and /usr/Tests and shuts down the system in the new self-test boot mode. Also make sure enough basic services are started in self-test such that the tests will actually run properly.
2021-02-04 05:04:22 +03:00
Userland: Preserve keyboard mapping preference on reboot (#6955)
2021-05-09 16:56:03 +03:00
[KeyboardPreferenceLoader]
KeepAlive=0
User=anon
Base/CI: Boot serenity in CI in a mode that runs tests on target Build a new version of Serenity in CI that doesn't have all the debug symbols on, or we'd be waiting a very long time to boot. Insert a TestRunner entry into SystemServer.ini that will run a shell script that runs tests in /bin and /usr/Tests and shuts down the system in the new self-test boot mode. Also make sure enough basic services are started in self-test such that the tests will actually run properly.
2021-02-04 05:04:22 +03:00
[TestRunner@ttyS0]
Executable=/home/anon/tests/run-tests-and-shutdown.sh
StdIO=/dev/ttyS0
Base: Set UBSAN to deadly for TestRunner service This will run all the tests that are children of this service with deadly UBSAN, ensuring we don't get any UBSAN regressions in on-target tests anymore. :^)
2021-06-28 08:41:06 +03:00
Environment=DO_SHUTDOWN_AFTER_TESTS=1 TERM=xterm PATH=/bin:/usr/bin:/usr/local/bin TESTS_ONLY=1 UBSAN_OPTIONS=halt_on_error=1
Base/CI: Boot serenity in CI in a mode that runs tests on target Build a new version of Serenity in CI that doesn't have all the debug symbols on, or we'd be waiting a very long time to boot. Insert a TestRunner entry into SystemServer.ini that will run a shell script that runs tests in /bin and /usr/Tests and shuts down the system in the new self-test boot mode. Also make sure enough basic services are started in self-test such that the tests will actually run properly.
2021-02-04 05:04:22 +03:00
User=anon
WorkingDirectory=/home/anon
BootModes=self-test
SpiceAgent: Add a new spice agent service :^) A SPICE agent communicates with the host OS to provide nifty features like clipboard sharing :^) This patch implements only plain-text clipboard sharing. See: github.com/freedesktop/spice-protocol/blob/master/spice/vd_agent.h
2021-07-12 17:25:37 +03:00
[SpiceAgent]
KeepAlive=0
Reference in New Issue Copy Permalink