olcxjas-softworks/PLWL
2
0
Fork 0
Code Issues Pull requests Projects Releases 16 Packages Wiki Activity Actions

improve native isolation

Browse source
This commit is contained in:
olcxja 2026-10-07 08:26:57 +02:00
commit 9748b98163
15 changed files with 341 additions and 95 deletions
Download patch file Download diff file Expand all files Collapse all files

26
files/translations/en-us.json
View file

@ -93,10 +93,15 @@
"config.openData": "Open data folder",
"config.linuxKindValue": "Linux",
"config.isolation": "Isolation",
"config.isolation.auto": "Automatic (strongest available)",
"config.isolation.off": "Off (plain run)",
"config.isolation.require": "Required (refuse to run without bwrap)",
"config.isolation.bwrap": "bwrap {0} (strong)",
"config.isolation.auto": "Automatic",
"config.isolation.none": "None",
"config.isolation.relaxed": "Relaxed",
"config.isolation.isolated": "Isolated",
"config.isolationHint.auto": "Relaxed where bubblewrap works; on a machine without it the app runs without isolation.",
"config.isolationHint.none": "No sandbox: the app sees, and may change, everything your user can.",
"config.isolationHint.relaxed": "The whole disk is mounted writable as /tmp/plwl-fs-root.",
"config.isolationHint.isolated": "The system is read-only.",
"config.isolation.bwrap": "bwrap {0} (available)",
"config.isolation.env": "no sandbox: {0}",
"config.forceX11": "Force X11 (XWayland)",
"config.forceX11Hint": "Runs the app through XWayland instead of Wayland. Useful when a window cannot carry its own icon or misbehaves on Wayland.",
@ -109,7 +114,7 @@
"config.overrides.remove": "Remove",
"config.overrides.hint": "Wine module names, e.g. dinput8. native,builtin (the default) loads a DLL shipped with the game and falls back to Wine's builtin; disabled blocks the module.",
"sandbox.title": "Linux app isolation",
"sandbox.hint": "Native apps always run with a redirected home folder. With bubblewrap they get their own namespaces too: only their home folder and their own app folder stay writable, the rest of the system is read-only.",
"sandbox.hint": "Native apps always run with a redirected home folder, so their config and cache stay in the prefix. The isolation level says what else they get: None is no sandbox at all, Relaxed mounts the whole disk writable, Isolated writes nothing outside the app's own folders and copies an opened file into its home folder.",
"sandbox.status": "Status",
"sandbox.check": "Check again",
"sandbox.rechecked": "Isolation checked again",
@ -118,12 +123,15 @@
"sandbox.reason.timeout": "not responding",
"sandbox.reason.failed": "not working",
"sandbox.warnTitle": "No sandbox for Linux apps",
"sandbox.warnBody": "bubblewrap is {0}. Linux apps will run with only a redirected home folder - they can still read the rest of your system, and write to anything your user can.",
"sandbox.warnBody": "bubblewrap is {0}. Apps left on Automatic run as plain programs (None), while apps set to Relaxed or Isolated refuse to start instead of pretending the sandbox is there.",
"sandbox.dismiss": "Got it",
"sandbox.badgeStrong": "bwrap",
"sandbox.badgeWeak": "no sandbox",
"sandbox.badgeOff": "isolation off",
"sandbox.badgeNone": "no isolation",
"sandbox.badgeRelaxed": "relaxed",
"sandbox.badgeIsolated": "isolated",
"sandbox.badgeRequired": "bwrap required",
"handoff.copying": "Copying into the app: {0}",
"handoff.copyNote": "{0} / {1} - the app works on a copy inside its own home folder (plwl-handoff); edits in the copy never come back.",
"handoff.failed": "Could not copy {0} into the app: {1}",
"sandbox.required": "This app needs a working bubblewrap sandbox: {0}",
"sandbox.linkOpener": "PLWL link opener",
"config.save": "Save changes",