diff options
author | 2019-07-18 23:26:09 +0200 | |
---|---|---|
committer | 2019-07-18 23:26:09 +0200 | |
commit | 25b0bf9f95ccd1189be4bd594d16134ebf3b38d8 (patch) | |
tree | 187b33fd7f5e388d973b02198832c2f065d8fa93 | |
parent | fix gucharmap & add gnome-characters, gnome-character-map (diff) | |
download | firejail-25b0bf9f95ccd1189be4bd594d16134ebf3b38d8.tar.gz firejail-25b0bf9f95ccd1189be4bd594d16134ebf3b38d8.tar.zst firejail-25b0bf9f95ccd1189be4bd594d16134ebf3b38d8.zip |
merges
-rw-r--r-- | .github/pull_request_template.md | 2 | ||||
-rw-r--r-- | README | 25 | ||||
-rw-r--r-- | README.md | 3 | ||||
-rw-r--r-- | RELNOTES | 6 |
4 files changed, 32 insertions, 4 deletions
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md index 28ee1c436..f0e4dd416 100644 --- a/.github/pull_request_template.md +++ b/.github/pull_request_template.md | |||
@@ -3,7 +3,7 @@ If you make a PR for new profiles or changeing profiles please do the following: | |||
3 | Hint: The profile-template is very new, if you install firejail with your package-manager, it maybe missing, therefore, and to follow the latest rules, it is recommended to use the template from the repository. | 3 | Hint: The profile-template is very new, if you install firejail with your package-manager, it maybe missing, therefore, and to follow the latest rules, it is recommended to use the template from the repository. |
4 | - Order the arguments of options alphabetical, you can easy do this with the [sort.py](https://github.com/netblue30/firejail/tree/master/contrib/sort.py). | 4 | - Order the arguments of options alphabetical, you can easy do this with the [sort.py](https://github.com/netblue30/firejail/tree/master/contrib/sort.py). |
5 | The path to it depends on your distro: | 5 | The path to it depends on your distro: |
6 | 6 | ||
7 | | Distro | Path | | 7 | | Distro | Path | |
8 | | ------ | ---- | | 8 | | ------ | ---- | |
9 | | Arch/Fedora | `/lib64/firejail/sort.py` | | 9 | | Arch/Fedora | `/lib64/firejail/sort.py` | |
@@ -121,6 +121,8 @@ avoidr (https://github.com/avoidr) | |||
121 | - various other fixes | 121 | - various other fixes |
122 | Bader Zaidan (https://github.com/BaderSZ) | 122 | Bader Zaidan (https://github.com/BaderSZ) |
123 | - Telegram profile | 123 | - Telegram profile |
124 | Bandie (https://github.com/Bandie) | ||
125 | - fixed riot-desktop | ||
124 | Benjamin Kampmann (https://github.com/ligthyear) | 126 | Benjamin Kampmann (https://github.com/ligthyear) |
125 | - Forward exit code from child process | 127 | - Forward exit code from child process |
126 | bitfreak25 (https://github.com/bitfreak25) | 128 | bitfreak25 (https://github.com/bitfreak25) |
@@ -183,6 +185,7 @@ curiosity-seeker (https://github.com/curiosity-seeker) | |||
183 | - added freeoffice-textmaker, freeoffice-presentations profiles | 185 | - added freeoffice-textmaker, freeoffice-presentations profiles |
184 | - added cantata profile | 186 | - added cantata profile |
185 | - updated keypassxc profile | 187 | - updated keypassxc profile |
188 | - added syscalls.sh, which determine the necessary syscalls for a program | ||
186 | da2x (https://github.com/da2x) | 189 | da2x (https://github.com/da2x) |
187 | - matched RPM license tag | 190 | - matched RPM license tag |
188 | Daan Bakker (https://github.com/dbakker) | 191 | Daan Bakker (https://github.com/dbakker) |
@@ -205,12 +208,17 @@ dewbasaur (https://github.com/dewbasaur) | |||
205 | - Steam profile | 208 | - Steam profile |
206 | DiGitHubCap (https://github.com/DiGitHubCap) | 209 | DiGitHubCap (https://github.com/DiGitHubCap) |
207 | - deluge profile fix | 210 | - deluge profile fix |
211 | Disconnect3d (https://github.com/disconnect3d) | ||
212 | - code cleanup | ||
208 | dshmgh (https://github.com/dshmgh) | 213 | dshmgh (https://github.com/dshmgh) |
209 | - overlayfs fix for systems with /home mounted on a separate partition | 214 | - overlayfs fix for systems with /home mounted on a separate partition |
210 | Duncan Overbruck (https://github.com/Duncaen) | 215 | Duncan Overbruck (https://github.com/Duncaen) |
211 | - musl libc fix | 216 | - musl libc fix |
212 | - utmp fix | 217 | - utmp fix |
213 | - fix install for --disable-seccomp software configurations | 218 | - fix install for --disable-seccomp software configurations |
219 | Eduard Tolosa (https://github.com/Edu4rdSHL) | ||
220 | - fixed and hardened qpdfview.profile | ||
221 | - fixed gajim.profile | ||
214 | emacsomancer (https://github.com/emacsomancer) | 222 | emacsomancer (https://github.com/emacsomancer) |
215 | - added profile for Conkeror browser | 223 | - added profile for Conkeror browser |
216 | eventyrer (https://github.com/eventyrer) | 224 | eventyrer (https://github.com/eventyrer) |
@@ -365,6 +373,8 @@ Jean Lucas (https://github.com/flacks) | |||
365 | - add Beaker profile | 373 | - add Beaker profile |
366 | - fixes for gnome-music | 374 | - fixes for gnome-music |
367 | - allow reading of system-wide Flatpak locale in gajim profile | 375 | - allow reading of system-wide Flatpak locale in gajim profile |
376 | Jean-Philippe Eisenbarth (https://github.com/jpeisenbarth) | ||
377 | - fixed spotify.profile | ||
368 | Jericho (https://github.com/attritionorg) | 378 | Jericho (https://github.com/attritionorg) |
369 | - spelling | 379 | - spelling |
370 | Jesse Smith (https://github.com/slicer69) | 380 | Jesse Smith (https://github.com/slicer69) |
@@ -385,6 +395,10 @@ Jose Riha (https://github.com/jose1711) | |||
385 | - created qgis, links, xlinks profiles | 395 | - created qgis, links, xlinks profiles |
386 | - extended profile.template with comments | 396 | - extended profile.template with comments |
387 | - some typo and comment fixes in profile.template | 397 | - some typo and comment fixes in profile.template |
398 | - Make it possible for cheese app to save pictures too | ||
399 | - Add davfs2 secrets file to blacklist | ||
400 | - Add profile for udiskie | ||
401 | - fix udiskie.profile | ||
388 | jrabe (https://github.com/jrabe) | 402 | jrabe (https://github.com/jrabe) |
389 | - disallow access to kdbx files | 403 | - disallow access to kdbx files |
390 | - Epiphany profile | 404 | - Epiphany profile |
@@ -457,6 +471,8 @@ Michael Haas (https://github.com/mhaas) | |||
457 | - bugfixes | 471 | - bugfixes |
458 | Mike Frysinger (vapier@gentoo.org) | 472 | Mike Frysinger (vapier@gentoo.org) |
459 | - Gentoo compile patch | 473 | - Gentoo compile patch |
474 | mirabellette (https://github.com/mirabellette) | ||
475 | - add comment to thunderbird.profile to allow Firefox to load profiles | ||
460 | mjudtmann (https://github.com/mjudtmann) | 476 | mjudtmann (https://github.com/mjudtmann) |
461 | - lock firejail configuration in disable-mgmt.inc | 477 | - lock firejail configuration in disable-mgmt.inc |
462 | mustaqimM (https://github.com/mustaqimM) | 478 | mustaqimM (https://github.com/mustaqimM) |
@@ -466,6 +482,7 @@ n1trux (https://github.com/n1trux) | |||
466 | Nick Fox (https://github.com/njfox) | 482 | Nick Fox (https://github.com/njfox) |
467 | - add a profile alias for code-oss | 483 | - add a profile alias for code-oss |
468 | - add code-oss config directory | 484 | - add code-oss config directory |
485 | - fix wire-desktop.profile on arch | ||
469 | NickMolloy (https://github.com/NickMolloy) | 486 | NickMolloy (https://github.com/NickMolloy) |
470 | - ARP address length fix | 487 | - ARP address length fix |
471 | Niklas Haas (https://github.com/haasn) | 488 | Niklas Haas (https://github.com/haasn) |
@@ -575,21 +592,25 @@ rusty-snake (https://github.com/rusty-snake) | |||
575 | - added profiles: ktouch, yelp, klatexformula, klatexformula_cmdl | 592 | - added profiles: ktouch, yelp, klatexformula, klatexformula_cmdl |
576 | - added profiles: pandoc, gnome-sound-recorder, godot, newsbeuter | 593 | - added profiles: pandoc, gnome-sound-recorder, godot, newsbeuter |
577 | - added profiles: keepassxc-cli, keepassxc-proxy, rhythmbox-client | 594 | - added profiles: keepassxc-cli, keepassxc-proxy, rhythmbox-client |
578 | - added profiles: zeal | 595 | - added profiles: zeal, gnome-characters, gnome-character-map |
579 | - many profile fixing and hardening | 596 | - many profile fixing and hardening |
580 | - some typo fixes | 597 | - some typo fixes |
581 | - added profile templates | 598 | - added profile templates |
599 | - added sort.py to contrib | ||
582 | Salvo 'LtWorf' Tomaselli (https://github.com/ltworf) | 600 | Salvo 'LtWorf' Tomaselli (https://github.com/ltworf) |
583 | - fixed ktorrent profile | 601 | - fixed ktorrent profile |
584 | sarneaud (https://github.com/sarneaud) | 602 | sarneaud (https://github.com/sarneaud) |
585 | - rewrite globbing code to fix various minor issues | 603 | - rewrite globbing code to fix various minor issues |
586 | - added noblacklist command for profile files | 604 | - added noblacklist command for profile files |
587 | - various enhancements and bug fixes | 605 | - various enhancements and bug fixes |
606 | Sebastian Hafner (https://github.com/DropNib) | ||
607 | - profile support for allow-debuggers | ||
588 | Senemu (https://github.com/Senemu) | 608 | Senemu (https://github.com/Senemu) |
589 | - protection for .pythonrc.py | 609 | - protection for .pythonrc.py |
590 | - fixed evince | 610 | - fixed evince |
591 | Sergey Alirzaev (https://github.com/l29ah) | 611 | Sergey Alirzaev (https://github.com/l29ah) |
592 | - firejail.h enum fix | 612 | - firejail.h enum fix |
613 | - firefox-common-addons.inc: + tridactyl | ||
593 | Tobias Schmidl (https://github.com/schtobia) | 614 | Tobias Schmidl (https://github.com/schtobia) |
594 | - added profile for webui-aria2 | 615 | - added profile for webui-aria2 |
595 | Simon Peter (https://github.com/probonopd) | 616 | Simon Peter (https://github.com/probonopd) |
@@ -686,6 +707,8 @@ startx2017 (https://github.com/startx2017) | |||
686 | - handbrake profile | 707 | - handbrake profile |
687 | - mplayer and smplayer profiles | 708 | - mplayer and smplayer profiles |
688 | - kwrite and geary profiles | 709 | - kwrite and geary profiles |
710 | StelFux (https://github.com/StelFux) | ||
711 | - Fix youtube video in totem | ||
689 | thewisenerd (https://github.com/thewisenerd) | 712 | thewisenerd (https://github.com/thewisenerd) |
690 | - allow multiple private-home commands | 713 | - allow multiple private-home commands |
691 | - use $SHELL variable if the shell is not specified | 714 | - use $SHELL variable if the shell is not specified |
@@ -116,5 +116,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe | |||
116 | 116 | ||
117 | ## New profiles: | 117 | ## New profiles: |
118 | 118 | ||
119 | gnome-sound-recorder, godot, jerry, keepassxc-cli, keepassxc-proxy, klatexformula, klatexformula_cmdl, links, newsbeuter, OpenArena, pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, | 119 | gnome-sound-recorder, godot, jerry, keepassxc-cli, keepassxc-proxy, klatexformula, klatexformula_cmdl, links, newsbeuter, OpenArena, pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, mpg123, conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss, mpg123-portaudio, mpg123-pulse, mpg123-strip, out123, pavucontrol-qt, gnome-characters, gnome-character-map |
120 | mpg123, | ||
@@ -2,10 +2,16 @@ firejail (0.9.61) baseline; urgency=low | |||
2 | * work in progress | 2 | * work in progress |
3 | * added file-copy-limit in /etc/firejail/firejail.config | 3 | * added file-copy-limit in /etc/firejail/firejail.config |
4 | * profile templates | 4 | * profile templates |
5 | * allow-debuggers support in profiles | ||
6 | * new scripts in conrib: gdb-firejail.sh and sort.py | ||
5 | * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks | 7 | * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks |
6 | * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder | 8 | * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder |
7 | * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli | 9 | * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli |
8 | * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123 | 10 | * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123 |
11 | * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123 | ||
12 | * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss | ||
13 | * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt | ||
14 | * new profiles: gnome-characters, gnome-character-map | ||
9 | -- netblue30 <netblue30@yahoo.com> Sat, 1 Jun 2019 08:00:00 -0500 | 15 | -- netblue30 <netblue30@yahoo.com> Sat, 1 Jun 2019 08:00:00 -0500 |
10 | 16 | ||
11 | firejail (0.9.60) baseline; urgency=low | 17 | firejail (0.9.60) baseline; urgency=low |