diff options
author | netblue30 <netblue30@yahoo.com> | 2017-03-21 09:37:37 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2017-03-21 09:37:37 -0400 |
commit | 5c20b316a5bdfde760761d71de1a66cd7b24f0dd (patch) | |
tree | d5c780b7480db5e7fca57a1c68ebe02822ba52bb /README | |
parent | Update warzone2100 profile for new version. (diff) | |
download | firejail-5c20b316a5bdfde760761d71de1a66cd7b24f0dd.tar.gz firejail-5c20b316a5bdfde760761d71de1a66cd7b24f0dd.tar.zst firejail-5c20b316a5bdfde760761d71de1a66cd7b24f0dd.zip |
maintenance
Diffstat (limited to 'README')
-rw-r--r-- | README | 578 |
1 files changed, 293 insertions, 285 deletions
@@ -15,7 +15,9 @@ Documentation and support: https://firejail.wordpress.com/ | |||
15 | Development: https://github.com/netblue30/firejail | 15 | Development: https://github.com/netblue30/firejail |
16 | License: GPL v2 | 16 | License: GPL v2 |
17 | 17 | ||
18 | Compile and install | 18 | |
19 | |||
20 | Compile and install mainline version from GitHub: | ||
19 | 21 | ||
20 | $ git clone https://github.com/netblue30/firejail.git | 22 | $ git clone https://github.com/netblue30/firejail.git |
21 | $ cd firejail | 23 | $ cd firejail |
@@ -26,19 +28,23 @@ On Debian/Ubuntu you will need to install git and a compiler: | |||
26 | $ sudo apt-get install build-essential | 28 | $ sudo apt-get install build-essential |
27 | 29 | ||
28 | 30 | ||
29 | Firejail Authors: | ||
30 | 31 | ||
31 | netblue30 (netblue30@yahoo.com) | 32 | Maintainer: |
32 | Reiner Herrmann (https://github.com/reinerh) | 33 | - netblue30 (netblue30@yahoo.com) |
33 | - a number of build patches | 34 | |
34 | - man page fixes | 35 | Committers |
35 | - Debian and Ubuntu integration | 36 | - Fred-Barclay (https://github.com/Fred-Barclay) |
36 | - clang-analyzer fixes | 37 | - Reiner Herrmann (https://github.com/reinerh) |
37 | - Debian reproducible build | 38 | - netblue30 (netblue30@yahoo.com) |
38 | - unit testing framework | 39 | |
39 | - moved build to .xz | 40 | |
40 | - detached signatures for source archive | 41 | |
41 | - recursive mkdir | 42 | Firejail Authors (alphabetical order) |
43 | |||
44 | Akhil Hans Maulloo (https://github.com/kouul) | ||
45 | - xz profile | ||
46 | Alexey Kuznetsov (kuznet@ms2.inr.ac.ru) | ||
47 | - src/lib/libnetlink.c extracted from iproute2 software package | ||
42 | Aleksey Manevich (https://github.com/manevich) | 48 | Aleksey Manevich (https://github.com/manevich) |
43 | - several profile fixes | 49 | - several profile fixes |
44 | - fix problem with relative path in storage_find function | 50 | - fix problem with relative path in storage_find function |
@@ -57,6 +63,80 @@ Aleksey Manevich (https://github.com/manevich) | |||
57 | - x11 xpra, xphyr, none profile commands | 63 | - x11 xpra, xphyr, none profile commands |
58 | - added --join-or-start command | 64 | - added --join-or-start command |
59 | - CVE-2016-7545 | 65 | - CVE-2016-7545 |
66 | Alexander Stein (https://github.com/ajstein) | ||
67 | - added profile for qutebrowser | ||
68 | Andrey Alekseenko (https://github.com/al42and) | ||
69 | - fixing lintian warnings | ||
70 | - fixed Skype profile | ||
71 | andrew160 (https://github.com/andrew160) | ||
72 | - profile and man pages fixes | ||
73 | Austin S. Hemmelgarn (https://github.com/Ferroin) | ||
74 | - unbound profile update | ||
75 | avoidr (https://github.com/avoidr) | ||
76 | - whitelist fix | ||
77 | - recently-used.xbel fix | ||
78 | - added parole profile | ||
79 | - blacklist ncat | ||
80 | - hostname support in profile file | ||
81 | - Google Chrome profile rework | ||
82 | - added cmus profile | ||
83 | - man page fixes | ||
84 | - add net iface support in profile files | ||
85 | - paths fix | ||
86 | - lots of profile fixes | ||
87 | - added mcabber profile | ||
88 | - fixed mpv profile | ||
89 | - various other fixes | ||
90 | Bader Zaidan (https://github.com/BaderSZ) | ||
91 | - Telegram profile | ||
92 | Benjamin Kampmann (https://github.com/ligthyear) | ||
93 | - Forward exit code from child process | ||
94 | BogDan Vatra (https://github.com/bog-dan-ro) | ||
95 | - zoom profile | ||
96 | Bruno Nova (https://github.com/brunonova) | ||
97 | - whitelist fix | ||
98 | - bash arguments fix | ||
99 | Cat (https://github.com/ecat3) | ||
100 | - prevent tmux connecting to an existing session | ||
101 | creideiki (https://github.com/creideiki) | ||
102 | - make the sandbox process reap all children | ||
103 | Christian Stadelmann (https://github.com/genodeftest) | ||
104 | - profile fixes | ||
105 | - evolution profile fix | ||
106 | curiosity-seeker (https://github.com/curiosity-seeker) | ||
107 | - tightening unbound and dnscrypt-proxy profiles | ||
108 | - correct and tighten QuiteRss profile | ||
109 | - dnsmasq profile | ||
110 | - okular and gwenview profiles | ||
111 | - cherrytree profile fixes | ||
112 | - added quiterss profile | ||
113 | - added guayadeque profile | ||
114 | - added VirtualBox.profile | ||
115 | - various other profile fixes | ||
116 | Daan Bakker (https://github.com/dbakker) | ||
117 | - protect shell startup files | ||
118 | Dara Adib (https://github.com/daradib) | ||
119 | - ssh profile fix | ||
120 | - evince profile fix | ||
121 | Deelvesh Bunjun (https://github.com/DeelveshBunjun) | ||
122 | - added xpdf profile | ||
123 | dewbasaur (https://github.com/dewbasaur) | ||
124 | - block access to history files | ||
125 | - Firefox PDF.js exploit (CVE-2015-4495) fixes | ||
126 | - Steam profile | ||
127 | dshmgh (https://github.com/dshmgh) | ||
128 | - overlayfs fix for systems with /home mounted on a separate partition | ||
129 | Duncan Overbruck (https://github.com/Duncaen) | ||
130 | - musl libc fix | ||
131 | - utmp fix | ||
132 | emacsomancer (https://github.com/emacsomancer) | ||
133 | - added profile for Conkeror browser | ||
134 | eventyrer (https://github.com/eventyrer) | ||
135 | - update gnome-mplayer.profile | ||
136 | Felipe Barriga Richards (https://github.com/fbarriga) | ||
137 | - --private-etc fix | ||
138 | Franco (nextime) Lanza (https://github.com/nextime) | ||
139 | - added --private-template/--private-home | ||
60 | Fred-Barclay (https://github.com/Fred-Barclay) | 140 | Fred-Barclay (https://github.com/Fred-Barclay) |
61 | - lots of profile fixes | 141 | - lots of profile fixes |
62 | - added Vivaldi, Atril profiles | 142 | - added Vivaldi, Atril profiles |
@@ -99,170 +179,57 @@ Fred-Barclay (https://github.com/Fred-Barclay) | |||
99 | - compile/install scripts for --git-install/--git-uninstall commands | 179 | - compile/install scripts for --git-install/--git-uninstall commands |
100 | - tighten keepassx | 180 | - tighten keepassx |
101 | - added Thunar profile | 181 | - added Thunar profile |
102 | SYN-cook (https://github.com/SYN-cook) | 182 | G4JC (http://sourceforge.net/u/gaming4jc/profile/) |
103 | - keepass/keepassx browser fixes | 183 | - ARM support |
104 | - disable-common.inc fixes | ||
105 | - blacklist GNOME keyring and Konqueror | ||
106 | - fixed Keepass(x) profiles | ||
107 | - Engrampa profile | ||
108 | - Scribus profile | ||
109 | - autostart blacklist for KDE | ||
110 | valoq (https://github.com/valoq) | ||
111 | - lots of profile fixes | ||
112 | - added support for /srv in --whitelist feature | ||
113 | - Eye of GNOME, Evolution, display (imagemagik) and Wire profiles | ||
114 | - blacklist suid binaries in disable-common.inc | ||
115 | - fix man pages | ||
116 | - added keypass2, qemu profiles | ||
117 | - added amarok, ark, atool, bleachbit, brasero, dolphin, dragon, elinks, enchant, exiftool profiles | ||
118 | - added file-roller, gedit, gjs,gnome-books, gnome-documents, gnome-maps, gnome-music profiles | ||
119 | - added gnome-photos, gnome-weather, goobox, gpa, gpg, gpg-agent, highlight profiles | ||
120 | - added img2txt, k3b, kate, lynx, mediainfo, nautilus, odt2txt, pdftotext, simple-scan profiles | ||
121 | - added skanlite, ssh-agent, transmission-cli, tracker, transmission-show, w3m, xfburn, xpra profiles | ||
122 | - added wget profile | ||
123 | - disable gnupg and systemd directories under /run/user | ||
124 | - added iridium browser profile | ||
125 | Zack Weinberg (https://github.com/zackw) | ||
126 | - removed libconnect | ||
127 | - fixed memory corruption in noblacklist processing | ||
128 | - rework DISPLAY environment parsing | ||
129 | - rework masking X11 sockets in /tmp/.X11-unix directory | ||
130 | - rework xpra and xephyr detection | ||
131 | - rework abstract X11 socket detection | ||
132 | - rework X11 display number assignment | ||
133 | - rework X11 xorg processing | ||
134 | - rework fcopy, --follow-link support in fcopy | ||
135 | - follow link support in --private-bin | ||
136 | - wait_for_other function rewrite | ||
137 | - xvfb X11 server support | ||
138 | Austin S. Hemmelgarn (https://github.com/Ferroin) | ||
139 | - unbound profile update | ||
140 | Igor Bukanov (https://github.com/ibukanov) | ||
141 | - found/fiixed privilege escalation in --hosts-file option | ||
142 | Cat (https://github.com/ecat3) | ||
143 | - prevent tmux connecting to an existing session | ||
144 | Zack Weinberg (https://github.com/zackw) | ||
145 | - sdded support for joining a persistent, named network namespace | ||
146 | GSI (https://github.com/GSI) | ||
147 | - added Uzbl browser profile | ||
148 | Mike Frysinger (vapier@gentoo.org) | ||
149 | - Gentoo compile patch | ||
150 | Jericho (https://github.com/attritionorg) | ||
151 | - spelling | ||
152 | Pixel Fairy (https://github.com/xahare) | ||
153 | - added fjclip.py, fjdisplay.py and fjresize.py in contrib section | ||
154 | pshpsh (https://github.com/pshpsh) | ||
155 | - added FossaMail profile | ||
156 | eventyrer (https://github.com/eventyrer) | ||
157 | - update gnome-mplayer.profile | ||
158 | thewisenerd (https://github.com/thewisenerd) | ||
159 | - allow multiple private-home commands | ||
160 | - use $SHELL variable if the shell is not specified | ||
161 | thewisenerd (https://github.com/thewisenerd) | ||
162 | - appimage: pass commandline arguments | ||
163 | KOLANICH (https://github.com/KOLANICH) | ||
164 | - added symlink fixer fix_private-bin.py in contrib section | ||
165 | Jesse Smith (https://github.com/slicer69) | ||
166 | - added QupZilla profile | ||
167 | Lari Rauno (https://github.com/tuutti) | ||
168 | - qutebrowser profile fixes | ||
169 | SpotComms (https://github.com/SpotComms) | ||
170 | - added Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5 profiles | ||
171 | - added PDFSam, Pithos, and Xonotic profiles | ||
172 | Vasya Novikov (https://github.com/vn971) | ||
173 | - Wesnoth profile | ||
174 | - Hedegewars profile | ||
175 | - manpage fixes | ||
176 | - fixed firecfg clean/clear issue | ||
177 | - found the ugliest bug so far | ||
178 | - seccomp debug description in man page | ||
179 | curiosity-seeker (https://github.com/curiosity-seeker) | ||
180 | - tightening unbound and dnscrypt-proxy profiles | ||
181 | - correct and tighten QuiteRss profile | ||
182 | - dnsmasq profile | ||
183 | - okular and gwenview profiles | ||
184 | - cherrytree profile fixes | ||
185 | - added quiterss profile | ||
186 | - added guayadeque profile | ||
187 | - added VirtualBox.profile | ||
188 | - various other profile fixes | ||
189 | Simon Peter (https://github.com/probonopd) | ||
190 | - set $APPIMAGE and $APPDIR environment variables | ||
191 | - AppImage version detection | ||
192 | - Leafppad type v1 and v2 appimage packages in test/appimage | ||
193 | BogDan Vatra (https://github.com/bog-dan-ro) | ||
194 | - zoom profile | ||
195 | Impyy (https://github.com/Impyy) | ||
196 | - added mumble profile | ||
197 | Vadim A. Misbakh-Soloviov (https://github.com/msva) | ||
198 | - profile fixes | 184 | - profile fixes |
199 | Rafael Cavalcanti (https://github.com/rccavalcanti) | 185 | Gaman Gabriel (https://github.com/stelariusinfinitek) |
200 | - chromium profile fixes for Arch Linux | 186 | - inox profile |
201 | Deelvesh Bunjun (https://github.com/DeelveshBunjun) | 187 | geg2048 (https://github.com/geg2048) |
202 | - added xpdf profile | 188 | - kwallet profile fixes |
203 | Dara Adib (https://github.com/daradib) | ||
204 | - ssh profile fix | ||
205 | - evince profile fix | ||
206 | vismir2 (https://github.com/vismir2) | ||
207 | - feh, ranger, 7z, keepass, keepassx and zathura profiles | ||
208 | - claws-mail, mutt, git, emacs, vim profiles | ||
209 | - lots of profile fixes | ||
210 | - support for truecrypt and zuluCrypt | ||
211 | graywolf (https://github.com/graywolf) | 189 | graywolf (https://github.com/graywolf) |
212 | - spelling fix | 190 | - spelling fix |
213 | Tomasz Jan Góralczyk (https://github.com/tjg) | ||
214 | - fixed Steam profile | ||
215 | pwnage-pineapple (https://github.com/pwnage-pineapple) | ||
216 | - update Okular profile | ||
217 | Sergey Alirzaev (https://github.com/l29ah) | ||
218 | - firejail.h enum fix | ||
219 | greigdp (https://github.com/greigdp) | 191 | greigdp (https://github.com/greigdp) |
220 | - Gajim IM client profile | 192 | - Gajim IM client profile |
221 | - fix Slack profile | 193 | - fixed spotify profile |
194 | - added Slack profile | ||
195 | - add Spotify profile | ||
196 | GSI (https://github.com/GSI) | ||
197 | - added Uzbl browser profile | ||
198 | hamzadis (https://github.com/hamzadis) | ||
199 | - added --overlay-named=name and --overlay-path=path | ||
200 | Holger Heinz (https://github.com/hheinz) | ||
201 | - manpage work | ||
222 | Icaro Perseo (https://github.com/icaroperseo) | 202 | Icaro Perseo (https://github.com/icaroperseo) |
223 | - Icecat profile | 203 | - Icecat profile |
224 | - several profile fixes | 204 | - several profile fixes |
225 | hamzadis (https://github.com/hamzadis) | 205 | Igor Bukanov (https://github.com/ibukanov) |
226 | - added --overlay-named=name and --overlay-path=path | 206 | - found/fiixed privilege escalation in --hosts-file option |
227 | Gaman Gabriel (https://github.com/stelariusinfinitek) | 207 | iiotx (https://github.com/iiotx) |
228 | - inox profile | 208 | - use generic.profile by default |
229 | greigdp (https://github.com/greigdp) | 209 | Impyy (https://github.com/Impyy) |
230 | - fixed spotify profile | 210 | - added mumble profile |
231 | - added Slack profile | 211 | Ivan Kozik (https://github.com/ivan) |
232 | Laurent Declercq (https://github.com/nuxwin) | 212 | - speed up sandbox exit |
233 | - fixed test for shell interpreter in chroots | ||
234 | Franco (nextime) Lanza (https://github.com/nextime) | ||
235 | - added --private-template/--private-home | ||
236 | xee5ch (https://github.com/xee5ch) | ||
237 | - skypeforlinux profile | ||
238 | Peter Hogg (https://github.com/pigmonkey) | ||
239 | - WeeChat profile | ||
240 | - rtorrent profile | ||
241 | - bitlbee profile fixes | ||
242 | - mutt profile fixes | ||
243 | Thomas Jarosch (https://github.com/thomasjfox) | ||
244 | - disable keepassx in disable-passwdmgr.inc | ||
245 | - added uudeview profile | ||
246 | - added tar (gtar), unzip and unrar profile | ||
247 | - added file profile | ||
248 | - improved profile list | ||
249 | - fixed small variable glitch in stat64() / lstat64() (libtracelog) | ||
250 | - added lstat() / lstat64() support to libtrace | ||
251 | - include mkuid.sh in make dist | ||
252 | Niklas Haas (https://github.com/haasn) | ||
253 | - blacklisting for keybase.io's client | ||
254 | Jaykishan Mutkawoa (https://github.com/jmutkawoa) | 213 | Jaykishan Mutkawoa (https://github.com/jmutkawoa) |
255 | - cpio profile | 214 | - cpio profile |
256 | Paupiah Yash (https://github.com/CaffeinatedStud) | 215 | Jericho (https://github.com/attritionorg) |
257 | - gzip profile | 216 | - spelling |
258 | Akhil Hans Maulloo (https://github.com/kouul) | 217 | Jesse Smith (https://github.com/slicer69) |
259 | - xz profile | 218 | - added QupZilla profile |
260 | Rahul Golam (https://github.com/technoLord) | 219 | jgriffiths (https://github.com/jgriffiths) |
261 | - strings profile | 220 | - make rpm packages support |
262 | geg2048 (https://github.com/geg2048) | 221 | Joan Figueras (https://github.com/figue) |
263 | - kwallet profile fixes | 222 | - added abrowser profile |
264 | maces (https://github.com/maces) | 223 | - added Google-Play-Music-Desktop-Player |
265 | - Franz messenger profile | 224 | - added cyberfox profile |
225 | jrabe (https://github.com/jrabe) | ||
226 | - disallow access to kdbx files | ||
227 | - Epiphany profile | ||
228 | - Polari profile | ||
229 | - qTox profile | ||
230 | - X11 fixes | ||
231 | Kaan Genç (https://github.com/SeriousBug) | ||
232 | - dynamic allocation of noblacklist buffer | ||
266 | KellerFuchs (https://github.com/KellerFuchs) | 233 | KellerFuchs (https://github.com/KellerFuchs) |
267 | - nonewpriv support, extended profiles for this feature | 234 | - nonewpriv support, extended profiles for this feature |
268 | - make `restricted-network` prevent use of netfilter | 235 | - make `restricted-network` prevent use of netfilter |
@@ -271,116 +238,45 @@ KellerFuchs (https://github.com/KellerFuchs) | |||
271 | - added support for .local profile files in /etc/firejail | 238 | - added support for .local profile files in /etc/firejail |
272 | - fixed Cryptocat profile | 239 | - fixed Cryptocat profile |
273 | - make ~/.local read-only | 240 | - make ~/.local read-only |
274 | ValdikSS (https://github.com/ValdikSS) | 241 | KOLANICH (https://github.com/KOLANICH) |
275 | - Psi+, Corebird, Konversation profiles | 242 | - added symlink fixer fix_private-bin.py in contrib section |
276 | - various profile fixes | 243 | Lari Rauno (https://github.com/tuutti) |
277 | avoidr (https://github.com/avoidr) | 244 | - qutebrowser profile fixes |
278 | - whitelist fix | 245 | Laurent Declercq (https://github.com/nuxwin) |
279 | - recently-used.xbel fix | 246 | - fixed test for shell interpreter in chroots |
280 | - added parole profile | 247 | Loïc Damien (https://github.com/dzamlo) |
281 | - blacklist ncat | 248 | - small fixes |
282 | - hostname support in profile file | 249 | maces (https://github.com/maces) |
283 | - Google Chrome profile rework | 250 | - Franz messenger profile |
284 | - added cmus profile | ||
285 | - man page fixes | ||
286 | - add net iface support in profile files | ||
287 | - paths fix | ||
288 | - lots of profile fixes | ||
289 | - added mcabber profile | ||
290 | - fixed mpv profile | ||
291 | - various other fixes | ||
292 | Ruan (https://github.com/ruany) | ||
293 | - fixed hexchat profile | ||
294 | Matthew Gyurgyik (https://github.com/pyther) | ||
295 | - rpm spec and several fixes | ||
296 | Joan Figueras (https://github.com/figue) | ||
297 | - added abrowser profile | ||
298 | - added Google-Play-Music-Desktop-Player | ||
299 | - added cyberfox profile | ||
300 | Petter Reinholdtsen (pere@hungry.com) | ||
301 | - Opera profile patch | ||
302 | n1trux (https://github.com/n1trux) | ||
303 | - fix flashpeak-slimjet profile typos | ||
304 | Felipe Barriga Richards (https://github.com/fbarriga) | ||
305 | - --private-etc fix | ||
306 | Alexander Stein (https://github.com/ajstein) | ||
307 | - added profile for qutebrowser | ||
308 | Benjamin Kampmann (https://github.com/ligthyear) | ||
309 | - Forward exit code from child process | ||
310 | dshmgh (https://github.com/dshmgh) | ||
311 | - overlayfs fix for systems with /home mounted on a separate partition | ||
312 | yumkam (https://github.com/yumkam) | ||
313 | - add compile-time option to restrict --net= to root only | ||
314 | - man page fixes | ||
315 | mahdi1234 (https://github.com/mahdi1234) | 251 | mahdi1234 (https://github.com/mahdi1234) |
316 | - cherrytree profile | 252 | - cherrytree profile |
317 | - Seamonkey profiles | 253 | - Seamonkey profiles |
318 | jrabe (https://github.com/jrabe) | ||
319 | - disallow access to kdbx files | ||
320 | - Epiphany profile | ||
321 | - Polari profile | ||
322 | - qTox profile | ||
323 | - X11 fixes | ||
324 | jgriffiths (https://github.com/jgriffiths) | ||
325 | - make rpm packages support | ||
326 | Tom Mellor (https://github.com/kalegrill) | ||
327 | - mupen64plus profile | ||
328 | Martin Carpenter (https://github.com/mcarpenter) | 254 | Martin Carpenter (https://github.com/mcarpenter) |
329 | - security audit and bug fixes | 255 | - security audit and bug fixes |
330 | - Centos 6.x support | 256 | - Centos 6.x support |
331 | pszxzsd (https://github.com/pszxzsd) | ||
332 | -uGet profile | ||
333 | Rahiel Kasim (https://github.com/rahiel) | ||
334 | - Mathematica profile | ||
335 | - whitelisted Dropbox profile | ||
336 | - whitelisted keysnail config for firefox | ||
337 | creideiki (https://github.com/creideiki) | ||
338 | - make the sandbox process reap all children | ||
339 | sinkuu (https://github.com/sinkuu) | ||
340 | - blacklisting kwalletd | ||
341 | - fix symlink invocation for programs placing symlinks in $PATH | ||
342 | Bader Zaidan (https://github.com/BaderSZ) | ||
343 | - Telegram profile | ||
344 | Holger Heinz (https://github.com/hheinz) | ||
345 | - manpage work | ||
346 | Andrey Alekseenko (https://github.com/al42and) | ||
347 | - fixing lintian warnings | ||
348 | - fixed Skype profile | ||
349 | Ivan Kozik (https://github.com/ivan) | ||
350 | - speed up sandbox exit | ||
351 | Christian Stadelmann (https://github.com/genodeftest) | ||
352 | - profile fixes | ||
353 | - evolution profile fix | ||
354 | pirate486743186 (https://github.com/pirate486743186) | ||
355 | - KMail profile | ||
356 | Kaan Genç (https://github.com/SeriousBug) | ||
357 | - dynamic allocation of noblacklist buffer | ||
358 | Veeti Paananen (https://github.com/veeti) | ||
359 | - fixed Spotify profile | ||
360 | rogshdo (https://github.com/rogshdo) | ||
361 | - BitlBee profile | ||
362 | Bruno Nova (https://github.com/brunonova) | ||
363 | - whitelist fix | ||
364 | - bash arguments fix | ||
365 | Matt Parnell (https://github.com/ilikenwf) | 257 | Matt Parnell (https://github.com/ilikenwf) |
366 | - whitelisting for core firefox related functionality | 258 | - whitelisting for core firefox related functionality |
367 | Ondra Nekola (https://github.com/satai) | ||
368 | - allow firefox theming with non-global themes | ||
369 | emacsomancer (https://github.com/emacsomancer) | ||
370 | - added profile for Conkeror browser | ||
371 | Daan Bakker (https://github.com/dbakker) | ||
372 | - protect shell startup files | ||
373 | Duncan Overbruck (https://github.com/Duncaen) | ||
374 | - musl libc fix | ||
375 | - utmp fix | ||
376 | andrew160 (https://github.com/andrew160) | ||
377 | - profile and man pages fixes | ||
378 | Loïc Damien (https://github.com/dzamlo) | ||
379 | - small fixes | ||
380 | greigdp (https://github.com/greigdp) | ||
381 | - add Spotify profile | ||
382 | Mattias Wadman (https://github.com/wader) | 259 | Mattias Wadman (https://github.com/wader) |
383 | - seccomp errno filter support | 260 | - seccomp errno filter support |
261 | Matthew Gyurgyik (https://github.com/pyther) | ||
262 | - rpm spec and several fixes | ||
263 | Michael Haas (https://github.com/mhaas) | ||
264 | - bugfixes | ||
265 | Mike Frysinger (vapier@gentoo.org) | ||
266 | - Gentoo compile patch | ||
267 | mjudtmann (https://github.com/mjudtmann) | ||
268 | - lock firejail configuration in disable-mgmt.inc | ||
269 | n1trux (https://github.com/n1trux) | ||
270 | - fix flashpeak-slimjet profile typos | ||
271 | netblue30 (netblue30@yahoo.com) | ||
272 | Niklas Haas (https://github.com/haasn) | ||
273 | - blacklisting for keybase.io's client | ||
274 | Ondra Nekola (https://github.com/satai) | ||
275 | - allow firefox theming with non-global themes | ||
276 | Patrick Toomey (http://sourceforge.net/u/ptoomey/profile/) | ||
277 | - user namespace implementation | ||
278 | Paupiah Yash (https://github.com/CaffeinatedStud) | ||
279 | - gzip profile | ||
384 | Peter Millerchip (https://github.com/pmillerchip) | 280 | Peter Millerchip (https://github.com/pmillerchip) |
385 | - memory allocation fix | 281 | - memory allocation fix |
386 | - --private.keep to --private-home transition | 282 | - --private.keep to --private-home transition |
@@ -388,30 +284,142 @@ Peter Millerchip (https://github.com/pmillerchip) | |||
388 | - support for files and directories with spaces in blacklist option | 284 | - support for files and directories with spaces in blacklist option |
389 | - lots of other fixes | 285 | - lots of other fixes |
390 | - implement the --allow-private-blacklist option | 286 | - implement the --allow-private-blacklist option |
287 | Peter Hogg (https://github.com/pigmonkey) | ||
288 | - WeeChat profile | ||
289 | - rtorrent profile | ||
290 | - bitlbee profile fixes | ||
291 | - mutt profile fixes | ||
292 | Petter Reinholdtsen (pere@hungry.com) | ||
293 | - Opera profile patch | ||
294 | pirate486743186 (https://github.com/pirate486743186) | ||
295 | - KMail profile | ||
296 | Pixel Fairy (https://github.com/xahare) | ||
297 | - added fjclip.py, fjdisplay.py and fjresize.py in contrib section | ||
298 | pshpsh (https://github.com/pshpsh) | ||
299 | - added FossaMail profile | ||
300 | pstn (https://github.com/pstn) | ||
301 | - added install-strip, make install without strip | ||
302 | pszxzsd (https://github.com/pszxzsd) | ||
303 | -uGet profile | ||
304 | pwnage-pineapple (https://github.com/pwnage-pineapple) | ||
305 | - update Okular profile | ||
306 | Rafael Cavalcanti (https://github.com/rccavalcanti) | ||
307 | - chromium profile fixes for Arch Linux | ||
308 | Rahiel Kasim (https://github.com/rahiel) | ||
309 | - Mathematica profile | ||
310 | - whitelisted Dropbox profile | ||
311 | - whitelisted keysnail config for firefox | ||
312 | Rahul Golam (https://github.com/technoLord) | ||
313 | - strings profile | ||
314 | Reiner Herrmann (https://github.com/reinerh) | ||
315 | - a number of build patches | ||
316 | - man page fixes | ||
317 | - Debian and Ubuntu integration | ||
318 | - clang-analyzer fixes | ||
319 | - Debian reproducible build | ||
320 | - unit testing framework | ||
321 | - moved build to .xz | ||
322 | - detached signatures for source archive | ||
323 | - recursive mkdir | ||
324 | rogshdo (https://github.com/rogshdo) | ||
325 | - BitlBee profile | ||
326 | Ruan (https://github.com/ruany) | ||
327 | - fixed hexchat profile | ||
391 | sarneaud (https://github.com/sarneaud) | 328 | sarneaud (https://github.com/sarneaud) |
392 | - rewrite globbing code to fix various minor issues | 329 | - rewrite globbing code to fix various minor issues |
393 | - added noblacklist command for profile files | 330 | - added noblacklist command for profile files |
394 | - various enhancements and bug fixes | 331 | - various enhancements and bug fixes |
395 | Patrick Toomey (http://sourceforge.net/u/ptoomey/profile/) | 332 | Sergey Alirzaev (https://github.com/l29ah) |
396 | - user namespace implementation | 333 | - firejail.h enum fix |
334 | Simon Peter (https://github.com/probonopd) | ||
335 | - set $APPIMAGE and $APPDIR environment variables | ||
336 | - AppImage version detection | ||
337 | - Leafppad type v1 and v2 appimage packages in test/appimage | ||
338 | sinkuu (https://github.com/sinkuu) | ||
339 | - blacklisting kwalletd | ||
340 | - fix symlink invocation for programs placing symlinks in $PATH | ||
397 | sshirokov (http://sourceforge.net/u/yshirokov/profile/) | 341 | sshirokov (http://sourceforge.net/u/yshirokov/profile/) |
398 | - Patch to output "Reading profile" to stderr instead of stdout | 342 | - Patch to output "Reading profile" to stderr instead of stdout |
399 | G4JC (http://sourceforge.net/u/gaming4jc/profile/) | 343 | SpotComms (https://github.com/SpotComms) |
400 | - ARM support | 344 | - added Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5 profiles |
345 | - added PDFSam, Pithos, and Xonotic profiles | ||
346 | SYN-cook (https://github.com/SYN-cook) | ||
347 | - keepass/keepassx browser fixes | ||
348 | - disable-common.inc fixes | ||
349 | - blacklist GNOME keyring and Konqueror | ||
350 | - fixed Keepass(x) profiles | ||
351 | - Engrampa profile | ||
352 | - Scribus profile | ||
353 | - autostart blacklist for KDE | ||
354 | thewisenerd (https://github.com/thewisenerd) | ||
355 | - allow multiple private-home commands | ||
356 | - use $SHELL variable if the shell is not specified | ||
357 | - appimage: pass commandline arguments | ||
358 | Thomas Jarosch (https://github.com/thomasjfox) | ||
359 | - disable keepassx in disable-passwdmgr.inc | ||
360 | - added uudeview profile | ||
361 | - added tar (gtar), unzip and unrar profile | ||
362 | - added file profile | ||
363 | - improved profile list | ||
364 | - fixed small variable glitch in stat64() / lstat64() (libtracelog) | ||
365 | - added lstat() / lstat64() support to libtrace | ||
366 | - include mkuid.sh in make dist | ||
367 | Tom Mellor (https://github.com/kalegrill) | ||
368 | - mupen64plus profile | ||
369 | Tomasz Jan Góralczyk (https://github.com/tjg) | ||
370 | - fixed Steam profile | ||
371 | valoq (https://github.com/valoq) | ||
372 | - lots of profile fixes | ||
373 | - added support for /srv in --whitelist feature | ||
374 | - Eye of GNOME, Evolution, display (imagemagik) and Wire profiles | ||
375 | - blacklist suid binaries in disable-common.inc | ||
376 | - fix man pages | ||
377 | - added keypass2, qemu profiles | ||
378 | - added amarok, ark, atool, bleachbit, brasero, dolphin, dragon, elinks, enchant, exiftool profiles | ||
379 | - added file-roller, gedit, gjs,gnome-books, gnome-documents, gnome-maps, gnome-music profiles | ||
380 | - added gnome-photos, gnome-weather, goobox, gpa, gpg, gpg-agent, highlight profiles | ||
381 | - added img2txt, k3b, kate, lynx, mediainfo, nautilus, odt2txt, pdftotext, simple-scan profiles | ||
382 | - added skanlite, ssh-agent, transmission-cli, tracker, transmission-show, w3m, xfburn, xpra profiles | ||
383 | - added wget profile | ||
384 | - disable gnupg and systemd directories under /run/user | ||
385 | - added iridium browser profile | ||
386 | Vadim A. Misbakh-Soloviov (https://github.com/msva) | ||
401 | - profile fixes | 387 | - profile fixes |
402 | dewbasaur (https://github.com/dewbasaur) | 388 | ValdikSS (https://github.com/ValdikSS) |
403 | - block access to history files | 389 | - Psi+, Corebird, Konversation profiles |
404 | - Firefox PDF.js exploit (CVE-2015-4495) fixes | 390 | - various profile fixes |
405 | - Steam profile | 391 | Vasya Novikov (https://github.com/vn971) |
406 | Michael Haas (https://github.com/mhaas) | 392 | - Wesnoth profile |
407 | - bugfixes | 393 | - Hedegewars profile |
408 | mjudtmann (https://github.com/mjudtmann) | 394 | - manpage fixes |
409 | - lock firejail configuration in disable-mgmt.inc | 395 | - fixed firecfg clean/clear issue |
410 | iiotx (https://github.com/iiotx) | 396 | - found the ugliest bug so far |
411 | - use generic.profile by default | 397 | - seccomp debug description in man page |
412 | pstn (https://github.com/pstn) | 398 | Veeti Paananen (https://github.com/veeti) |
413 | - added install-strip, make install without strip | 399 | - fixed Spotify profile |
414 | Alexey Kuznetsov (kuznet@ms2.inr.ac.ru) | 400 | vismir2 (https://github.com/vismir2) |
415 | - src/lib/libnetlink.c extracted from iproute2 software package | 401 | - feh, ranger, 7z, keepass, keepassx and zathura profiles |
402 | - claws-mail, mutt, git, emacs, vim profiles | ||
403 | - lots of profile fixes | ||
404 | - support for truecrypt and zuluCrypt | ||
405 | xee5ch (https://github.com/xee5ch) | ||
406 | - skypeforlinux profile | ||
407 | yumkam (https://github.com/yumkam) | ||
408 | - add compile-time option to restrict --net= to root only | ||
409 | - man page fixes | ||
410 | Zack Weinberg (https://github.com/zackw) | ||
411 | - added support for joining a persistent, named network namespace | ||
412 | - removed libconnect | ||
413 | - fixed memory corruption in noblacklist processing | ||
414 | - rework DISPLAY environment parsing | ||
415 | - rework masking X11 sockets in /tmp/.X11-unix directory | ||
416 | - rework xpra and xephyr detection | ||
417 | - rework abstract X11 socket detection | ||
418 | - rework X11 display number assignment | ||
419 | - rework X11 xorg processing | ||
420 | - rework fcopy, --follow-link support in fcopy | ||
421 | - follow link support in --private-bin | ||
422 | - wait_for_other function rewrite | ||
423 | - xvfb X11 server support | ||
416 | 424 | ||
417 | Copyright (C) 2014-2017 Firejail Authors | 425 | Copyright (C) 2014-2017 Firejail Authors |