diff options
author | netblue30 <netblue30@yahoo.com> | 2017-08-27 07:26:37 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2017-08-27 07:26:37 -0400 |
commit | 392d977ed119e592d08a806013960c599867aca0 (patch) | |
tree | cbe4e8d864d2b56af8ac2fa334b8ff5dfef531ed /RELNOTES | |
parent | Merge pull request #1496 from SpotComms/mmc (diff) | |
download | firejail-392d977ed119e592d08a806013960c599867aca0.tar.gz firejail-392d977ed119e592d08a806013960c599867aca0.tar.zst firejail-392d977ed119e592d08a806013960c599867aca0.zip |
--private-bin: restrict full paths to the directories in the list
Diffstat (limited to 'RELNOTES')
-rw-r--r-- | RELNOTES | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -13,6 +13,7 @@ firejail (0.9.49) baseline; urgency=low | |||
13 | set "xpra-attach yes" in /etc/firejail/firejail.config | 13 | set "xpra-attach yes" in /etc/firejail/firejail.config |
14 | * enhancement: all profiles use a standard layout style | 14 | * enhancement: all profiles use a standard layout style |
15 | * enhancement: create /usr/local for firecfg if the directory doesn't exist | 15 | * enhancement: create /usr/local for firecfg if the directory doesn't exist |
16 | * enhancement: allow full paths in --private-bin | ||
16 | * seccomp feature: --memory-deny-write-execute | 17 | * seccomp feature: --memory-deny-write-execute |
17 | * seccomp feature: seccomp post-exec | 18 | * seccomp feature: seccomp post-exec |
18 | * seccomp feature: block secondary architecture (--seccomp.block_secondary) | 19 | * seccomp feature: block secondary architecture (--seccomp.block_secondary) |