diff options
-rw-r--r-- | README | 4 | ||||
-rw-r--r-- | README.md | 18 | ||||
-rw-r--r-- | RELNOTES | 2 |
3 files changed, 24 insertions, 0 deletions
@@ -109,6 +109,8 @@ Cat (https://github.com/ecat3) | |||
109 | - prevent tmux connecting to an existing session | 109 | - prevent tmux connecting to an existing session |
110 | creideiki (https://github.com/creideiki) | 110 | creideiki (https://github.com/creideiki) |
111 | - make the sandbox process reap all children | 111 | - make the sandbox process reap all children |
112 | chiraag-nataraj (https://github.com/chiraag-nataraj) | ||
113 | - support for newer Xpra versions (2.1+) | ||
112 | Christian Stadelmann (https://github.com/genodeftest) | 114 | Christian Stadelmann (https://github.com/genodeftest) |
113 | - profile fixes | 115 | - profile fixes |
114 | - evolution profile fix | 116 | - evolution profile fix |
@@ -491,6 +493,8 @@ vismir2 (https://github.com/vismir2) | |||
491 | - claws-mail, mutt, git, emacs, vim profiles | 493 | - claws-mail, mutt, git, emacs, vim profiles |
492 | - lots of profile fixes | 494 | - lots of profile fixes |
493 | - support for truecrypt and zuluCrypt | 495 | - support for truecrypt and zuluCrypt |
496 | Vladimir Schowalter (https://github.com/VladimirSchowalter20) | ||
497 | - apparmor profile enhancements | ||
494 | xee5ch (https://github.com/xee5ch) | 498 | xee5ch (https://github.com/xee5ch) |
495 | - skypeforlinux profile | 499 | - skypeforlinux profile |
496 | yumkam (https://github.com/yumkam) | 500 | yumkam (https://github.com/yumkam) |
@@ -114,6 +114,24 @@ Use this issue to request new profiles: [#1139](https://github.com/netblue30/fir | |||
114 | fox | 114 | fox |
115 | ````` | 115 | ````` |
116 | 116 | ||
117 | ## /etc/firejail/firejail.config | ||
118 | |||
119 | ````` | ||
120 | # Number of ARP probes sent when assigning an IP address for --net option, | ||
121 | # default 2. This is a partial implementation of RFC 5227. A 0.5 seconds | ||
122 | # timeout is implemented for each probe. Increase this number to 4 if your | ||
123 | # local layer 2 network uses RSTP (IEEE 802.1w). Permitted values are | ||
124 | # between 1 and 30. | ||
125 | # arp-probes 2 | ||
126 | |||
127 | # Enable this option if you have a version of Xpra that supports --attach switch | ||
128 | # for start command, default disabled. | ||
129 | # xpra-attach no | ||
130 | |||
131 | |||
132 | ````` | ||
133 | |||
134 | |||
117 | ## Default seccomp list update | 135 | ## Default seccomp list update |
118 | 136 | ||
119 | The following syscalls have been added: | 137 | The following syscalls have been added: |
@@ -5,6 +5,8 @@ firejail (0.9.49) baseline; urgency=low | |||
5 | * enhancement: /proc/sys mounting | 5 | * enhancement: /proc/sys mounting |
6 | * enhancement: default seccomp list update | 6 | * enhancement: default seccomp list update |
7 | * enhancement: rework IP address assingment for --net options | 7 | * enhancement: rework IP address assingment for --net options |
8 | * enhancement: support for newer Xpra versions (2.1+) - | ||
9 | set "xpra-attach yes" in /etc/firejail/firejail.config | ||
8 | * new profiles: curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite, | 10 | * new profiles: curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite, |
9 | * new profiles: Geary, Liferea, peek, silentarmy, IntelliJ IDEA, | 11 | * new profiles: Geary, Liferea, peek, silentarmy, IntelliJ IDEA, |
10 | * new profiles: Android Studio, electron, riot-web, Extreme Tux Racer, | 12 | * new profiles: Android Studio, electron, riot-web, Extreme Tux Racer, |