diff options
-rw-r--r-- | README | 18 | ||||
-rw-r--r-- | README.md | 7 | ||||
-rw-r--r-- | RELNOTES | 4 | ||||
-rw-r--r-- | src/firejail/usage.c | 4 |
4 files changed, 26 insertions, 7 deletions
@@ -53,6 +53,7 @@ Firejail Authors (alphabetical order) | |||
53 | 53 | ||
54 | 7twin (https://github.com/7twin_ | 54 | 7twin (https://github.com/7twin_ |
55 | - fix typos | 55 | - fix typos |
56 | - fix flameshot raw screenshots | ||
56 | 1dnrr (https://github.com/1dnrr) | 57 | 1dnrr (https://github.com/1dnrr) |
57 | - add pybitmessage profile | 58 | - add pybitmessage profile |
58 | Aidan Gauland (https://github.com/aidalgol) | 59 | Aidan Gauland (https://github.com/aidalgol) |
@@ -173,6 +174,8 @@ curiosity-seeker (https://github.com/curiosity-seeker) | |||
173 | - various other profile fixes | 174 | - various other profile fixes |
174 | - added digiKam profile | 175 | - added digiKam profile |
175 | - write-protection for thumbnailer dir | 176 | - write-protection for thumbnailer dir |
177 | - added gramps, newsboat, freeoffice-planmaker profiles | ||
178 | - added freeoffice-textmaker, freeoffice-presentations profiles | ||
176 | da2x (https://github.com/da2x) | 179 | da2x (https://github.com/da2x) |
177 | - matched RPM license tag | 180 | - matched RPM license tag |
178 | Daan Bakker (https://github.com/dbakker) | 181 | Daan Bakker (https://github.com/dbakker) |
@@ -403,6 +406,8 @@ Loïc Damien (https://github.com/dzamlo) | |||
403 | - small fixes | 406 | - small fixes |
404 | Lockdis (https://github.com/Lockdis) | 407 | Lockdis (https://github.com/Lockdis) |
405 | - Added crow, nyx, and google-earth-pro profiles | 408 | - Added crow, nyx, and google-earth-pro profiles |
409 | Lukáš Krejčí (https://github.com/lskrejci) | ||
410 | - fixed parsing of --keep-var-tmp | ||
406 | luzpaz (https://github.com/luzpaz) | 411 | luzpaz (https://github.com/luzpaz) |
407 | - code spelling fixes | 412 | - code spelling fixes |
408 | maces (https://github.com/maces) | 413 | maces (https://github.com/maces) |
@@ -544,23 +549,30 @@ rusty-snake (https://github.com/rusty-snake) | |||
544 | - added profiles: thunderbird-wayland, supertuxkart, ghostwriter | 549 | - added profiles: thunderbird-wayland, supertuxkart, ghostwriter |
545 | - added profiles: klavaro, mypaint, mypaint-ora-thumbnailer, nano | 550 | - added profiles: klavaro, mypaint, mypaint-ora-thumbnailer, nano |
546 | - added profiles: gajim-history-manager, freemind, nomacs, kid3 | 551 | - added profiles: gajim-history-manager, freemind, nomacs, kid3 |
547 | - added profiles: kid3-qt, kid3-cli, anki, utox | 552 | - added profiles: kid3-qt, kid3-cli, anki, utox, mp3splt, mp3wrap |
553 | - added profiles: oggsplt, flacsplt, cheese | ||
548 | - fixed profiles: kdenlive, bibletime, rhythmbox, gajim, seahorse | 554 | - fixed profiles: kdenlive, bibletime, rhythmbox, gajim, seahorse |
549 | - fixed profiles: libreoffice, gnome-maps, wget, seahorse-tool | 555 | - fixed profiles: libreoffice, gnome-maps, wget, seahorse-tool |
550 | - fixed profiles: gnome-logs, atom, brackets, gnome-builder, geany | 556 | - fixed profiles: gnome-logs, atom, brackets, gnome-builder, geany |
551 | - fixed profiles: vim, emacs, pycharm-community, gedit, klavaro | 557 | - fixed profiles: vim, emacs, pycharm-community, gedit, klavaro |
552 | - fixed profiles: default | 558 | - fixed profiles: default, mpv, authenticator, gramps |
559 | - fixed profiles: freeoffice-planmaker, freeoffice-presentations | ||
560 | - fixed profiles: freeoffice-textmaker, code, newsboat | ||
553 | - hardened profiles: disable-common.inc, disable-programs.inc | 561 | - hardened profiles: disable-common.inc, disable-programs.inc |
554 | - hardened profiles: gajim, evince, ffmpeg, feh-network.inc, qtox | 562 | - hardened profiles: gajim, evince, ffmpeg, feh-network.inc, qtox |
555 | - hardened profiles: gnome-clocks, meld, minetest, youtube-dl | 563 | - hardened profiles: gnome-clocks, meld, minetest, youtube-dl |
556 | - hardened profiles: bibletime, whois, etr, display, feh | 564 | - hardened profiles: bibletime, whois, etr, display, feh, mpv |
557 | - gnome-mpv was renamed to celluloid | 565 | - gnome-mpv was renamed to celluloid |
566 | - some typo fixes | ||
558 | Salvo 'LtWorf' Tomaselli (https://github.com/ltworf) | 567 | Salvo 'LtWorf' Tomaselli (https://github.com/ltworf) |
559 | - fixed ktorrent profile | 568 | - fixed ktorrent profile |
560 | sarneaud (https://github.com/sarneaud) | 569 | sarneaud (https://github.com/sarneaud) |
561 | - rewrite globbing code to fix various minor issues | 570 | - rewrite globbing code to fix various minor issues |
562 | - added noblacklist command for profile files | 571 | - added noblacklist command for profile files |
563 | - various enhancements and bug fixes | 572 | - various enhancements and bug fixes |
573 | Senemu (https://github.com/Senemu) | ||
574 | - protection for .pythonrc.py | ||
575 | - fixed evince | ||
564 | Sergey Alirzaev (https://github.com/l29ah) | 576 | Sergey Alirzaev (https://github.com/l29ah) |
565 | - firejail.h enum fix | 577 | - firejail.h enum fix |
566 | Tobias Schmidl (https://github.com/schtobia) | 578 | Tobias Schmidl (https://github.com/schtobia) |
@@ -102,4 +102,9 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe | |||
102 | ## Current development version: 0.9.59 | 102 | ## Current development version: 0.9.59 |
103 | 103 | ||
104 | ## New profiles: | 104 | ## New profiles: |
105 | anki, assogiate, autokey-gtk, autokey-qt, autokey-run, autokey-shell, bzflag, celluoid, cheese, code-oss, crawl, crawl-tiles, crow, d-feet, dconf, dconf-editor, devhelp, exfalso, font-manager, freeciv, freecol, freemind, gconf-editor, geekbench, gnome-keyring, gnome-nettool, gnome-system-log, gsettings, kid3, kid3-cli, kid3-qt, klavaro, lincity-ng, lugaru, Maelstrom, manaplus, megaglest, mpdris2, mypaint, nano, netactview, nomacs, nyx, opencity, openclonk, openttd, ostrichriders, pavucontrol, pioneer, pragha, redshift, regextester, seahorse, seahorse-tool, scorched3d, secret-tool, simplescreenrecorder, slashem, subdownloader, sysprof, sysprof-cli, teeworlds, torcs, tremulous, transgui, utox, vulturesclaw, vultureseye, warsow, widelands, xfce4-mixer | 105 | anki, assogiate, autokey-gtk, autokey-qt, autokey-run, autokey-shell, bzflag, celluoid, cheese, code-oss, crawl, crawl-tiles, crow, d-feet, dconf, |
106 | dconf-editor, devhelp, exfalso, font-manager, freeciv, freecol, freeoffice-planmaker, freeoffice-presentations, freeoffice-textmaker, freemind, | ||
107 | gconf-editor, geekbench, gnome-keyring, gnome-nettool, gnome-system-log, gramps, gsettings, kid3, kid3-cli, kid3-qt, lincity-ng, lugaru, | ||
108 | Maelstrom, manaplus, megaglest, mpdris2, mypaint, nano, netactview, newsboat, nomacs, nyx, opencity, openclonk, openttd, ostrichriders, pavucontrol, | ||
109 | pioneer, pragha, redshift, regextester, seahorse, seahorse-tool, scorched3d, secret-tool, simplescreenrecorder, slashem, subdownloader, sysprof, | ||
110 | sysprof-cli, teeworlds, torcs, tremulous, transgui, utox, vulturesclaw, vultureseye, warsow, widelands, xfce4-mixer | ||
@@ -11,8 +11,10 @@ firejail (0.9.59) baseline; urgency=low | |||
11 | * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus | 11 | * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus |
12 | * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt | 12 | * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt |
13 | * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem | 13 | * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem |
14 | * new profiles: vultureseye, vulturesclaw, anki, cheese, utox | 14 | * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt, mp3wrap |
15 | * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker | ||
15 | * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell | 16 | * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell |
17 | * new profiles: freeoffice-presentations, freeoffice-textmaker | ||
16 | * memory-deny-write-execute now also blocks memfd_create | 18 | * memory-deny-write-execute now also blocks memfd_create |
17 | * drop support for flatpak/snap packages | 19 | * drop support for flatpak/snap packages |
18 | 20 | ||
diff --git a/src/firejail/usage.c b/src/firejail/usage.c index 993ba92bb..598fbe336 100644 --- a/src/firejail/usage.c +++ b/src/firejail/usage.c | |||
@@ -103,7 +103,7 @@ static char *usage_str = | |||
103 | " --machine-id - preserve /etc/machine-id\n" | 103 | " --machine-id - preserve /etc/machine-id\n" |
104 | #ifdef HAVE_SECCOMP | 104 | #ifdef HAVE_SECCOMP |
105 | " --memory-deny-write-execute - seccomp filter to block attempts to create\n" | 105 | " --memory-deny-write-execute - seccomp filter to block attempts to create\n" |
106 | "\tmemory mappings that are both writable and executable.\n" | 106 | "\tmemory mappings that are both writable and executable.\n" |
107 | #endif | 107 | #endif |
108 | #ifdef HAVE_NETWORK | 108 | #ifdef HAVE_NETWORK |
109 | " --mtu=number - set interface MTU.\n" | 109 | " --mtu=number - set interface MTU.\n" |
@@ -140,7 +140,7 @@ static char *usage_str = | |||
140 | " --noautopulse - disable automatic ~/.config/pulse init.\n" | 140 | " --noautopulse - disable automatic ~/.config/pulse init.\n" |
141 | " --novideo - disable video devices.\n" | 141 | " --novideo - disable video devices.\n" |
142 | " --nou2f - disable U2F devices.\n" | 142 | " --nou2f - disable U2F devices.\n" |
143 | " --nowhitelist=filename - disable whitelist for file or directory .\n" | 143 | " --nowhitelist=filename - disable whitelist for file or directory.\n" |
144 | " --output=logfile - stdout logging and log rotation.\n" | 144 | " --output=logfile - stdout logging and log rotation.\n" |
145 | " --output-stderr=logfile - stdout and stderr logging and log rotation.\n" | 145 | " --output-stderr=logfile - stdout and stderr logging and log rotation.\n" |
146 | " --overlay - mount a filesystem overlay on top of the current filesystem.\n" | 146 | " --overlay - mount a filesystem overlay on top of the current filesystem.\n" |