aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--.github/workflows/codeql-analysis.yml6
-rw-r--r--.gitlab-ci.yml4
-rw-r--r--Makefile.in1
-rw-r--r--README17
-rw-r--r--README.md40
-rw-r--r--RELNOTES12
-rwxr-xr-xconfigure26
-rw-r--r--configure.ac2
-rwxr-xr-xcontrib/firejail-welcome.sh2
-rwxr-xr-xcontrib/fj-mkdeb.py2
-rwxr-xr-xcontrib/fjclip.py2
-rwxr-xr-xcontrib/fjdisplay.py2
-rwxr-xr-xcontrib/fjresize.py2
-rwxr-xr-xcontrib/gdb-firejail.sh2
-rwxr-xr-xcontrib/jail_prober.py2
-rwxr-xr-xcontrib/sort.py2
-rwxr-xr-xcontrib/syscalls.sh2
-rwxr-xr-xcontrib/update_deb.sh2
-rw-r--r--contrib/vim/syntax/firejail.vim2
-rw-r--r--etc/inc/allow-perl.inc3
-rw-r--r--etc/inc/disable-common.inc3
-rw-r--r--etc/inc/disable-interpreters.inc9
-rw-r--r--etc/inc/disable-programs.inc12
-rw-r--r--etc/profile-a-l/1password.profile20
-rw-r--r--etc/profile-a-l/akonadi_control.profile1
-rw-r--r--etc/profile-a-l/chromium-common.profile9
-rw-r--r--etc/profile-a-l/chromium.profile1
-rw-r--r--etc/profile-a-l/cointop.profile63
-rw-r--r--etc/profile-a-l/ephemeral.profile6
-rw-r--r--etc/profile-a-l/ferdi.profile6
-rw-r--r--etc/profile-a-l/firefox-common.profile7
-rw-r--r--etc/profile-a-l/firefox-developer-edition.profile4
-rw-r--r--etc/profile-a-l/franz.profile6
-rw-r--r--etc/profile-a-l/kmail.profile1
-rw-r--r--etc/profile-a-l/librewolf.profile2
-rw-r--r--etc/profile-a-l/lutris.profile3
-rw-r--r--etc/profile-m-z/mediathekview.profile4
-rw-r--r--etc/profile-m-z/midori.profile6
-rw-r--r--etc/profile-m-z/otter-browser.profile6
-rw-r--r--etc/profile-m-z/raincat.profile49
-rw-r--r--etc/profile-m-z/rambox.profile6
-rw-r--r--etc/profile-m-z/rpcs3.profile62
-rw-r--r--etc/profile-m-z/seamonkey.profile6
-rw-r--r--etc/profile-m-z/signal-desktop.profile8
-rw-r--r--etc/profile-m-z/ssh.profile1
-rw-r--r--etc/profile-m-z/steam.profile4
-rw-r--r--etc/profile-m-z/supertuxkart.profile2
-rw-r--r--etc/profile-m-z/uzbl-browser.profile1
-rw-r--r--etc/profile-m-z/warzone2100.profile7
-rw-r--r--etc/profile-m-z/wget2.profile19
-rw-r--r--etc/profile-m-z/wine.profile1
-rw-r--r--etc/profile-m-z/youtube-viewers-common.profile2
-rw-r--r--etc/templates/profile.template1
-rwxr-xr-xgcov.sh2
-rwxr-xr-xinstall.sh2
-rwxr-xr-xlinecnt.sh2
-rwxr-xr-xmkasc.sh2
-rwxr-xr-xmkdeb.sh.in2
-rwxr-xr-xmketc.sh2
-rwxr-xr-xmkman.sh2
-rwxr-xr-xmkuid.sh2
-rw-r--r--platform/debian/copyright2
-rwxr-xr-xplatform/rpm/mkrpm.sh2
-rw-r--r--src/fbuilder/build_bin.c2
-rw-r--r--src/fbuilder/build_fs.c2
-rw-r--r--src/fbuilder/build_home.c2
-rw-r--r--src/fbuilder/build_profile.c50
-rw-r--r--src/fbuilder/build_seccomp.c2
-rw-r--r--src/fbuilder/fbuilder.h3
-rw-r--r--src/fbuilder/filedb.c2
-rw-r--r--src/fbuilder/main.c5
-rw-r--r--src/fbuilder/utils.c2
-rw-r--r--src/fcopy/main.c5
-rw-r--r--src/fids/blake2b.c2
-rw-r--r--src/fids/db.c2
-rw-r--r--src/fids/db_exclude.c2
-rw-r--r--src/fids/fids.h2
-rw-r--r--src/fids/main.c2
-rw-r--r--src/firecfg/desktop_files.c2
-rw-r--r--src/firecfg/firecfg.config5
-rw-r--r--src/firecfg/firecfg.h2
-rw-r--r--src/firecfg/main.c2
-rw-r--r--src/firecfg/sound.c2
-rw-r--r--src/firecfg/util.c2
-rw-r--r--src/firejail/appimage.c2
-rw-r--r--src/firejail/appimage_size.c2
-rw-r--r--src/firejail/arp.c2
-rw-r--r--src/firejail/bandwidth.c2
-rw-r--r--src/firejail/caps.c2
-rw-r--r--src/firejail/cgroup.c6
-rw-r--r--src/firejail/checkcfg.c2
-rw-r--r--src/firejail/chroot.c2
-rw-r--r--src/firejail/cmdline.c2
-rw-r--r--src/firejail/cpu.c2
-rw-r--r--src/firejail/dbus.c13
-rw-r--r--src/firejail/dhcp.c2
-rw-r--r--src/firejail/env.c2
-rw-r--r--src/firejail/firejail.h7
-rw-r--r--src/firejail/fs.c2
-rw-r--r--src/firejail/fs_bin.c2
-rw-r--r--src/firejail/fs_dev.c2
-rw-r--r--src/firejail/fs_etc.c4
-rw-r--r--src/firejail/fs_home.c2
-rw-r--r--src/firejail/fs_hostname.c2
-rw-r--r--src/firejail/fs_lib.c2
-rw-r--r--src/firejail/fs_lib2.c2
-rw-r--r--src/firejail/fs_logger.c2
-rw-r--r--src/firejail/fs_mkdir.c2
-rw-r--r--src/firejail/fs_overlayfs.c2
-rw-r--r--src/firejail/fs_trace.c2
-rw-r--r--src/firejail/fs_var.c2
-rw-r--r--src/firejail/fs_whitelist.c31
-rw-r--r--src/firejail/ids.c2
-rw-r--r--src/firejail/join.c7
-rw-r--r--src/firejail/ls.c2
-rw-r--r--src/firejail/macros.c6
-rw-r--r--src/firejail/main.c52
-rw-r--r--src/firejail/mountinfo.c2
-rw-r--r--src/firejail/netfilter.c7
-rw-r--r--src/firejail/netns.c2
-rw-r--r--src/firejail/network.c2
-rw-r--r--src/firejail/network_main.c2
-rw-r--r--src/firejail/no_sandbox.c2
-rw-r--r--src/firejail/output.c2
-rw-r--r--src/firejail/paths.c2
-rw-r--r--src/firejail/preproc.c2
-rw-r--r--src/firejail/profile.c11
-rw-r--r--src/firejail/protocol.c2
-rw-r--r--src/firejail/pulseaudio.c56
-rw-r--r--src/firejail/restrict_users.c2
-rw-r--r--src/firejail/restricted_shell.c2
-rw-r--r--src/firejail/rlimit.c2
-rw-r--r--src/firejail/run_files.c2
-rw-r--r--src/firejail/run_symlink.c2
-rw-r--r--src/firejail/sandbox.c48
-rw-r--r--src/firejail/sbox.c18
-rw-r--r--src/firejail/seccomp.c2
-rw-r--r--src/firejail/selinux.c2
-rw-r--r--src/firejail/shutdown.c2
-rw-r--r--src/firejail/usage.c4
-rw-r--r--src/firejail/util.c50
-rw-r--r--src/firejail/x11.c2
-rw-r--r--src/firemon/apparmor.c2
-rw-r--r--src/firemon/arp.c2
-rw-r--r--src/firemon/caps.c2
-rw-r--r--src/firemon/cgroup.c2
-rw-r--r--src/firemon/cpu.c2
-rw-r--r--src/firemon/firemon.c2
-rw-r--r--src/firemon/firemon.h2
-rw-r--r--src/firemon/interface.c2
-rw-r--r--src/firemon/list.c2
-rw-r--r--src/firemon/netstats.c2
-rw-r--r--src/firemon/procevent.c2
-rw-r--r--src/firemon/route.c2
-rw-r--r--src/firemon/seccomp.c2
-rw-r--r--src/firemon/top.c2
-rw-r--r--src/firemon/tree.c2
-rw-r--r--src/firemon/usage.c4
-rw-r--r--src/firemon/x11.c2
-rw-r--r--src/fldd/main.c2
-rw-r--r--src/fnet/arp.c2
-rw-r--r--src/fnet/fnet.h2
-rw-r--r--src/fnet/interface.c2
-rw-r--r--src/fnet/main.c2
-rw-r--r--src/fnet/veth.c2
-rw-r--r--src/fnetfilter/main.c2
-rw-r--r--src/fnettrace/fnettrace.h17
-rw-r--r--src/fnettrace/hostnames.c124
-rw-r--r--src/fnettrace/main.c293
-rw-r--r--src/fnettrace/radix.c155
-rw-r--r--src/fnettrace/radix.h27
-rw-r--r--src/fnettrace/static-ip-map4044
-rw-r--r--src/fsec-optimize/fsec_optimize.h2
-rw-r--r--src/fsec-optimize/main.c2
-rw-r--r--src/fsec-optimize/optimizer.c2
-rw-r--r--src/fsec-print/fsec_print.h2
-rw-r--r--src/fsec-print/main.c2
-rw-r--r--src/fsec-print/print.c2
-rw-r--r--src/fseccomp/fseccomp.h2
-rw-r--r--src/fseccomp/main.c2
-rw-r--r--src/fseccomp/protocol.c2
-rw-r--r--src/fseccomp/seccomp.c2
-rw-r--r--src/fseccomp/seccomp_file.c2
-rw-r--r--src/fseccomp/seccomp_secondary.c2
-rwxr-xr-xsrc/fshaper/fshaper.sh2
-rw-r--r--src/ftee/ftee.h2
-rw-r--r--src/ftee/main.c2
-rw-r--r--src/include/common.h22
-rw-r--r--src/include/euid_common.h2
-rw-r--r--src/include/firejail_user.h2
-rw-r--r--src/include/gcov_wrapper.h2
-rw-r--r--src/include/ldd_utils.h2
-rw-r--r--src/include/pid.h2
-rw-r--r--src/include/rundefs.h2
-rw-r--r--src/include/seccomp.h2
-rw-r--r--src/include/syscall.h2
-rw-r--r--src/jailcheck/access.c2
-rw-r--r--src/jailcheck/apparmor.c2
-rw-r--r--src/jailcheck/jailcheck.h2
-rw-r--r--src/jailcheck/main.c2
-rw-r--r--src/jailcheck/network.c2
-rw-r--r--src/jailcheck/noexec.c2
-rw-r--r--src/jailcheck/seccomp.c2
-rw-r--r--src/jailcheck/sysfiles.c2
-rw-r--r--src/jailcheck/utils.c2
-rw-r--r--src/jailcheck/virtual.c2
-rw-r--r--src/lib/common.c52
-rw-r--r--src/lib/errno.c2
-rw-r--r--src/lib/firejail_user.c2
-rw-r--r--src/lib/ldd_utils.c2
-rw-r--r--src/lib/pid.c2
-rw-r--r--src/lib/syscall.c12
-rw-r--r--src/libpostexecseccomp/libpostexecseccomp.c2
-rw-r--r--src/libtrace/libtrace.c2
-rw-r--r--src/libtracelog/libtracelog.c2
-rw-r--r--src/man/firejail-profile.txt13
-rw-r--r--src/man/firejail.txt94
-rwxr-xr-xsrc/man/preproc.awk2
-rw-r--r--src/profstats/main.c2
-rwxr-xr-xsrc/tools/check-caps.sh2
-rw-r--r--src/tools/extract_caps.c2
-rw-r--r--src/tools/extract_errnos.sh2
-rw-r--r--src/tools/extract_seccomp.c2
-rw-r--r--src/tools/extract_syscalls.c2
-rwxr-xr-xsrc/tools/mkcoverit.sh2
-rw-r--r--src/tools/testuid.c2
-rw-r--r--src/tools/ttytest.c2
-rw-r--r--src/tools/unixsocket.c2
-rw-r--r--src/zsh_completion/_firejail.in2
-rwxr-xr-xtest/appimage/appimage-args.exp2
-rwxr-xr-xtest/appimage/appimage-trace.exp2
-rwxr-xr-xtest/appimage/appimage-v1.exp2
-rwxr-xr-xtest/appimage/appimage-v2.exp2
-rwxr-xr-xtest/appimage/appimage.sh2
-rwxr-xr-xtest/appimage/filename.exp2
-rwxr-xr-xtest/apps-x11-xorg/apps-x11-xorg.sh2
-rwxr-xr-xtest/apps-x11-xorg/firefox.exp2
-rwxr-xr-xtest/apps-x11-xorg/thunderbird.exp2
-rwxr-xr-xtest/apps-x11-xorg/transmission-gtk.exp2
-rwxr-xr-xtest/apps-x11-xorg/transmission-qt.exp2
-rwxr-xr-xtest/apps-x11/apps-x11.sh2
-rwxr-xr-xtest/apps-x11/chromium.exp2
-rwxr-xr-xtest/apps-x11/firefox.exp2
-rwxr-xr-xtest/apps-x11/thunderbird.exp2
-rwxr-xr-xtest/apps-x11/transmission-gtk.exp2
-rwxr-xr-xtest/apps-x11/x11-none.exp2
-rwxr-xr-xtest/apps-x11/x11-xephyr.exp2
-rwxr-xr-xtest/apps-x11/xterm-xephyr.exp2
-rwxr-xr-xtest/apps-x11/xterm-xorg.exp2
-rwxr-xr-xtest/apps-x11/xterm-xpra.exp2
-rwxr-xr-xtest/apps/apps.sh2
-rwxr-xr-xtest/apps/chromium.exp2
-rwxr-xr-xtest/apps/deluge.exp2
-rwxr-xr-xtest/apps/fbreader.exp2
-rwxr-xr-xtest/apps/filezilla.exp2
-rwxr-xr-xtest/apps/firefox.exp2
-rwxr-xr-xtest/apps/gnome-mplayer.exp2
-rwxr-xr-xtest/apps/gthumb.exp2
-rwxr-xr-xtest/apps/hexchat.exp2
-rwxr-xr-xtest/apps/kcalc.exp2
-rwxr-xr-xtest/apps/ktorrent.exp2
-rwxr-xr-xtest/apps/midori.exp2
-rwxr-xr-xtest/apps/opera.exp2
-rwxr-xr-xtest/apps/qbittorrent.exp2
-rwxr-xr-xtest/apps/thunderbird.exp2
-rwxr-xr-xtest/apps/transmission-qt.exp2
-rwxr-xr-xtest/apps/uget-gtk.exp2
-rwxr-xr-xtest/apps/vlc.exp2
-rwxr-xr-xtest/apps/wine.exp2
-rwxr-xr-xtest/apps/xchat.exp2
-rwxr-xr-xtest/chroot/chroot.sh2
-rwxr-xr-xtest/chroot/configure2
-rwxr-xr-xtest/chroot/fs_chroot.exp2
-rwxr-xr-xtest/chroot/unchroot-as-root.exp2
-rw-r--r--test/chroot/unchroot.c2
-rwxr-xr-xtest/compile/compile.sh2
-rwxr-xr-xtest/environment/allow-debuggers.exp2
-rwxr-xr-xtest/environment/csh.exp2
-rwxr-xr-xtest/environment/dash.exp2
-rwxr-xr-xtest/environment/deterministic-exit-code.exp2
-rwxr-xr-xtest/environment/deterministic-shutdown.exp7
-rwxr-xr-xtest/environment/dns.exp2
-rwxr-xr-xtest/environment/doubledash.exp2
-rwxr-xr-xtest/environment/env.exp2
-rwxr-xr-xtest/environment/environment.sh8
-rwxr-xr-xtest/environment/extract_command.exp2
-rwxr-xr-xtest/environment/firejail-in-firejail.exp2
-rwxr-xr-xtest/environment/hostfile.exp2
-rwxr-xr-xtest/environment/ibus.exp2
-rwxr-xr-xtest/environment/keep-fd-bad.exp40
-rwxr-xr-xtest/environment/keep-fd.exp223
-rwxr-xr-xtest/environment/machineid.exp2
-rwxr-xr-xtest/environment/nice.exp2
-rwxr-xr-xtest/environment/output.exp2
-rwxr-xr-xtest/environment/output.sh2
-rwxr-xr-xtest/environment/quiet.exp2
-rwxr-xr-xtest/environment/rlimit-bad-profile.exp2
-rwxr-xr-xtest/environment/rlimit-bad.exp2
-rwxr-xr-xtest/environment/rlimit-join.exp2
-rwxr-xr-xtest/environment/rlimit-profile.exp2
-rwxr-xr-xtest/environment/rlimit.exp2
-rwxr-xr-xtest/environment/shell-none.exp2
-rwxr-xr-xtest/environment/sound.exp2
-rwxr-xr-xtest/environment/timeout.exp2
-rwxr-xr-xtest/environment/umask.exp2
-rwxr-xr-xtest/environment/zsh.exp2
-rwxr-xr-xtest/fcopy/cmdline.exp2
-rwxr-xr-xtest/fcopy/dircopy.exp16
-rwxr-xr-xtest/fcopy/fcopy.sh9
-rwxr-xr-xtest/fcopy/filecopy.exp2
-rwxr-xr-xtest/fcopy/linkcopy.exp16
l---------test/fcopy/src/dircopy.exp1
-rwxr-xr-xtest/features/1.1.exp2
-rwxr-xr-xtest/features/1.10.exp2
-rwxr-xr-xtest/features/1.2.exp2
-rwxr-xr-xtest/features/1.4.exp2
-rwxr-xr-xtest/features/1.5.exp2
-rwxr-xr-xtest/features/1.6.exp2
-rwxr-xr-xtest/features/1.7.exp2
-rwxr-xr-xtest/features/1.8.exp2
-rwxr-xr-xtest/features/2.1.exp2
-rwxr-xr-xtest/features/2.2.exp2
-rwxr-xr-xtest/features/2.3.exp2
-rwxr-xr-xtest/features/2.4.exp2
-rwxr-xr-xtest/features/2.5.exp2
-rwxr-xr-xtest/features/2.6.exp2
-rwxr-xr-xtest/features/3.1.exp2
-rwxr-xr-xtest/features/3.10.exp2
-rwxr-xr-xtest/features/3.11.exp2
-rwxr-xr-xtest/features/3.2.exp2
-rwxr-xr-xtest/features/3.3.exp2
-rwxr-xr-xtest/features/3.4.exp2
-rwxr-xr-xtest/features/3.5.exp2
-rwxr-xr-xtest/features/3.6.exp2
-rwxr-xr-xtest/features/3.7.exp2
-rwxr-xr-xtest/features/3.8.exp2
-rwxr-xr-xtest/features/3.9.exp2
-rwxr-xr-xtest/features/test.sh2
-rwxr-xr-xtest/filters/apparmor.exp2
-rwxr-xr-xtest/filters/caps-join.exp2
-rwxr-xr-xtest/filters/caps-print.exp2
-rwxr-xr-xtest/filters/caps.exp2
-rwxr-xr-xtest/filters/debug.exp2
-rwxr-xr-xtest/filters/filters.sh2
-rwxr-xr-xtest/filters/fseccomp.exp2
-rwxr-xr-xtest/filters/memwrexe-32.exp2
-rw-r--r--test/filters/memwrexe.c2
-rwxr-xr-xtest/filters/memwrexe.exp2
-rwxr-xr-xtest/filters/noroot.exp2
-rwxr-xr-xtest/filters/protocol.exp2
-rwxr-xr-xtest/filters/seccomp-bad-empty.exp2
-rwxr-xr-xtest/filters/seccomp-chmod-profile.exp2
-rwxr-xr-xtest/filters/seccomp-chmod.exp2
-rwxr-xr-xtest/filters/seccomp-chown.exp2
-rwxr-xr-xtest/filters/seccomp-debug-32.exp2
-rwxr-xr-xtest/filters/seccomp-debug.exp2
-rwxr-xr-xtest/filters/seccomp-empty.exp2
-rwxr-xr-xtest/filters/seccomp-errno.exp2
-rwxr-xr-xtest/filters/seccomp-join.exp2
-rwxr-xr-xtest/filters/seccomp-numeric.exp2
-rwxr-xr-xtest/filters/seccomp-postexec.exp2
-rwxr-xr-xtest/filters/seccomp-ptrace.exp2
-rwxr-xr-xtest/filters/seccomp-run-files.exp2
-rwxr-xr-xtest/filters/seccomp-su.exp2
-rwxr-xr-xtest/fnetfilter/cmdline.exp2
-rwxr-xr-xtest/fnetfilter/copy.exp2
-rwxr-xr-xtest/fnetfilter/default.exp2
-rwxr-xr-xtest/fnetfilter/fnetfilter.sh2
-rwxr-xr-xtest/fnetfilter/template.exp2
-rwxr-xr-xtest/fs/fs.sh2
-rwxr-xr-xtest/fs/fs_dev_shm.exp2
-rwxr-xr-xtest/fs/fs_var_lock.exp2
-rwxr-xr-xtest/fs/fs_var_tmp.exp2
-rwxr-xr-xtest/fs/fscheck-bindnoroot.exp2
-rwxr-xr-xtest/fs/fscheck-private.exp2
-rwxr-xr-xtest/fs/fscheck-readonly.exp2
-rwxr-xr-xtest/fs/fscheck-tmpfs.exp2
-rwxr-xr-xtest/fs/invalid_filename.exp2
-rwxr-xr-xtest/fs/kmsg.exp2
-rwxr-xr-xtest/fs/macro.exp2
-rwxr-xr-xtest/fs/mkdir.exp2
-rwxr-xr-xtest/fs/mkdir_mkfile.exp2
-rwxr-xr-xtest/fs/noblacklist-blacklist-noexec.exp2
-rwxr-xr-xtest/fs/noblacklist-blacklist-readonly.exp2
-rwxr-xr-xtest/fs/option_bind_user.exp2
-rwxr-xr-xtest/fs/option_blacklist.exp2
-rwxr-xr-xtest/fs/option_blacklist_file.exp2
-rwxr-xr-xtest/fs/option_blacklist_glob.exp2
-rwxr-xr-xtest/fs/private-bin.exp2
-rwxr-xr-xtest/fs/private-cache.exp2
-rwxr-xr-xtest/fs/private-cwd.exp2
-rwxr-xr-xtest/fs/private-etc-empty.exp2
-rwxr-xr-xtest/fs/private-etc.exp2
-rwxr-xr-xtest/fs/private-home-dir.exp2
-rwxr-xr-xtest/fs/private-home.exp2
-rwxr-xr-xtest/fs/private-homedir.exp2
-rwxr-xr-xtest/fs/private-lib.exp2
-rwxr-xr-xtest/fs/private-whitelist.exp2
-rwxr-xr-xtest/fs/private.exp2
-rwxr-xr-xtest/fs/read-write.exp2
-rwxr-xr-xtest/fs/sys_fs.exp2
-rwxr-xr-xtest/fs/whitelist-dev.exp2
-rwxr-xr-xtest/fs/whitelist-double.exp2
-rwxr-xr-xtest/fs/whitelist-empty.exp2
-rwxr-xr-xtest/fs/whitelist-noexec.exp2
-rwxr-xr-xtest/fs/whitelist-readonly.exp2
-rwxr-xr-xtest/fs/whitelist-whitespace.exp2
-rwxr-xr-xtest/fs/whitelist.exp2
-rwxr-xr-xtest/network/4bridges_arp.exp2
-rwxr-xr-xtest/network/4bridges_ip.exp2
-rwxr-xr-xtest/network/bandwidth.exp2
-rwxr-xr-xtest/network/configure2
-rwxr-xr-xtest/network/dns-print.exp2
-rwxr-xr-xtest/network/firemon-arp.exp2
-rwxr-xr-xtest/network/firemon-interfaces.exp2
-rwxr-xr-xtest/network/firemon-route.exp2
-rwxr-xr-xtest/network/hostname.exp2
-rwxr-xr-xtest/network/interface.exp2
-rwxr-xr-xtest/network/ip6.exp2
-rwxr-xr-xtest/network/iprange.exp2
-rwxr-xr-xtest/network/net_arp.exp2
-rwxr-xr-xtest/network/net_badip.exp2
-rwxr-xr-xtest/network/net_defaultgw.exp2
-rwxr-xr-xtest/network/net_defaultgw2.exp2
-rwxr-xr-xtest/network/net_defaultgw3.exp2
-rwxr-xr-xtest/network/net_ip.exp2
-rwxr-xr-xtest/network/net_local.exp2
-rwxr-xr-xtest/network/net_mac.exp2
-rwxr-xr-xtest/network/net_macvlan2.exp2
-rwxr-xr-xtest/network/net_mtu.exp2
-rwxr-xr-xtest/network/net_netfilter.exp2
-rwxr-xr-xtest/network/net_noip.exp2
-rwxr-xr-xtest/network/net_noip2.exp2
-rwxr-xr-xtest/network/net_none.exp2
-rwxr-xr-xtest/network/net_profile.exp2
-rwxr-xr-xtest/network/net_scan.exp2
-rwxr-xr-xtest/network/net_unconfigured.exp2
-rwxr-xr-xtest/network/net_veth.exp2
-rwxr-xr-xtest/network/netfilter-template.exp2
-rwxr-xr-xtest/network/netns.exp2
-rwxr-xr-xtest/network/netstats.exp2
-rwxr-xr-xtest/network/network.sh2
-rw-r--r--test/network/tcpserver.c2
-rwxr-xr-xtest/network/veth-name.exp2
-rwxr-xr-xtest/overlay/firefox-x11-xorg.exp2
-rwxr-xr-xtest/overlay/firefox-x11.exp2
-rwxr-xr-xtest/overlay/firefox.exp2
-rwxr-xr-xtest/overlay/fs-named.exp2
-rwxr-xr-xtest/overlay/fs-tmpfs.exp2
-rwxr-xr-xtest/overlay/fs.exp2
-rwxr-xr-xtest/overlay/overlay.sh2
-rwxr-xr-xtest/private-lib/atril.exp2
-rwxr-xr-xtest/private-lib/dig.exp2
-rwxr-xr-xtest/private-lib/eog.exp2
-rwxr-xr-xtest/private-lib/eom.exp2
-rwxr-xr-xtest/private-lib/evince.exp2
-rwxr-xr-xtest/private-lib/galculator.exp2
-rwxr-xr-xtest/private-lib/gedit.exp2
-rwxr-xr-xtest/private-lib/gnome-calculator.exp2
-rwxr-xr-xtest/private-lib/gnome-logs.exp2
-rwxr-xr-xtest/private-lib/gnome-nettool.exp2
-rwxr-xr-xtest/private-lib/gnome-system-log.exp2
-rwxr-xr-xtest/private-lib/gpicview.exp2
-rwxr-xr-xtest/private-lib/leafpad.exp2
-rwxr-xr-xtest/private-lib/mousepad.exp2
-rwxr-xr-xtest/private-lib/pavucontrol.exp2
-rwxr-xr-xtest/private-lib/pluma.exp2
-rwxr-xr-xtest/private-lib/private-lib.sh2
-rwxr-xr-xtest/private-lib/transmission-gtk.exp2
-rwxr-xr-xtest/private-lib/whois.exp2
-rwxr-xr-xtest/private-lib/xcalc.exp2
-rwxr-xr-xtest/profiles/conditional.exp2
-rwxr-xr-xtest/profiles/ignore.exp2
-rwxr-xr-xtest/profiles/profile_appname.exp2
-rwxr-xr-xtest/profiles/profile_comment.exp2
-rwxr-xr-xtest/profiles/profile_followlnk.exp2
-rwxr-xr-xtest/profiles/profile_noperm.exp2
-rwxr-xr-xtest/profiles/profile_readonly.exp2
-rwxr-xr-xtest/profiles/profile_recursivity.exp2
-rwxr-xr-xtest/profiles/profile_syntax.exp2
-rwxr-xr-xtest/profiles/profile_syntax2.exp2
-rwxr-xr-xtest/profiles/profiles.sh2
-rwxr-xr-xtest/profiles/test-profile.exp2
-rwxr-xr-xtest/root/apache2.exp2
-rwxr-xr-xtest/root/cgroup.exp2
-rwxr-xr-xtest/root/checkcfg.exp2
-rwxr-xr-xtest/root/firecfg.exp2
-rwxr-xr-xtest/root/firemon-events.exp2
-rwxr-xr-xtest/root/isc-dhcp.exp2
-rwxr-xr-xtest/root/join.exp2
-rwxr-xr-xtest/root/login_nobody.exp2
-rwxr-xr-xtest/root/nginx.exp2
-rwxr-xr-xtest/root/option_bind_directory.exp2
-rwxr-xr-xtest/root/option_bind_file.exp2
-rwxr-xr-xtest/root/option_tmpfs.exp2
-rwxr-xr-xtest/root/private.exp2
-rwxr-xr-xtest/root/profile_tmpfs.exp2
-rwxr-xr-xtest/root/root.sh2
-rwxr-xr-xtest/root/seccomp-chmod.exp2
-rwxr-xr-xtest/root/seccomp-chown.exp2
-rwxr-xr-xtest/root/seccomp-umount.exp2
-rwxr-xr-xtest/root/snmpd.exp2
-rwxr-xr-xtest/root/unbound.exp2
-rwxr-xr-xtest/root/whitelist.exp2
-rwxr-xr-xtest/ssh/login.exp2
-rwxr-xr-xtest/ssh/scp.exp2
-rwxr-xr-xtest/ssh/sftp.exp2
-rwxr-xr-xtest/ssh/ssh.sh2
-rwxr-xr-xtest/stress/blacklist.exp2
-rwxr-xr-xtest/stress/env.exp2
-rwxr-xr-xtest/stress/net_macvlan.exp2
-rwxr-xr-xtest/stress/stress.sh2
-rwxr-xr-xtest/sysutils/cpio.exp2
-rwxr-xr-xtest/sysutils/file.exp2
-rwxr-xr-xtest/sysutils/gzip.exp2
-rwxr-xr-xtest/sysutils/less.exp2
-rwxr-xr-xtest/sysutils/ping.exp2
-rwxr-xr-xtest/sysutils/strings.exp2
-rwxr-xr-xtest/sysutils/sysutils.sh2
-rwxr-xr-xtest/sysutils/tar.exp2
-rwxr-xr-xtest/sysutils/xz.exp2
-rwxr-xr-xtest/sysutils/xzdec.exp2
-rwxr-xr-xtest/utils/build.exp2
-rwxr-xr-xtest/utils/caps-print.exp2
-rwxr-xr-xtest/utils/catchsignal-master.sh2
-rwxr-xr-xtest/utils/catchsignal.sh2
-rwxr-xr-xtest/utils/catchsignal2.sh2
-rwxr-xr-xtest/utils/command.exp2
-rwxr-xr-xtest/utils/cpu-print.exp2
-rwxr-xr-xtest/utils/dns-print.exp2
-rwxr-xr-xtest/utils/firemon-caps.exp2
-rwxr-xr-xtest/utils/firemon-cgroup.exp2
-rwxr-xr-xtest/utils/firemon-cpu.exp2
-rwxr-xr-xtest/utils/firemon-interface.exp2
-rwxr-xr-xtest/utils/firemon-name.exp2
-rwxr-xr-xtest/utils/firemon-seccomp.exp2
-rwxr-xr-xtest/utils/firemon-version.exp2
-rwxr-xr-xtest/utils/fs-print.exp2
-rwxr-xr-xtest/utils/help.exp2
-rwxr-xr-xtest/utils/join-profile.exp2
-rwxr-xr-xtest/utils/join.exp2
-rwxr-xr-xtest/utils/join2.exp2
-rwxr-xr-xtest/utils/join3.exp2
-rwxr-xr-xtest/utils/join4.exp2
-rwxr-xr-xtest/utils/join5.exp2
-rwxr-xr-xtest/utils/list.exp2
-rwxr-xr-xtest/utils/ls.exp2
-rwxr-xr-xtest/utils/man.exp2
-rwxr-xr-xtest/utils/name.exp2
-rwxr-xr-xtest/utils/profile_print.exp2
-rwxr-xr-xtest/utils/protocol-print.exp2
-rwxr-xr-xtest/utils/seccomp-print.exp2
-rwxr-xr-xtest/utils/shutdown.exp2
-rwxr-xr-xtest/utils/shutdown2.exp2
-rwxr-xr-xtest/utils/shutdown3.exp2
-rwxr-xr-xtest/utils/shutdown4.exp2
-rwxr-xr-xtest/utils/top.exp2
-rwxr-xr-xtest/utils/trace.exp2
-rwxr-xr-xtest/utils/tree.exp2
-rwxr-xr-xtest/utils/utils.sh2
-rwxr-xr-xtest/utils/version.exp2
561 files changed, 6227 insertions, 745 deletions
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index b69bb728e..0ecde565c 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -47,7 +47,7 @@ jobs:
47 47
48 # Initializes the CodeQL tools for scanning. 48 # Initializes the CodeQL tools for scanning.
49 - name: Initialize CodeQL 49 - name: Initialize CodeQL
50 uses: github/codeql-action/init@5f532563584d71fdef14ee64d17bafb34f751ce5 50 uses: github/codeql-action/init@384cfc42b2131df01c009d3d2eed7b78d8e8556e
51 with: 51 with:
52 languages: ${{ matrix.language }} 52 languages: ${{ matrix.language }}
53 # If you wish to specify custom queries, you can do so here or in a config file. 53 # If you wish to specify custom queries, you can do so here or in a config file.
@@ -58,7 +58,7 @@ jobs:
58 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). 58 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
59 # If this step fails, then you should remove it and run the build manually (see below) 59 # If this step fails, then you should remove it and run the build manually (see below)
60 - name: Autobuild 60 - name: Autobuild
61 uses: github/codeql-action/autobuild@5f532563584d71fdef14ee64d17bafb34f751ce5 61 uses: github/codeql-action/autobuild@384cfc42b2131df01c009d3d2eed7b78d8e8556e
62 62
63 # ℹ️ Command-line programs to run using the OS shell. 63 # ℹ️ Command-line programs to run using the OS shell.
64 # 📚 https://git.io/JvXDl 64 # 📚 https://git.io/JvXDl
@@ -72,4 +72,4 @@ jobs:
72 # make release 72 # make release
73 73
74 - name: Perform CodeQL Analysis 74 - name: Perform CodeQL Analysis
75 uses: github/codeql-action/analyze@5f532563584d71fdef14ee64d17bafb34f751ce5 75 uses: github/codeql-action/analyze@384cfc42b2131df01c009d3d2eed7b78d8e8556e
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 03e18d269..d9fe768ff 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -67,8 +67,8 @@ debian_ci:
67 - cd $CI_PROJECT_DIR/.. && (apt-get source --download-only -t experimental firejail || apt-get source --download-only firejail) 67 - cd $CI_PROJECT_DIR/.. && (apt-get source --download-only -t experimental firejail || apt-get source --download-only firejail)
68 - cd $CI_PROJECT_DIR && tar xf ../firejail_*.debian.tar.* 68 - cd $CI_PROJECT_DIR && tar xf ../firejail_*.debian.tar.*
69 - rm -rf debian/patches/ 69 - rm -rf debian/patches/
70 # next line is a temporary fix for dh_missing failure; remove it after next release 70 # /etc/firejail/hostnames is no longer installed
71 - echo "etc/firejail/*.config" >> debian/firejail.install 71 - sed '/etc\/firejail\/hostnames/d' -i debian/firejail.install
72 - VERSION=$(grep ^PACKAGE_VERSION= configure | cut -d"'" -f2) && dch -v ${VERSION}-0.1~ci "Non-maintainer upload." && git archive -o ../firejail_${VERSION}.orig.tar.gz HEAD && pristine-tar commit ../firejail_${VERSION}.orig.tar.gz ci_build && git branch -m pristine-tar origin/pristine-tar 72 - VERSION=$(grep ^PACKAGE_VERSION= configure | cut -d"'" -f2) && dch -v ${VERSION}-0.1~ci "Non-maintainer upload." && git archive -o ../firejail_${VERSION}.orig.tar.gz HEAD && pristine-tar commit ../firejail_${VERSION}.orig.tar.gz ci_build && git branch -m pristine-tar origin/pristine-tar
73 - git add debian && git commit -m "add debian/" 73 - git add debian && git commit -m "add debian/"
74 - export CI_COMMIT_SHA=$(git rev-parse HEAD) 74 - export CI_COMMIT_SHA=$(git rev-parse HEAD)
diff --git a/Makefile.in b/Makefile.in
index 4422cf8a9..29bd53d21 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -123,6 +123,7 @@ endif
123 # plugins w/o read permission (non-dumpable) 123 # plugins w/o read permission (non-dumpable)
124 install -m 0711 -t $(DESTDIR)$(libdir)/firejail $(SBOX_APPS_NON_DUMPABLE) 124 install -m 0711 -t $(DESTDIR)$(libdir)/firejail $(SBOX_APPS_NON_DUMPABLE)
125 install -m 0711 -t $(DESTDIR)$(libdir)/firejail src/fshaper/fshaper.sh 125 install -m 0711 -t $(DESTDIR)$(libdir)/firejail src/fshaper/fshaper.sh
126 install -m 0644 -t $(DESTDIR)$(libdir)/firejail src/fnettrace/static-ip-map
126ifeq ($(HAVE_CONTRIB_INSTALL),yes) 127ifeq ($(HAVE_CONTRIB_INSTALL),yes)
127 # contrib scripts 128 # contrib scripts
128 install -m 0755 -t $(DESTDIR)$(libdir)/firejail contrib/*.py contrib/*.sh 129 install -m 0755 -t $(DESTDIR)$(libdir)/firejail contrib/*.py contrib/*.sh
diff --git a/README b/README
index e3b1f223a..b221612aa 100644
--- a/README
+++ b/README
@@ -76,6 +76,7 @@ Adrian L. Shaw (https://github.com/adrianlshaw)
76 - add profanity profile 76 - add profanity profile
77 - add barrirer profile 77 - add barrirer profile
78 - add profile for Beyond All Reason 78 - add profile for Beyond All Reason
79 - RPCS3 profile
79Aidan Gauland (https://github.com/aidalgol) 80Aidan Gauland (https://github.com/aidalgol)
80 - added electron, riot-web and npm profiles 81 - added electron, riot-web and npm profiles
81 - whitelist Bohemia Interactive config dir for Steam 82 - whitelist Bohemia Interactive config dir for Steam
@@ -116,6 +117,8 @@ Amin Vakil (https://github.com/aminvakil)
116 - added profile for strawberry 117 - added profile for strawberry
117 - w3m profile fix 118 - w3m profile fix
118 - disable seccomp in wireshark profile 119 - disable seccomp in wireshark profile
120Ammon Smith (https://github.com/ammongit)
121 - Add DBus filter rules specific to firefox-developer-edition
119Andreas Hunkeler (https://github.com/Karneades) 122Andreas Hunkeler (https://github.com/Karneades)
120 - Add profile for offical Linux Teams application 123 - Add profile for offical Linux Teams application
121Andrey Alekseenko (https://github.com/al42and) 124Andrey Alekseenko (https://github.com/al42and)
@@ -131,6 +134,8 @@ announ (https://github.com/announ)
131 - evince profile fix 134 - evince profile fix
132Anton Shestakov (https://github.com/antonv6) 135Anton Shestakov (https://github.com/antonv6)
133 - add whitelist items for uim 136 - add whitelist items for uim
137 - allow /etc/vulkan in steam profile
138 - allow ~/.cache/wine in lutris and wine profile
134Antonio Russo (https://github.com/aerusso) 139Antonio Russo (https://github.com/aerusso)
135 - enumerate root directories in apparmor profile 140 - enumerate root directories in apparmor profile
136 - fix join-or-start 141 - fix join-or-start
@@ -835,6 +840,11 @@ Raphaël Droz (https://github.com/drzraf)
835 - zoom profile fixes 840 - zoom profile fixes
836realaltffour (https://github.com/realaltffour) 841realaltffour (https://github.com/realaltffour)
837 - add lynx support to newsboat profile 842 - add lynx support to newsboat profile
843Reed Riley (https://github.com/reedriley)
844 - cointop profile
845 - 1password profile
846 - blacklist rclone, 1Password, Ledger Live and cointop
847 - allow Signal to open links in Firefox
838Reiner Herrmann (https://github.com/reinerh) 848Reiner Herrmann (https://github.com/reinerh)
839 - a number of build patches 849 - a number of build patches
840 - man page fixes 850 - man page fixes
@@ -957,6 +967,8 @@ SkewedZeppelin (https://github.com/SkewedZeppelin)
957 - hardern /var 967 - hardern /var
958 - profile standard layout 968 - profile standard layout
959 - Spotify and itch.io profile fixes 969 - Spotify and itch.io profile fixes
970Spacewalker2 (https://github.com/Spacewalker2)
971 - fix MediathekView profile
960sshirokov (https://sourceforge.net/u/yshirokov/profile/) 972sshirokov (https://sourceforge.net/u/yshirokov/profile/)
961 - Patch to output "Reading profile" to stderr instead of stdout 973 - Patch to output "Reading profile" to stderr instead of stdout
962SYN-cook (https://github.com/SYN-cook) 974SYN-cook (https://github.com/SYN-cook)
@@ -1088,6 +1100,9 @@ Vincent43 (https://github.com/Vincent43)
1088 - apparmor enhancements 1100 - apparmor enhancements
1089Vincent Blillault (https://github.com/Feandil) 1101Vincent Blillault (https://github.com/Feandil)
1090 - fix mumble profile 1102 - fix mumble profile
1103Vincent Lefèvre (https://github.com/vinc17fr)
1104 - blacklist rxvt after the blacklist of Perl
1105 - Noblacklist rxvt in allow-perl.inc
1091vismir2 (https://github.com/vismir2) 1106vismir2 (https://github.com/vismir2)
1092 - feh, ranger, 7z, keepass, keepassx and zathura profiles 1107 - feh, ranger, 7z, keepass, keepassx and zathura profiles
1093 - claws-mail, mutt, git, emacs, vim profiles 1108 - claws-mail, mutt, git, emacs, vim profiles
@@ -1142,4 +1157,4 @@ Zack Weinberg (https://github.com/zackw)
1142zupatisc (https://github.com/zupatisc) 1157zupatisc (https://github.com/zupatisc)
1143 - patch-util fix 1158 - patch-util fix
1144 1159
1145Copyright (C) 2014-2021 Firejail Authors 1160Copyright (C) 2014-2022 Firejail Authors
diff --git a/README.md b/README.md
index fcf92f56a..d4e83f927 100644
--- a/README.md
+++ b/README.md
@@ -283,6 +283,25 @@ INTRUSION DETECTION SYSTEM (IDS)
283 283
284````` 284`````
285 285
286### File descriptors
287`````
288 --keep-fd=all
289 Inherit all open file descriptors to the sandbox. By default
290 only file descriptors 0, 1 and 2 are inherited to the sandbox,
291 and all other file descriptors are closed.
292
293 Example:
294 $ firejail --keep-fd=all
295
296 --keep-fd=file_descriptor
297 Don't close specified open file descriptors. By default only
298 file descriptors 0, 1 and 2 are inherited to the sandbox, and
299 all other file descriptors are closed.
300
301 Example:
302 $ firejail --keep-fd=3,4,5
303`````
304
286### Deteministic Shutdown 305### Deteministic Shutdown
287````` 306`````
288 --deterministic-exit-code 307 --deterministic-exit-code
@@ -304,13 +323,17 @@ INTRUSION DETECTION SYSTEM (IDS)
304 supported. 323 supported.
305 324
306 $ firejail --nettrace=browser 325 $ firejail --nettrace=browser
307 9.9.9.9:53 => 192.168.1.60 UDP: 122 B/sec 326 86 KB/s ********* 64.222.84.207:443 United States
308 72.21.91.29:80 => 192.168.1.60 TCP: 257 B/sec 327 76 KB/s ******** 192.229.210.163:443 MCI
309 80.92.126.65:123 => 192.168.1.60 UDP: 25 B/sec 328 111 B/s 9.9.9.9:53 Quad9 DNS
310 69.30.241.50:443 => 192.168.1.60 TCP: 88 KB/sec 329 32 KB/s *** 142.250.179.182:443 Google
311 140.82.112.4:443 => 192.168.1.60 TCP: 1861 B/sec 330
312 331 If /usr/bin/geoiplookup is installed (geoip-bin packet in De‐
313 (14 streams in the last one minute) 332 bian), the country the IP address originates from is added to
333 the trace. We also use the static IP map in /etc/firejail/host‐
334 names to print the domain names for some of the more common web‐
335 sites and cloud platforms. No external services are contacted
336 for reverse IP lookup.
314 337
315````` 338`````
316 339
@@ -353,4 +376,5 @@ Stats:
353### New profiles: 376### New profiles:
354 377
355clion-eap, lifeograph, io.github.lainsce.Notejot, rednotebook, zim, microsoft-edge-beta, ncdu2, gallery-dl, yt-dlp, goldendict, bundle, 378clion-eap, lifeograph, io.github.lainsce.Notejot, rednotebook, zim, microsoft-edge-beta, ncdu2, gallery-dl, yt-dlp, goldendict, bundle,
356cmake, make, meson, pip, codium, telnet, ftp, OpenStego, imv, retroarch, torbrowser, CachyBrowser, notable 379cmake, make, meson, pip, codium, telnet, ftp, OpenStego, imv, retroarch, torbrowser, CachyBrowser, notable, RPCS3, wget2, raincat,
380cointop, 1password
diff --git a/RELNOTES b/RELNOTES
index 71dde7020..8ecf2f255 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -1,12 +1,15 @@
1firejail (0.9.67) baseline; urgency=low 1firejail (0.9.68rc1) baseline; urgency=low
2 * work in progress 2 * work in progress
3 * exit code: distinguish fatal signals by adding 128 (#4533) 3 * exit code: distinguish fatal signals by adding 128 (#4533)
4 * close file descriptors greater than 2 (--keep-fd) (#4845)
4 * intrusion detection system (--ids-init, --ids-check) 5 * intrusion detection system (--ids-init, --ids-check)
5 * deterministic shutdown (--deterministic-exit-code, 6 * deterministic shutdown (--deterministic-exit-code,
6 --deterministic-shutdown) (#4635) 7 --deterministic-shutdown) (#4635)
7 * noprinters command (#4607) 8 * noprinters command (#4607 #4827)
8 * network monitor (--nettrace) 9 * network monitor (--nettrace)
10 * network locker (--netlock)
9 * whitelist-ro profile command 11 * whitelist-ro profile command
12 * AppImage support in --build command
10 * build: firecfg.config is now installed to /etc/firejail/ (#4669) 13 * build: firecfg.config is now installed to /etc/firejail/ (#4669)
11 * removed --disable-whitelist at compile time 14 * removed --disable-whitelist at compile time
12 * removed whitelist=yes/no in /etc/firejail/firejail.config 15 * removed whitelist=yes/no in /etc/firejail/firejail.config
@@ -18,8 +21,9 @@ firejail (0.9.67) baseline; urgency=low
18 * new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl 21 * new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
19 * new profiles: yt-dlp, goldendict, goldendict, bundle, cmake 22 * new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
20 * new profiles: make, meson, pip, codium, telnet, ftp, OpenStego 23 * new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
21 * new profiles: imv, retroarch, torbrowser, CachyBrowser 24 * new profiles: imv, retroarch, torbrowser, CachyBrowser,
22 -- netblue30 <netblue30@yahoo.com> Thu, 29 Jul 2021 09:00:00 -0500 25 * new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd
26 -- netblue30 <netblue30@yahoo.com> Tue, 18 Jan 2022 09:00:00 -0500
23 27
24firejail (0.9.66) baseline; urgency=low 28firejail (0.9.66) baseline; urgency=low
25 * deprecated --audit options, relpaced by jailcheck utility 29 * deprecated --audit options, relpaced by jailcheck utility
diff --git a/configure b/configure
index a8c9a1d96..a52a70c9f 100755
--- a/configure
+++ b/configure
@@ -1,6 +1,6 @@
1#! /bin/sh 1#! /bin/sh
2# Guess values for system-dependent variables and create Makefiles. 2# Guess values for system-dependent variables and create Makefiles.
3# Generated by GNU Autoconf 2.69 for firejail 0.9.67. 3# Generated by GNU Autoconf 2.69 for firejail 0.9.68rc2.
4# 4#
5# Report bugs to <netblue30@protonmail.com>. 5# Report bugs to <netblue30@protonmail.com>.
6# 6#
@@ -580,8 +580,8 @@ MAKEFLAGS=
580# Identity of this package. 580# Identity of this package.
581PACKAGE_NAME='firejail' 581PACKAGE_NAME='firejail'
582PACKAGE_TARNAME='firejail' 582PACKAGE_TARNAME='firejail'
583PACKAGE_VERSION='0.9.67' 583PACKAGE_VERSION='0.9.68rc2'
584PACKAGE_STRING='firejail 0.9.67' 584PACKAGE_STRING='firejail 0.9.68rc2'
585PACKAGE_BUGREPORT='netblue30@protonmail.com' 585PACKAGE_BUGREPORT='netblue30@protonmail.com'
586PACKAGE_URL='https://firejail.wordpress.com' 586PACKAGE_URL='https://firejail.wordpress.com'
587 587
@@ -1298,7 +1298,7 @@ if test "$ac_init_help" = "long"; then
1298 # Omit some internal or obsolete options to make the list less imposing. 1298 # Omit some internal or obsolete options to make the list less imposing.
1299 # This message is too long to be a string in the A/UX 3.1 sh. 1299 # This message is too long to be a string in the A/UX 3.1 sh.
1300 cat <<_ACEOF 1300 cat <<_ACEOF
1301\`configure' configures firejail 0.9.67 to adapt to many kinds of systems. 1301\`configure' configures firejail 0.9.68rc2 to adapt to many kinds of systems.
1302 1302
1303Usage: $0 [OPTION]... [VAR=VALUE]... 1303Usage: $0 [OPTION]... [VAR=VALUE]...
1304 1304
@@ -1360,7 +1360,7 @@ fi
1360 1360
1361if test -n "$ac_init_help"; then 1361if test -n "$ac_init_help"; then
1362 case $ac_init_help in 1362 case $ac_init_help in
1363 short | recursive ) echo "Configuration of firejail 0.9.67:";; 1363 short | recursive ) echo "Configuration of firejail 0.9.68rc2:";;
1364 esac 1364 esac
1365 cat <<\_ACEOF 1365 cat <<\_ACEOF
1366 1366
@@ -1481,7 +1481,7 @@ fi
1481test -n "$ac_init_help" && exit $ac_status 1481test -n "$ac_init_help" && exit $ac_status
1482if $ac_init_version; then 1482if $ac_init_version; then
1483 cat <<\_ACEOF 1483 cat <<\_ACEOF
1484firejail configure 0.9.67 1484firejail configure 0.9.68rc2
1485generated by GNU Autoconf 2.69 1485generated by GNU Autoconf 2.69
1486 1486
1487Copyright (C) 2012 Free Software Foundation, Inc. 1487Copyright (C) 2012 Free Software Foundation, Inc.
@@ -1737,7 +1737,7 @@ cat >config.log <<_ACEOF
1737This file contains any messages produced by compilers while 1737This file contains any messages produced by compilers while
1738running configure, to aid debugging if configure makes a mistake. 1738running configure, to aid debugging if configure makes a mistake.
1739 1739
1740It was created by firejail $as_me 0.9.67, which was 1740It was created by firejail $as_me 0.9.68rc2, which was
1741generated by GNU Autoconf 2.69. Invocation command line was 1741generated by GNU Autoconf 2.69. Invocation command line was
1742 1742
1743 $ $0 $@ 1743 $ $0 $@
@@ -3434,8 +3434,8 @@ if test "x$enable_apparmor" = "xyes"; then :
3434 HAVE_APPARMOR="-DHAVE_APPARMOR" 3434 HAVE_APPARMOR="-DHAVE_APPARMOR"
3435 3435
3436pkg_failed=no 3436pkg_failed=no
3437{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for AA" >&5 3437{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for libapparmor" >&5
3438$as_echo_n "checking for AA... " >&6; } 3438$as_echo_n "checking for libapparmor... " >&6; }
3439 3439
3440if test -n "$AA_CFLAGS"; then 3440if test -n "$AA_CFLAGS"; then
3441 pkg_cv_AA_CFLAGS="$AA_CFLAGS" 3441 pkg_cv_AA_CFLAGS="$AA_CFLAGS"
@@ -3475,7 +3475,7 @@ fi
3475 3475
3476 3476
3477if test $pkg_failed = yes; then 3477if test $pkg_failed = yes; then
3478 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 3478 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
3479$as_echo "no" >&6; } 3479$as_echo "no" >&6; }
3480 3480
3481if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then 3481if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
@@ -3502,7 +3502,7 @@ Alternatively, you may set the environment variables AA_CFLAGS
3502and AA_LIBS to avoid the need to call pkg-config. 3502and AA_LIBS to avoid the need to call pkg-config.
3503See the pkg-config man page for more details." "$LINENO" 5 3503See the pkg-config man page for more details." "$LINENO" 5
3504elif test $pkg_failed = untried; then 3504elif test $pkg_failed = untried; then
3505 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 3505 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
3506$as_echo "no" >&6; } 3506$as_echo "no" >&6; }
3507 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 3507 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
3508$as_echo "$as_me: error: in \`$ac_pwd':" >&2;} 3508$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
@@ -4815,7 +4815,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
4815# report actual input values of CONFIG_FILES etc. instead of their 4815# report actual input values of CONFIG_FILES etc. instead of their
4816# values after options handling. 4816# values after options handling.
4817ac_log=" 4817ac_log="
4818This file was extended by firejail $as_me 0.9.67, which was 4818This file was extended by firejail $as_me 0.9.68rc2, which was
4819generated by GNU Autoconf 2.69. Invocation command line was 4819generated by GNU Autoconf 2.69. Invocation command line was
4820 4820
4821 CONFIG_FILES = $CONFIG_FILES 4821 CONFIG_FILES = $CONFIG_FILES
@@ -4869,7 +4869,7 @@ _ACEOF
4869cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 4869cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
4870ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" 4870ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
4871ac_cs_version="\\ 4871ac_cs_version="\\
4872firejail config.status 0.9.67 4872firejail config.status 0.9.68rc2
4873configured by $0, generated by GNU Autoconf 2.69, 4873configured by $0, generated by GNU Autoconf 2.69,
4874 with options \\"\$ac_cs_config\\" 4874 with options \\"\$ac_cs_config\\"
4875 4875
diff --git a/configure.ac b/configure.ac
index 232d49e1e..8c541d886 100644
--- a/configure.ac
+++ b/configure.ac
@@ -12,7 +12,7 @@
12# 12#
13 13
14AC_PREREQ([2.68]) 14AC_PREREQ([2.68])
15AC_INIT([firejail], [0.9.67], [netblue30@protonmail.com], [], 15AC_INIT([firejail], [0.9.68rc2], [netblue30@protonmail.com], [],
16 [https://firejail.wordpress.com]) 16 [https://firejail.wordpress.com])
17 17
18AC_CONFIG_SRCDIR([src/firejail/main.c]) 18AC_CONFIG_SRCDIR([src/firejail/main.c])
diff --git a/contrib/firejail-welcome.sh b/contrib/firejail-welcome.sh
index 6eebc67c5..c9b6c450b 100755
--- a/contrib/firejail-welcome.sh
+++ b/contrib/firejail-welcome.sh
@@ -1,7 +1,7 @@
1#!/bin/bash 1#!/bin/bash
2 2
3# This file is part of Firejail project 3# This file is part of Firejail project
4# Copyright (C) 2020-2021 Firejail Authors 4# Copyright (C) 2020-2022 Firejail Authors
5# License GPL v2 5# License GPL v2
6 6
7if ! command -v zenity >/dev/null; then 7if ! command -v zenity >/dev/null; then
diff --git a/contrib/fj-mkdeb.py b/contrib/fj-mkdeb.py
index b4a947535..60e25fd14 100755
--- a/contrib/fj-mkdeb.py
+++ b/contrib/fj-mkdeb.py
@@ -1,6 +1,6 @@
1#!/usr/bin/env python3 1#!/usr/bin/env python3
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# This script automates the workaround for https://github.com/netblue30/firejail/issues/772 6# This script automates the workaround for https://github.com/netblue30/firejail/issues/772
diff --git a/contrib/fjclip.py b/contrib/fjclip.py
index 3e99d71e9..893fff243 100755
--- a/contrib/fjclip.py
+++ b/contrib/fjclip.py
@@ -1,6 +1,6 @@
1#!/usr/bin/env python3 1#!/usr/bin/env python3
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6import sys 6import sys
diff --git a/contrib/fjdisplay.py b/contrib/fjdisplay.py
index 294bde997..a49aa3e36 100755
--- a/contrib/fjdisplay.py
+++ b/contrib/fjdisplay.py
@@ -1,6 +1,6 @@
1#!/usr/bin/env python3 1#!/usr/bin/env python3
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6import re 6import re
diff --git a/contrib/fjresize.py b/contrib/fjresize.py
index d656f5c91..6575d6a0b 100755
--- a/contrib/fjresize.py
+++ b/contrib/fjresize.py
@@ -1,6 +1,6 @@
1#!/usr/bin/env python3 1#!/usr/bin/env python3
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6import sys 6import sys
diff --git a/contrib/gdb-firejail.sh b/contrib/gdb-firejail.sh
index 686bdc2c0..397438e1e 100755
--- a/contrib/gdb-firejail.sh
+++ b/contrib/gdb-firejail.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5set -x 5set -x
6 6
diff --git a/contrib/jail_prober.py b/contrib/jail_prober.py
index f89f97ac4..9776e9380 100755
--- a/contrib/jail_prober.py
+++ b/contrib/jail_prober.py
@@ -1,6 +1,6 @@
1#!/usr/bin/env python3 1#!/usr/bin/env python3
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5""" 5"""
6Figure out which profile options may be causing a particular program to break 6Figure out which profile options may be causing a particular program to break
diff --git a/contrib/sort.py b/contrib/sort.py
index 4af9c674c..6f21370ec 100755
--- a/contrib/sort.py
+++ b/contrib/sort.py
@@ -1,6 +1,6 @@
1#!/usr/bin/env python3 1#!/usr/bin/env python3
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5""" 5"""
6Sort the items of multi-item options in profiles, the following options are supported: 6Sort the items of multi-item options in profiles, the following options are supported:
diff --git a/contrib/syscalls.sh b/contrib/syscalls.sh
index 728ff5a78..d13f24280 100755
--- a/contrib/syscalls.sh
+++ b/contrib/syscalls.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6STRACE_OUTPUT_FILE="$(pwd)/strace_output.txt" 6STRACE_OUTPUT_FILE="$(pwd)/strace_output.txt"
diff --git a/contrib/update_deb.sh b/contrib/update_deb.sh
index 4c715aaf7..68460e41f 100755
--- a/contrib/update_deb.sh
+++ b/contrib/update_deb.sh
@@ -1,6 +1,6 @@
1#!/bin/sh 1#!/bin/sh
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# Purpose: Fetch, compile, and install firejail from GitHub source. For 6# Purpose: Fetch, compile, and install firejail from GitHub source. For
diff --git a/contrib/vim/syntax/firejail.vim b/contrib/vim/syntax/firejail.vim
index bcaa85a9c..714ed8e6e 100644
--- a/contrib/vim/syntax/firejail.vim
+++ b/contrib/vim/syntax/firejail.vim
@@ -51,7 +51,7 @@ syn match fjVar /\v\$\{(CFG|DESKTOP|DOCUMENTS|DOWNLOADS|HOME|MUSIC|PATH|PICTURES
51" Generate list with: { rg -o 'strn?cmp\(ptr, "([^"]+) "' -r '$1' src/firejail/profile.c; echo private-lib; } | grep -vEx '(include|ignore|caps\.drop|caps\.keep|protocol|seccomp|seccomp\.drop|seccomp\.keep|env|rmenv|net|ip)' | sort -u | tr $'\n' '|' # private-lib is special-cased in the code and doesn't match the regex; grep-ed patterns are handled later with 'syn match nextgroup=' directives (except for include which is special-cased as a fjCommandNoCond keyword) 51" Generate list with: { rg -o 'strn?cmp\(ptr, "([^"]+) "' -r '$1' src/firejail/profile.c; echo private-lib; } | grep -vEx '(include|ignore|caps\.drop|caps\.keep|protocol|seccomp|seccomp\.drop|seccomp\.keep|env|rmenv|net|ip)' | sort -u | tr $'\n' '|' # private-lib is special-cased in the code and doesn't match the regex; grep-ed patterns are handled later with 'syn match nextgroup=' directives (except for include which is special-cased as a fjCommandNoCond keyword)
52syn match fjCommand /\v(bind|blacklist|blacklist-nolog|cgroup|cpu|defaultgw|dns|hostname|hosts-file|ip6|iprange|join-or-start|mac|mkdir|mkfile|mtu|name|netfilter|netfilter6|netmask|nice|noblacklist|noexec|nowhitelist|overlay-named|private|private-bin|private-cwd|private-etc|private-home|private-lib|private-opt|private-srv|read-only|read-write|rlimit-as|rlimit-cpu|rlimit-fsize|rlimit-nofile|rlimit-nproc|rlimit-sigpending|timeout|tmpfs|veth-name|whitelist|xephyr-screen) / skipwhite contained 52syn match fjCommand /\v(bind|blacklist|blacklist-nolog|cgroup|cpu|defaultgw|dns|hostname|hosts-file|ip6|iprange|join-or-start|mac|mkdir|mkfile|mtu|name|netfilter|netfilter6|netmask|nice|noblacklist|noexec|nowhitelist|overlay-named|private|private-bin|private-cwd|private-etc|private-home|private-lib|private-opt|private-srv|read-only|read-write|rlimit-as|rlimit-cpu|rlimit-fsize|rlimit-nofile|rlimit-nproc|rlimit-sigpending|timeout|tmpfs|veth-name|whitelist|xephyr-screen) / skipwhite contained
53" Generate list with: rg -o 'strn?cmp\(ptr, "([^ "]*[^ ])"' -r '$1' src/firejail/profile.c | grep -vEx '(include|rlimit|quiet)' | sed -e 's/\./\\./' | sort -u | tr $'\n' '|' # include/rlimit are false positives, quiet is special-cased below 53" Generate list with: rg -o 'strn?cmp\(ptr, "([^ "]*[^ ])"' -r '$1' src/firejail/profile.c | grep -vEx '(include|rlimit|quiet)' | sed -e 's/\./\\./' | sort -u | tr $'\n' '|' # include/rlimit are false positives, quiet is special-cased below
54syn match fjCommand /\v(allow-debuggers|allusers|apparmor|caps|deterministic-exit-code|deterministic-shutdown|disable-mnt|ipc-namespace|keep-config-pulse|keep-dev-shm|keep-var-tmp|machine-id|memory-deny-write-execute|netfilter|no3d|noautopulse|nodbus|nodvd|nogroups|noinput|nonewprivs|noroot|nosound|notv|nou2f|novideo|overlay|overlay-tmpfs|private|private-cache|private-cwd|private-dev|private-lib|private-tmp|seccomp|seccomp\.32|seccomp\.block-secondary|tracelog|writable-etc|writable-run-user|writable-var|writable-var-log|x11)$/ contained 54syn match fjCommand /\v(allow-debuggers|allusers|apparmor|caps|deterministic-exit-code|deterministic-shutdown|disable-mnt|ipc-namespace|keep-config-pulse|keep-dev-shm|keep-fd|keep-var-tmp|machine-id|memory-deny-write-execute|netfilter|no3d|noautopulse|nodbus|nodvd|nogroups|noinput|nonewprivs|noprinters|noroot|nosound|notv|nou2f|novideo|overlay|overlay-tmpfs|private|private-cache|private-cwd|private-dev|private-lib|private-tmp|seccomp|seccomp\.32|seccomp\.block-secondary|tracelog|writable-etc|writable-run-user|writable-var|writable-var-log|x11)$/ contained
55syn match fjCommand /ignore / nextgroup=fjCommand,fjCommandNoCond skipwhite contained 55syn match fjCommand /ignore / nextgroup=fjCommand,fjCommandNoCond skipwhite contained
56syn match fjCommand /caps\.drop / nextgroup=fjCapability,fjAll skipwhite contained 56syn match fjCommand /caps\.drop / nextgroup=fjCapability,fjAll skipwhite contained
57syn match fjCommand /caps\.keep / nextgroup=fjCapability skipwhite contained 57syn match fjCommand /caps\.keep / nextgroup=fjCapability skipwhite contained
diff --git a/etc/inc/allow-perl.inc b/etc/inc/allow-perl.inc
index 5a1952c94..a473900da 100644
--- a/etc/inc/allow-perl.inc
+++ b/etc/inc/allow-perl.inc
@@ -10,3 +10,6 @@ noblacklist ${PATH}/vendor_perl
10noblacklist /usr/lib/perl* 10noblacklist /usr/lib/perl*
11noblacklist /usr/lib64/perl* 11noblacklist /usr/lib64/perl*
12noblacklist /usr/share/perl* 12noblacklist /usr/share/perl*
13
14# rxvt is also blacklisted in disable-interpreters.inc
15noblacklist ${PATH}/rxvt
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index b1ec25987..543fc235d 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -632,3 +632,6 @@ blacklist ${RUNUSER}/update-notifier.pid
632 632
633# tor-browser 633# tor-browser
634blacklist ${HOME}/.local/opt/tor-browser 634blacklist ${HOME}/.local/opt/tor-browser
635
636# pass utility (pass package in Debian etc.)
637blacklist ${HOME}/.password-store
diff --git a/etc/inc/disable-interpreters.inc b/etc/inc/disable-interpreters.inc
index 804869e2a..ca43e5ed9 100644
--- a/etc/inc/disable-interpreters.inc
+++ b/etc/inc/disable-interpreters.inc
@@ -40,6 +40,15 @@ blacklist /usr/lib/perl*
40blacklist /usr/lib64/perl* 40blacklist /usr/lib64/perl*
41blacklist /usr/share/perl* 41blacklist /usr/share/perl*
42 42
43# rxvt needs Perl modules, thus does not work. In particular, blacklisting
44# it is needed so that Firefox can run applications with Terminal=true in
45# their .desktop file (depending on what is installed). The reason is that
46# this is done via glib, which currently uses a hardcoded list of terminal
47# emulators:
48# https://gitlab.gnome.org/GNOME/glib/-/issues/338
49# And in this list, rxvt comes before xterm.
50blacklist ${PATH}/rxvt
51
43# PHP 52# PHP
44blacklist ${PATH}/php* 53blacklist ${PATH}/php*
45blacklist /usr/lib/php* 54blacklist /usr/lib/php*
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index a13d5a4d3..458565ab3 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -191,8 +191,10 @@ blacklist ${HOME}/.cache/qBittorrent
191blacklist ${HOME}/.cache/quodlibet 191blacklist ${HOME}/.cache/quodlibet
192blacklist ${HOME}/.cache/qupzilla 192blacklist ${HOME}/.cache/qupzilla
193blacklist ${HOME}/.cache/qutebrowser 193blacklist ${HOME}/.cache/qutebrowser
194blacklist ${HOME}/.cache/rclone
194blacklist ${HOME}/.cache/rednotebook 195blacklist ${HOME}/.cache/rednotebook
195blacklist ${HOME}/.cache/rhythmbox 196blacklist ${HOME}/.cache/rhythmbox
197blacklist ${HOME}/.cache/rpcs3
196blacklist ${HOME}/.cache/shotwell 198blacklist ${HOME}/.cache/shotwell
197blacklist ${HOME}/.cache/simple-scan 199blacklist ${HOME}/.cache/simple-scan
198blacklist ${HOME}/.cache/slimjet 200blacklist ${HOME}/.cache/slimjet
@@ -215,6 +217,7 @@ blacklist ${HOME}/.cache/vmware
215blacklist ${HOME}/.cache/warsow-2.1 217blacklist ${HOME}/.cache/warsow-2.1
216blacklist ${HOME}/.cache/waterfox 218blacklist ${HOME}/.cache/waterfox
217blacklist ${HOME}/.cache/wesnoth 219blacklist ${HOME}/.cache/wesnoth
220blacklist ${HOME}/.cache/wine
218blacklist ${HOME}/.cache/winetricks 221blacklist ${HOME}/.cache/winetricks
219blacklist ${HOME}/.cache/xmms2 222blacklist ${HOME}/.cache/xmms2
220blacklist ${HOME}/.cache/xournalpp 223blacklist ${HOME}/.cache/xournalpp
@@ -232,6 +235,7 @@ blacklist ${HOME}/.clion*
232blacklist ${HOME}/.cliqz 235blacklist ${HOME}/.cliqz
233blacklist ${HOME}/.clonk 236blacklist ${HOME}/.clonk
234blacklist ${HOME}/.config/0ad 237blacklist ${HOME}/.config/0ad
238blacklist ${HOME}/.config/1Password
235blacklist ${HOME}/.config/2048-qt 239blacklist ${HOME}/.config/2048-qt
236blacklist ${HOME}/.config/Atom 240blacklist ${HOME}/.config/Atom
237blacklist ${HOME}/.config/Audaciousrc 241blacklist ${HOME}/.config/Audaciousrc
@@ -277,6 +281,7 @@ blacklist ${HOME}/.config/KeePass
277blacklist ${HOME}/.config/KeePassXCrc 281blacklist ${HOME}/.config/KeePassXCrc
278blacklist ${HOME}/.config/Kid3 282blacklist ${HOME}/.config/Kid3
279blacklist ${HOME}/.config/Kingsoft 283blacklist ${HOME}/.config/Kingsoft
284blacklist ${HOME}/.config/Ledger Live
280blacklist ${HOME}/.config/LibreCAD 285blacklist ${HOME}/.config/LibreCAD
281blacklist ${HOME}/.config/Loop_Hero 286blacklist ${HOME}/.config/Loop_Hero
282blacklist ${HOME}/.config/Luminance 287blacklist ${HOME}/.config/Luminance
@@ -378,6 +383,7 @@ blacklist ${HOME}/.config/chromium-flags.conf
378blacklist ${HOME}/.config/clipit 383blacklist ${HOME}/.config/clipit
379blacklist ${HOME}/.config/cliqz 384blacklist ${HOME}/.config/cliqz
380blacklist ${HOME}/.config/cmus 385blacklist ${HOME}/.config/cmus
386blacklist ${HOME}/.config/cointop
381blacklist ${HOME}/.config/com.github.bleakgrey.tootle 387blacklist ${HOME}/.config/com.github.bleakgrey.tootle
382blacklist ${HOME}/.config/corebird 388blacklist ${HOME}/.config/corebird
383blacklist ${HOME}/.config/cower 389blacklist ${HOME}/.config/cower
@@ -571,10 +577,12 @@ blacklist ${HOME}/.config/quodlibet
571blacklist ${HOME}/.config/qupzilla 577blacklist ${HOME}/.config/qupzilla
572blacklist ${HOME}/.config/qutebrowser 578blacklist ${HOME}/.config/qutebrowser
573blacklist ${HOME}/.config/ranger 579blacklist ${HOME}/.config/ranger
580blacklist ${HOME}/.config/rclone
574blacklist ${HOME}/.config/redshift 581blacklist ${HOME}/.config/redshift
575blacklist ${HOME}/.config/redshift.conf 582blacklist ${HOME}/.config/redshift.conf
576blacklist ${HOME}/.config/remmina 583blacklist ${HOME}/.config/remmina
577blacklist ${HOME}/.config/ristretto 584blacklist ${HOME}/.config/ristretto
585blacklist ${HOME}/.config/rpcs3
578blacklist ${HOME}/.config/rtv 586blacklist ${HOME}/.config/rtv
579blacklist ${HOME}/.config/scribus 587blacklist ${HOME}/.config/scribus
580blacklist ${HOME}/.config/scribusrc 588blacklist ${HOME}/.config/scribusrc
@@ -616,6 +624,7 @@ blacklist ${HOME}/.config/vivaldi
616blacklist ${HOME}/.config/vivaldi-snapshot 624blacklist ${HOME}/.config/vivaldi-snapshot
617blacklist ${HOME}/.config/vlc 625blacklist ${HOME}/.config/vlc
618blacklist ${HOME}/.config/wesnoth 626blacklist ${HOME}/.config/wesnoth
627blacklist ${HOME}/.config/wget
619blacklist ${HOME}/.config/wireshark 628blacklist ${HOME}/.config/wireshark
620blacklist ${HOME}/.config/wormux 629blacklist ${HOME}/.config/wormux
621blacklist ${HOME}/.config/xchat 630blacklist ${HOME}/.config/xchat
@@ -976,6 +985,7 @@ blacklist ${HOME}/.local/share/vlc
976blacklist ${HOME}/.local/share/vpltd 985blacklist ${HOME}/.local/share/vpltd
977blacklist ${HOME}/.local/share/vulkan 986blacklist ${HOME}/.local/share/vulkan
978blacklist ${HOME}/.local/share/warsow-2.1 987blacklist ${HOME}/.local/share/warsow-2.1
988blacklist ${HOME}/.local/share/warzone2100-3.*
979blacklist ${HOME}/.local/share/wesnoth 989blacklist ${HOME}/.local/share/wesnoth
980blacklist ${HOME}/.local/share/wormux 990blacklist ${HOME}/.local/share/wormux
981blacklist ${HOME}/.local/share/xplayer 991blacklist ${HOME}/.local/share/xplayer
@@ -1029,7 +1039,6 @@ blacklist ${HOME}/.opera-beta
1029blacklist ${HOME}/.ostrichriders 1039blacklist ${HOME}/.ostrichriders
1030blacklist ${HOME}/.paradoxinteractive 1040blacklist ${HOME}/.paradoxinteractive
1031blacklist ${HOME}/.parallelrealities/blobwars 1041blacklist ${HOME}/.parallelrealities/blobwars
1032blacklist ${HOME}/.password-store
1033blacklist ${HOME}/.pcsxr 1042blacklist ${HOME}/.pcsxr
1034blacklist ${HOME}/.penguin-command 1043blacklist ${HOME}/.penguin-command
1035blacklist ${HOME}/.pine-crash 1044blacklist ${HOME}/.pine-crash
@@ -1136,6 +1145,7 @@ blacklist ${HOME}/wallet.dat
1136blacklist ${HOME}/yt-dlp.conf 1145blacklist ${HOME}/yt-dlp.conf
1137blacklist ${HOME}/yt-dlp.conf.txt 1146blacklist ${HOME}/yt-dlp.conf.txt
1138blacklist ${RUNUSER}/*firefox* 1147blacklist ${RUNUSER}/*firefox*
1148blacklist ${RUNUSER}/akonadi
1139blacklist /tmp/.wine-* 1149blacklist /tmp/.wine-*
1140blacklist /tmp/akonadi-* 1150blacklist /tmp/akonadi-*
1141blacklist /var/games/nethack 1151blacklist /var/games/nethack
diff --git a/etc/profile-a-l/1password.profile b/etc/profile-a-l/1password.profile
new file mode 100644
index 000000000..bc8bfae0d
--- /dev/null
+++ b/etc/profile-a-l/1password.profile
@@ -0,0 +1,20 @@
1# Firejail profile for 1password
2# Description: 1Password is a password manager developed by AgileBits Inc.
3# This file is overwritten after every install/update
4# Persistent local customizations
5include 1password.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/1Password
10
11mkdir ${HOME}/.config/1Password
12whitelist ${HOME}/.config/1Password
13
14private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id,nsswitch.conf,pki,resolv.conf,ssl
15
16# Needed for keychain things, talking to Firefox, possibly other things? Not sure how to narrow down
17ignore dbus-user none
18
19# Redirect
20include electron.profile
diff --git a/etc/profile-a-l/akonadi_control.profile b/etc/profile-a-l/akonadi_control.profile
index f3fb678d1..2f58d9146 100644
--- a/etc/profile-a-l/akonadi_control.profile
+++ b/etc/profile-a-l/akonadi_control.profile
@@ -17,6 +17,7 @@ noblacklist ${HOME}/.local/share/apps/korganizer
17noblacklist ${HOME}/.local/share/contacts 17noblacklist ${HOME}/.local/share/contacts
18noblacklist ${HOME}/.local/share/local-mail 18noblacklist ${HOME}/.local/share/local-mail
19noblacklist ${HOME}/.local/share/notes 19noblacklist ${HOME}/.local/share/notes
20noblacklist ${RUNUSER}/akonadi
20noblacklist /sbin 21noblacklist /sbin
21noblacklist /tmp/akonadi-* 22noblacklist /tmp/akonadi-*
22noblacklist /usr/sbin 23noblacklist /usr/sbin
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile
index 2992a2d6f..998ffd9da 100644
--- a/etc/profile-a-l/chromium-common.profile
+++ b/etc/profile-a-l/chromium-common.profile
@@ -9,8 +9,8 @@ include chromium-common.local
9# noexec ${HOME} breaks DRM binaries. 9# noexec ${HOME} breaks DRM binaries.
10?BROWSER_ALLOW_DRM: ignore noexec ${HOME} 10?BROWSER_ALLOW_DRM: ignore noexec ${HOME}
11 11
12noblacklist ${HOME}/.pki
13noblacklist ${HOME}/.local/share/pki 12noblacklist ${HOME}/.local/share/pki
13noblacklist ${HOME}/.pki
14noblacklist /usr/lib/chromium/chrome-sandbox 14noblacklist /usr/lib/chromium/chrome-sandbox
15 15
16# Add the next line to your chromium-common.local if you want Google Chrome/Chromium browser 16# Add the next line to your chromium-common.local if you want Google Chrome/Chromium browser
@@ -24,11 +24,13 @@ include disable-interpreters.inc
24include disable-programs.inc 24include disable-programs.inc
25include disable-xdg.inc 25include disable-xdg.inc
26 26
27mkdir ${HOME}/.pki
28mkdir ${HOME}/.local/share/pki 27mkdir ${HOME}/.local/share/pki
28mkdir ${HOME}/.pki
29whitelist ${DOWNLOADS} 29whitelist ${DOWNLOADS}
30whitelist ${HOME}/.pki
31whitelist ${HOME}/.local/share/pki 30whitelist ${HOME}/.local/share/pki
31whitelist ${HOME}/.pki
32whitelist /usr/share/mozilla/extensions
33whitelist /usr/share/webext
32include whitelist-common.inc 34include whitelist-common.inc
33include whitelist-run-common.inc 35include whitelist-run-common.inc
34include whitelist-runuser-common.inc 36include whitelist-runuser-common.inc
@@ -55,6 +57,7 @@ private-cache
55 57
56blacklist ${PATH}/curl 58blacklist ${PATH}/curl
57blacklist ${PATH}/wget 59blacklist ${PATH}/wget
60blacklist ${PATH}/wget2
58 61
59#dbus-user none - prevents access to passwords saved in GNOME Keyring and KWallet, also breaks Gnome connector. 62#dbus-user none - prevents access to passwords saved in GNOME Keyring and KWallet, also breaks Gnome connector.
60dbus-system none 63dbus-system none
diff --git a/etc/profile-a-l/chromium.profile b/etc/profile-a-l/chromium.profile
index 9ac33aa1c..14f1bbe64 100644
--- a/etc/profile-a-l/chromium.profile
+++ b/etc/profile-a-l/chromium.profile
@@ -16,7 +16,6 @@ whitelist ${HOME}/.cache/chromium
16whitelist ${HOME}/.config/chromium 16whitelist ${HOME}/.config/chromium
17whitelist ${HOME}/.config/chromium-flags.conf 17whitelist ${HOME}/.config/chromium-flags.conf
18whitelist /usr/share/chromium 18whitelist /usr/share/chromium
19whitelist /usr/share/mozilla/extensions
20 19
21# private-bin chromium,chromium-browser,chromedriver 20# private-bin chromium,chromium-browser,chromedriver
22 21
diff --git a/etc/profile-a-l/cointop.profile b/etc/profile-a-l/cointop.profile
new file mode 100644
index 000000000..4349f58fc
--- /dev/null
+++ b/etc/profile-a-l/cointop.profile
@@ -0,0 +1,63 @@
1# Firejail profile for cointop
2# Description: TUI for tracking cryptocurrency stats
3# This file is overwritten after every install/update
4# Persistent local customizations
5include cointop.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/cointop
10
11blacklist ${RUNUSER}
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-proc.inc
18include disable-programs.inc
19include disable-shell.inc
20include disable-X11.inc
21include disable-xdg.inc
22
23mkdir ${HOME}/.config/cointop
24whitelist ${HOME}/.config/cointop
25include whitelist-common.inc
26include whitelist-runuser-common.inc
27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc
29
30apparmor
31caps.drop all
32ipc-namespace
33machine-id
34netfilter
35no3d
36nodvd
37nogroups
38noinput
39nonewprivs
40noprinters
41noroot
42nosound
43notv
44nou2f
45novideo
46protocol inet,inet6
47seccomp
48seccomp.block-secondary
49shell none
50tracelog
51
52disable-mnt
53private-bin cointop
54private-cache
55private-dev
56private-etc alternatives,ca-certificates,crypto-policies,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,nsswitch.conf,pki,protocols,resolv.conf,rpc,services,ssl
57private-lib
58private-tmp
59
60dbus-user none
61dbus-system none
62
63memory-deny-write-execute
diff --git a/etc/profile-a-l/ephemeral.profile b/etc/profile-a-l/ephemeral.profile
index 131d68951..f88c64b23 100644
--- a/etc/profile-a-l/ephemeral.profile
+++ b/etc/profile-a-l/ephemeral.profile
@@ -9,8 +9,8 @@ include globals.local
9# enforce private-cache 9# enforce private-cache
10#noblacklist ${HOME}/.cache/ephemeral 10#noblacklist ${HOME}/.cache/ephemeral
11 11
12noblacklist ${HOME}/.pki
13noblacklist ${HOME}/.local/share/pki 12noblacklist ${HOME}/.local/share/pki
13noblacklist ${HOME}/.pki
14 14
15# noexec ${HOME} breaks DRM binaries. 15# noexec ${HOME} breaks DRM binaries.
16?BROWSER_ALLOW_DRM: ignore noexec ${HOME} 16?BROWSER_ALLOW_DRM: ignore noexec ${HOME}
@@ -23,12 +23,12 @@ include disable-programs.inc
23 23
24# enforce private-cache 24# enforce private-cache
25#mkdir ${HOME}/.cache/ephemeral 25#mkdir ${HOME}/.cache/ephemeral
26mkdir ${HOME}/.pki
27mkdir ${HOME}/.local/share/pki 26mkdir ${HOME}/.local/share/pki
27mkdir ${HOME}/.pki
28# enforce private-cache 28# enforce private-cache
29#whitelist ${HOME}/.cache/ephemeral 29#whitelist ${HOME}/.cache/ephemeral
30whitelist ${HOME}/.pki
31whitelist ${HOME}/.local/share/pki 30whitelist ${HOME}/.local/share/pki
31whitelist ${HOME}/.pki
32whitelist ${DOWNLOADS} 32whitelist ${DOWNLOADS}
33include whitelist-common.inc 33include whitelist-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/ferdi.profile b/etc/profile-a-l/ferdi.profile
index a2372ec8a..b6f69ccb9 100644
--- a/etc/profile-a-l/ferdi.profile
+++ b/etc/profile-a-l/ferdi.profile
@@ -9,8 +9,8 @@ ignore noexec /tmp
9 9
10noblacklist ${HOME}/.cache/Ferdi 10noblacklist ${HOME}/.cache/Ferdi
11noblacklist ${HOME}/.config/Ferdi 11noblacklist ${HOME}/.config/Ferdi
12noblacklist ${HOME}/.pki
13noblacklist ${HOME}/.local/share/pki 12noblacklist ${HOME}/.local/share/pki
13noblacklist ${HOME}/.pki
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -20,13 +20,13 @@ include disable-programs.inc
20 20
21mkdir ${HOME}/.cache/Ferdi 21mkdir ${HOME}/.cache/Ferdi
22mkdir ${HOME}/.config/Ferdi 22mkdir ${HOME}/.config/Ferdi
23mkdir ${HOME}/.pki
24mkdir ${HOME}/.local/share/pki 23mkdir ${HOME}/.local/share/pki
24mkdir ${HOME}/.pki
25whitelist ${DOWNLOADS} 25whitelist ${DOWNLOADS}
26whitelist ${HOME}/.cache/Ferdi 26whitelist ${HOME}/.cache/Ferdi
27whitelist ${HOME}/.config/Ferdi 27whitelist ${HOME}/.config/Ferdi
28whitelist ${HOME}/.pki
29whitelist ${HOME}/.local/share/pki 28whitelist ${HOME}/.local/share/pki
29whitelist ${HOME}/.pki
30include whitelist-common.inc 30include whitelist-common.inc
31 31
32caps.drop all 32caps.drop all
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile
index e7d438b46..373f41ffe 100644
--- a/etc/profile-a-l/firefox-common.profile
+++ b/etc/profile-a-l/firefox-common.profile
@@ -12,8 +12,8 @@ include firefox-common.local
12# Add the next line to your firefox-common.local to allow access to common programs/addons/plugins. 12# Add the next line to your firefox-common.local to allow access to common programs/addons/plugins.
13#include firefox-common-addons.profile 13#include firefox-common-addons.profile
14 14
15noblacklist ${HOME}/.pki
16noblacklist ${HOME}/.local/share/pki 15noblacklist ${HOME}/.local/share/pki
16noblacklist ${HOME}/.pki
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
@@ -22,11 +22,11 @@ include disable-interpreters.inc
22include disable-proc.inc 22include disable-proc.inc
23include disable-programs.inc 23include disable-programs.inc
24 24
25mkdir ${HOME}/.pki
26mkdir ${HOME}/.local/share/pki 25mkdir ${HOME}/.local/share/pki
26mkdir ${HOME}/.pki
27whitelist ${DOWNLOADS} 27whitelist ${DOWNLOADS}
28whitelist ${HOME}/.pki
29whitelist ${HOME}/.local/share/pki 28whitelist ${HOME}/.local/share/pki
29whitelist ${HOME}/.pki
30include whitelist-common.inc 30include whitelist-common.inc
31include whitelist-run-common.inc 31include whitelist-run-common.inc
32include whitelist-runuser-common.inc 32include whitelist-runuser-common.inc
@@ -61,6 +61,7 @@ private-tmp
61 61
62blacklist ${PATH}/curl 62blacklist ${PATH}/curl
63blacklist ${PATH}/wget 63blacklist ${PATH}/wget
64blacklist ${PATH}/wget2
64 65
65# 'dbus-user none' breaks various desktop integration features like global menus, native notifications, 66# 'dbus-user none' breaks various desktop integration features like global menus, native notifications,
66# Gnome connector, KDE connect and power management on KDE Plasma. 67# Gnome connector, KDE connect and power management on KDE Plasma.
diff --git a/etc/profile-a-l/firefox-developer-edition.profile b/etc/profile-a-l/firefox-developer-edition.profile
index 8c7ca3887..3a9b8cf92 100644
--- a/etc/profile-a-l/firefox-developer-edition.profile
+++ b/etc/profile-a-l/firefox-developer-edition.profile
@@ -7,5 +7,9 @@ include firefox-developer-edition.local
7# added by included profile 7# added by included profile
8#include globals.local 8#include globals.local
9 9
10# Edition-specific DBus filters
11dbus-user.own org.mozilla.FirefoxDeveloperEdition.*
12dbus-user.own org.mozilla.firefoxdeveloperedition.*
13
10# Redirect 14# Redirect
11include firefox.profile 15include firefox.profile
diff --git a/etc/profile-a-l/franz.profile b/etc/profile-a-l/franz.profile
index 9b780a572..b16c90caf 100644
--- a/etc/profile-a-l/franz.profile
+++ b/etc/profile-a-l/franz.profile
@@ -9,8 +9,8 @@ ignore noexec /tmp
9 9
10noblacklist ${HOME}/.cache/Franz 10noblacklist ${HOME}/.cache/Franz
11noblacklist ${HOME}/.config/Franz 11noblacklist ${HOME}/.config/Franz
12noblacklist ${HOME}/.pki
13noblacklist ${HOME}/.local/share/pki 12noblacklist ${HOME}/.local/share/pki
13noblacklist ${HOME}/.pki
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -20,13 +20,13 @@ include disable-programs.inc
20 20
21mkdir ${HOME}/.cache/Franz 21mkdir ${HOME}/.cache/Franz
22mkdir ${HOME}/.config/Franz 22mkdir ${HOME}/.config/Franz
23mkdir ${HOME}/.pki
24mkdir ${HOME}/.local/share/pki 23mkdir ${HOME}/.local/share/pki
24mkdir ${HOME}/.pki
25whitelist ${DOWNLOADS} 25whitelist ${DOWNLOADS}
26whitelist ${HOME}/.cache/Franz 26whitelist ${HOME}/.cache/Franz
27whitelist ${HOME}/.config/Franz 27whitelist ${HOME}/.config/Franz
28whitelist ${HOME}/.pki
29whitelist ${HOME}/.local/share/pki 28whitelist ${HOME}/.local/share/pki
29whitelist ${HOME}/.pki
30include whitelist-common.inc 30include whitelist-common.inc
31 31
32caps.drop all 32caps.drop all
diff --git a/etc/profile-a-l/kmail.profile b/etc/profile-a-l/kmail.profile
index 0796e6876..1bbc141e8 100644
--- a/etc/profile-a-l/kmail.profile
+++ b/etc/profile-a-l/kmail.profile
@@ -29,6 +29,7 @@ noblacklist ${HOME}/.local/share/kxmlgui5/kmail
29noblacklist ${HOME}/.local/share/kxmlgui5/kmail2 29noblacklist ${HOME}/.local/share/kxmlgui5/kmail2
30noblacklist ${HOME}/.local/share/local-mail 30noblacklist ${HOME}/.local/share/local-mail
31noblacklist ${HOME}/.local/share/notes 31noblacklist ${HOME}/.local/share/notes
32noblacklist ${RUNUSER}/akonadi
32noblacklist /tmp/akonadi-* 33noblacklist /tmp/akonadi-*
33 34
34include disable-common.inc 35include disable-common.inc
diff --git a/etc/profile-a-l/librewolf.profile b/etc/profile-a-l/librewolf.profile
index ebffbbabf..6678e3fec 100644
--- a/etc/profile-a-l/librewolf.profile
+++ b/etc/profile-a-l/librewolf.profile
@@ -25,6 +25,7 @@ whitelist ${HOME}/.librewolf
25 25
26whitelist /usr/share/doc 26whitelist /usr/share/doc
27whitelist /usr/share/gtk-doc/html 27whitelist /usr/share/gtk-doc/html
28whitelist /usr/share/librewolf
28whitelist /usr/share/mozilla 29whitelist /usr/share/mozilla
29whitelist /usr/share/webext 30whitelist /usr/share/webext
30include whitelist-usr-share-common.inc 31include whitelist-usr-share-common.inc
@@ -50,6 +51,7 @@ dbus-user.own org.mozilla.librewolf.*
50# Also add the next line to your librewolf.local if screensharing does not work with 51# Also add the next line to your librewolf.local if screensharing does not work with
51# the above lines (depends on the portal implementation). 52# the above lines (depends on the portal implementation).
52#ignore noroot 53#ignore noroot
54ignore apparmor
53ignore dbus-user none 55ignore dbus-user none
54 56
55# Redirect 57# Redirect
diff --git a/etc/profile-a-l/lutris.profile b/etc/profile-a-l/lutris.profile
index bf8ab9e64..71309b48f 100644
--- a/etc/profile-a-l/lutris.profile
+++ b/etc/profile-a-l/lutris.profile
@@ -9,6 +9,7 @@ include globals.local
9noblacklist ${PATH}/llvm* 9noblacklist ${PATH}/llvm*
10noblacklist ${HOME}/Games 10noblacklist ${HOME}/Games
11noblacklist ${HOME}/.cache/lutris 11noblacklist ${HOME}/.cache/lutris
12noblacklist ${HOME}/.cache/wine
12noblacklist ${HOME}/.cache/winetricks 13noblacklist ${HOME}/.cache/winetricks
13noblacklist ${HOME}/.config/lutris 14noblacklist ${HOME}/.config/lutris
14noblacklist ${HOME}/.local/share/lutris 15noblacklist ${HOME}/.local/share/lutris
@@ -34,6 +35,7 @@ include disable-xdg.inc
34 35
35mkdir ${HOME}/Games 36mkdir ${HOME}/Games
36mkdir ${HOME}/.cache/lutris 37mkdir ${HOME}/.cache/lutris
38mkdir ${HOME}/.cache/wine
37mkdir ${HOME}/.cache/winetricks 39mkdir ${HOME}/.cache/winetricks
38mkdir ${HOME}/.config/lutris 40mkdir ${HOME}/.config/lutris
39mkdir ${HOME}/.local/share/lutris 41mkdir ${HOME}/.local/share/lutris
@@ -41,6 +43,7 @@ mkdir ${HOME}/.local/share/lutris
41whitelist ${DOWNLOADS} 43whitelist ${DOWNLOADS}
42whitelist ${HOME}/Games 44whitelist ${HOME}/Games
43whitelist ${HOME}/.cache/lutris 45whitelist ${HOME}/.cache/lutris
46whitelist ${HOME}/.cache/wine
44whitelist ${HOME}/.cache/winetricks 47whitelist ${HOME}/.cache/winetricks
45whitelist ${HOME}/.config/lutris 48whitelist ${HOME}/.config/lutris
46whitelist ${HOME}/.local/share/lutris 49whitelist ${HOME}/.local/share/lutris
diff --git a/etc/profile-m-z/mediathekview.profile b/etc/profile-m-z/mediathekview.profile
index f73ef0935..f0ef7d010 100644
--- a/etc/profile-m-z/mediathekview.profile
+++ b/etc/profile-m-z/mediathekview.profile
@@ -17,6 +17,8 @@ noblacklist ${HOME}/.mediathek3
17noblacklist ${HOME}/.mplayer 17noblacklist ${HOME}/.mplayer
18noblacklist ${VIDEOS} 18noblacklist ${VIDEOS}
19 19
20ignore noexec /tmp
21
20# Allow java (blacklisted by disable-devel.inc) 22# Allow java (blacklisted by disable-devel.inc)
21include allow-java.inc 23include allow-java.inc
22 24
@@ -27,6 +29,8 @@ include disable-interpreters.inc
27include disable-programs.inc 29include disable-programs.inc
28include disable-xdg.inc 30include disable-xdg.inc
29 31
32mkdir ${HOME}/.mediathek3
33whitelist ${HOME}/.mediathek3
30include whitelist-var-common.inc 34include whitelist-var-common.inc
31 35
32caps.drop all 36caps.drop all
diff --git a/etc/profile-m-z/midori.profile b/etc/profile-m-z/midori.profile
index 7928d124e..eb037f51b 100644
--- a/etc/profile-m-z/midori.profile
+++ b/etc/profile-m-z/midori.profile
@@ -12,10 +12,10 @@ include globals.local
12noblacklist ${HOME}/.cache/midori 12noblacklist ${HOME}/.cache/midori
13noblacklist ${HOME}/.config/midori 13noblacklist ${HOME}/.config/midori
14noblacklist ${HOME}/.local/share/midori 14noblacklist ${HOME}/.local/share/midori
15noblacklist ${HOME}/.local/share/pki
15# noblacklist ${HOME}/.local/share/webkit 16# noblacklist ${HOME}/.local/share/webkit
16# noblacklist ${HOME}/.local/share/webkitgtk 17# noblacklist ${HOME}/.local/share/webkitgtk
17noblacklist ${HOME}/.pki 18noblacklist ${HOME}/.pki
18noblacklist ${HOME}/.local/share/pki
19 19
20noblacklist ${HOME}/.cache/gnome-mplayer 20noblacklist ${HOME}/.cache/gnome-mplayer
21noblacklist ${HOME}/.config/gnome-mplayer 21noblacklist ${HOME}/.config/gnome-mplayer
@@ -31,10 +31,10 @@ include disable-xdg.inc
31mkdir ${HOME}/.cache/midori 31mkdir ${HOME}/.cache/midori
32mkdir ${HOME}/.config/midori 32mkdir ${HOME}/.config/midori
33mkdir ${HOME}/.local/share/midori 33mkdir ${HOME}/.local/share/midori
34mkdir ${HOME}/.local/share/pki
34mkdir ${HOME}/.local/share/webkit 35mkdir ${HOME}/.local/share/webkit
35mkdir ${HOME}/.local/share/webkitgtk 36mkdir ${HOME}/.local/share/webkitgtk
36mkdir ${HOME}/.pki 37mkdir ${HOME}/.pki
37mkdir ${HOME}/.local/share/pki
38whitelist ${DOWNLOADS} 38whitelist ${DOWNLOADS}
39whitelist ${HOME}/.cache/gnome-mplayer/plugin 39whitelist ${HOME}/.cache/gnome-mplayer/plugin
40whitelist ${HOME}/.cache/midori 40whitelist ${HOME}/.cache/midori
@@ -42,10 +42,10 @@ whitelist ${HOME}/.config/gnome-mplayer
42whitelist ${HOME}/.config/midori 42whitelist ${HOME}/.config/midori
43whitelist ${HOME}/.lastpass 43whitelist ${HOME}/.lastpass
44whitelist ${HOME}/.local/share/midori 44whitelist ${HOME}/.local/share/midori
45whitelist ${HOME}/.local/share/pki
45whitelist ${HOME}/.local/share/webkit 46whitelist ${HOME}/.local/share/webkit
46whitelist ${HOME}/.local/share/webkitgtk 47whitelist ${HOME}/.local/share/webkitgtk
47whitelist ${HOME}/.pki 48whitelist ${HOME}/.pki
48whitelist ${HOME}/.local/share/pki
49include whitelist-common.inc 49include whitelist-common.inc
50include whitelist-var-common.inc 50include whitelist-var-common.inc
51 51
diff --git a/etc/profile-m-z/otter-browser.profile b/etc/profile-m-z/otter-browser.profile
index 78f92a860..e2687bf6b 100644
--- a/etc/profile-m-z/otter-browser.profile
+++ b/etc/profile-m-z/otter-browser.profile
@@ -10,8 +10,8 @@ include globals.local
10 10
11noblacklist ${HOME}/.cache/Otter 11noblacklist ${HOME}/.cache/Otter
12noblacklist ${HOME}/.config/otter 12noblacklist ${HOME}/.config/otter
13noblacklist ${HOME}/.pki
14noblacklist ${HOME}/.local/share/pki 13noblacklist ${HOME}/.local/share/pki
14noblacklist ${HOME}/.pki
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
@@ -22,13 +22,13 @@ include disable-xdg.inc
22 22
23mkdir ${HOME}/.cache/Otter 23mkdir ${HOME}/.cache/Otter
24mkdir ${HOME}/.config/otter 24mkdir ${HOME}/.config/otter
25mkdir ${HOME}/.pki
26mkdir ${HOME}/.local/share/pki 25mkdir ${HOME}/.local/share/pki
26mkdir ${HOME}/.pki
27whitelist ${DOWNLOADS} 27whitelist ${DOWNLOADS}
28whitelist ${HOME}/.cache/Otter 28whitelist ${HOME}/.cache/Otter
29whitelist ${HOME}/.config/otter 29whitelist ${HOME}/.config/otter
30whitelist ${HOME}/.pki
31whitelist ${HOME}/.local/share/pki 30whitelist ${HOME}/.local/share/pki
31whitelist ${HOME}/.pki
32whitelist /usr/share/otter-browser 32whitelist /usr/share/otter-browser
33include whitelist-common.inc 33include whitelist-common.inc
34include whitelist-runuser-common.inc 34include whitelist-runuser-common.inc
diff --git a/etc/profile-m-z/raincat.profile b/etc/profile-m-z/raincat.profile
new file mode 100644
index 000000000..104577bdb
--- /dev/null
+++ b/etc/profile-m-z/raincat.profile
@@ -0,0 +1,49 @@
1# Firejail profile for raincat
2# This file is overwritten after every install/update
3# Persistent local customizations
4include raincat.local
5# Persistent global definitions
6include globals.local
7
8include disable-devel.inc
9include disable-exec.inc
10include disable-interpreters.inc
11include disable-programs.inc
12include disable-shell.inc
13include disable-xdg.inc
14
15whitelist /usr/share/games
16whitelist /usr/share/timidity
17include whitelist-usr-share-common.inc
18include whitelist-var-common.inc
19
20apparmor
21caps.drop all
22ipc-namespace
23netfilter
24nodvd
25nogroups
26noinput
27nonewprivs
28noroot
29notv
30nou2f
31novideo
32protocol unix
33net none
34seccomp
35shell none
36tracelog
37
38disable-mnt
39private
40private-bin raincat
41private-cache
42private-dev
43private-etc alternatives,drirc,ld.so.cache,ld.so.preload,machine-id,passwd,pulse,timidity,timidity.cfg
44#private-lib
45private-tmp
46
47dbus-user none
48dbus-system none
49
diff --git a/etc/profile-m-z/rambox.profile b/etc/profile-m-z/rambox.profile
index ffa2022ee..a14d7862b 100644
--- a/etc/profile-m-z/rambox.profile
+++ b/etc/profile-m-z/rambox.profile
@@ -7,8 +7,8 @@ include rambox.local
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/Rambox 9noblacklist ${HOME}/.config/Rambox
10noblacklist ${HOME}/.pki
11noblacklist ${HOME}/.local/share/pki 10noblacklist ${HOME}/.local/share/pki
11noblacklist ${HOME}/.pki
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -16,12 +16,12 @@ include disable-interpreters.inc
16include disable-programs.inc 16include disable-programs.inc
17 17
18mkdir ${HOME}/.config/Rambox 18mkdir ${HOME}/.config/Rambox
19mkdir ${HOME}/.pki
20mkdir ${HOME}/.local/share/pki 19mkdir ${HOME}/.local/share/pki
20mkdir ${HOME}/.pki
21whitelist ${DOWNLOADS} 21whitelist ${DOWNLOADS}
22whitelist ${HOME}/.config/Rambox 22whitelist ${HOME}/.config/Rambox
23whitelist ${HOME}/.pki
24whitelist ${HOME}/.local/share/pki 23whitelist ${HOME}/.local/share/pki
24whitelist ${HOME}/.pki
25include whitelist-common.inc 25include whitelist-common.inc
26 26
27caps.drop all 27caps.drop all
diff --git a/etc/profile-m-z/rpcs3.profile b/etc/profile-m-z/rpcs3.profile
new file mode 100644
index 000000000..147afb236
--- /dev/null
+++ b/etc/profile-m-z/rpcs3.profile
@@ -0,0 +1,62 @@
1# Firejail profile for RPCS3 emulator
2# Description: RPCS3 emulator
3# This file is overwritten after every install/update
4# Persistent local customizations
5include rpcs3.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/rpcs3
10noblacklist ${HOME}/.cache/rpcs3
11# Don't block access to /sbin and /usr/sbin to allow using ldconfig. Otherwise
12# won't even start.
13noblacklist /sbin
14noblacklist /usr/sbin
15
16blacklist /usr/libexec
17
18include disable-common.inc
19include disable-devel.inc
20include disable-exec.inc
21include disable-interpreters.inc
22include disable-programs.inc # disable if PPU compilation crashes
23include disable-shell.inc
24include disable-xdg.inc
25
26mkdir ${HOME}/.cache/rpcs3
27mkdir ${HOME}/.config/rpcs3
28whitelist ${HOME}/.cache/rpcs3
29whitelist ${HOME}/.config/rpcs3
30whitelist ${DOWNLOADS}
31include whitelist-common.inc
32include whitelist-run-common.inc
33include whitelist-runuser-common.inc
34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc
36
37apparmor
38caps.drop all
39net none
40netfilter
41nodvd
42nogroups
43#noinput
44nonewprivs
45noroot
46noprinters
47notv
48nou2f
49novideo
50protocol unix,netlink
51seccomp
52seccomp.block-secondary
53shell none
54tracelog
55
56disable-mnt
57#private-cache
58#private-etc ca-certificates,crypto-policies,machine-id,pki,resolv.conf,ssl # seems to need awk
59private-tmp
60
61dbus-user none
62dbus-system none
diff --git a/etc/profile-m-z/seamonkey.profile b/etc/profile-m-z/seamonkey.profile
index 807effbeb..e67e51620 100644
--- a/etc/profile-m-z/seamonkey.profile
+++ b/etc/profile-m-z/seamonkey.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9noblacklist ${HOME}/.cache/mozilla 9noblacklist ${HOME}/.cache/mozilla
10noblacklist ${HOME}/.mozilla 10noblacklist ${HOME}/.mozilla
11noblacklist ${HOME}/.pki
12noblacklist ${HOME}/.local/share/pki 11noblacklist ${HOME}/.local/share/pki
12noblacklist ${HOME}/.pki
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-programs.inc
18 18
19mkdir ${HOME}/.cache/mozilla 19mkdir ${HOME}/.cache/mozilla
20mkdir ${HOME}/.mozilla 20mkdir ${HOME}/.mozilla
21mkdir ${HOME}/.pki
22mkdir ${HOME}/.local/share/pki 21mkdir ${HOME}/.local/share/pki
22mkdir ${HOME}/.pki
23whitelist ${DOWNLOADS} 23whitelist ${DOWNLOADS}
24whitelist ${HOME}/.cache/gnome-mplayer/plugin 24whitelist ${HOME}/.cache/gnome-mplayer/plugin
25whitelist ${HOME}/.cache/mozilla 25whitelist ${HOME}/.cache/mozilla
@@ -28,11 +28,11 @@ whitelist ${HOME}/.config/pipelight-silverlight5.1
28whitelist ${HOME}/.config/pipelight-widevine 28whitelist ${HOME}/.config/pipelight-widevine
29whitelist ${HOME}/.keysnail.js 29whitelist ${HOME}/.keysnail.js
30whitelist ${HOME}/.lastpass 30whitelist ${HOME}/.lastpass
31whitelist ${HOME}/.local/share/pki
31whitelist ${HOME}/.mozilla 32whitelist ${HOME}/.mozilla
32whitelist ${HOME}/.pentadactyl 33whitelist ${HOME}/.pentadactyl
33whitelist ${HOME}/.pentadactylrc 34whitelist ${HOME}/.pentadactylrc
34whitelist ${HOME}/.pki 35whitelist ${HOME}/.pki
35whitelist ${HOME}/.local/share/pki
36whitelist ${HOME}/.vimperator 36whitelist ${HOME}/.vimperator
37whitelist ${HOME}/.vimperatorrc 37whitelist ${HOME}/.vimperatorrc
38whitelist ${HOME}/.wine-pipelight 38whitelist ${HOME}/.wine-pipelight
diff --git a/etc/profile-m-z/signal-desktop.profile b/etc/profile-m-z/signal-desktop.profile
index 77a7f5b38..1166f378b 100644
--- a/etc/profile-m-z/signal-desktop.profile
+++ b/etc/profile-m-z/signal-desktop.profile
@@ -21,9 +21,15 @@ whitelist ${HOME}/.config/Signal
21 21
22private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id,nsswitch.conf,pki,resolv.conf,ssl 22private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id,nsswitch.conf,pki,resolv.conf,ssl
23 23
24# allow D-Bus notifications
25dbus-user filter 24dbus-user filter
25
26# allow D-Bus notifications
26dbus-user.talk org.freedesktop.Notifications 27dbus-user.talk org.freedesktop.Notifications
28
29# allow D-Bus communication with firefox for opening links
30dbus-user.talk org.mozilla.Firefox.*
31dbus-user.talk org.mozilla.firefox.*
32
27ignore dbus-user none 33ignore dbus-user none
28 34
29# Redirect 35# Redirect
diff --git a/etc/profile-m-z/ssh.profile b/etc/profile-m-z/ssh.profile
index 9295013e7..4da0db517 100644
--- a/etc/profile-m-z/ssh.profile
+++ b/etc/profile-m-z/ssh.profile
@@ -50,4 +50,5 @@ writable-run-user
50dbus-user none 50dbus-user none
51dbus-system none 51dbus-system none
52 52
53deterministic-shutdown
53memory-deny-write-execute 54memory-deny-write-execute
diff --git a/etc/profile-m-z/steam.profile b/etc/profile-m-z/steam.profile
index bcf94de51..b31818274 100644
--- a/etc/profile-m-z/steam.profile
+++ b/etc/profile-m-z/steam.profile
@@ -147,7 +147,7 @@ shell none
147 147
148# private-bin is disabled while in testing, but is known to work with multiple games. 148# private-bin is disabled while in testing, but is known to work with multiple games.
149# Add the next line to your steam.local to enable private-bin. 149# Add the next line to your steam.local to enable private-bin.
150#private-bin awk,basename,bash,bsdtar,bzip2,cat,chmod,cksum,cmp,comm,compress,cp,curl,cut,date,dbus-launch,dbus-send,desktop-file-edit,desktop-file-install,desktop-file-validate,dirname,echo,env,expr,file,find,getopt,grep,gtar,gzip,head,hostname,id,lbzip2,ldconfig,ldd,ln,ls,lsb_release,lsof,lspci,lz4,lzip,lzma,lzop,md5sum,mkdir,mktemp,mv,netstat,ps,pulseaudio,python*,readlink,realpath,rm,sed,sh,sha1sum,sha256sum,sha512sum,sleep,sort,steam,steamdeps,steam-native,steam-runtime,sum,tail,tar,tclsh,test,touch,tr,umask,uname,update-desktop-database,wc,wget,which,whoami,xterm,xz,zenity 150#private-bin awk,basename,bash,bsdtar,bzip2,cat,chmod,cksum,cmp,comm,compress,cp,curl,cut,date,dbus-launch,dbus-send,desktop-file-edit,desktop-file-install,desktop-file-validate,dirname,echo,env,expr,file,find,getopt,grep,gtar,gzip,head,hostname,id,lbzip2,ldconfig,ldd,ln,ls,lsb_release,lsof,lspci,lz4,lzip,lzma,lzop,md5sum,mkdir,mktemp,mv,netstat,ps,pulseaudio,python*,readlink,realpath,rm,sed,sh,sha1sum,sha256sum,sha512sum,sleep,sort,steam,steamdeps,steam-native,steam-runtime,sum,tail,tar,tclsh,test,touch,tr,umask,uname,update-desktop-database,wc,wget,wget2,which,whoami,xterm,xz,zenity
151# Extra programs are available which might be needed for select games. 151# Extra programs are available which might be needed for select games.
152# Add the next line to your steam.local to enable support for these programs. 152# Add the next line to your steam.local to enable support for these programs.
153#private-bin java,java-config,mono 153#private-bin java,java-config,mono
@@ -157,7 +157,7 @@ shell none
157private-dev 157private-dev
158# private-etc breaks a small selection of games on some systems. Add 'ignore private-etc' 158# private-etc breaks a small selection of games on some systems. Add 'ignore private-etc'
159# to your steam.local to support those. 159# to your steam.local to support those.
160private-etc alsa,alternatives,asound.conf,bumblebee,ca-certificates,crypto-policies,dbus-1,drirc,fonts,group,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,lsb-release,machine-id,mime.types,nvidia,os-release,passwd,pki,pulse,resolv.conf,services,ssl 160private-etc alsa,alternatives,asound.conf,bumblebee,ca-certificates,crypto-policies,dbus-1,drirc,fonts,group,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,lsb-release,machine-id,mime.types,nvidia,os-release,passwd,pki,pulse,resolv.conf,services,ssl,vulkan
161private-tmp 161private-tmp
162 162
163# dbus-user none 163# dbus-user none
diff --git a/etc/profile-m-z/supertuxkart.profile b/etc/profile-m-z/supertuxkart.profile
index 473472251..23c8a6c58 100644
--- a/etc/profile-m-z/supertuxkart.profile
+++ b/etc/profile-m-z/supertuxkart.profile
@@ -43,7 +43,7 @@ noroot
43notv 43notv
44nou2f 44nou2f
45novideo 45novideo
46protocol unix,inet,inet6,bluetooth 46protocol unix,inet,inet6,netlink,bluetooth
47seccomp 47seccomp
48seccomp.block-secondary 48seccomp.block-secondary
49shell none 49shell none
diff --git a/etc/profile-m-z/uzbl-browser.profile b/etc/profile-m-z/uzbl-browser.profile
index 41487a8f2..dcdae279f 100644
--- a/etc/profile-m-z/uzbl-browser.profile
+++ b/etc/profile-m-z/uzbl-browser.profile
@@ -8,6 +8,7 @@ include globals.local
8noblacklist ${HOME}/.config/uzbl 8noblacklist ${HOME}/.config/uzbl
9noblacklist ${HOME}/.gnupg 9noblacklist ${HOME}/.gnupg
10noblacklist ${HOME}/.local/share/uzbl 10noblacklist ${HOME}/.local/share/uzbl
11noblacklist ${HOME}/.password-store
11 12
12# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 14include allow-python2.inc
diff --git a/etc/profile-m-z/warzone2100.profile b/etc/profile-m-z/warzone2100.profile
index 46dca0547..5519c3c1e 100644
--- a/etc/profile-m-z/warzone2100.profile
+++ b/etc/profile-m-z/warzone2100.profile
@@ -7,19 +7,22 @@ include warzone2100.local
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.warzone2100-3.* 9noblacklist ${HOME}/.warzone2100-3.*
10noblacklist ${HOME}/.local/share/warzone2100-3.*
10 11
11include disable-common.inc 12include disable-common.inc
12include disable-devel.inc 13include disable-devel.inc
13include disable-exec.inc 14include disable-exec.inc
14include disable-interpreters.inc 15include disable-interpreters.inc
15include disable-programs.inc 16include disable-programs.inc
16include disable-shell.inc 17#include disable-shell.inc - problems on Debian 11
17 18
18mkdir ${HOME}/.warzone2100-3.1 19mkdir ${HOME}/.warzone2100-3.1
19mkdir ${HOME}/.warzone2100-3.2 20mkdir ${HOME}/.warzone2100-3.2
21whitelist ${HOME}/.local/share/warzone2100-3.3.0 # config dir moved under .local/share
20whitelist ${HOME}/.warzone2100-3.1 22whitelist ${HOME}/.warzone2100-3.1
21whitelist ${HOME}/.warzone2100-3.2 23whitelist ${HOME}/.warzone2100-3.2
22whitelist /usr/share/games 24whitelist /usr/share/games
25whitelist /usr/share/gdm
23include whitelist-common.inc 26include whitelist-common.inc
24include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
@@ -42,6 +45,6 @@ shell none
42tracelog 45tracelog
43 46
44disable-mnt 47disable-mnt
45private-bin warzone2100 48private-bin bash,dash,sh,warzone2100,which
46private-dev 49private-dev
47private-tmp 50private-tmp
diff --git a/etc/profile-m-z/wget2.profile b/etc/profile-m-z/wget2.profile
new file mode 100644
index 000000000..18918c6af
--- /dev/null
+++ b/etc/profile-m-z/wget2.profile
@@ -0,0 +1,19 @@
1# Firejail profile for wget2
2# Description: Updated version of the popular wget URL retrieval tool
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include wget2.local
7# Persistent global definitions
8# added by included profile
9#include globals.local
10
11noblacklist ${HOME}/.config/wget
12ignore noblacklist ${HOME}/.wgetrc
13
14private-bin wget2
15# Depending on workflow you can add the next line to your wget2.local.
16#private-etc wget2rc
17
18# Redirect
19include wget.profile
diff --git a/etc/profile-m-z/wine.profile b/etc/profile-m-z/wine.profile
index 1e9b9341b..f30fc971f 100644
--- a/etc/profile-m-z/wine.profile
+++ b/etc/profile-m-z/wine.profile
@@ -6,6 +6,7 @@ include wine.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/wine
9noblacklist ${HOME}/.cache/winetricks 10noblacklist ${HOME}/.cache/winetricks
10noblacklist ${HOME}/.Steam 11noblacklist ${HOME}/.Steam
11noblacklist ${HOME}/.local/share/Steam 12noblacklist ${HOME}/.local/share/Steam
diff --git a/etc/profile-m-z/youtube-viewers-common.profile b/etc/profile-m-z/youtube-viewers-common.profile
index 80d551038..f212a6721 100644
--- a/etc/profile-m-z/youtube-viewers-common.profile
+++ b/etc/profile-m-z/youtube-viewers-common.profile
@@ -50,7 +50,7 @@ shell none
50tracelog 50tracelog
51 51
52disable-mnt 52disable-mnt
53private-bin bash,ffmpeg,ffprobe,firefox,mpv,perl,python*,sh,smplayer,stty,wget,which,xterm,youtube-dl,yt-dlp 53private-bin bash,ffmpeg,ffprobe,firefox,mpv,perl,python*,sh,smplayer,stty,wget,wget2,which,xterm,youtube-dl,yt-dlp
54private-cache 54private-cache
55private-dev 55private-dev
56private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,machine-id,mime.types,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl,X11,xdg 56private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,machine-id,mime.types,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl,X11,xdg
diff --git a/etc/templates/profile.template b/etc/templates/profile.template
index 1a4c8fef9..aefb75c2c 100644
--- a/etc/templates/profile.template
+++ b/etc/templates/profile.template
@@ -155,6 +155,7 @@ include globals.local
155#nogroups 155#nogroups
156#noinput 156#noinput
157#nonewprivs 157#nonewprivs
158#noprinters
158#noroot 159#noroot
159#nosound 160#nosound
160#notv 161#notv
diff --git a/gcov.sh b/gcov.sh
index 61f4b2483..79736d3d8 100755
--- a/gcov.sh
+++ b/gcov.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6gcov_init() { 6gcov_init() {
diff --git a/install.sh b/install.sh
index e26cea7b0..2d5f29d41 100755
--- a/install.sh
+++ b/install.sh
@@ -1,6 +1,6 @@
1#!/bin/sh 1#!/bin/sh
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6echo "installing..." 6echo "installing..."
diff --git a/linecnt.sh b/linecnt.sh
index c30e175ba..06d136d8c 100755
--- a/linecnt.sh
+++ b/linecnt.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6gcov_init() { 6gcov_init() {
diff --git a/mkasc.sh b/mkasc.sh
index b41585460..6de64c6f2 100755
--- a/mkasc.sh
+++ b/mkasc.sh
@@ -1,6 +1,6 @@
1#!/bin/sh 1#!/bin/sh
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6echo "Calculating SHA256 for all files in /transfer - firejail version $1" 6echo "Calculating SHA256 for all files in /transfer - firejail version $1"
diff --git a/mkdeb.sh.in b/mkdeb.sh.in
index ddd6ca1ee..6d6981417 100755
--- a/mkdeb.sh.in
+++ b/mkdeb.sh.in
@@ -1,6 +1,6 @@
1#!/bin/sh 1#!/bin/sh
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# based on http://tldp.org/HOWTO/html_single/Debian-Binary-Package-Building-HOWTO/ 6# based on http://tldp.org/HOWTO/html_single/Debian-Binary-Package-Building-HOWTO/
diff --git a/mketc.sh b/mketc.sh
index 0aa313b17..0e681fa28 100755
--- a/mketc.sh
+++ b/mketc.sh
@@ -1,6 +1,6 @@
1#!/bin/sh 1#!/bin/sh
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6sed -i -e ' 6sed -i -e '
diff --git a/mkman.sh b/mkman.sh
index c9606c1e7..79ad16252 100755
--- a/mkman.sh
+++ b/mkman.sh
@@ -1,6 +1,6 @@
1#!/bin/sh 1#!/bin/sh
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set -e 6set -e
diff --git a/mkuid.sh b/mkuid.sh
index 47aa42acd..7db6c9ac5 100755
--- a/mkuid.sh
+++ b/mkuid.sh
@@ -1,6 +1,6 @@
1#!/bin/sh 1#!/bin/sh
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6echo "extracting UID_MIN and GID_MIN" 6echo "extracting UID_MIN and GID_MIN"
diff --git a/platform/debian/copyright b/platform/debian/copyright
index d4bdb1283..aef85743e 100644
--- a/platform/debian/copyright
+++ b/platform/debian/copyright
@@ -7,7 +7,7 @@ This is the Debian/Ubuntu prepackaged version of firejail.
7 and networking stack isolation, and it runs on any recent Linux system. It 7 and networking stack isolation, and it runs on any recent Linux system. It
8 includes a sandbox profile for Mozilla Firefox. 8 includes a sandbox profile for Mozilla Firefox.
9 9
10 Copyright (C) 2014-2021 Firejail Authors (see README file for more details) 10 Copyright (C) 2014-2022 Firejail Authors (see README file for more details)
11 11
12 This program is free software; you can redistribute it and/or modify 12 This program is free software; you can redistribute it and/or modify
13 it under the terms of the GNU General Public License as published by 13 it under the terms of the GNU General Public License as published by
diff --git a/platform/rpm/mkrpm.sh b/platform/rpm/mkrpm.sh
index b8470dd71..d597d32fd 100755
--- a/platform/rpm/mkrpm.sh
+++ b/platform/rpm/mkrpm.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# Usage: ./platform/rpm/mkrpm.sh firejail <version> "<config options>" 6# Usage: ./platform/rpm/mkrpm.sh firejail <version> "<config options>"
diff --git a/src/fbuilder/build_bin.c b/src/fbuilder/build_bin.c
index 9577042c4..041c52629 100644
--- a/src/fbuilder/build_bin.c
+++ b/src/fbuilder/build_bin.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fbuilder/build_fs.c b/src/fbuilder/build_fs.c
index a1847284c..4766337ff 100644
--- a/src/fbuilder/build_fs.c
+++ b/src/fbuilder/build_fs.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fbuilder/build_home.c b/src/fbuilder/build_home.c
index 0fe0ffef6..d6d421259 100644
--- a/src/fbuilder/build_home.c
+++ b/src/fbuilder/build_home.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fbuilder/build_profile.c b/src/fbuilder/build_profile.c
index c945d7253..3a7a12fb3 100644
--- a/src/fbuilder/build_profile.c
+++ b/src/fbuilder/build_profile.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -22,7 +22,6 @@
22#include <sys/wait.h> 22#include <sys/wait.h>
23 23
24#define TRACE_OUTPUT "/tmp/firejail-trace.XXXXXX" 24#define TRACE_OUTPUT "/tmp/firejail-trace.XXXXXX"
25#define STRACE_OUTPUT "/tmp/firejail-strace.XXXXXX"
26 25
27void build_profile(int argc, char **argv, int index, FILE *fp) { 26void build_profile(int argc, char **argv, int index, FILE *fp) {
28 // next index is the application name 27 // next index is the application name
@@ -41,36 +40,33 @@ void build_profile(int argc, char **argv, int index, FILE *fp) {
41 if(asprintf(&output,"--trace=%s",trace_output) == -1) 40 if(asprintf(&output,"--trace=%s",trace_output) == -1)
42 errExit("asprintf"); 41 errExit("asprintf");
43 42
44 char *cmdlist[] = {
45 BINDIR "/firejail",
46 "--quiet",
47 "--noprofile",
48 "--caps.drop=all",
49 "--seccomp",
50 output,
51 "--shell=none",
52 };
53
54 // calculate command length 43 // calculate command length
55 unsigned len = (int) sizeof(cmdlist) / sizeof(char*) + argc - index + 1; 44 unsigned len = 64; // plenty of space for firejail command line
56 if (arg_debug) 45 len += argc - index; // program command line
57 printf("command len %d + %d + 1\n", (int) (sizeof(cmdlist) / sizeof(char*)), argc - index); 46 len += 1; // NULL
58 char *cmd[len];
59 cmd[0] = cmdlist[0]; // explicit assignment to clean scan-build error
60 47
61 // build command 48 // build command
62 unsigned i = 0; 49 char *cmd[len];
63 for (i = 0; i < (int) sizeof(cmdlist) / sizeof(char*); i++) 50 unsigned curr_len = 0;
64 cmd[i] = cmdlist[i]; 51 cmd[curr_len++] = BINDIR "/firejail";
65 52 cmd[curr_len++] = "--quiet";
66 int i2 = index; 53 cmd[curr_len++] = "--noprofile";
67 for (; i < (len - 1); i++, i2++) 54 cmd[curr_len++] = "--caps.drop=all";
68 cmd[i] = argv[i2]; 55 cmd[curr_len++] = "--seccomp";
69 assert(i < len); 56 cmd[curr_len++] = "--shell=none";
70 cmd[i] = NULL; 57 cmd[curr_len++] = output;
58 if (arg_appimage)
59 cmd[curr_len++] = "--appimage";
60
61 int i;
62 for (i = index; i < argc; i++)
63 cmd[curr_len++] = argv[i];
64
65 assert(curr_len < len);
66 cmd[curr_len] = NULL;
71 67
72 if (arg_debug) { 68 if (arg_debug) {
73 for (i = 0; i < len; i++) 69 for (i = 0; cmd[i]; i++)
74 printf("%s%s\n", (i)?"\t":"", cmd[i]); 70 printf("%s%s\n", (i)?"\t":"", cmd[i]);
75 } 71 }
76 72
diff --git a/src/fbuilder/build_seccomp.c b/src/fbuilder/build_seccomp.c
index daf8d63ac..7b4727e1a 100644
--- a/src/fbuilder/build_seccomp.c
+++ b/src/fbuilder/build_seccomp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fbuilder/fbuilder.h b/src/fbuilder/fbuilder.h
index 08dd35e10..3e23d7854 100644
--- a/src/fbuilder/fbuilder.h
+++ b/src/fbuilder/fbuilder.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -31,6 +31,7 @@
31#define MAX_BUF 4096 31#define MAX_BUF 4096
32// main.c 32// main.c
33extern int arg_debug; 33extern int arg_debug;
34extern int arg_appimage;
34 35
35// build_profile.c 36// build_profile.c
36void build_profile(int argc, char **argv, int index, FILE *fp); 37void build_profile(int argc, char **argv, int index, FILE *fp);
diff --git a/src/fbuilder/filedb.c b/src/fbuilder/filedb.c
index 94a226cb7..454b9f40b 100644
--- a/src/fbuilder/filedb.c
+++ b/src/fbuilder/filedb.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fbuilder/main.c b/src/fbuilder/main.c
index 6c9fc507c..aa49b2489 100644
--- a/src/fbuilder/main.c
+++ b/src/fbuilder/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -19,6 +19,7 @@
19*/ 19*/
20#include "fbuilder.h" 20#include "fbuilder.h"
21int arg_debug = 0; 21int arg_debug = 0;
22int arg_appimage = 0;
22 23
23static void usage(void) { 24static void usage(void) {
24 printf("Firejail profile builder\n"); 25 printf("Firejail profile builder\n");
@@ -49,6 +50,8 @@ printf("\n");
49 } 50 }
50 else if (strcmp(argv[i], "--debug") == 0) 51 else if (strcmp(argv[i], "--debug") == 0)
51 arg_debug = 1; 52 arg_debug = 1;
53 else if (strcmp(argv[i], "--appimage") == 0)
54 arg_appimage = 1;
52 else if (strcmp(argv[i], "--build") == 0) 55 else if (strcmp(argv[i], "--build") == 0)
53 ; // do nothing, this is passed down from firejail 56 ; // do nothing, this is passed down from firejail
54 else if (strncmp(argv[i], "--build=", 8) == 0) { 57 else if (strncmp(argv[i], "--build=", 8) == 0) {
diff --git a/src/fbuilder/utils.c b/src/fbuilder/utils.c
index 52493f470..f89e69679 100644
--- a/src/fbuilder/utils.c
+++ b/src/fbuilder/utils.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fcopy/main.c b/src/fcopy/main.c
index f279af89f..c64d20127 100644
--- a/src/fcopy/main.c
+++ b/src/fcopy/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -200,7 +200,8 @@ static char *proc_pid_to_self(const char *target) {
200 200
201 // check where /proc/self points to 201 // check where /proc/self points to
202 static const char proc_self[] = "/proc/self"; 202 static const char proc_self[] = "/proc/self";
203 if (!(proc_pid = realpath(proc_self, NULL))) 203 proc_pid = realpath(proc_self, NULL);
204 if (proc_pid == NULL)
204 goto done; 205 goto done;
205 206
206 // redirect /proc/PID/xxx -> /proc/self/XXX 207 // redirect /proc/PID/xxx -> /proc/self/XXX
diff --git a/src/fids/blake2b.c b/src/fids/blake2b.c
index f2aa5ae66..ec7cf8602 100644
--- a/src/fids/blake2b.c
+++ b/src/fids/blake2b.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fids/db.c b/src/fids/db.c
index 35caf7eeb..e8dfab1ac 100644
--- a/src/fids/db.c
+++ b/src/fids/db.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fids/db_exclude.c b/src/fids/db_exclude.c
index 994e6f9df..cfb37219c 100644
--- a/src/fids/db_exclude.c
+++ b/src/fids/db_exclude.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fids/fids.h b/src/fids/fids.h
index eaf2bbd29..93ae106a1 100644
--- a/src/fids/fids.h
+++ b/src/fids/fids.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fids/main.c b/src/fids/main.c
index 8f9bc1ea0..e6be365d1 100644
--- a/src/fids/main.c
+++ b/src/fids/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firecfg/desktop_files.c b/src/firecfg/desktop_files.c
index c1aaf740c..d434cb95e 100644
--- a/src/firecfg/desktop_files.c
+++ b/src/firecfg/desktop_files.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 89ff140ec..77f233bce 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -2,6 +2,7 @@
2# This is the list of programs in alphabetical order handled by firecfg utility 2# This is the list of programs in alphabetical order handled by firecfg utility
3# 3#
40ad 40ad
51password
52048-qt 62048-qt
6Books 7Books
7Builder 8Builder
@@ -152,6 +153,7 @@ cmus
152code 153code
153code-oss 154code-oss
154codium 155codium
156cointop
155cola 157cola
156colorful 158colorful
157com.github.bleakgrey.tootle 159com.github.bleakgrey.tootle
@@ -687,6 +689,7 @@ quaternion
687quiterss 689quiterss
688qupzilla 690qupzilla
689qutebrowser 691qutebrowser
692raincat
690rambox 693rambox
691redeclipse 694redeclipse
692rednotebook 695rednotebook
@@ -702,6 +705,7 @@ riot-web
702ripperx 705ripperx
703ristretto 706ristretto
704rocketchat 707rocketchat
708rpcs3
705rtorrent 709rtorrent
706runenpass.sh 710runenpass.sh
707sayonara 711sayonara
@@ -874,6 +878,7 @@ weechat
874weechat-curses 878weechat-curses
875wesnoth 879wesnoth
876wget 880wget
881wget2
877whalebird 882whalebird
878whois 883whois
879widelands 884widelands
diff --git a/src/firecfg/firecfg.h b/src/firecfg/firecfg.h
index 15826cf37..f54bfd5b5 100644
--- a/src/firecfg/firecfg.h
+++ b/src/firecfg/firecfg.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firecfg/main.c b/src/firecfg/main.c
index fafa0e635..2f346fecd 100644
--- a/src/firecfg/main.c
+++ b/src/firecfg/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firecfg/sound.c b/src/firecfg/sound.c
index e3fcdbd83..9d04c951b 100644
--- a/src/firecfg/sound.c
+++ b/src/firecfg/sound.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firecfg/util.c b/src/firecfg/util.c
index 14d90b549..4697e7dd9 100644
--- a/src/firecfg/util.c
+++ b/src/firecfg/util.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/appimage.c b/src/firejail/appimage.c
index bb5b29d79..479473572 100644
--- a/src/firejail/appimage.c
+++ b/src/firejail/appimage.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/appimage_size.c b/src/firejail/appimage_size.c
index 43ca501da..4f8c7a7aa 100644
--- a/src/firejail/appimage_size.c
+++ b/src/firejail/appimage_size.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/arp.c b/src/firejail/arp.c
index c259fc0ad..cbd80dee0 100644
--- a/src/firejail/arp.c
+++ b/src/firejail/arp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/bandwidth.c b/src/firejail/bandwidth.c
index a085f2c27..fa9d3a940 100644
--- a/src/firejail/bandwidth.c
+++ b/src/firejail/bandwidth.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/caps.c b/src/firejail/caps.c
index 5e02b99c2..c5c06c675 100644
--- a/src/firejail/caps.c
+++ b/src/firejail/caps.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/cgroup.c b/src/firejail/cgroup.c
index 38b3c32d3..f1e16187f 100644
--- a/src/firejail/cgroup.c
+++ b/src/firejail/cgroup.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -18,6 +18,7 @@
18 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. 18 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
19*/ 19*/
20#include "firejail.h" 20#include "firejail.h"
21#include "../include/gcov_wrapper.h"
21#include <sys/wait.h> 22#include <sys/wait.h>
22#include <errno.h> 23#include <errno.h>
23 24
@@ -122,6 +123,9 @@ void set_cgroup(const char *fname, pid_t pid) {
122 drop_privs(0); 123 drop_privs(0);
123 124
124 do_set_cgroup(fname, pid); 125 do_set_cgroup(fname, pid);
126
127 __gcov_flush();
128
125 _exit(0); 129 _exit(0);
126 } 130 }
127 waitpid(child, NULL, 0); 131 waitpid(child, NULL, 0);
diff --git a/src/firejail/checkcfg.c b/src/firejail/checkcfg.c
index e5d837bbb..6fc70318b 100644
--- a/src/firejail/checkcfg.c
+++ b/src/firejail/checkcfg.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/chroot.c b/src/firejail/chroot.c
index 9425638ea..551948318 100644
--- a/src/firejail/chroot.c
+++ b/src/firejail/chroot.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/cmdline.c b/src/firejail/cmdline.c
index 2fa68a55d..6f7739da0 100644
--- a/src/firejail/cmdline.c
+++ b/src/firejail/cmdline.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/cpu.c b/src/firejail/cpu.c
index fe7258fb0..1ec510456 100644
--- a/src/firejail/cpu.c
+++ b/src/firejail/cpu.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/dbus.c b/src/firejail/dbus.c
index 735ff54fa..66738bd4b 100644
--- a/src/firejail/dbus.c
+++ b/src/firejail/dbus.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -297,11 +297,12 @@ void dbus_proxy_start(void) {
297 if (dbus_proxy_pid == -1) 297 if (dbus_proxy_pid == -1)
298 errExit("fork"); 298 errExit("fork");
299 if (dbus_proxy_pid == 0) { 299 if (dbus_proxy_pid == 0) {
300 int i; 300 // close open files
301 for (i = STDERR_FILENO + 1; i < FIREJAIL_MAX_FD; i++) { 301 int keep[2];
302 if (i != status_pipe[1] && i != args_pipe[0]) 302 keep[0] = status_pipe[1];
303 close(i); // close open files 303 keep[1] = args_pipe[0];
304 } 304 close_all(keep, ARRAY_SIZE(keep));
305
305 if (arg_dbus_log_file != NULL) { 306 if (arg_dbus_log_file != NULL) {
306 int output_fd = creat(arg_dbus_log_file, 0666); 307 int output_fd = creat(arg_dbus_log_file, 0666);
307 if (output_fd < 0) 308 if (output_fd < 0)
diff --git a/src/firejail/dhcp.c b/src/firejail/dhcp.c
index ec482e2ea..fb66d74ff 100644
--- a/src/firejail/dhcp.c
+++ b/src/firejail/dhcp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/env.c b/src/firejail/env.c
index 4c0d729a1..963288459 100644
--- a/src/firejail/env.c
+++ b/src/firejail/env.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/firejail.h b/src/firejail/firejail.h
index bc4cfe3fc..f1fa66707 100644
--- a/src/firejail/firejail.h
+++ b/src/firejail/firejail.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -161,6 +161,7 @@ typedef struct config_t {
161 161
162#define MAX_PROFILE_IGNORE 32 162#define MAX_PROFILE_IGNORE 32
163 char *profile_ignore[MAX_PROFILE_IGNORE]; 163 char *profile_ignore[MAX_PROFILE_IGNORE];
164 char *keep_fd; // inherit file descriptors to sandbox
164 char *chrootdir; // chroot directory 165 char *chrootdir; // chroot directory
165 char *home_private; // private home directory 166 char *home_private; // private home directory
166 char *home_private_keep; // keep list for private home directory 167 char *home_private_keep; // keep list for private home directory
@@ -352,6 +353,7 @@ extern int arg_nou2f; // --nou2f
352extern int arg_noinput; // --noinput 353extern int arg_noinput; // --noinput
353extern int arg_deterministic_exit_code; // always exit with first child's exit status 354extern int arg_deterministic_exit_code; // always exit with first child's exit status
354extern int arg_deterministic_shutdown; // shut down the sandbox if first child dies 355extern int arg_deterministic_shutdown; // shut down the sandbox if first child dies
356extern int arg_keep_fd_all; // inherit all file descriptors to sandbox
355 357
356typedef enum { 358typedef enum {
357 DBUS_POLICY_ALLOW, // Allow unrestricted access to the bus 359 DBUS_POLICY_ALLOW, // Allow unrestricted access to the bus
@@ -551,6 +553,7 @@ int remount_by_fd(int dst, unsigned long mountflags);
551int bind_mount_by_fd(int src, int dst); 553int bind_mount_by_fd(int src, int dst);
552int bind_mount_path_to_fd(const char *srcname, int dst); 554int bind_mount_path_to_fd(const char *srcname, int dst);
553int bind_mount_fd_to_path(int src, const char *destname); 555int bind_mount_fd_to_path(int src, const char *destname);
556void close_all(int *keep_list, size_t sz);
554int has_handler(pid_t pid, int signal); 557int has_handler(pid_t pid, int signal);
555void enter_network_namespace(pid_t pid); 558void enter_network_namespace(pid_t pid);
556int read_pid(const char *name, pid_t *pid); 559int read_pid(const char *name, pid_t *pid);
@@ -707,6 +710,7 @@ void env_ibus_load(void);
707void fs_whitelist(void); 710void fs_whitelist(void);
708 711
709// pulseaudio.c 712// pulseaudio.c
713void pipewire_disable(void);
710void pulseaudio_init(void); 714void pulseaudio_init(void);
711void pulseaudio_disable(void); 715void pulseaudio_disable(void);
712 716
@@ -881,7 +885,6 @@ void build_appimage_cmdline(char **command_line, char **window_title, int argc,
881#define SBOX_CAPS_HIDEPID (1 << 7) // hidepid caps filter for running firemon 885#define SBOX_CAPS_HIDEPID (1 << 7) // hidepid caps filter for running firemon
882#define SBOX_CAPS_NET_SERVICE (1 << 8) // caps filter for programs running network services 886#define SBOX_CAPS_NET_SERVICE (1 << 8) // caps filter for programs running network services
883#define SBOX_KEEP_FDS (1 << 9) // keep file descriptors open 887#define SBOX_KEEP_FDS (1 << 9) // keep file descriptors open
884#define FIREJAIL_MAX_FD 20 // getdtablesize() is overkill for a firejail process
885 888
886// run sbox 889// run sbox
887int sbox_run(unsigned filter, int num, ...); 890int sbox_run(unsigned filter, int num, ...);
diff --git a/src/firejail/fs.c b/src/firejail/fs.c
index f62e6404e..04ea715cd 100644
--- a/src/firejail/fs.c
+++ b/src/firejail/fs.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_bin.c b/src/firejail/fs_bin.c
index 4c9dac0c2..2b0b3003e 100644
--- a/src/firejail/fs_bin.c
+++ b/src/firejail/fs_bin.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_dev.c b/src/firejail/fs_dev.c
index 694d0a379..a6fbbb89a 100644
--- a/src/firejail/fs_dev.c
+++ b/src/firejail/fs_dev.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_etc.c b/src/firejail/fs_etc.c
index 76054b485..786e0d360 100644
--- a/src/firejail/fs_etc.c
+++ b/src/firejail/fs_etc.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -142,7 +142,7 @@ errexit:
142static void duplicate(const char *fname, const char *private_dir, const char *private_run_dir) { 142static void duplicate(const char *fname, const char *private_dir, const char *private_run_dir) {
143 assert(fname); 143 assert(fname);
144 144
145 if (*fname == '~' || *fname == '/' || strncmp(fname, "..", 2) == 0) { 145 if (*fname == '~' || *fname == '/' || strstr(fname, "..")) {
146 fprintf(stderr, "Error: \"%s\" is an invalid filename\n", fname); 146 fprintf(stderr, "Error: \"%s\" is an invalid filename\n", fname);
147 exit(1); 147 exit(1);
148 } 148 }
diff --git a/src/firejail/fs_home.c b/src/firejail/fs_home.c
index b410ba68e..b1cb9d927 100644
--- a/src/firejail/fs_home.c
+++ b/src/firejail/fs_home.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_hostname.c b/src/firejail/fs_hostname.c
index 8b7e94f51..dca394865 100644
--- a/src/firejail/fs_hostname.c
+++ b/src/firejail/fs_hostname.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_lib.c b/src/firejail/fs_lib.c
index 03af7f8fb..194a980f4 100644
--- a/src/firejail/fs_lib.c
+++ b/src/firejail/fs_lib.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_lib2.c b/src/firejail/fs_lib2.c
index a347b380c..aefd38e3c 100644
--- a/src/firejail/fs_lib2.c
+++ b/src/firejail/fs_lib2.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_logger.c b/src/firejail/fs_logger.c
index 604e297b1..06f03dac5 100644
--- a/src/firejail/fs_logger.c
+++ b/src/firejail/fs_logger.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_mkdir.c b/src/firejail/fs_mkdir.c
index 4983db0a0..30dbd8e9b 100644
--- a/src/firejail/fs_mkdir.c
+++ b/src/firejail/fs_mkdir.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_overlayfs.c b/src/firejail/fs_overlayfs.c
index fe3761cb6..167a7e28b 100644
--- a/src/firejail/fs_overlayfs.c
+++ b/src/firejail/fs_overlayfs.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_trace.c b/src/firejail/fs_trace.c
index 17a7b3d23..4cecea9ce 100644
--- a/src/firejail/fs_trace.c
+++ b/src/firejail/fs_trace.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_var.c b/src/firejail/fs_var.c
index e19d0df96..9523875d7 100644
--- a/src/firejail/fs_var.c
+++ b/src/firejail/fs_var.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/fs_whitelist.c b/src/firejail/fs_whitelist.c
index 7afebed1f..c515b59f5 100644
--- a/src/firejail/fs_whitelist.c
+++ b/src/firejail/fs_whitelist.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -337,21 +337,34 @@ static void tmpfs_topdirs(const TopDir *topdirs) {
337 // fix pam-tmpdir (#2685) 337 // fix pam-tmpdir (#2685)
338 const char *env = env_get("TMP"); 338 const char *env = env_get("TMP");
339 if (env) { 339 if (env) {
340 char *pamtmpdir; 340 // we allow TMP env set as /tmp/user/$UID and /tmp/$UID - see #4151
341 if (asprintf(&pamtmpdir, "/tmp/user/%u", getuid()) == -1) 341 char *pamtmpdir1;
342 if (asprintf(&pamtmpdir1, "/tmp/user/%u", getuid()) == -1)
342 errExit("asprintf"); 343 errExit("asprintf");
343 if (strcmp(env, pamtmpdir) == 0) { 344 char *pamtmpdir2;
345 if (asprintf(&pamtmpdir2, "/tmp/%u", getuid()) == -1)
346 errExit("asprintf");
347 if (strcmp(env, pamtmpdir1) == 0) {
344 // create empty user-owned /tmp/user/$UID directory 348 // create empty user-owned /tmp/user/$UID directory
345 EUID_ROOT(); 349 EUID_ROOT();
346 mkdir_attr("/tmp/user", 0711, 0, 0); 350 mkdir_attr("/tmp/user", 0755, 0, 0);
347 selinux_relabel_path("/tmp/user", "/tmp/user"); 351 selinux_relabel_path("/tmp/user", "/tmp/user");
348 fs_logger("mkdir /tmp/user"); 352 fs_logger("mkdir /tmp/user");
349 mkdir_attr(pamtmpdir, 0700, getuid(), 0); 353 mkdir_attr(pamtmpdir1, 0700, getuid(), 0);
350 selinux_relabel_path(pamtmpdir, pamtmpdir); 354 selinux_relabel_path(pamtmpdir1, pamtmpdir1);
351 fs_logger2("mkdir", pamtmpdir); 355 fs_logger2("mkdir", pamtmpdir1);
356 EUID_USER();
357 }
358 else if (strcmp(env, pamtmpdir2) == 0) {
359 // create empty user-owned /tmp/$UID directory
360 EUID_ROOT();
361 mkdir_attr(pamtmpdir2, 0700, getuid(), 0);
362 selinux_relabel_path(pamtmpdir2, pamtmpdir2);
363 fs_logger2("mkdir", pamtmpdir2);
352 EUID_USER(); 364 EUID_USER();
353 } 365 }
354 free(pamtmpdir); 366 free(pamtmpdir1);
367 free(pamtmpdir2);
355 } 368 }
356 } 369 }
357 370
diff --git a/src/firejail/ids.c b/src/firejail/ids.c
index a9ff59be4..fdb78d6e6 100644
--- a/src/firejail/ids.c
+++ b/src/firejail/ids.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/join.c b/src/firejail/join.c
index 0e76fd944..b62a1ca9d 100644
--- a/src/firejail/join.c
+++ b/src/firejail/join.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -569,11 +569,6 @@ void join(pid_t pid, int argc, char **argv, int index) {
569 dbus_set_system_bus_env(); 569 dbus_set_system_bus_env();
570#endif 570#endif
571 571
572 // set nice and rlimits
573 if (arg_nice)
574 set_nice(cfg.nice);
575 set_rlimits();
576
577 start_application(0, shfd, NULL); 572 start_application(0, shfd, NULL);
578 573
579 __builtin_unreachable(); 574 __builtin_unreachable();
diff --git a/src/firejail/ls.c b/src/firejail/ls.c
index 53e918dde..7207d1087 100644
--- a/src/firejail/ls.c
+++ b/src/firejail/ls.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/macros.c b/src/firejail/macros.c
index cd29d8f85..11385143a 100644
--- a/src/firejail/macros.c
+++ b/src/firejail/macros.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -314,9 +314,9 @@ void invalid_filename(const char *fname, int globbing) {
314 314
315 char *reject; 315 char *reject;
316 if (globbing) 316 if (globbing)
317 reject = "\\&!\"'<>%^{};,"; // file globbing ('*?[]') is allowed 317 reject = "\\&!\"<>%^{};,"; // file globbing ('*?[]') is allowed
318 else 318 else
319 reject = "\\&!?\"'<>%^{};,*[]"; 319 reject = "\\&!?\"<>%^{};,*[]";
320 char *c = strpbrk(ptr, reject); 320 char *c = strpbrk(ptr, reject);
321 if (c) { 321 if (c) {
322 fprintf(stderr, "Error: \"%s\" is an invalid filename: rejected character: \"%c\"\n", fname, *c); 322 fprintf(stderr, "Error: \"%s\" is an invalid filename: rejected character: \"%c\"\n", fname, *c);
diff --git a/src/firejail/main.c b/src/firejail/main.c
index b33db36f1..d614ae1ac 100644
--- a/src/firejail/main.c
+++ b/src/firejail/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -149,6 +149,7 @@ int arg_nou2f = 0; // --nou2f
149int arg_noinput = 0; // --noinput 149int arg_noinput = 0; // --noinput
150int arg_deterministic_exit_code = 0; // always exit with first child's exit status 150int arg_deterministic_exit_code = 0; // always exit with first child's exit status
151int arg_deterministic_shutdown = 0; // shut down the sandbox if first child dies 151int arg_deterministic_shutdown = 0; // shut down the sandbox if first child dies
152int arg_keep_fd_all = 0; // inherit all file descriptors to sandbox
152DbusPolicy arg_dbus_user = DBUS_POLICY_ALLOW; // --dbus-user 153DbusPolicy arg_dbus_user = DBUS_POLICY_ALLOW; // --dbus-user
153DbusPolicy arg_dbus_system = DBUS_POLICY_ALLOW; // --dbus-system 154DbusPolicy arg_dbus_system = DBUS_POLICY_ALLOW; // --dbus-system
154const char *arg_dbus_log_file = NULL; 155const char *arg_dbus_log_file = NULL;
@@ -408,9 +409,22 @@ static void run_cmd_and_exit(int i, int argc, char **argv) {
408 } 409 }
409#endif 410#endif
410#ifdef HAVE_NETWORK 411#ifdef HAVE_NETWORK
412 else if (strcmp(argv[i], "--nettrace") == 0) {
413 if (checkcfg(CFG_NETWORK)) {
414 netfilter_trace(0);
415 }
416 else
417 exit_err_feature("networking");
418 exit(0);
419 }
411 else if (strncmp(argv[i], "--nettrace=", 11) == 0) { 420 else if (strncmp(argv[i], "--nettrace=", 11) == 0) {
412 pid_t pid = require_pid(argv[i] + 11); 421 if (checkcfg(CFG_NETWORK)) {
413 netfilter_trace(pid); 422 pid_t pid = require_pid(argv[i] + 11);
423 netfilter_trace(pid);
424 }
425 else
426 exit_err_feature("networking");
427 exit(0);
414 } 428 }
415 else if (strncmp(argv[i], "--bandwidth=", 12) == 0) { 429 else if (strncmp(argv[i], "--bandwidth=", 12) == 0) {
416 if (checkcfg(CFG_NETWORK)) { 430 if (checkcfg(CFG_NETWORK)) {
@@ -1862,6 +1876,14 @@ int main(int argc, char **argv, char **envp) {
1862 } 1876 }
1863 profile_add_ignore(argv[i] + 9); 1877 profile_add_ignore(argv[i] + 9);
1864 } 1878 }
1879 else if (strncmp(argv[i], "--keep-fd=", 10) == 0) {
1880 if (strcmp(argv[i] + 10, "all") == 0)
1881 arg_keep_fd_all = 1;
1882 else {
1883 const char *add = argv[i] + 10;
1884 profile_list_augment(&cfg.keep_fd, add);
1885 }
1886 }
1865#ifdef HAVE_CHROOT 1887#ifdef HAVE_CHROOT
1866 else if (strncmp(argv[i], "--chroot=", 9) == 0) { 1888 else if (strncmp(argv[i], "--chroot=", 9) == 0) {
1867 if (checkcfg(CFG_CHROOT)) { 1889 if (checkcfg(CFG_CHROOT)) {
@@ -2307,11 +2329,20 @@ int main(int argc, char **argv, char **envp) {
2307 continue; 2329 continue;
2308 } 2330 }
2309#ifdef HAVE_NETWORK 2331#ifdef HAVE_NETWORK
2310 else if (strcmp(argv[i], "--netlock") == 0) 2332 else if (strcmp(argv[i], "--netlock") == 0) {
2311 arg_netlock = 1; 2333 if (checkcfg(CFG_NETWORK))
2334 arg_netlock = 1;
2335 else
2336 exit_err_feature("networking");
2337 }
2312 else if (strncmp(argv[i], "--netlock=", 10) == 0) { 2338 else if (strncmp(argv[i], "--netlock=", 10) == 0) {
2313 pid_t pid = require_pid(argv[i] + 10); 2339 if (checkcfg(CFG_NETWORK)) {
2314 netfilter_netlock(pid); 2340 pid_t pid = require_pid(argv[i] + 10);
2341 netfilter_netlock(pid);
2342 }
2343 else
2344 exit_err_feature("networking");
2345 exit(0);
2315 } 2346 }
2316 else if (strncmp(argv[i], "--interface=", 12) == 0) { 2347 else if (strncmp(argv[i], "--interface=", 12) == 0) {
2317 if (checkcfg(CFG_NETWORK)) { 2348 if (checkcfg(CFG_NETWORK)) {
@@ -3150,13 +3181,18 @@ int main(int argc, char **argv, char **envp) {
3150 } 3181 }
3151 } 3182 }
3152 3183
3153 // add render group 3184 // add render/vglusers group
3154 if (!arg_no3d) { 3185 if (!arg_no3d) {
3155 g = get_group_id("render"); 3186 g = get_group_id("render");
3156 if (g) { 3187 if (g) {
3157 sprintf(ptr, "%d %d 1\n", g, g); 3188 sprintf(ptr, "%d %d 1\n", g, g);
3158 ptr += strlen(ptr); 3189 ptr += strlen(ptr);
3159 } 3190 }
3191 g = get_group_id("vglusers");
3192 if (g) {
3193 sprintf(ptr, "%d %d 1\n", g, g);
3194 ptr += strlen(ptr);
3195 }
3160 } 3196 }
3161 3197
3162 // add lp group 3198 // add lp group
diff --git a/src/firejail/mountinfo.c b/src/firejail/mountinfo.c
index ee437e10b..7d30d21d9 100644
--- a/src/firejail/mountinfo.c
+++ b/src/firejail/mountinfo.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/netfilter.c b/src/firejail/netfilter.c
index 82bf25e78..939ab29fa 100644
--- a/src/firejail/netfilter.c
+++ b/src/firejail/netfilter.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -93,7 +93,10 @@ void netfilter_netlock(pid_t pid) {
93void netfilter_trace(pid_t pid) { 93void netfilter_trace(pid_t pid) {
94 EUID_ASSERT(); 94 EUID_ASSERT();
95 95
96 enter_network_namespace(pid); 96 // a pid of 0 means the main system network namespace
97 if (pid)
98 enter_network_namespace(pid);
99
97 char *cmd; 100 char *cmd;
98 if (asprintf(&cmd, "%s/firejail/fnettrace", LIBDIR) == -1) 101 if (asprintf(&cmd, "%s/firejail/fnettrace", LIBDIR) == -1)
99 errExit("asprintf"); 102 errExit("asprintf");
diff --git a/src/firejail/netns.c b/src/firejail/netns.c
index b5d6fb636..c72c009ae 100644
--- a/src/firejail/netns.c
+++ b/src/firejail/netns.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2020-2021 Firejail Authors 2 * Copyright (C) 2020-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/network.c b/src/firejail/network.c
index 289e164c6..e631745fb 100644
--- a/src/firejail/network.c
+++ b/src/firejail/network.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/network_main.c b/src/firejail/network_main.c
index d3e75bbed..dd66ecc55 100644
--- a/src/firejail/network_main.c
+++ b/src/firejail/network_main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/no_sandbox.c b/src/firejail/no_sandbox.c
index 0e5562d90..c57d397ef 100644
--- a/src/firejail/no_sandbox.c
+++ b/src/firejail/no_sandbox.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/output.c b/src/firejail/output.c
index ce10ab157..f9df9f3d4 100644
--- a/src/firejail/output.c
+++ b/src/firejail/output.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/paths.c b/src/firejail/paths.c
index d58a9d272..6d62c9004 100644
--- a/src/firejail/paths.c
+++ b/src/firejail/paths.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/preproc.c b/src/firejail/preproc.c
index 1aafd1ca2..da50e9a82 100644
--- a/src/firejail/preproc.c
+++ b/src/firejail/preproc.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/profile.c b/src/firejail/profile.c
index 92dbecac1..794668dc6 100644
--- a/src/firejail/profile.c
+++ b/src/firejail/profile.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -290,6 +290,15 @@ int profile_check_line(char *ptr, int lineno, const char *fname) {
290 return 0; 290 return 0;
291 } 291 }
292 292
293 if (strncmp(ptr, "keep-fd ", 8) == 0) {
294 if (strcmp(ptr + 8, "all") == 0)
295 arg_keep_fd_all = 1;
296 else {
297 const char *add = ptr + 8;
298 profile_list_augment(&cfg.keep_fd, add);
299 }
300 return 0;
301 }
293 if (strncmp(ptr, "xephyr-screen ", 14) == 0) { 302 if (strncmp(ptr, "xephyr-screen ", 14) == 0) {
294#ifdef HAVE_X11 303#ifdef HAVE_X11
295 if (checkcfg(CFG_X11)) { 304 if (checkcfg(CFG_X11)) {
diff --git a/src/firejail/protocol.c b/src/firejail/protocol.c
index f21f8c96e..37e541f50 100644
--- a/src/firejail/protocol.c
+++ b/src/firejail/protocol.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/pulseaudio.c b/src/firejail/pulseaudio.c
index f8d4c2f3c..320668bf9 100644
--- a/src/firejail/pulseaudio.c
+++ b/src/firejail/pulseaudio.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -25,6 +25,7 @@
25#include <dirent.h> 25#include <dirent.h>
26#include <errno.h> 26#include <errno.h>
27#include <sys/wait.h> 27#include <sys/wait.h>
28#include <glob.h>
28 29
29#include <fcntl.h> 30#include <fcntl.h>
30#ifndef O_PATH 31#ifndef O_PATH
@@ -33,6 +34,59 @@
33 34
34#define PULSE_CLIENT_SYSCONF "/etc/pulse/client.conf" 35#define PULSE_CLIENT_SYSCONF "/etc/pulse/client.conf"
35 36
37
38
39static void disable_rundir_pipewire(const char *path) {
40 assert(path);
41
42 // globbing for path/pipewire-*
43 char *pattern;
44 if (asprintf(&pattern, "%s/pipewire-*", path) == -1)
45 errExit("asprintf");
46
47 glob_t globbuf;
48 int globerr = glob(pattern, GLOB_NOCHECK | GLOB_NOSORT, NULL, &globbuf);
49 if (globerr) {
50 fprintf(stderr, "Error: failed to glob pattern %s\n", pattern);
51 exit(1);
52 }
53
54 size_t i;
55 for (i = 0; i < globbuf.gl_pathc; i++) {
56 char *dir = globbuf.gl_pathv[i];
57 assert(dir);
58
59 // don't disable symlinks - disable_file_or_dir will bind-mount an empty directory on top of it!
60 if (is_link(dir))
61 continue;
62 disable_file_or_dir(dir);
63 }
64 globfree(&globbuf);
65 free(pattern);
66}
67
68
69
70// disable pipewire socket
71void pipewire_disable(void) {
72 if (arg_debug)
73 printf("disable pipewire\n");
74 // blacklist user config directory
75 disable_file_path(cfg.homedir, ".config/pipewire");
76
77 // blacklist pipewire in XDG_RUNTIME_DIR
78 const char *name = env_get("XDG_RUNTIME_DIR");
79 if (name)
80 disable_rundir_pipewire(name);
81
82 // try the default location anyway
83 char *path;
84 if (asprintf(&path, "/run/user/%d", getuid()) == -1)
85 errExit("asprintf");
86 disable_rundir_pipewire(path);
87 free(path);
88}
89
36// disable pulseaudio socket 90// disable pulseaudio socket
37void pulseaudio_disable(void) { 91void pulseaudio_disable(void) {
38 if (arg_debug) 92 if (arg_debug)
diff --git a/src/firejail/restrict_users.c b/src/firejail/restrict_users.c
index 59077dada..447d7b663 100644
--- a/src/firejail/restrict_users.c
+++ b/src/firejail/restrict_users.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/restricted_shell.c b/src/firejail/restricted_shell.c
index ed66903b5..c1340cae1 100644
--- a/src/firejail/restricted_shell.c
+++ b/src/firejail/restricted_shell.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/rlimit.c b/src/firejail/rlimit.c
index f177f4b89..b10d2c528 100644
--- a/src/firejail/rlimit.c
+++ b/src/firejail/rlimit.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/run_files.c b/src/firejail/run_files.c
index c28c3e01b..c971a4f53 100644
--- a/src/firejail/run_files.c
+++ b/src/firejail/run_files.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/run_symlink.c b/src/firejail/run_symlink.c
index 14667d9eb..e2847aea6 100644
--- a/src/firejail/run_symlink.c
+++ b/src/firejail/run_symlink.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c
index 53b1e6914..96407d081 100644
--- a/src/firejail/sandbox.c
+++ b/src/firejail/sandbox.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -404,7 +404,6 @@ static void print_time(void) {
404 fmessage("Child process initialized in %.02f ms\n", delta); 404 fmessage("Child process initialized in %.02f ms\n", delta);
405} 405}
406 406
407
408// check execute permissions for the program 407// check execute permissions for the program
409// this is done typically by the shell 408// this is done typically by the shell
410// we are here because of --shell=none 409// we are here because of --shell=none
@@ -461,10 +460,42 @@ static int ok_to_run(const char *program) {
461 return 0; 460 return 0;
462} 461}
463 462
463static void close_file_descriptors(void) {
464 if (arg_keep_fd_all)
465 return;
466
467 if (arg_debug)
468 printf("Closing non-standard file descriptors\n");
469
470 if (!cfg.keep_fd) {
471 close_all(NULL, 0);
472 return;
473 }
474
475 size_t sz = 0;
476 int *keep = str_to_int_array(cfg.keep_fd, &sz);
477 if (!keep) {
478 fprintf(stderr, "Error: invalid keep-fd option\n");
479 exit(1);
480 }
481 close_all(keep, sz);
482 free(keep);
483}
484
485
464void start_application(int no_sandbox, int fd, char *set_sandbox_status) { 486void start_application(int no_sandbox, int fd, char *set_sandbox_status) {
465 // set environment 487 if (no_sandbox == 0) {
466 if (no_sandbox == 0) 488 close_file_descriptors();
489
490 // set nice and rlimits
491 if (arg_nice)
492 set_nice(cfg.nice);
493 set_rlimits();
494
467 env_defaults(); 495 env_defaults();
496 }
497
498 // set environment
468 env_apply_all(); 499 env_apply_all();
469 500
470 // restore original umask 501 // restore original umask
@@ -1018,6 +1049,9 @@ int sandbox(void* sandbox_arg) {
1018 // disable pulseaudio 1049 // disable pulseaudio
1019 pulseaudio_disable(); 1050 pulseaudio_disable();
1020 1051
1052 // disable pipewire
1053 pipewire_disable();
1054
1021 // disable /dev/snd 1055 // disable /dev/snd
1022 fs_dev_disable_sound(); 1056 fs_dev_disable_sound();
1023 } 1057 }
@@ -1252,12 +1286,6 @@ int sandbox(void* sandbox_arg) {
1252#ifdef HAVE_APPARMOR 1286#ifdef HAVE_APPARMOR
1253 set_apparmor(); 1287 set_apparmor();
1254#endif 1288#endif
1255
1256 // set nice and rlimits
1257 if (arg_nice)
1258 set_nice(cfg.nice);
1259 set_rlimits();
1260
1261 start_application(0, -1, set_sandbox_status); 1289 start_application(0, -1, set_sandbox_status);
1262 } 1290 }
1263 1291
diff --git a/src/firejail/sbox.c b/src/firejail/sbox.c
index 37111324a..a37943940 100644
--- a/src/firejail/sbox.c
+++ b/src/firejail/sbox.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -23,6 +23,7 @@
23#include <unistd.h> 23#include <unistd.h>
24#include <net/if.h> 24#include <net/if.h>
25#include <stdarg.h> 25#include <stdarg.h>
26#include <sys/resource.h>
26#include <sys/wait.h> 27#include <sys/wait.h>
27#include "../include/seccomp.h" 28#include "../include/seccomp.h"
28 29
@@ -72,11 +73,8 @@ static int __attribute__((noreturn)) sbox_do_exec_v(unsigned filtermask, char *
72 } 73 }
73 74
74 // close all other file descriptors 75 // close all other file descriptors
75 if ((filtermask & SBOX_KEEP_FDS) == 0) { 76 if ((filtermask & SBOX_KEEP_FDS) == 0)
76 int i; 77 close_all(NULL, 0);
77 for (i = 3; i < FIREJAIL_MAX_FD; i++)
78 close(i); // close open files
79 }
80 78
81 umask(027); 79 umask(027);
82 80
@@ -206,6 +204,11 @@ static int __attribute__((noreturn)) sbox_do_exec_v(unsigned filtermask, char *
206 if (filtermask & SBOX_USER) 204 if (filtermask & SBOX_USER)
207 drop_privs(1); 205 drop_privs(1);
208 else if (filtermask & SBOX_ROOT) { 206 else if (filtermask & SBOX_ROOT) {
207 // https://seclists.org/oss-sec/2021/q4/43
208 struct rlimit tozero = { .rlim_cur = 0, .rlim_max = 0 };
209 if (setrlimit(RLIMIT_CORE, &tozero))
210 errExit("setrlimit");
211
209 // elevate privileges in order to get grsecurity working 212 // elevate privileges in order to get grsecurity working
210 if (setreuid(0, 0)) 213 if (setreuid(0, 0))
211 errExit("setreuid"); 214 errExit("setreuid");
@@ -292,7 +295,8 @@ int sbox_run_v(unsigned filtermask, char * const arg[]) {
292 if (waitpid(child, &status, 0) == -1 ) { 295 if (waitpid(child, &status, 0) == -1 ) {
293 errExit("waitpid"); 296 errExit("waitpid");
294 } 297 }
295 if (WIFEXITED(status) && WEXITSTATUS(status) != 0) { 298 if (WIFSIGNALED(status) ||
299 (WIFEXITED(status) && WEXITSTATUS(status) != 0)) {
296 fprintf(stderr, "Error: failed to run %s, exiting...\n", arg[0]); 300 fprintf(stderr, "Error: failed to run %s, exiting...\n", arg[0]);
297 exit(1); 301 exit(1);
298 } 302 }
diff --git a/src/firejail/seccomp.c b/src/firejail/seccomp.c
index e02be29f1..0cd6ac7ec 100644
--- a/src/firejail/seccomp.c
+++ b/src/firejail/seccomp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/selinux.c b/src/firejail/selinux.c
index fa59882ed..0348cef4b 100644
--- a/src/firejail/selinux.c
+++ b/src/firejail/selinux.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2020-2021 Firejail and systemd authors 2 * Copyright (C) 2020-2022 Firejail and systemd authors
3 * 3 *
4 * This file is part of firejail project, from systemd selinux-util.c 4 * This file is part of firejail project, from systemd selinux-util.c
5 * 5 *
diff --git a/src/firejail/shutdown.c b/src/firejail/shutdown.c
index d1be6eed4..44fdd58ab 100644
--- a/src/firejail/shutdown.c
+++ b/src/firejail/shutdown.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firejail/usage.c b/src/firejail/usage.c
index b993cb80c..c903841c5 100644
--- a/src/firejail/usage.c
+++ b/src/firejail/usage.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -119,6 +119,7 @@ static char *usage_str =
119 " --join-or-start=name|pid - join the sandbox or start a new one.\n" 119 " --join-or-start=name|pid - join the sandbox or start a new one.\n"
120 " --keep-config-pulse - disable automatic ~/.config/pulse init.\n" 120 " --keep-config-pulse - disable automatic ~/.config/pulse init.\n"
121 " --keep-dev-shm - /dev/shm directory is untouched (even with --private-dev).\n" 121 " --keep-dev-shm - /dev/shm directory is untouched (even with --private-dev).\n"
122 " --keep-fd - inherit open file descriptors to sandbox.\n"
122 " --keep-var-tmp - /var/tmp directory is untouched.\n" 123 " --keep-var-tmp - /var/tmp directory is untouched.\n"
123 " --list - list all sandboxes.\n" 124 " --list - list all sandboxes.\n"
124#ifdef HAVE_FILE_TRANSFER 125#ifdef HAVE_FILE_TRANSFER
@@ -161,6 +162,7 @@ static char *usage_str =
161 " --nogroups - disable supplementary groups.\n" 162 " --nogroups - disable supplementary groups.\n"
162 " --noinput - disable input devices.\n" 163 " --noinput - disable input devices.\n"
163 " --nonewprivs - sets the NO_NEW_PRIVS prctl.\n" 164 " --nonewprivs - sets the NO_NEW_PRIVS prctl.\n"
165 " --noprinters - disable printers.\n"
164 " --noprofile - do not use a security profile.\n" 166 " --noprofile - do not use a security profile.\n"
165#ifdef HAVE_USERNS 167#ifdef HAVE_USERNS
166 " --noroot - install a user namespace with only the current user.\n" 168 " --noroot - install a user namespace with only the current user.\n"
diff --git a/src/firejail/util.c b/src/firejail/util.c
index c1c31b43c..79ebfa1dd 100644
--- a/src/firejail/util.c
+++ b/src/firejail/util.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -209,6 +209,8 @@ static void clean_supplementary_groups(gid_t gid) {
209 if (!arg_no3d) { 209 if (!arg_no3d) {
210 copy_group_ifcont("render", groups, ngroups, 210 copy_group_ifcont("render", groups, ngroups,
211 new_groups, &new_ngroups, MAX_GROUPS); 211 new_groups, &new_ngroups, MAX_GROUPS);
212 copy_group_ifcont("vglusers", groups, ngroups,
213 new_groups, &new_ngroups, MAX_GROUPS);
212 } 214 }
213 215
214 if (!arg_noprinters) { 216 if (!arg_noprinters) {
@@ -1398,6 +1400,52 @@ int bind_mount_path_to_fd(const char *srcname, int dst) {
1398 return rv; 1400 return rv;
1399} 1401}
1400 1402
1403void close_all(int *keep_list, size_t sz) {
1404 DIR *dir;
1405 if (!(dir = opendir("/proc/self/fd"))) {
1406 // sleep 2 seconds and try again
1407 sleep(2);
1408 if (!(dir = opendir("/proc/self/fd"))) {
1409 fprintf(stderr, "Error: cannot open /proc/self/fd directory\n");
1410 exit(1);
1411 }
1412 }
1413 struct dirent *entry;
1414 while ((entry = readdir(dir)) != NULL) {
1415 if (strcmp(entry->d_name, ".") == 0 ||
1416 strcmp(entry->d_name, "..") == 0)
1417 continue;
1418
1419 int fd = atoi(entry->d_name);
1420
1421 // don't close standard streams
1422 if (fd == STDIN_FILENO ||
1423 fd == STDOUT_FILENO ||
1424 fd == STDERR_FILENO)
1425 continue;
1426
1427 if (fd == dirfd(dir))
1428 continue; // just postponed
1429
1430 // dont't close file descriptors in keep list
1431 int keep = 0;
1432 if (keep_list) {
1433 size_t i;
1434 for (i = 0; i < sz; i++) {
1435 if (keep_list[i] == fd) {
1436 keep = 1;
1437 break;
1438 }
1439 }
1440 }
1441 if (keep)
1442 continue;
1443
1444 close(fd);
1445 }
1446 closedir(dir);
1447}
1448
1401int has_handler(pid_t pid, int signal) { 1449int has_handler(pid_t pid, int signal) {
1402 if (signal > 0 && signal <= SIGRTMAX) { 1450 if (signal > 0 && signal <= SIGRTMAX) {
1403 char *fname; 1451 char *fname;
diff --git a/src/firejail/x11.c b/src/firejail/x11.c
index 896aa2fd3..f173b6672 100644
--- a/src/firejail/x11.c
+++ b/src/firejail/x11.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/apparmor.c b/src/firemon/apparmor.c
index eb810a9e7..7103ab7af 100644
--- a/src/firemon/apparmor.c
+++ b/src/firemon/apparmor.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/arp.c b/src/firemon/arp.c
index 1a69a67b1..1a01da016 100644
--- a/src/firemon/arp.c
+++ b/src/firemon/arp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/caps.c b/src/firemon/caps.c
index c0f305a5d..045cd1968 100644
--- a/src/firemon/caps.c
+++ b/src/firemon/caps.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/cgroup.c b/src/firemon/cgroup.c
index 97ba591a6..7ef76fa46 100644
--- a/src/firemon/cgroup.c
+++ b/src/firemon/cgroup.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/cpu.c b/src/firemon/cpu.c
index 91b455941..31e4eb7fd 100644
--- a/src/firemon/cpu.c
+++ b/src/firemon/cpu.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/firemon.c b/src/firemon/firemon.c
index 6c34cd411..91406d6a7 100644
--- a/src/firemon/firemon.c
+++ b/src/firemon/firemon.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/firemon.h b/src/firemon/firemon.h
index 5252ad34f..2fa294e8d 100644
--- a/src/firemon/firemon.h
+++ b/src/firemon/firemon.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/interface.c b/src/firemon/interface.c
index 780e3d706..f57616ed7 100644
--- a/src/firemon/interface.c
+++ b/src/firemon/interface.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/list.c b/src/firemon/list.c
index 51099a75c..d066c7a5f 100644
--- a/src/firemon/list.c
+++ b/src/firemon/list.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/netstats.c b/src/firemon/netstats.c
index 9d8e5d7f5..0a1b7e0c4 100644
--- a/src/firemon/netstats.c
+++ b/src/firemon/netstats.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/procevent.c b/src/firemon/procevent.c
index 716a9cba4..ccc1ba1c6 100644
--- a/src/firemon/procevent.c
+++ b/src/firemon/procevent.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/route.c b/src/firemon/route.c
index 9cf5054b2..86f4d85ae 100644
--- a/src/firemon/route.c
+++ b/src/firemon/route.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/seccomp.c b/src/firemon/seccomp.c
index 04111b6c0..ba0017eff 100644
--- a/src/firemon/seccomp.c
+++ b/src/firemon/seccomp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/top.c b/src/firemon/top.c
index 2217cc7de..2bfa63380 100644
--- a/src/firemon/top.c
+++ b/src/firemon/top.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/tree.c b/src/firemon/tree.c
index 899214b9f..7ad413772 100644
--- a/src/firemon/tree.c
+++ b/src/firemon/tree.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/firemon/usage.c b/src/firemon/usage.c
index baaef3111..c6a664790 100644
--- a/src/firemon/usage.c
+++ b/src/firemon/usage.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -38,12 +38,12 @@ static char *help_str =
38 "\t--name=name - print information only about named sandbox.\n\n" 38 "\t--name=name - print information only about named sandbox.\n\n"
39 "\t--netstats - monitor network statistics for sandboxes creating a new\n" 39 "\t--netstats - monitor network statistics for sandboxes creating a new\n"
40 "\t\tnetwork namespace.\n\n" 40 "\t\tnetwork namespace.\n\n"
41 "\t--nowrap - enable line wrapping in terminals.\n\n"
42 "\t--route - print route table for each sandbox.\n\n" 41 "\t--route - print route table for each sandbox.\n\n"
43 "\t--seccomp - print seccomp configuration for each sandbox.\n\n" 42 "\t--seccomp - print seccomp configuration for each sandbox.\n\n"
44 "\t--tree - print a tree of all sandboxed processes.\n\n" 43 "\t--tree - print a tree of all sandboxed processes.\n\n"
45 "\t--top - monitor the most CPU-intensive sandboxes.\n\n" 44 "\t--top - monitor the most CPU-intensive sandboxes.\n\n"
46 "\t--version - print program version and exit.\n\n" 45 "\t--version - print program version and exit.\n\n"
46 "\t--wrap - enable line wrapping in terminals.\n\n"
47 "\t--x11 - print X11 display number.\n\n" 47 "\t--x11 - print X11 display number.\n\n"
48 48
49 "Without any options, firemon monitors all fork, exec, id change, and exit\n" 49 "Without any options, firemon monitors all fork, exec, id change, and exit\n"
diff --git a/src/firemon/x11.c b/src/firemon/x11.c
index 97e24b2d2..16ee0a2d6 100644
--- a/src/firemon/x11.c
+++ b/src/firemon/x11.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fldd/main.c b/src/fldd/main.c
index b71145793..898e0f36a 100644
--- a/src/fldd/main.c
+++ b/src/fldd/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fnet/arp.c b/src/fnet/arp.c
index 59798d32d..ed110c271 100644
--- a/src/fnet/arp.c
+++ b/src/fnet/arp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fnet/fnet.h b/src/fnet/fnet.h
index c0154b53e..41db5aa1b 100644
--- a/src/fnet/fnet.h
+++ b/src/fnet/fnet.h
@@ -1,5 +1,5 @@
1 /* 1 /*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fnet/interface.c b/src/fnet/interface.c
index 91d91360d..072dbf381 100644
--- a/src/fnet/interface.c
+++ b/src/fnet/interface.c
@@ -1,5 +1,5 @@
1 /* 1 /*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fnet/main.c b/src/fnet/main.c
index df8f7226c..d39fcfc84 100644
--- a/src/fnet/main.c
+++ b/src/fnet/main.c
@@ -1,5 +1,5 @@
1 /* 1 /*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fnet/veth.c b/src/fnet/veth.c
index e09b1b1c5..bd6e33583 100644
--- a/src/fnet/veth.c
+++ b/src/fnet/veth.c
@@ -26,7 +26,7 @@
26 * 26 *
27 */ 27 */
28 /* 28 /*
29 * Copyright (C) 2014-2021 Firejail Authors 29 * Copyright (C) 2014-2022 Firejail Authors
30 * 30 *
31 * This file is part of firejail project 31 * This file is part of firejail project
32 * 32 *
diff --git a/src/fnetfilter/main.c b/src/fnetfilter/main.c
index 979f082d0..081408ab3 100644
--- a/src/fnetfilter/main.c
+++ b/src/fnetfilter/main.c
@@ -1,5 +1,5 @@
1 /* 1 /*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fnettrace/fnettrace.h b/src/fnettrace/fnettrace.h
index 93c9613ab..66b7378da 100644
--- a/src/fnettrace/fnettrace.h
+++ b/src/fnettrace/fnettrace.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -27,12 +27,13 @@
27#include <netinet/in.h> 27#include <netinet/in.h>
28#include <time.h> 28#include <time.h>
29#include <stdarg.h> 29#include <stdarg.h>
30//#define DEBUG 1
30 31
31//#define NETLOCK_INTERVAL 15 32#define NETLOCK_INTERVAL 60 // seconds
32#define NETLOCK_INTERVAL 60 33#define DISPLAY_INTERVAL 2 // seconds
33#define DISPLAY_INTERVAL 3 34#define DISPLAY_TTL 4 // display intervals (4 * 2 seconds)
35#define DISPLAY_BW_UNITS 20 // length of the bandwidth bar
34 36
35void logprintf(char* fmt, ...);
36 37
37static inline void ansi_topleft(void) { 38static inline void ansi_topleft(void) {
38 char str[] = {0x1b, '[', '1', ';', '1', 'H', '\0'}; 39 char str[] = {0x1b, '[', '1', ';', '1', 'H', '\0'};
@@ -53,6 +54,12 @@ static inline uint8_t hash(uint32_t ip) {
53 return *ptr ^ *(ptr + 1) ^ *(ptr + 2) ^ *(ptr + 3); 54 return *ptr ^ *(ptr + 1) ^ *(ptr + 2) ^ *(ptr + 3);
54} 55}
55 56
57// main.c
58void logprintf(char* fmt, ...);
56 59
60// hostnames.c
61extern int geoip_calls;
62void load_hostnames(const char *fname);
63char* retrieve_hostname(uint32_t ip);
57 64
58#endif \ No newline at end of file 65#endif \ No newline at end of file
diff --git a/src/fnettrace/hostnames.c b/src/fnettrace/hostnames.c
new file mode 100644
index 000000000..dd92070bf
--- /dev/null
+++ b/src/fnettrace/hostnames.c
@@ -0,0 +1,124 @@
1/*
2 * Copyright (C) 2014-2022 Firejail Authors
3 *
4 * This file is part of firejail project
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License along
17 * with this program; if not, write to the Free Software Foundation, Inc.,
18 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
19*/
20#include "fnettrace.h"
21#include "radix.h"
22#define MAXBUF 1024
23
24int geoip_calls = 0;
25static int geoip_not_found = 0;
26static char buf[MAXBUF];
27
28char *retrieve_hostname(uint32_t ip) {
29 if (geoip_not_found)
30 return NULL;
31 geoip_calls++;
32
33 char *rv = NULL;
34 char *cmd;
35 if (asprintf(&cmd, "/usr/bin/geoiplookup %d.%d.%d.%d", PRINT_IP(ip)) == -1)
36 errExit("asprintf");
37
38 FILE *fp = popen(cmd, "r");
39 if (fp) {
40 char *ptr;
41 if (fgets(buf, MAXBUF, fp)) {
42 ptr = strchr(buf, '\n');
43 if (ptr)
44 *ptr = '\0';
45 if (strncmp(buf, "GeoIP Country Edition:", 22) == 0) {
46 ptr = buf + 22;
47 if (*ptr == ' ' && *(ptr + 3) == ',' && *(ptr + 4) == ' ') {
48 rv = ptr + 5;
49 rv = radix_add(ip, 0xffffffff, rv);
50 }
51 }
52 }
53 fclose(fp);
54 return rv;
55 }
56 else
57 geoip_not_found = 1;
58
59 free(cmd);
60
61 return NULL;
62}
63
64void load_hostnames(const char *fname) {
65 assert(fname);
66 FILE *fp = fopen(fname, "r");
67 if (!fp) {
68 fprintf(stderr, "Warning: cannot find %s file\n", fname);
69 return;
70 }
71
72 char buf[MAXBUF];
73 int line = 0;
74 while (fgets(buf, MAXBUF, fp)) {
75 line++;
76
77 // skip empty spaces
78 char *start = buf;
79 while (*start == ' ' || *start == '\t')
80 start++;
81 // comments
82 if (*start == '#')
83 continue;
84 char *end = strchr(start, '#');
85 if (end)
86 *end = '\0';
87
88 // end
89 end = strchr(start, '\n');
90 if (end)
91 *end = '\0';
92 end = start + strlen(start);
93 if (end == start) // empty line
94 continue;
95
96 // line format: 1.2.3.4/32 name_without_empty_spaces
97 // a single empty space between address and name
98 end = strchr(start, ' ');
99 if (!end)
100 goto errexit;
101 *end = '\0';
102 end++;
103 if (*end == '\0')
104 goto errexit;
105
106 uint32_t ip;
107 uint32_t mask;
108 if (atocidr(start, &ip, &mask)) {
109 fprintf(stderr, "Error: invalid CIDR address\n");
110 goto errexit;
111 }
112
113 radix_add(ip, mask, end);
114 }
115
116 fclose(fp);
117 return;
118
119
120errexit:
121 fprintf(stderr, "Error: invalid line %d in file %s\n", line, fname);
122 exit(1);
123}
124
diff --git a/src/fnettrace/main.c b/src/fnettrace/main.c
index 658b90eb3..e58cc79b3 100644
--- a/src/fnettrace/main.c
+++ b/src/fnettrace/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -18,41 +18,72 @@
18 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. 18 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
19*/ 19*/
20#include "fnettrace.h" 20#include "fnettrace.h"
21//#define DEBUG 1 21#include "radix.h"
22#include <sys/ioctl.h>
22#define MAX_BUF_SIZE (64 * 1024) 23#define MAX_BUF_SIZE (64 * 1024)
23 24
24static int arg_netfilter = 0; 25static int arg_netfilter = 0;
25static char *arg_log = NULL; 26static char *arg_log = NULL;
26 27
27typedef struct hlist_t { 28typedef struct hnode_t {
28 struct hlist_t *hnext; // used for hash table 29 struct hnode_t *hnext; // used for hash table and unused linked list
29 struct hlist_t *dnext; // used to display stremas on the screen 30 struct hnode_t *dnext; // used to display stremas on the screen
30 uint32_t ip_src; 31 uint32_t ip_src;
31 uint32_t ip_dst; 32 uint32_t bytes; // number of bytes received in the last display interval
32 uint64_t bytes; // number of bytes received in the last display interval
33 uint16_t port_src; 33 uint16_t port_src;
34 uint16_t ip_instance;
35 // the firewall is build based on source address, and in the linked list
36 // we have elements with the same address but different ports
37 uint8_t protocol; 34 uint8_t protocol;
38} HList; 35 // the firewall is build based on source address, and in the linked list
36 // we have elements with the same address but different ports
37 uint8_t ip_instance;
38 char *hostname;
39 int ttl;
40} HNode;
39 41
40// hash table 42// hash table
41#define HMAX 256 43#define HMAX 256
42HList *htable[HMAX] = {NULL}; 44HNode *htable[HMAX] = {NULL};
43// display linked list 45// display linked list
44HList *dlist = NULL; 46HNode *dlist = NULL;
47
48
49// speed up malloc/free
50#define HNODE_MAX_MALLOC 16
51static HNode *hnode_unused = NULL;
52HNode *hmalloc(void) {
53 if (hnode_unused == NULL) {
54 hnode_unused = malloc(sizeof(HNode) * HNODE_MAX_MALLOC);
55 if (!hnode_unused)
56 errExit("malloc");
57 memset(hnode_unused, 0, sizeof(HNode) * HNODE_MAX_MALLOC);
58 HNode *ptr = hnode_unused;
59 int i;
60 for ( i = 1; i < HNODE_MAX_MALLOC; i++, ptr++)
61 ptr->hnext = hnode_unused + i;
62 }
63
64 HNode *rv = hnode_unused;
65 hnode_unused = hnode_unused->hnext;
66 return rv;
67}
68
69void hfree(HNode *ptr) {
70 assert(ptr);
71 memset(ptr, 0, sizeof(HNode));
72 ptr->hnext = hnode_unused;
73 hnode_unused = ptr;
74}
75
45 76
46static void hlist_add(uint32_t ip_src, uint32_t ip_dst, uint8_t protocol, uint16_t port_src, uint64_t bytes) { 77static void hnode_add(uint32_t ip_src, uint8_t protocol, uint16_t port_src, uint32_t bytes) {
47 uint8_t h = hash(ip_src); 78 uint8_t h = hash(ip_src);
48 79
49 // find 80 // find
50 int ip_instance = 0; 81 int ip_instance = 0;
51 HList *ptr = htable[h]; 82 HNode *ptr = htable[h];
52 while (ptr) { 83 while (ptr) {
53 if (ptr->ip_src == ip_src) { 84 if (ptr->ip_src == ip_src) {
54 ip_instance++; 85 ip_instance++;
55 if (ptr->ip_dst == ip_dst && ptr->port_src == port_src && ptr->protocol == protocol) { 86 if (ptr->port_src == port_src && ptr->protocol == protocol) {
56 ptr->bytes += bytes; 87 ptr->bytes += bytes;
57 return; 88 return;
58 } 89 }
@@ -63,16 +94,16 @@ static void hlist_add(uint32_t ip_src, uint32_t ip_dst, uint8_t protocol, uint16
63#ifdef DEBUG 94#ifdef DEBUG
64 printf("malloc %d.%d.%d.%d\n", PRINT_IP(ip_src)); 95 printf("malloc %d.%d.%d.%d\n", PRINT_IP(ip_src));
65#endif 96#endif
66 HList *hnew = malloc(sizeof(HList)); 97 HNode *hnew = hmalloc();
67 if (!hnew) 98 assert(hnew);
68 errExit("malloc"); 99 hnew->hostname = NULL;
69 hnew->ip_src = ip_src; 100 hnew->ip_src = ip_src;
70 hnew->ip_dst = ip_dst;
71 hnew->port_src = port_src; 101 hnew->port_src = port_src;
72 hnew->protocol = protocol; 102 hnew->protocol = protocol;
73 hnew->hnext = NULL; 103 hnew->hnext = NULL;
74 hnew->bytes = bytes; 104 hnew->bytes = bytes;
75 hnew->ip_instance = ip_instance + 1; 105 hnew->ip_instance = ip_instance + 1;
106 hnew->ttl = DISPLAY_TTL;
76 if (htable[h] == NULL) 107 if (htable[h] == NULL)
77 htable[h] = hnew; 108 htable[h] = hnew;
78 else { 109 else {
@@ -95,17 +126,17 @@ static void hlist_add(uint32_t ip_src, uint32_t ip_dst, uint8_t protocol, uint16
95 logprintf(" %d.%d.%d.%d ", PRINT_IP(hnew->ip_src)); 126 logprintf(" %d.%d.%d.%d ", PRINT_IP(hnew->ip_src));
96} 127}
97 128
98static void hlist_free(HList *elem) { 129static void hnode_free(HNode *elem) {
99 assert(elem); 130 assert(elem);
100#ifdef DEBUG 131#ifdef DEBUG
101 printf("free %d.%d.%d.%d\n", PRINT_IP(elem->ip_src)); 132 printf("free %d.%d.%d.%d\n", PRINT_IP(elem->ip_src));
102#endif 133#endif
103 134
104 uint8_t h = hash(elem->ip_src); 135 uint8_t h = hash(elem->ip_src);
105 HList *ptr = htable[h]; 136 HNode *ptr = htable[h];
106 assert(ptr); 137 assert(ptr);
107 138
108 HList *prev = NULL; 139 HNode *prev = NULL;
109 while (ptr != elem) { 140 while (ptr != elem) {
110 prev = ptr; 141 prev = ptr;
111 ptr = ptr->hnext; 142 ptr = ptr->hnext;
@@ -114,61 +145,166 @@ static void hlist_free(HList *elem) {
114 htable[h] = elem->hnext; 145 htable[h] = elem->hnext;
115 else 146 else
116 prev->hnext = elem->hnext; 147 prev->hnext = elem->hnext;
117 free(elem); 148 hfree(elem);
118} 149}
119 150
120#ifdef DEBUG 151#ifdef DEBUG
121static void debug_dlist(void) { 152static void debug_dlist(void) {
122 HList *ptr = dlist; 153 HNode *ptr = dlist;
123 while (ptr) { 154 while (ptr) {
124 printf("dlist %d.%d.%d.%d:%d\n", PRINT_IP(ptr->ip_src), ptr->port_src); 155 printf("dlist %d.%d.%d.%d:%d\n", PRINT_IP(ptr->ip_src), ptr->port_src);
125 ptr = ptr->dnext; 156 ptr = ptr->dnext;
126 } 157 }
127} 158}
128static void debug_hlist(void) { 159static void debug_hnode(void) {
129 int i; 160 int i;
130 for (i = 0; i < HMAX; i++) { 161 for (i = 0; i < HMAX; i++) {
131 HList *ptr = htable[i]; 162 HNode *ptr = htable[i];
132 while (ptr) { 163 while (ptr) {
133 printf("hlist (%d) %d.%d.%d.%d:%d\n", i, PRINT_IP(ptr->ip_src), ptr->port_src); 164 printf("hnode (%d) %d.%d.%d.%d:%d\n", i, PRINT_IP(ptr->ip_src), ptr->port_src);
134 ptr = ptr->hnext; 165 ptr = ptr->hnext;
135 } 166 }
136 } 167 }
137} 168}
138#endif 169#endif
139 170
140static void hlist_print(void) { 171static char *bw_line[DISPLAY_BW_UNITS + 1] = { NULL };
141 assert(!arg_netfilter); 172
142 ansi_clrscr(); 173static char *print_bw(unsigned units) {
174 if (units > DISPLAY_BW_UNITS)
175 units = DISPLAY_BW_UNITS ;
176
177 if (bw_line[units] == NULL) {
178 char *ptr = malloc(DISPLAY_BW_UNITS + 2);
179 if (!ptr)
180 errExit("malloc");
181 bw_line[units] = ptr;
182
183 unsigned i;
184 for (i = 0; i < DISPLAY_BW_UNITS; i++, ptr++)
185 sprintf(ptr, "%s", (i < units)? "*": " ");
186 sprintf(ptr, "%s", " ");
187 }
188
189 return bw_line[units];
190}
191
192#define LINE_MAX 200
193static inline void adjust_line(char *str, int len, int cols) {
194 if (len > LINE_MAX) // functions such as snprintf truncate the string, and return the length of the untruncated string
195 len = LINE_MAX;
196 if (cols > 4 && len > cols) {
197 str[cols] = '\0';
198 str[cols- 1] = '\n';
199 }
200}
201
202#define BWMAX_CNT 8
203static unsigned adjust_bandwidth(unsigned bw) {
204 static unsigned array[BWMAX_CNT] = {0};
205 static int instance = 0;
206
207 array[instance] = bw;
208 int i;
209 unsigned sum = 0;
210 unsigned max = 0;
211 for ( i = 0; i < BWMAX_CNT; i++) {
212 sum += array[i];
213 max = (max > array[i])? max: array[i];
214 }
215 sum /= BWMAX_CNT;
216
217 if (++instance >= BWMAX_CNT)
218 instance = 0;
219
220 return (max < (sum / 2))? sum: max;
221}
143 222
223static void hnode_print(unsigned bw) {
224 assert(!arg_netfilter);
225 bw = (bw < 1024 * DISPLAY_INTERVAL)? 1024 * DISPLAY_INTERVAL: bw;
144#ifdef DEBUG 226#ifdef DEBUG
145 printf("*********************\n"); 227 printf("*********************\n");
146 debug_dlist(); 228 debug_dlist();
147 printf("-----------------------------\n"); 229 printf("-----------------------------\n");
148 debug_hlist(); 230 debug_hnode();
149 printf("*********************\n"); 231 printf("*********************\n");
232#else
233 ansi_clrscr();
150#endif 234#endif
151 235
152 HList *ptr = dlist; 236 // get terminal size
153 HList *prev = NULL; 237 struct winsize sz;
238 int cols = 80;
239 if (isatty(STDIN_FILENO)) {
240 if (!ioctl(0, TIOCGWINSZ, &sz))
241 cols = sz.ws_col;
242 }
243 if (cols > LINE_MAX)
244 cols = LINE_MAX;
245 char line[LINE_MAX + 1];
246
247 // print stats line
248 bw = adjust_bandwidth(bw);
249 char stats[31];
250 if (bw > (1024 * 1024 * DISPLAY_INTERVAL))
251 sprintf(stats, "%u MB/s ", bw / (1024 * 1024 * DISPLAY_INTERVAL));
252 else
253 sprintf(stats, "%u KB/s ", bw / (1024 * DISPLAY_INTERVAL));
254 int len = snprintf(line, LINE_MAX, "%32s geoip %d, IP database %d\n", stats, geoip_calls, radix_nodes);
255 adjust_line(line, len, cols);
256 printf("%s", line);
257
258 HNode *ptr = dlist;
259 HNode *prev = NULL;
154 while (ptr) { 260 while (ptr) {
155 HList *next = ptr->dnext; 261 HNode *next = ptr->dnext;
156 if (ptr->bytes) { 262 if (--ptr->ttl > 0) {
157 char ip_src[30]; 263 char bytes[11];
158 sprintf(ip_src, "%d.%d.%d.%d:%u", PRINT_IP(ptr->ip_src), ptr->port_src); 264 if (ptr->bytes > (DISPLAY_INTERVAL * 1024 * 1024 * 2)) // > 2 MB/second
159 char ip_dst[30]; 265 snprintf(bytes, 11, "%u MB/s",
160 sprintf(ip_dst, "%d.%d.%d.%d", PRINT_IP(ptr->ip_dst)); 266 (unsigned) (ptr->bytes / (DISPLAY_INTERVAL * 1024* 1024)));
161 printf("%-22s => %-15s %s:", 267 else if (ptr->bytes > (DISPLAY_INTERVAL * 1024 * 2)) // > 2 KB/second
162 ip_src, 268 snprintf(bytes, 11, "%u KB/s",
163 ip_dst, 269 (unsigned) (ptr->bytes / (DISPLAY_INTERVAL * 1024)));
164 (ptr->protocol == 6)? "TCP": "UDP");
165
166 if (ptr->bytes > (DISPLAY_INTERVAL * 1024 * 2)) // > 2 KB/second
167 printf(" %lu KB/sec\n",
168 ptr->bytes / (DISPLAY_INTERVAL * 1024));
169 else 270 else
170 printf(" %lu B/sec\n", 271 snprintf(bytes, 11, "%u B/s ", (unsigned) (ptr->bytes / DISPLAY_INTERVAL));
171 ptr->bytes / DISPLAY_INTERVAL); 272
273 if (!ptr->hostname)
274 ptr->hostname = radix_longest_prefix_match(ptr->ip_src);
275 if (!ptr->hostname)
276 ptr->hostname = retrieve_hostname(ptr->ip_src);
277 if (!ptr->hostname)
278 ptr->hostname = " ";
279
280 unsigned bwunit = bw / DISPLAY_BW_UNITS;
281 char *bwline;
282 if (bwunit == 0)
283 bwline = print_bw(0);
284 else
285 bwline = print_bw(ptr->bytes / bwunit);
286
287 char *protocol = "";
288 if (ptr->port_src == 80)
289 protocol = "(HTTP)";
290 else if (ptr->port_src == 853)
291 protocol = "(DoT)";
292 else if (ptr->protocol == 0x11)
293 protocol = "(UDP)";
294/*
295 else (ptr->port_src == 443)
296 protocol = "TLS";
297 else if (ptr->port_src == 53)
298 protocol = "DNS";
299*/
300
301 len = snprintf(line, LINE_MAX, "%10s %s %d.%d.%d.%d:%u%s %s\n",
302 bytes, bwline, PRINT_IP(ptr->ip_src), ptr->port_src, protocol, ptr->hostname);
303 adjust_line(line, len, cols);
304 printf("%s", line);
305
306 if (ptr->bytes)
307 ptr->ttl = DISPLAY_TTL;
172 ptr->bytes = 0; 308 ptr->bytes = 0;
173 prev = ptr; 309 prev = ptr;
174 } 310 }
@@ -178,11 +314,23 @@ static void hlist_print(void) {
178 dlist = next; 314 dlist = next;
179 else 315 else
180 prev->dnext = next; 316 prev->dnext = next;
181 hlist_free(ptr); 317 hnode_free(ptr);
182 } 318 }
183 319
184 ptr = next; 320 ptr = next;
185 } 321 }
322
323#ifdef DEBUG
324 {
325 int cnt = 0;
326 HNode *ptr = hnode_unused;
327 while (ptr) {
328 cnt++;
329 ptr = ptr->hnext;
330 }
331 printf("hnode unused %d\n", cnt);
332 }
333#endif
186} 334}
187 335
188static void run_trace(void) { 336static void run_trace(void) {
@@ -199,14 +347,16 @@ static void run_trace(void) {
199 unsigned last_print_traces = 0; 347 unsigned last_print_traces = 0;
200 unsigned last_print_remaining = 0; 348 unsigned last_print_remaining = 0;
201 unsigned char buf[MAX_BUF_SIZE]; 349 unsigned char buf[MAX_BUF_SIZE];
350 unsigned bw = 0; // bandwidth calculations
202 while (1) { 351 while (1) {
203 unsigned end = time(NULL); 352 unsigned end = time(NULL);
204 if (arg_netfilter && end - start >= NETLOCK_INTERVAL) 353 if (arg_netfilter && end - start >= NETLOCK_INTERVAL)
205 break; 354 break;
206 if (end % DISPLAY_INTERVAL == 1 && last_print_traces != end) { // first print after 1 second 355 if (end % DISPLAY_INTERVAL == 1 && last_print_traces != end) { // first print after 1 second
207 if (!arg_netfilter) 356 if (!arg_netfilter)
208 hlist_print(); 357 hnode_print(bw);
209 last_print_traces = end; 358 last_print_traces = end;
359 bw = 0;
210 } 360 }
211 if (arg_netfilter && last_print_remaining != end) { 361 if (arg_netfilter && last_print_remaining != end) {
212 logprintf("."); 362 logprintf(".");
@@ -233,8 +383,8 @@ static void run_trace(void) {
233 383
234 unsigned bytes = recvfrom(sock, buf, MAX_BUF_SIZE, 0, NULL, NULL); 384 unsigned bytes = recvfrom(sock, buf, MAX_BUF_SIZE, 0, NULL, NULL);
235 if (bytes >= 20) { // size of IP header 385 if (bytes >= 20) { // size of IP header
236 // filter out loopback traffic 386#ifdef DEBUG
237 if (buf[12] != 127) { 387 {
238 uint32_t ip_src; 388 uint32_t ip_src;
239 memcpy(&ip_src, buf + 12, 4); 389 memcpy(&ip_src, buf + 12, 4);
240 ip_src = ntohl(ip_src); 390 ip_src = ntohl(ip_src);
@@ -242,13 +392,23 @@ static void run_trace(void) {
242 uint32_t ip_dst; 392 uint32_t ip_dst;
243 memcpy(&ip_dst, buf + 16, 4); 393 memcpy(&ip_dst, buf + 16, 4);
244 ip_dst = ntohl(ip_dst); 394 ip_dst = ntohl(ip_dst);
395 printf("%d.%d.%d.%d -> %d.%d.%d.%d, %u bytes\n", PRINT_IP(ip_src), PRINT_IP(ip_dst), bytes);
396 }
397#endif
398 // filter out loopback traffic
399 if (buf[12] != 127 && buf[16] != 127) {
400 bw += bytes + 14; // assume a 14 byte Ethernet layer
401
402 uint32_t ip_src;
403 memcpy(&ip_src, buf + 12, 4);
404 ip_src = ntohl(ip_src);
245 405
246 uint8_t hlen = (buf[0] & 0x0f) * 4; 406 uint8_t hlen = (buf[0] & 0x0f) * 4;
247 uint16_t port_src; 407 uint16_t port_src;
248 memcpy(&port_src, buf + hlen, 2); 408 memcpy(&port_src, buf + hlen, 2);
249 port_src = ntohs(port_src); 409 port_src = ntohs(port_src);
250 410
251 hlist_add(ip_src, ip_dst, buf[9], port_src, (uint64_t) bytes); 411 hnode_add(ip_src, buf[9], port_src, bytes + 14);
252 } 412 }
253 } 413 }
254 } 414 }
@@ -274,7 +434,7 @@ static int print_filter(FILE *fp) {
274 434
275 int i; 435 int i;
276 for (i = 0; i < HMAX; i++) { 436 for (i = 0; i < HMAX; i++) {
277 HList *ptr = htable[i]; 437 HNode *ptr = htable[i];
278 while (ptr) { 438 while (ptr) {
279 // filter rules are targeting ip address, the port number is disregarded, 439 // filter rules are targeting ip address, the port number is disregarded,
280 // so we look only at the first instance of an address 440 // so we look only at the first instance of an address
@@ -417,14 +577,27 @@ static void usage(void) {
417 printf("Usage: fnetlock [OPTIONS]\n"); 577 printf("Usage: fnetlock [OPTIONS]\n");
418 printf("Options:\n"); 578 printf("Options:\n");
419 printf(" --help, -? - this help screen\n"); 579 printf(" --help, -? - this help screen\n");
580 printf(" --log=filename - netlocker logfile\n");
420 printf(" --netfilter - build the firewall rules and commit them.\n"); 581 printf(" --netfilter - build the firewall rules and commit them.\n");
421 printf(" --log=filename - logfile\n");
422 printf("\n"); 582 printf("\n");
423} 583}
424 584
425int main(int argc, char **argv) { 585int main(int argc, char **argv) {
426 int i; 586 int i;
427 printf("\n\n"); 587
588#ifdef DEBUG
589 // radix test
590 radix_add(0x09000000, 0xff000000, "IBM");
591 radix_add(0x09090909, 0xffffffff, "Quad9 DNS");
592 radix_add(0x09000000, 0xff000000, "IBM");
593 printf("This test should print \"IBM, Quad9 DNS, IBM\"\n");
594 char *name = radix_longest_prefix_match(0x09040404);
595 printf("%s, ", name);
596 name = radix_longest_prefix_match(0x09090909);
597 printf("%s, ", name);
598 name = radix_longest_prefix_match(0x09322209);
599 printf("%s\n", name);
600#endif
428 601
429 if (getuid() != 0) { 602 if (getuid() != 0) {
430 fprintf(stderr, "Error: you need to be root to run this program\n"); 603 fprintf(stderr, "Error: you need to be root to run this program\n");
@@ -449,6 +622,10 @@ int main(int argc, char **argv) {
449 ansi_clrscr(); 622 ansi_clrscr();
450 if (arg_netfilter) 623 if (arg_netfilter)
451 logprintf("starting network lockdown\n"); 624 logprintf("starting network lockdown\n");
625 else {
626 char *fname = LIBDIR "/firejail/static-ip-map";
627 load_hostnames(fname);
628 }
452 629
453 run_trace(); 630 run_trace();
454 if (arg_netfilter) { 631 if (arg_netfilter) {
diff --git a/src/fnettrace/radix.c b/src/fnettrace/radix.c
new file mode 100644
index 000000000..c9493717d
--- /dev/null
+++ b/src/fnettrace/radix.c
@@ -0,0 +1,155 @@
1/*
2 * Copyright (C) 2014-2022 Firejail Authors
3 *
4 * This file is part of firejail project
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License along
17 * with this program; if not, write to the Free Software Foundation, Inc.,
18 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
19*/
20#include <stdio.h>
21#include <stdlib.h>
22#include <string.h>
23#include <stdint.h>
24#include <assert.h>
25#include "radix.h"
26#include "fnettrace.h"
27
28typedef struct rnode_t {
29 struct rnode_t *zero;
30 struct rnode_t *one;
31 char *name;
32} RNode;
33
34RNode *head = 0;
35int radix_nodes = 0;
36
37// get rid of the malloc overhead
38#define RNODE_MAX_MALLOC 128
39static RNode *rnode_unused = NULL;
40static int rnode_malloc_cnt = 0;
41static RNode *rmalloc(void) {
42 if (rnode_unused == NULL || rnode_malloc_cnt >= RNODE_MAX_MALLOC) {
43 rnode_unused = malloc(sizeof(RNode) * RNODE_MAX_MALLOC);
44 if (!rnode_unused)
45 errExit("malloc");
46 memset(rnode_unused, 0, sizeof(RNode) * RNODE_MAX_MALLOC);
47 rnode_malloc_cnt = 0;
48 }
49
50 rnode_malloc_cnt++;
51 return rnode_unused + rnode_malloc_cnt - 1;
52}
53
54
55static inline char *duplicate_name(const char *name) {
56 assert(name);
57
58 if (strcmp(name, "United States") == 0)
59 return "United States";
60 else if (strcmp(name, "Amazon") == 0)
61 return "Amazon";
62 return strdup(name);
63}
64
65static inline RNode *addOne(RNode *ptr, char *name) {
66 assert(ptr);
67 if (ptr->one)
68 return ptr->one;
69 RNode *node = rmalloc();
70 assert(node);
71 if (name) {
72 node->name = duplicate_name(name);
73 if (!node->name)
74 errExit("duplicate name");
75 }
76
77 ptr->one = node;
78 return node;
79}
80
81static inline RNode *addZero(RNode *ptr, char *name) {
82 assert(ptr);
83 if (ptr->zero)
84 return ptr->zero;
85 RNode *node = rmalloc();
86 assert(node);
87 if (name) {
88 node->name = duplicate_name(name);
89 if (!node->name)
90 errExit("duplicate name");
91 }
92
93 ptr->zero = node;
94 return node;
95}
96
97
98// add to radix tree
99char *radix_add(uint32_t ip, uint32_t mask, char *name) {
100 assert(name);
101 uint32_t m = 0x80000000;
102 uint32_t lastm = 0;
103 if (head == 0) {
104 head = malloc(sizeof(RNode));
105 memset(head, 0, sizeof(RNode));
106 }
107 RNode *ptr = head;
108 radix_nodes++;
109
110 int i;
111 for (i = 0; i < 32; i++, m >>= 1) {
112 if (!(m & mask))
113 break;
114
115 lastm |= m;
116 int valid = (lastm == mask)? 1: 0;
117 if (m & ip)
118 ptr = addOne(ptr, (valid)? name: NULL);
119 else
120 ptr = addZero(ptr, (valid)? name: NULL);
121 }
122 assert(ptr);
123 if (!ptr->name) {
124 ptr->name = duplicate_name(name);
125 if (!ptr->name)
126 errExit("duplicate_name");
127 }
128
129 return ptr->name;
130}
131
132// find last match
133char *radix_longest_prefix_match(uint32_t ip) {
134 if (!head)
135 return NULL;
136
137 uint32_t m = 0x80000000;
138 RNode *ptr = head;
139 RNode *rv = NULL;
140
141 int i;
142 for (i = 0; i < 32; i++, m >>= 1) {
143 if (m & ip)
144 ptr = ptr->one;
145 else
146 ptr = ptr->zero;
147 if (!ptr)
148 break;
149 if (ptr->name)
150 rv = ptr;
151 }
152
153 return (rv)? rv->name: NULL;
154}
155
diff --git a/src/fnettrace/radix.h b/src/fnettrace/radix.h
new file mode 100644
index 000000000..c22c5c547
--- /dev/null
+++ b/src/fnettrace/radix.h
@@ -0,0 +1,27 @@
1/*
2 * Copyright (C) 2014-2022 Firejail Authors
3 *
4 * This file is part of firejail project
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License along
17 * with this program; if not, write to the Free Software Foundation, Inc.,
18 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
19*/
20#ifndef RADIX_H
21#define RADIX_H
22
23extern int radix_nodes;
24char *radix_longest_prefix_match(uint32_t ip);
25char *radix_add(uint32_t ip, uint32_t mask, char *name);
26
27#endif \ No newline at end of file
diff --git a/src/fnettrace/static-ip-map b/src/fnettrace/static-ip-map
new file mode 100644
index 000000000..e24ecf218
--- /dev/null
+++ b/src/fnettrace/static-ip-map
@@ -0,0 +1,4044 @@
1#
2# Copyright (C) 2014-2022 Firejail Authors
3#
4# This file is part of firejail project
5#
6# This program is free software; you can redistribute it and/or modify
7# it under the terms of the GNU General Public License as published by
8# the Free Software Foundation; either version 2 of the License, or
9# (at your option) any later version.
10#
11# This program is distributed in the hope that it will be useful,
12# but WITHOUT ANY WARRANTY; without even the implied warranty of
13# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14# GNU General Public License for more details.
15#
16# You should have received a copy of the GNU General Public License along
17# with this program; if not, write to the Free Software Foundation, Inc.,
18# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
19#
20#
21# Static Internet Map
22#
23# Unfortunately we cannot do a hostname lookup. This will leak a lot of
24# information about what network resources we access.
25# A static map, helped out by geoip package available on all Linux distros,
26# will have to do it for now!
27#
28# Format:
29# CIDR-IPv4-address-range hostname
30# a single space between address and hostname
31# use '#' for comments
32# example: 9.9.9.0/24 Quad9 DNS
33#
34#
35
36# local network addresses
37192.168.0.0/16 local network
3810.0.0.0/8 local network
39172.16.0.0/16 local network
40
41# huge address ranges
426.0.0.0/8 US Army
437.0.0.0/8 US Army
449.0.0.0/8 IBM
4511.0.0.0/8 US Army
4617.0.0.0/8 Apple
4719.0.0.0/8 Ford
4821.0.0.0/8 US Army
4922.0.0.0/8 US Army
5026.0.0.0/8 US Army
5128.0.0.0/8 US Army
5229.0.0.0/8 US Army
5330.0.0.0/8 US Army
5433.0.0.0/8 US Army
5548.0.0.0/8 Prudential US
5655.0.0.0/8 US Army
5756.0.0.0/8 US Postal Service
58214.0.0.0/8 US Army
59215.0.0.0/8 US Army
60
61# whois/DNS
621.1.1.0/24 Cloudflare DNS
631.0.0.0/24 Cloudflare DNS
648.8.4.0/24 Google DNS
658.8.8.0/24 Google DNS
669.9.9.0/24 Quad9 DNS
6745.90.28.0/22 NextDNS
68149.112.112.0/24 Quad9 DNS
69149.112.120.0/21 CIRA DNS Canada
70176.103.128.0/19 Adguard DNS
71185.228.168.0/24 Cleanbrowsing DNS
72193.0.0.0/21 whois.ripe.net Netherlands
73199.5.26.0/24 whois.arin.net US
74199.15.80.0/21 whois.publicinterestregistry.net Canada
75199.15.88.0/24 whois.publicinterestregistry.net Canada
76199.71.0.0/24 whois.arin.net US
77199.212.0.0/24 whois.arin.net US
78200.3.12.0/22 whois.lacnic.net Uruguay
79201.159.220.0/22 whois.lacnic.net Ecuador
80
81# some popular websites
8231.13.24.0/21 Facebook
8331.13.64.0/18 Facebook
8464.63.0.0/18 Twitter
8569.171.224.0/19 Facebook
86104.244.40.0/21 Twitter
87129.134.0.0/16 Facebook
88140.82.112.0/20 GitHub
89157.240.0.0/16 Facebook
90185.199.108.0/22 GitHub
91188.64.224.0/21 Twitter
92192.0.64.0/18 Wordpress
93199.16.156.0/22 Twitter
94199.59.148.0/22 Twitter
95208.80.152.0/22 Wikipedia
96
97# Akamai
9823.0.0.0/12 Akamai
9923.32.0.0/11 Akamai
10023.64.0.0/14 Akamai
10123.72.0.0/13 Akamai
10223.192.0.0/11 Akamai
10372.246.0.0/15 Akamai
10496.6.0.0/15 Akamai
10596.16.0.0/15 Akamai
106104.64.0.0/10 Akamai
107184.24.0.0/13 Akamai
108184.50.0.0/15 Akamai
109184.84.0.0/14 Akamai
110
111# Fastly
11223.235.32.0/20 Fastly
11343.249.72.0/22 Fastly
114103.244.50.0/24 Fastly
115103.245.222.0/23 Fastly
116103.245.224.0/24 Fastly
117104.156.80.0/20 Fastly
118146.75.0.0/16 Fastly
119151.101.0.0/16 Fastly
120157.52.64.0/18 Fastly
121167.82.0.0/17 Fastly
122167.82.128.0/20 Fastly
123167.82.160.0/20 Fastly
124167.82.224.0/20 Fastly
125172.111.64.0/18 Fastly
126185.31.16.0/22 Fastly
127199.27.72.0/21 Fastly
128199.232.0.0/16 Fastly
129
130# MCI/Verizon
13172.21.80.0/20 MCI
132108.29.0.0/16 MCI
133108.30.0.0/16 MCI
134108.31.0.0/16 MCI
135108.3.128.0/17 MCI
136108.32.0.0/17 MCI
137108.32.128.0/17 MCI
138108.33.254.0/24 MCI
139108.33.255.0/24 MCI
140108.34.128.0/17 MCI
141108.34.16.0/20 MCI
142108.34.32.0/19 MCI
143108.34.64.0/18 MCI
144108.35.0.0/16 MCI
145108.36.0.0/16 MCI
146108.3.64.0/18 MCI
147108.37.0.0/16 MCI
148108.39.0.0/17 MCI
149108.39.128.0/17 MCI
150108.40.0.0/17 MCI
151108.4.0.0/17 MCI
152108.41.0.0/16 MCI
153108.4.128.0/19 MCI
154108.4.160.0/19 MCI
155108.4.192.0/18 MCI
156108.44.0.0/18 MCI
157108.44.128.0/17 MCI
158108.44.64.0/18 MCI
159108.45.0.0/16 MCI
160108.46.0.0/16 MCI
161192.229.128.0/17 MCI
162
163# Microsoft
16440.76.0.0/14 Microsoft
16540.96.0.0/12 Microsoft
16640.112.0.0/13 Microsoft
16740.124.0.0/16 Microsoft
16840.74.0.0/15 Microsoft
16940.80.0.0/12 Microsoft
17040.120.0.0/14 Microsoft
17140.125.0.0/17 Microsoft
17252.145.0.0/16 Microsoft
17352.148.0.0/14 Microsoft
17452.152.0.0/13 Microsoft
17552.146.0.0/15 Microsoft
17652.160.0.0/11 Microsoft
177
178# Yahoo
17963.250.192.0/19 Yahoo
18066.196.64.0/18 Yahoo
18167.195.0.0/16 Yahoo
18269.147.64.0/18 Yahoo
18376.13.0.0/16 Yahoo
18498.136.0.0/14 Yahoo
185206.190.32.0/19 Yahoo
186209.73.160.0/19 Yahoo
187209.191.64.0/18 Yahoo
188216.115.96.0/20 Yahoo
189
190# Google
191# from https://support.google.com/a/answer/10026322?hl=en
192# last update January 5, 2022
1938.34.208.0/20 Google
1948.35.192.0/20 Google
19523.236.48.0/20 Google
19623.251.128.0/19 Google
19734.64.0.0/10 Google
19834.128.0.0/10 Google
19935.184.0.0/13 Google
20035.192.0.0/14 Google
20135.196.0.0/15 Google
20235.198.0.0/16 Google
20335.199.0.0/17 Google
20435.199.128.0/18 Google
20535.200.0.0/13 Google
20635.208.0.0/12 Google
20735.224.0.0/12 Google
20835.240.0.0/13 Google
20964.15.112.0/20 Google
21064.233.160.0/19 Google
21166.102.0.0/20 Google
21266.249.64.0/19 Google
21370.32.128.0/19 Google
21472.14.192.0/18 Google
21574.114.24.0/21 Google
21674.125.0.0/16 Google
217104.154.0.0/15 Google
218104.196.0.0/14 Google
219104.237.160.0/19 Google
220107.167.160.0/19 Google
221107.178.192.0/18 Google
222108.59.80.0/20 Google
223108.170.192.0/18 Google
224108.177.0.0/17 Google
225130.211.0.0/16 Google
226136.112.0.0/12 Google
227142.250.0.0/15 Google
228146.148.0.0/17 Google
229162.216.148.0/22 Google
230162.222.176.0/21 Google
231172.110.32.0/21 Google
232172.217.0.0/16 Google
233172.253.0.0/16 Google
234173.194.0.0/16 Google
235173.255.112.0/20 Google
236192.158.28.0/22 Google
237192.178.0.0/15 Google
238193.186.4.0/24 Google
239199.36.154.0/23 Google
240199.36.156.0/24 Google
241199.192.112.0/22 Google
242199.223.232.0/21 Google
243207.223.160.0/20 Google
244208.65.152.0/22 Google
245208.68.108.0/22 Google
246208.81.188.0/22 Google
247208.117.224.0/19 Google
248209.85.128.0/17 Google
249216.58.192.0/19 Google
250216.73.80.0/20 Google
251216.239.32.0/19 Google
252
253
254#Cloudflare
255# from https://www.cloudflare.com/ips/
256# update April 8, 2021
257103.21.244.0/22 Cloudflare
258103.22.200.0/22 Cloudflare
259103.31.4.0/22 Cloudflare
260104.16.0.0/13 Cloudflare
261104.24.0.0/14 Cloudflare
262108.162.192.0/18 Cloudflare
263131.0.72.0/22 Cloudflare
264141.101.64.0/18 Cloudflare
265162.158.0.0/15 Cloudflare
266172.64.0.0/13 Cloudflare
267173.245.48.0/20 Cloudflare
268188.114.96.0/20 Cloudflare
269190.93.240.0/20 Cloudflare
270197.234.240.0/22 Cloudflare
271198.41.128.0/17 Cloudflare
272
273# Amazon
274# from https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html
275# update January 6, 2022
2763.0.0.0/15 Amazon
2773.2.0.0/24 Amazon
2783.2.2.0/24 Amazon
2793.2.3.0/24 Amazon
2803.2.8.0/21 Amazon
2813.3.0.0/23 Amazon
2823.3.5.0/24 Amazon
2833.3.6.0/23 Amazon
2843.3.8.0/21 Amazon
2853.3.16.0/21 Amazon
2863.3.24.0/22 Amazon
2873.3.28.0/22 Amazon
2883.4.0.0/24 Amazon
2893.4.1.0/24 Amazon
2903.4.2.0/24 Amazon
2913.4.3.0/24 Amazon
2923.4.4.0/24 Amazon
2933.4.6.0/24 Amazon
2943.4.7.0/24 Amazon
2953.4.16.0/21 Amazon
2963.4.24.0/21 Amazon
2973.5.0.0/19 Amazon
2983.5.32.0/22 Amazon
2993.5.36.0/22 Amazon
3003.5.40.0/22 Amazon
3013.5.44.0/22 Amazon
3023.5.48.0/22 Amazon
3033.5.52.0/22 Amazon
3043.5.64.0/21 Amazon
3053.5.72.0/23 Amazon
3063.5.76.0/22 Amazon
3073.5.80.0/21 Amazon
3083.5.128.0/22 Amazon
3093.5.132.0/23 Amazon
3103.5.134.0/23 Amazon
3113.5.136.0/22 Amazon
3123.5.140.0/22 Amazon
3133.5.144.0/23 Amazon
3143.5.146.0/23 Amazon
3153.5.148.0/22 Amazon
3163.5.152.0/21 Amazon
3173.5.160.0/22 Amazon
3183.5.164.0/22 Amazon
3193.5.168.0/23 Amazon
3203.5.208.0/22 Amazon
3213.5.212.0/23 Amazon
3223.5.216.0/22 Amazon
3233.5.220.0/22 Amazon
3243.5.224.0/22 Amazon
3253.5.228.0/22 Amazon
3263.5.232.0/22 Amazon
3273.5.236.0/22 Amazon
3283.5.240.0/22 Amazon
3293.5.244.0/22 Amazon
3303.5.248.0/22 Amazon
3313.5.252.0/22 Amazon
3323.6.0.0/15 Amazon
3333.8.0.0/14 Amazon
3343.12.0.0/16 Amazon
3353.13.0.0/16 Amazon
3363.14.0.0/15 Amazon
3373.16.0.0/14 Amazon
3383.20.0.0/14 Amazon
3393.24.0.0/14 Amazon
3403.28.0.0/15 Amazon
3413.30.0.0/15 Amazon
3423.32.0.0/16 Amazon
3433.33.34.0/24 Amazon
3443.33.35.0/24 Amazon
3453.33.128.0/17 Amazon
3463.34.0.0/15 Amazon
3473.36.0.0/14 Amazon
3483.48.0.0/12 Amazon
3493.64.0.0/12 Amazon
3503.80.0.0/12 Amazon
3513.96.0.0/15 Amazon
3523.98.0.0/15 Amazon
3533.100.0.0/16 Amazon
3543.101.0.0/16 Amazon
3553.104.0.0/14 Amazon
3563.108.0.0/14 Amazon
3573.112.0.0/14 Amazon
3583.116.0.0/14 Amazon
3593.120.0.0/14 Amazon
3603.124.0.0/14 Amazon
3613.128.0.0/15 Amazon
3623.130.0.0/16 Amazon
3633.131.0.0/16 Amazon
3643.132.0.0/14 Amazon
3653.136.0.0/13 Amazon
3663.144.0.0/13 Amazon
3673.152.0.0/13 Amazon
3683.208.0.0/12 Amazon
3693.224.0.0/12 Amazon
3703.240.0.0/13 Amazon
3713.248.0.0/13 Amazon
37213.32.0.0/15 Amazon
37313.34.0.128/27 Amazon
37413.34.0.160/27 Amazon
37513.34.1.0/27 Amazon
37613.34.1.32/27 Amazon
37713.34.3.128/27 Amazon
37813.34.3.160/27 Amazon
37913.34.3.192/27 Amazon
38013.34.3.224/27 Amazon
38113.34.4.64/27 Amazon
38213.34.4.96/27 Amazon
38313.34.5.12/32 Amazon
38413.34.5.13/32 Amazon
38513.34.5.14/32 Amazon
38613.34.5.15/32 Amazon
38713.34.5.16/32 Amazon
38813.34.5.17/32 Amazon
38913.34.5.44/32 Amazon
39013.34.5.45/32 Amazon
39113.34.5.46/32 Amazon
39213.34.5.47/32 Amazon
39313.34.5.48/32 Amazon
39413.34.5.49/32 Amazon
39513.34.5.78/32 Amazon
39613.34.5.79/32 Amazon
39713.34.5.80/32 Amazon
39813.34.5.81/32 Amazon
39913.34.5.110/32 Amazon
40013.34.5.111/32 Amazon
40113.34.5.112/32 Amazon
40213.34.5.113/32 Amazon
40313.34.5.128/27 Amazon
40413.34.5.160/27 Amazon
40513.34.5.192/27 Amazon
40613.34.5.224/27 Amazon
40713.34.6.192/27 Amazon
40813.34.6.224/27 Amazon
40913.34.7.64/27 Amazon
41013.34.7.96/27 Amazon
41113.34.8.64/27 Amazon
41213.34.8.96/27 Amazon
41313.34.9.0/27 Amazon
41413.34.9.32/27 Amazon
41513.34.10.128/27 Amazon
41613.34.10.160/27 Amazon
41713.34.11.0/27 Amazon
41813.34.11.32/27 Amazon
41913.34.11.128/27 Amazon
42013.34.11.160/27 Amazon
42113.34.12.64/27 Amazon
42213.34.12.96/27 Amazon
42313.34.12.192/27 Amazon
42413.34.12.242/32 Amazon
42513.34.12.243/32 Amazon
42613.34.12.244/32 Amazon
42713.34.12.245/32 Amazon
42813.34.13.18/32 Amazon
42913.34.13.19/32 Amazon
43013.34.13.20/32 Amazon
43113.34.13.21/32 Amazon
43213.34.13.50/32 Amazon
43313.34.13.51/32 Amazon
43413.34.13.52/32 Amazon
43513.34.13.53/32 Amazon
43613.34.14.128/27 Amazon
43713.34.14.160/27 Amazon
43813.34.14.192/27 Amazon
43913.34.14.224/27 Amazon
44013.34.15.0/27 Amazon
44113.34.15.32/27 Amazon
44213.34.16.64/27 Amazon
44313.34.16.96/27 Amazon
44413.34.16.192/27 Amazon
44513.34.17.24/29 Amazon
44613.34.17.64/27 Amazon
44713.34.17.96/27 Amazon
44813.34.18.192/27 Amazon
44913.34.18.224/27 Amazon
45013.34.19.192/27 Amazon
45113.34.19.224/27 Amazon
45213.34.20.0/27 Amazon
45313.34.20.32/27 Amazon
45413.34.20.64/27 Amazon
45513.34.20.96/27 Amazon
45613.34.21.64/27 Amazon
45713.34.21.96/27 Amazon
45813.34.22.88/29 Amazon
45913.34.22.160/27 Amazon
46013.34.22.192/27 Amazon
46113.34.22.224/27 Amazon
46213.34.23.0/27 Amazon
46313.34.23.32/27 Amazon
46413.34.23.64/27 Amazon
46513.34.23.96/27 Amazon
46613.34.23.128/27 Amazon
46713.34.23.160/27 Amazon
46813.34.23.192/27 Amazon
46913.34.23.224/27 Amazon
47013.34.24.64/27 Amazon
47113.34.24.96/27 Amazon
47213.34.24.128/27 Amazon
47313.34.24.160/27 Amazon
47413.34.24.192/27 Amazon
47513.34.25.64/27 Amazon
47613.34.25.96/27 Amazon
47713.34.25.128/27 Amazon
47813.34.25.160/27 Amazon
47913.34.25.192/27 Amazon
48013.34.25.248/29 Amazon
48113.34.26.0/27 Amazon
48213.34.26.32/27 Amazon
48313.34.26.64/27 Amazon
48413.34.26.96/27 Amazon
48513.34.26.128/27 Amazon
48613.34.26.160/27 Amazon
48713.34.26.192/27 Amazon
48813.34.26.224/27 Amazon
48913.34.27.16/32 Amazon
49013.34.27.17/32 Amazon
49113.34.27.32/27 Amazon
49213.34.27.64/27 Amazon
49313.34.27.96/27 Amazon
49413.34.27.128/27 Amazon
49513.34.28.0/27 Amazon
49613.34.28.32/27 Amazon
49713.34.28.64/27 Amazon
49813.34.28.96/27 Amazon
49913.34.28.128/27 Amazon
50013.34.28.160/27 Amazon
50113.34.28.192/27 Amazon
50213.34.28.224/27 Amazon
50313.34.29.0/27 Amazon
50413.34.29.32/27 Amazon
50513.34.29.64/27 Amazon
50613.34.29.96/27 Amazon
50713.34.29.128/27 Amazon
50813.34.29.160/27 Amazon
50913.34.29.192/27 Amazon
51013.34.29.224/27 Amazon
51113.34.30.0/27 Amazon
51213.34.30.32/27 Amazon
51313.34.30.64/27 Amazon
51413.34.30.96/27 Amazon
51513.34.30.128/27 Amazon
51613.34.30.160/27 Amazon
51713.34.30.192/27 Amazon
51813.34.30.224/27 Amazon
51913.34.31.0/27 Amazon
52013.34.31.32/27 Amazon
52113.34.31.64/27 Amazon
52213.34.31.96/27 Amazon
52313.34.31.128/27 Amazon
52413.34.31.160/27 Amazon
52513.34.31.192/27 Amazon
52613.34.31.224/27 Amazon
52713.34.32.0/27 Amazon
52813.34.32.32/27 Amazon
52913.34.32.64/27 Amazon
53013.34.32.96/27 Amazon
53113.34.32.128/27 Amazon
53213.34.32.160/27 Amazon
53313.34.33.0/27 Amazon
53413.34.33.32/27 Amazon
53513.34.33.64/27 Amazon
53613.34.33.96/27 Amazon
53713.34.33.128/27 Amazon
53813.34.33.160/27 Amazon
53913.34.33.192/27 Amazon
54013.34.33.224/27 Amazon
54113.34.34.0/27 Amazon
54213.34.34.32/27 Amazon
54313.34.34.64/27 Amazon
54413.34.34.96/27 Amazon
54513.34.34.128/27 Amazon
54613.34.34.160/27 Amazon
54713.34.34.192/27 Amazon
54813.34.34.224/27 Amazon
54913.34.35.0/27 Amazon
55013.34.35.32/27 Amazon
55113.34.35.64/27 Amazon
55213.34.35.96/27 Amazon
55313.34.35.128/27 Amazon
55413.34.35.160/27 Amazon
55513.34.35.192/27 Amazon
55613.34.35.224/27 Amazon
55713.34.36.0/27 Amazon
55813.34.36.32/27 Amazon
55913.34.36.64/27 Amazon
56013.34.36.96/27 Amazon
56113.34.36.128/27 Amazon
56213.34.36.160/27 Amazon
56313.34.36.192/27 Amazon
56413.34.36.224/27 Amazon
56513.34.37.0/27 Amazon
56613.34.37.32/27 Amazon
56713.34.37.64/27 Amazon
56813.34.37.96/27 Amazon
56913.34.37.128/27 Amazon
57013.34.37.160/27 Amazon
57113.34.37.192/27 Amazon
57213.34.37.224/27 Amazon
57313.34.38.0/27 Amazon
57413.34.38.32/27 Amazon
57513.34.38.64/27 Amazon
57613.34.38.96/27 Amazon
57713.34.38.128/27 Amazon
57813.34.38.160/27 Amazon
57913.34.39.0/27 Amazon
58013.34.39.32/27 Amazon
58113.34.39.64/27 Amazon
58213.34.39.96/27 Amazon
58313.34.39.128/27 Amazon
58413.34.39.160/27 Amazon
58513.34.39.192/27 Amazon
58613.34.39.224/27 Amazon
58713.34.40.0/27 Amazon
58813.34.40.32/27 Amazon
58913.34.40.64/27 Amazon
59013.34.40.96/27 Amazon
59113.34.40.128/27 Amazon
59213.34.40.160/27 Amazon
59313.34.40.192/27 Amazon
59413.34.40.224/27 Amazon
59513.34.41.0/27 Amazon
59613.34.41.32/27 Amazon
59713.34.41.64/27 Amazon
59813.34.41.96/27 Amazon
59913.34.41.128/27 Amazon
60013.34.41.160/27 Amazon
60113.34.41.192/27 Amazon
60213.34.41.224/27 Amazon
60313.34.42.0/27 Amazon
60413.34.42.32/27 Amazon
60513.34.42.64/27 Amazon
60613.34.42.96/27 Amazon
60713.34.42.128/27 Amazon
60813.34.42.160/27 Amazon
60913.34.42.192/27 Amazon
61013.34.42.224/27 Amazon
61113.34.43.0/27 Amazon
61213.34.43.32/27 Amazon
61313.34.43.64/27 Amazon
61413.34.43.96/27 Amazon
61513.34.43.128/27 Amazon
61613.34.43.160/27 Amazon
61713.34.43.192/27 Amazon
61813.34.43.224/27 Amazon
61913.34.44.0/27 Amazon
62013.34.44.32/27 Amazon
62113.34.44.64/27 Amazon
62213.34.44.96/27 Amazon
62313.34.44.128/27 Amazon
62413.34.44.160/27 Amazon
62513.34.44.192/27 Amazon
62613.34.44.224/27 Amazon
62713.34.45.0/27 Amazon
62813.34.45.32/27 Amazon
62913.34.45.64/27 Amazon
63013.34.45.96/27 Amazon
63113.34.45.128/27 Amazon
63213.34.45.160/27 Amazon
63313.34.45.192/27 Amazon
63413.34.45.224/27 Amazon
63513.34.46.0/27 Amazon
63613.34.46.32/27 Amazon
63713.34.46.64/27 Amazon
63813.34.46.96/27 Amazon
63913.34.46.128/27 Amazon
64013.34.46.160/27 Amazon
64113.34.46.192/27 Amazon
64213.34.46.224/27 Amazon
64313.34.47.0/27 Amazon
64413.34.47.32/27 Amazon
64513.34.47.64/27 Amazon
64613.34.47.96/27 Amazon
64713.34.47.128/27 Amazon
64813.34.47.160/27 Amazon
64913.34.47.192/27 Amazon
65013.34.47.224/27 Amazon
65113.34.48.0/27 Amazon
65213.34.48.32/27 Amazon
65313.34.48.64/27 Amazon
65413.34.48.96/27 Amazon
65513.34.48.128/27 Amazon
65613.34.48.160/27 Amazon
65713.34.48.192/27 Amazon
65813.34.48.224/27 Amazon
65913.34.49.0/27 Amazon
66013.34.49.32/27 Amazon
66113.34.49.64/27 Amazon
66213.34.49.96/27 Amazon
66313.34.49.128/27 Amazon
66413.34.49.160/27 Amazon
66513.34.49.192/27 Amazon
66613.34.49.224/27 Amazon
66713.34.50.0/27 Amazon
66813.34.50.32/27 Amazon
66913.34.50.64/27 Amazon
67013.34.50.96/27 Amazon
67113.34.50.128/27 Amazon
67213.34.50.160/27 Amazon
67313.34.50.192/27 Amazon
67413.34.50.224/27 Amazon
67513.34.51.0/27 Amazon
67613.34.51.32/27 Amazon
67713.34.51.64/27 Amazon
67813.34.51.96/27 Amazon
67913.34.51.128/27 Amazon
68013.34.51.160/27 Amazon
68113.34.51.192/27 Amazon
68213.34.51.224/27 Amazon
68313.34.52.0/27 Amazon
68413.34.52.32/27 Amazon
68513.34.52.64/27 Amazon
68613.34.52.96/27 Amazon
68713.34.52.128/27 Amazon
68813.34.52.160/27 Amazon
68913.34.52.192/27 Amazon
69013.34.52.224/27 Amazon
69113.34.53.0/27 Amazon
69213.34.53.32/27 Amazon
69313.34.53.64/27 Amazon
69413.34.53.96/27 Amazon
69513.34.53.128/27 Amazon
69613.34.53.160/27 Amazon
69713.34.53.192/27 Amazon
69813.34.53.224/27 Amazon
69913.34.54.0/27 Amazon
70013.34.54.32/27 Amazon
70113.34.54.64/27 Amazon
70213.34.54.96/27 Amazon
70313.34.54.128/27 Amazon
70413.34.54.160/27 Amazon
70513.34.54.192/27 Amazon
70613.34.54.224/27 Amazon
70713.34.55.0/27 Amazon
70813.34.55.32/27 Amazon
70913.34.55.64/27 Amazon
71013.34.55.96/27 Amazon
71113.34.55.128/27 Amazon
71213.34.55.160/27 Amazon
71313.34.55.192/27 Amazon
71413.34.55.224/27 Amazon
71513.34.56.0/27 Amazon
71613.34.56.32/27 Amazon
71713.34.56.64/27 Amazon
71813.34.56.96/27 Amazon
71913.34.56.128/27 Amazon
72013.34.56.160/27 Amazon
72113.34.56.192/27 Amazon
72213.34.56.224/27 Amazon
72313.34.57.0/27 Amazon
72413.34.57.32/27 Amazon
72513.34.57.64/27 Amazon
72613.34.57.96/27 Amazon
72713.34.57.128/27 Amazon
72813.34.57.160/27 Amazon
72913.34.57.192/27 Amazon
73013.34.57.224/27 Amazon
73113.34.58.0/27 Amazon
73213.34.58.32/27 Amazon
73313.34.58.64/27 Amazon
73413.34.58.96/27 Amazon
73513.34.58.128/27 Amazon
73613.34.58.160/27 Amazon
73713.34.58.192/27 Amazon
73813.34.58.224/27 Amazon
73913.34.59.0/27 Amazon
74013.34.59.32/27 Amazon
74113.34.59.64/27 Amazon
74213.34.59.96/27 Amazon
74313.34.59.128/27 Amazon
74413.34.59.160/27 Amazon
74513.34.59.192/27 Amazon
74613.34.59.224/27 Amazon
74713.34.60.0/27 Amazon
74813.34.60.32/27 Amazon
74913.34.60.64/27 Amazon
75013.34.60.96/27 Amazon
75113.34.60.128/27 Amazon
75213.34.60.160/27 Amazon
75313.34.60.192/27 Amazon
75413.34.60.224/27 Amazon
75513.34.61.0/27 Amazon
75613.34.61.32/27 Amazon
75713.34.61.64/27 Amazon
75813.34.61.96/27 Amazon
75913.34.61.128/27 Amazon
76013.34.61.160/27 Amazon
76113.34.61.192/27 Amazon
76213.34.61.224/27 Amazon
76313.34.62.0/27 Amazon
76413.34.62.32/27 Amazon
76513.34.62.128/27 Amazon
76613.34.62.160/27 Amazon
76713.34.62.192/27 Amazon
76813.34.62.224/27 Amazon
76913.34.63.0/27 Amazon
77013.34.63.32/27 Amazon
77113.34.63.64/27 Amazon
77213.34.63.96/27 Amazon
77313.34.63.128/27 Amazon
77413.34.63.160/27 Amazon
77513.35.0.0/16 Amazon
77613.36.0.0/14 Amazon
77713.40.0.0/14 Amazon
77813.44.0.0/14 Amazon
77913.48.0.0/15 Amazon
78013.50.0.0/16 Amazon
78113.51.0.0/16 Amazon
78213.52.0.0/16 Amazon
78313.53.0.0/16 Amazon
78413.54.0.0/15 Amazon
78513.56.0.0/16 Amazon
78613.57.0.0/16 Amazon
78713.58.0.0/15 Amazon
78813.112.0.0/14 Amazon
78913.124.0.0/16 Amazon
79013.125.0.0/16 Amazon
79113.126.0.0/15 Amazon
79213.200.0.0/13 Amazon
79313.208.0.0/16 Amazon
79413.209.0.0/16 Amazon
79513.210.0.0/15 Amazon
79613.212.0.0/15 Amazon
79713.214.0.0/15 Amazon
79813.224.0.0/14 Amazon
79913.228.0.0/15 Amazon
80013.230.0.0/15 Amazon
80113.232.0.0/14 Amazon
80213.236.0.0/14 Amazon
80313.244.0.0/15 Amazon
80413.246.0.0/16 Amazon
80513.247.0.0/16 Amazon
80613.248.0.0/20 Amazon
80713.248.16.0/21 Amazon
80813.248.24.0/22 Amazon
80913.248.28.0/22 Amazon
81013.248.32.0/20 Amazon
81113.248.48.0/21 Amazon
81213.248.56.0/22 Amazon
81313.248.60.0/22 Amazon
81413.248.64.0/24 Amazon
81513.248.65.0/24 Amazon
81613.248.66.0/24 Amazon
81713.248.67.0/24 Amazon
81813.248.68.0/24 Amazon
81913.248.69.0/24 Amazon
82013.248.70.0/24 Amazon
82113.248.71.0/24 Amazon
82213.248.96.0/24 Amazon
82313.248.97.0/24 Amazon
82413.248.98.0/24 Amazon
82513.248.99.0/24 Amazon
82613.248.100.0/24 Amazon
82713.248.101.0/24 Amazon
82813.248.102.0/24 Amazon
82913.248.103.0/24 Amazon
83013.248.104.0/24 Amazon
83113.248.105.0/24 Amazon
83213.248.106.0/24 Amazon
83313.248.107.0/24 Amazon
83413.248.108.0/24 Amazon
83513.248.109.0/24 Amazon
83613.248.111.0/24 Amazon
83713.248.112.0/24 Amazon
83813.248.113.0/24 Amazon
83913.248.114.0/24 Amazon
84013.248.115.0/24 Amazon
84113.248.116.0/24 Amazon
84213.248.117.0/24 Amazon
84313.248.118.0/24 Amazon
84413.248.119.0/24 Amazon
84513.248.120.0/24 Amazon
84613.248.121.0/24 Amazon
84713.248.122.0/24 Amazon
84813.248.123.0/24 Amazon
84913.248.124.0/24 Amazon
85013.248.125.0/24 Amazon
85113.248.126.0/24 Amazon
85213.248.127.0/24 Amazon
85313.248.128.0/17 Amazon
85413.249.0.0/16 Amazon
85513.250.0.0/15 Amazon
85615.152.0.0/16 Amazon
85715.156.0.0/15 Amazon
85815.158.0.0/16 Amazon
85915.160.0.0/16 Amazon
86015.161.0.0/16 Amazon
86115.164.0.0/15 Amazon
86215.168.0.0/16 Amazon
86315.177.0.0/18 Amazon
86415.177.64.0/23 Amazon
86515.177.66.0/23 Amazon
86615.177.68.0/23 Amazon
86715.177.70.0/23 Amazon
86815.177.72.0/24 Amazon
86915.177.73.0/24 Amazon
87015.177.74.0/24 Amazon
87115.177.75.0/24 Amazon
87215.177.76.0/24 Amazon
87315.177.77.0/24 Amazon
87415.177.78.0/24 Amazon
87515.177.79.0/24 Amazon
87615.177.80.0/24 Amazon
87715.177.81.0/24 Amazon
87815.177.82.0/24 Amazon
87915.177.83.0/24 Amazon
88015.177.84.0/24 Amazon
88115.177.85.0/24 Amazon
88215.177.86.0/24 Amazon
88315.177.87.0/24 Amazon
88415.177.88.0/24 Amazon
88515.177.89.0/24 Amazon
88615.177.90.0/24 Amazon
88715.177.91.0/24 Amazon
88815.177.92.0/24 Amazon
88915.181.0.0/20 Amazon
89015.181.16.0/20 Amazon
89115.181.32.0/21 Amazon
89215.181.40.0/21 Amazon
89315.181.48.0/20 Amazon
89415.181.64.0/20 Amazon
89515.181.80.0/20 Amazon
89615.181.96.0/20 Amazon
89715.181.112.0/22 Amazon
89815.181.116.0/22 Amazon
89915.181.120.0/21 Amazon
90015.181.128.0/20 Amazon
90115.181.144.0/20 Amazon
90215.181.160.0/20 Amazon
90315.181.176.0/20 Amazon
90415.181.192.0/19 Amazon
90515.181.224.0/21 Amazon
90615.181.232.0/21 Amazon
90715.181.240.0/24 Amazon
90815.181.241.0/24 Amazon
90915.181.242.0/24 Amazon
91015.181.243.0/24 Amazon
91115.181.244.0/24 Amazon
91215.181.245.0/24 Amazon
91315.181.246.0/24 Amazon
91415.181.247.0/24 Amazon
91515.181.248.0/24 Amazon
91615.181.249.0/24 Amazon
91715.181.250.0/24 Amazon
91815.181.251.0/24 Amazon
91915.181.252.0/24 Amazon
92015.181.253.0/24 Amazon
92115.181.254.0/24 Amazon
92215.184.0.0/16 Amazon
92315.185.0.0/16 Amazon
92415.188.0.0/16 Amazon
92515.191.0.0/16 Amazon
92615.193.0.0/19 Amazon
92715.197.0.0/23 Amazon
92815.197.2.0/24 Amazon
92915.197.3.0/24 Amazon
93015.197.4.0/22 Amazon
93115.197.8.0/22 Amazon
93215.197.12.0/22 Amazon
93315.197.16.0/23 Amazon
93415.197.18.0/23 Amazon
93515.197.20.0/22 Amazon
93615.197.24.0/22 Amazon
93715.197.28.0/23 Amazon
93815.197.30.0/23 Amazon
93915.197.32.0/23 Amazon
94015.197.128.0/17 Amazon
94115.200.0.0/16 Amazon
94215.205.0.0/16 Amazon
94315.206.0.0/15 Amazon
94415.220.0.0/20 Amazon
94515.220.16.0/20 Amazon
94615.220.220.0/23 Amazon
94715.220.222.0/23 Amazon
94815.220.224.0/23 Amazon
94915.220.226.0/24 Amazon
95015.220.250.0/23 Amazon
95115.220.252.0/22 Amazon
95215.221.0.0/24 Amazon
95315.221.1.0/24 Amazon
95415.221.2.0/24 Amazon
95515.221.3.0/24 Amazon
95615.221.4.0/23 Amazon
95715.221.6.0/24 Amazon
95815.221.7.0/24 Amazon
95915.221.8.0/21 Amazon
96015.221.16.0/22 Amazon
96115.221.20.0/22 Amazon
96215.221.24.0/21 Amazon
96315.221.33.0/24 Amazon
96415.221.34.0/24 Amazon
96515.221.35.0/24 Amazon
96615.221.36.0/22 Amazon
96715.221.40.0/21 Amazon
96815.221.48.0/24 Amazon
96915.221.49.0/24 Amazon
97015.221.50.0/24 Amazon
97115.221.51.0/24 Amazon
97215.221.52.0/24 Amazon
97315.221.53.0/24 Amazon
97415.222.0.0/15 Amazon
97515.228.0.0/15 Amazon
97615.230.0.4/32 Amazon
97715.230.0.5/32 Amazon
97815.230.0.6/31 Amazon
97915.230.0.12/31 Amazon
98015.230.0.14/32 Amazon
98115.230.4.19/32 Amazon
98215.230.4.152/31 Amazon
98315.230.4.154/31 Amazon
98415.230.4.156/31 Amazon
98515.230.4.158/31 Amazon
98615.230.4.160/31 Amazon
98715.230.4.162/31 Amazon
98815.230.4.176/28 Amazon
98915.230.5.0/24 Amazon
99015.230.6.0/24 Amazon
99115.230.14.12/32 Amazon
99215.230.14.18/31 Amazon
99315.230.14.20/31 Amazon
99415.230.14.252/31 Amazon
99515.230.16.0/32 Amazon
99615.230.16.12/32 Amazon
99715.230.16.17/32 Amazon
99815.230.16.18/31 Amazon
99915.230.16.20/31 Amazon
100015.230.16.252/31 Amazon
100115.230.18.0/24 Amazon
100215.230.21.0/24 Amazon
100315.230.22.0/24 Amazon
100415.230.23.0/24 Amazon
100515.230.24.0/22 Amazon
100615.230.28.0/24 Amazon
100715.230.29.0/24 Amazon
100815.230.30.0/24 Amazon
100915.230.31.0/24 Amazon
101015.230.32.0/24 Amazon
101115.230.35.0/24 Amazon
101215.230.36.0/23 Amazon
101315.230.38.0/24 Amazon
101415.230.39.0/31 Amazon
101515.230.39.2/31 Amazon
101615.230.39.4/31 Amazon
101715.230.39.6/31 Amazon
101815.230.39.8/31 Amazon
101915.230.39.10/31 Amazon
102015.230.39.12/31 Amazon
102115.230.39.14/31 Amazon
102215.230.39.16/31 Amazon
102315.230.39.18/31 Amazon
102415.230.39.20/31 Amazon
102515.230.39.22/31 Amazon
102615.230.39.24/31 Amazon
102715.230.39.26/31 Amazon
102815.230.39.28/31 Amazon
102915.230.39.30/31 Amazon
103015.230.39.32/31 Amazon
103115.230.39.34/31 Amazon
103215.230.39.36/31 Amazon
103315.230.39.38/31 Amazon
103415.230.39.40/31 Amazon
103515.230.39.42/31 Amazon
103615.230.39.44/31 Amazon
103715.230.39.46/31 Amazon
103815.230.39.48/31 Amazon
103915.230.39.50/31 Amazon
104015.230.39.52/31 Amazon
104115.230.39.54/31 Amazon
104215.230.39.56/31 Amazon
104315.230.39.58/31 Amazon
104415.230.39.60/31 Amazon
104515.230.39.62/31 Amazon
104615.230.39.64/31 Amazon
104715.230.39.66/31 Amazon
104815.230.39.68/31 Amazon
104915.230.39.70/31 Amazon
105015.230.39.72/31 Amazon
105115.230.39.74/31 Amazon
105215.230.39.76/31 Amazon
105315.230.39.78/31 Amazon
105415.230.39.80/31 Amazon
105515.230.39.82/31 Amazon
105615.230.39.84/31 Amazon
105715.230.39.86/31 Amazon
105815.230.39.88/31 Amazon
105915.230.39.90/31 Amazon
106015.230.39.92/31 Amazon
106115.230.39.94/31 Amazon
106215.230.39.96/31 Amazon
106315.230.39.98/31 Amazon
106415.230.39.100/31 Amazon
106515.230.39.102/31 Amazon
106615.230.39.104/31 Amazon
106715.230.39.106/31 Amazon
106815.230.39.108/31 Amazon
106915.230.39.110/31 Amazon
107015.230.39.112/31 Amazon
107115.230.39.114/31 Amazon
107215.230.39.116/31 Amazon
107315.230.39.118/31 Amazon
107415.230.39.120/31 Amazon
107515.230.39.122/31 Amazon
107615.230.39.124/31 Amazon
107715.230.39.126/31 Amazon
107815.230.39.128/31 Amazon
107915.230.39.130/31 Amazon
108015.230.39.132/31 Amazon
108115.230.39.134/31 Amazon
108215.230.39.136/31 Amazon
108315.230.39.138/31 Amazon
108415.230.39.140/31 Amazon
108515.230.39.142/31 Amazon
108615.230.39.144/31 Amazon
108715.230.39.146/31 Amazon
108815.230.39.148/31 Amazon
108915.230.39.150/31 Amazon
109015.230.39.152/31 Amazon
109115.230.39.154/31 Amazon
109215.230.39.156/31 Amazon
109315.230.39.158/31 Amazon
109415.230.39.160/31 Amazon
109515.230.39.162/31 Amazon
109615.230.39.164/31 Amazon
109715.230.39.166/31 Amazon
109815.230.39.168/31 Amazon
109915.230.39.170/31 Amazon
110015.230.39.172/31 Amazon
110115.230.39.174/31 Amazon
110215.230.39.176/31 Amazon
110315.230.39.178/31 Amazon
110415.230.39.180/31 Amazon
110515.230.39.182/31 Amazon
110615.230.39.184/31 Amazon
110715.230.39.186/31 Amazon
110815.230.39.188/31 Amazon
110915.230.39.190/31 Amazon
111015.230.39.192/31 Amazon
111115.230.39.194/31 Amazon
111215.230.39.196/31 Amazon
111315.230.39.198/31 Amazon
111415.230.39.200/31 Amazon
111515.230.39.202/31 Amazon
111615.230.39.204/31 Amazon
111715.230.39.206/31 Amazon
111815.230.39.208/31 Amazon
111915.230.39.210/31 Amazon
112015.230.39.212/31 Amazon
112115.230.39.214/31 Amazon
112215.230.39.216/31 Amazon
112315.230.39.218/31 Amazon
112415.230.39.220/31 Amazon
112515.230.39.222/31 Amazon
112615.230.39.224/31 Amazon
112715.230.39.226/31 Amazon
112815.230.39.228/31 Amazon
112915.230.39.230/31 Amazon
113015.230.39.232/31 Amazon
113115.230.39.234/31 Amazon
113215.230.39.236/31 Amazon
113315.230.39.238/31 Amazon
113415.230.39.240/31 Amazon
113515.230.39.242/31 Amazon
113615.230.39.244/31 Amazon
113715.230.39.246/31 Amazon
113815.230.39.248/31 Amazon
113915.230.39.250/31 Amazon
114015.230.39.252/31 Amazon
114115.230.39.254/31 Amazon
114215.230.40.0/24 Amazon
114315.230.41.0/24 Amazon
114415.230.42.0/24 Amazon
114515.230.43.0/24 Amazon
114615.230.49.0/24 Amazon
114715.230.50.0/24 Amazon
114815.230.51.0/24 Amazon
114915.230.52.0/24 Amazon
115015.230.53.0/24 Amazon
115115.230.54.0/24 Amazon
115215.230.55.0/24 Amazon
115315.230.56.0/24 Amazon
115415.230.57.0/24 Amazon
115515.230.58.0/24 Amazon
115615.230.59.0/24 Amazon
115715.230.60.0/24 Amazon
115815.230.61.0/24 Amazon
115915.230.64.192/26 Amazon
116015.230.65.0/26 Amazon
116115.230.65.64/26 Amazon
116215.230.65.128/25 Amazon
116315.230.66.0/25 Amazon
116415.230.66.128/25 Amazon
116515.230.67.0/26 Amazon
116615.230.67.64/26 Amazon
116715.230.67.128/26 Amazon
116815.230.67.192/26 Amazon
116915.230.68.0/26 Amazon
117015.230.68.64/26 Amazon
117115.230.68.128/26 Amazon
117215.230.68.192/26 Amazon
117315.230.69.0/26 Amazon
117415.230.69.64/26 Amazon
117515.230.69.128/26 Amazon
117615.230.69.192/26 Amazon
117715.230.70.0/26 Amazon
117815.230.70.64/26 Amazon
117915.230.70.128/26 Amazon
118015.230.70.192/26 Amazon
118115.230.71.0/26 Amazon
118215.230.71.64/26 Amazon
118315.230.71.128/26 Amazon
118415.230.71.192/26 Amazon
118515.230.72.0/26 Amazon
118615.230.72.64/26 Amazon
118715.230.72.128/26 Amazon
118815.230.72.192/26 Amazon
118915.230.73.0/26 Amazon
119015.230.73.64/26 Amazon
119115.230.73.128/26 Amazon
119215.230.73.192/26 Amazon
119315.230.74.0/26 Amazon
119415.230.74.64/26 Amazon
119515.230.74.128/26 Amazon
119615.230.74.192/26 Amazon
119715.230.75.0/26 Amazon
119815.230.75.64/26 Amazon
119915.230.75.128/26 Amazon
120015.230.75.192/26 Amazon
120115.230.76.0/26 Amazon
120215.230.76.64/26 Amazon
120315.230.76.128/26 Amazon
120415.230.76.192/26 Amazon
120515.230.77.0/26 Amazon
120615.230.77.64/26 Amazon
120715.230.77.128/26 Amazon
120815.230.77.192/26 Amazon
120915.230.78.0/26 Amazon
121015.230.78.64/26 Amazon
121115.230.78.128/26 Amazon
121215.230.78.192/26 Amazon
121315.230.79.0/26 Amazon
121415.230.79.64/26 Amazon
121515.230.79.128/26 Amazon
121615.230.80.0/24 Amazon
121715.230.81.0/24 Amazon
121815.230.82.0/24 Amazon
121915.230.83.0/24 Amazon
122015.230.84.0/24 Amazon
122115.230.85.0/24 Amazon
122215.230.86.0/24 Amazon
122315.230.87.0/24 Amazon
122415.230.88.0/24 Amazon
122515.230.89.0/24 Amazon
122615.230.90.0/24 Amazon
122715.230.91.0/24 Amazon
122815.230.92.0/24 Amazon
122915.230.93.0/24 Amazon
123015.230.94.0/24 Amazon
123115.230.129.0/24 Amazon
123215.230.130.0/24 Amazon
123315.230.131.0/32 Amazon
123415.230.131.1/32 Amazon
123515.230.131.2/32 Amazon
123615.230.131.3/32 Amazon
123715.230.131.4/32 Amazon
123815.230.131.5/32 Amazon
123915.230.131.6/32 Amazon
124015.230.131.7/32 Amazon
124115.230.131.8/32 Amazon
124215.230.131.9/32 Amazon
124315.230.131.10/31 Amazon
124415.230.131.12/31 Amazon
124515.230.131.14/32 Amazon
124615.230.131.15/32 Amazon
124715.230.131.16/28 Amazon
124815.230.131.32/28 Amazon
124915.230.131.48/28 Amazon
125015.230.131.64/28 Amazon
125115.230.131.80/28 Amazon
125215.230.131.96/28 Amazon
125315.230.131.112/28 Amazon
125415.230.131.128/28 Amazon
125515.230.131.144/28 Amazon
125615.230.131.160/31 Amazon
125715.230.131.162/31 Amazon
125815.230.131.164/31 Amazon
125915.230.131.166/31 Amazon
126015.230.131.168/31 Amazon
126115.230.131.170/31 Amazon
126215.230.131.172/31 Amazon
126315.230.131.174/31 Amazon
126415.230.132.0/24 Amazon
126515.230.133.0/28 Amazon
126615.230.133.16/32 Amazon
126715.230.133.17/32 Amazon
126815.230.133.18/31 Amazon
126915.230.133.20/31 Amazon
127015.230.133.22/31 Amazon
127115.230.133.24/32 Amazon
127215.230.133.26/31 Amazon
127315.230.133.28/31 Amazon
127415.230.134.0/24 Amazon
127515.230.135.0/24 Amazon
127615.230.136.0/24 Amazon
127715.230.137.0/24 Amazon
127815.230.138.0/24 Amazon
127915.230.140.0/24 Amazon
128015.230.141.0/24 Amazon
128115.230.142.0/24 Amazon
128215.230.143.0/24 Amazon
128315.230.144.0/24 Amazon
128415.230.145.0/24 Amazon
128515.230.148.0/24 Amazon
128615.230.149.0/31 Amazon
128715.230.149.2/31 Amazon
128815.230.149.4/31 Amazon
128915.230.149.8/31 Amazon
129015.230.149.10/32 Amazon
129115.230.149.11/32 Amazon
129215.230.150.0/23 Amazon
129315.230.152.0/24 Amazon
129415.230.153.0/24 Amazon
129515.230.154.0/23 Amazon
129615.230.156.0/24 Amazon
129715.230.157.0/24 Amazon
129815.230.158.0/23 Amazon
129915.230.160.0/24 Amazon
130015.230.161.0/24 Amazon
130115.230.162.0/24 Amazon
130215.230.163.0/24 Amazon
130315.230.164.0/24 Amazon
130415.230.165.0/24 Amazon
130515.230.166.0/24 Amazon
130615.230.170.0/23 Amazon
130715.230.173.0/24 Amazon
130815.230.174.0/24 Amazon
130915.230.176.0/24 Amazon
131015.230.177.0/31 Amazon
131115.230.177.2/31 Amazon
131215.230.178.0/24 Amazon
131315.230.179.0/29 Amazon
131415.230.179.8/29 Amazon
131515.230.179.16/29 Amazon
131615.230.181.0/24 Amazon
131715.230.182.0/24 Amazon
131815.230.183.0/24 Amazon
131915.230.184.0/24 Amazon
132015.230.185.0/24 Amazon
132115.230.186.0/24 Amazon
132215.230.188.0/25 Amazon
132315.230.188.128/25 Amazon
132415.230.189.0/25 Amazon
132515.230.189.128/25 Amazon
132615.230.190.0/25 Amazon
132715.230.190.128/25 Amazon
132815.230.192.0/24 Amazon
132915.230.193.0/24 Amazon
133015.230.195.0/24 Amazon
133115.230.196.0/24 Amazon
133215.230.197.0/24 Amazon
133315.230.198.0/24 Amazon
133415.230.199.0/28 Amazon
133515.230.200.0/24 Amazon
133615.230.201.0/24 Amazon
133715.230.202.0/30 Amazon
133815.230.203.0/24 Amazon
133915.230.204.0/32 Amazon
134015.230.204.1/32 Amazon
134115.230.204.2/32 Amazon
134215.230.204.3/32 Amazon
134315.230.205.0/24 Amazon
134415.230.206.0/24 Amazon
134515.230.207.0/24 Amazon
134615.231.0.0/16 Amazon
134715.236.0.0/15 Amazon
134815.248.8.0/22 Amazon
134915.248.16.0/22 Amazon
135015.248.20.0/22 Amazon
135115.248.24.0/22 Amazon
135215.248.28.0/22 Amazon
135315.248.32.0/22 Amazon
135415.248.36.0/22 Amazon
135515.248.40.0/22 Amazon
135615.251.0.0/32 Amazon
135715.251.0.1/32 Amazon
135815.251.0.2/32 Amazon
135915.251.0.3/32 Amazon
136015.251.0.4/32 Amazon
136115.251.0.5/32 Amazon
136215.251.0.6/32 Amazon
136315.251.0.7/32 Amazon
136415.251.0.8/32 Amazon
136515.251.0.9/32 Amazon
136615.251.0.10/32 Amazon
136715.251.0.11/32 Amazon
136815.251.0.12/32 Amazon
136915.251.0.13/32 Amazon
137015.251.0.14/32 Amazon
137115.251.0.15/32 Amazon
137215.253.0.0/16 Amazon
137315.254.0.0/16 Amazon
137416.12.0.0/23 Amazon
137516.12.2.0/24 Amazon
137616.12.4.0/23 Amazon
137716.12.6.0/23 Amazon
137816.12.8.0/24 Amazon
137916.16.0.0/16 Amazon
138016.50.0.0/15 Amazon
138116.62.0.0/15 Amazon
138216.162.0.0/15 Amazon
138316.168.0.0/15 Amazon
138416.170.0.0/15 Amazon
138518.60.0.0/15 Amazon
138618.64.0.0/14 Amazon
138718.100.0.0/15 Amazon
138818.102.0.0/16 Amazon
138918.116.0.0/14 Amazon
139018.130.0.0/16 Amazon
139118.132.0.0/14 Amazon
139218.136.0.0/16 Amazon
139318.138.0.0/15 Amazon
139418.140.0.0/15 Amazon
139518.142.0.0/15 Amazon
139618.144.0.0/15 Amazon
139718.148.0.0/14 Amazon
139818.153.0.0/16 Amazon
139918.156.0.0/14 Amazon
140018.162.0.0/16 Amazon
140118.163.0.0/16 Amazon
140218.166.0.0/15 Amazon
140318.168.0.0/14 Amazon
140418.175.0.0/16 Amazon
140518.176.0.0/15 Amazon
140618.178.0.0/16 Amazon
140718.179.0.0/16 Amazon
140818.180.0.0/15 Amazon
140918.182.0.0/16 Amazon
141018.183.0.0/16 Amazon
141118.184.0.0/15 Amazon
141218.186.0.0/15 Amazon
141318.188.0.0/16 Amazon
141418.189.0.0/16 Amazon
141518.190.0.0/16 Amazon
141618.191.0.0/16 Amazon
141718.192.0.0/15 Amazon
141818.194.0.0/15 Amazon
141918.196.0.0/15 Amazon
142018.198.0.0/15 Amazon
142118.200.0.0/16 Amazon
142218.201.0.0/16 Amazon
142318.202.0.0/15 Amazon
142418.204.0.0/14 Amazon
142518.208.0.0/13 Amazon
142618.216.0.0/14 Amazon
142718.220.0.0/14 Amazon
142818.224.0.0/14 Amazon
142918.228.0.0/16 Amazon
143018.229.0.0/16 Amazon
143118.230.0.0/16 Amazon
143218.231.0.0/16 Amazon
143318.232.0.0/14 Amazon
143418.236.0.0/15 Amazon
143518.246.0.0/16 Amazon
143618.252.0.0/16 Amazon
143718.253.0.0/16 Amazon
143818.254.0.0/16 Amazon
143923.20.0.0/14 Amazon
144027.0.0.0/22 Amazon
144134.192.0.0/12 Amazon
144234.208.0.0/12 Amazon
144334.224.0.0/12 Amazon
144434.240.0.0/13 Amazon
144534.248.0.0/13 Amazon
144635.71.64.0/22 Amazon
144735.71.96.0/24 Amazon
144835.71.97.0/24 Amazon
144935.71.128.0/17 Amazon
145035.72.0.0/13 Amazon
145135.80.0.0/12 Amazon
145235.96.0.0/12 Amazon
145335.152.0.0/16 Amazon
145435.153.0.0/16 Amazon
145535.154.0.0/16 Amazon
145635.155.0.0/16 Amazon
145735.156.0.0/14 Amazon
145835.160.0.0/13 Amazon
145935.168.0.0/13 Amazon
146035.176.0.0/15 Amazon
146135.178.0.0/15 Amazon
146235.180.0.0/16 Amazon
146335.181.0.0/16 Amazon
146435.182.0.0/15 Amazon
146536.103.232.0/25 Amazon
146636.103.232.128/26 Amazon
146743.192.0.0/15 Amazon
146843.194.0.0/16 Amazon
146943.195.0.0/16 Amazon
147043.196.0.0/15 Amazon
147143.198.0.0/15 Amazon
147243.200.0.0/14 Amazon
147343.204.0.0/15 Amazon
147443.206.0.0/15 Amazon
147543.224.76.0/30 Amazon
147643.224.76.4/30 Amazon
147743.224.76.8/30 Amazon
147843.224.76.12/30 Amazon
147943.224.76.16/30 Amazon
148043.224.76.20/30 Amazon
148143.224.76.24/30 Amazon
148243.224.76.28/30 Amazon
148343.224.76.32/30 Amazon
148443.224.76.36/30 Amazon
148543.224.76.40/30 Amazon
148643.224.76.44/30 Amazon
148743.224.76.48/30 Amazon
148843.224.76.52/30 Amazon
148943.224.76.56/30 Amazon
149043.224.76.60/30 Amazon
149143.224.76.64/30 Amazon
149243.224.76.68/30 Amazon
149343.224.76.72/30 Amazon
149443.224.76.76/30 Amazon
149543.224.76.80/30 Amazon
149643.224.76.84/30 Amazon
149743.224.76.88/30 Amazon
149843.224.76.92/30 Amazon
149943.224.76.96/30 Amazon
150043.224.76.100/30 Amazon
150143.224.76.104/30 Amazon
150243.224.76.108/30 Amazon
150343.224.76.112/30 Amazon
150443.224.76.116/30 Amazon
150543.224.76.120/30 Amazon
150643.224.76.124/30 Amazon
150743.224.76.128/30 Amazon
150843.224.76.132/30 Amazon
150943.224.76.136/30 Amazon
151043.224.76.140/30 Amazon
151143.224.76.144/30 Amazon
151243.224.76.148/30 Amazon
151343.224.76.152/30 Amazon
151443.224.76.156/30 Amazon
151543.224.76.160/30 Amazon
151643.224.76.164/30 Amazon
151743.224.76.168/30 Amazon
151843.224.76.172/30 Amazon
151943.224.76.176/30 Amazon
152043.224.76.180/30 Amazon
152143.224.76.184/30 Amazon
152243.224.76.188/30 Amazon
152343.224.76.192/30 Amazon
152443.224.76.196/30 Amazon
152543.224.76.200/30 Amazon
152643.224.76.204/30 Amazon
152743.224.76.208/30 Amazon
152843.224.76.212/30 Amazon
152943.224.76.216/30 Amazon
153043.224.76.220/30 Amazon
153143.224.76.224/30 Amazon
153243.224.76.228/30 Amazon
153343.224.76.232/30 Amazon
153443.224.76.236/30 Amazon
153543.224.76.240/30 Amazon
153643.224.76.244/30 Amazon
153743.224.76.248/30 Amazon
153843.224.77.0/29 Amazon
153943.224.77.8/29 Amazon
154043.224.77.24/30 Amazon
154143.224.77.28/30 Amazon
154243.224.77.32/30 Amazon
154343.224.77.36/30 Amazon
154443.224.77.40/30 Amazon
154543.224.77.44/30 Amazon
154643.224.77.76/30 Amazon
154743.224.77.80/30 Amazon
154843.224.77.84/30 Amazon
154943.224.77.88/30 Amazon
155043.224.77.92/30 Amazon
155143.224.77.96/30 Amazon
155243.224.77.100/30 Amazon
155343.224.77.104/30 Amazon
155443.224.77.108/30 Amazon
155543.224.77.112/30 Amazon
155643.224.77.116/30 Amazon
155743.224.77.120/30 Amazon
155843.224.77.124/30 Amazon
155943.224.77.128/30 Amazon
156043.224.77.132/30 Amazon
156143.224.77.136/30 Amazon
156243.224.77.140/30 Amazon
156343.224.77.144/30 Amazon
156443.224.77.148/30 Amazon
156543.224.77.152/30 Amazon
156643.224.77.156/30 Amazon
156743.224.77.168/30 Amazon
156843.224.77.172/30 Amazon
156943.224.77.176/30 Amazon
157043.224.77.180/30 Amazon
157143.224.77.184/30 Amazon
157243.224.77.188/30 Amazon
157343.224.77.192/30 Amazon
157443.224.77.208/30 Amazon
157543.224.77.212/30 Amazon
157643.224.79.26/31 Amazon
157743.224.79.28/31 Amazon
157843.224.79.30/31 Amazon
157943.224.79.32/31 Amazon
158043.224.79.34/31 Amazon
158143.224.79.36/31 Amazon
158243.224.79.38/31 Amazon
158343.224.79.40/31 Amazon
158443.224.79.42/31 Amazon
158543.224.79.44/31 Amazon
158643.224.79.46/31 Amazon
158743.224.79.48/31 Amazon
158843.224.79.50/31 Amazon
158943.224.79.52/31 Amazon
159043.224.79.54/31 Amazon
159143.224.79.56/31 Amazon
159243.224.79.58/31 Amazon
159343.224.79.60/31 Amazon
159443.224.79.62/31 Amazon
159543.224.79.64/31 Amazon
159643.224.79.66/31 Amazon
159743.224.79.68/31 Amazon
159843.224.79.70/31 Amazon
159943.224.79.72/31 Amazon
160043.224.79.74/31 Amazon
160143.224.79.76/31 Amazon
160243.224.79.78/31 Amazon
160343.224.79.80/31 Amazon
160443.224.79.82/31 Amazon
160543.224.79.84/31 Amazon
160643.224.79.90/31 Amazon
160743.224.79.92/31 Amazon
160843.224.79.94/31 Amazon
160943.224.79.96/31 Amazon
161043.224.79.98/31 Amazon
161143.224.79.100/31 Amazon
161243.224.79.102/31 Amazon
161343.224.79.104/31 Amazon
161443.224.79.106/31 Amazon
161543.224.79.108/31 Amazon
161643.224.79.110/31 Amazon
161743.224.79.112/31 Amazon
161843.224.79.114/31 Amazon
161943.224.79.116/31 Amazon
162043.224.79.118/31 Amazon
162143.224.79.120/31 Amazon
162243.224.79.122/31 Amazon
162343.224.79.124/31 Amazon
162443.224.79.126/31 Amazon
162543.224.79.128/31 Amazon
162643.224.79.130/31 Amazon
162743.224.79.136/31 Amazon
162843.224.79.138/31 Amazon
162943.224.79.140/31 Amazon
163043.224.79.142/31 Amazon
163143.224.79.144/31 Amazon
163243.224.79.154/31 Amazon
163343.224.79.156/31 Amazon
163443.224.79.158/31 Amazon
163543.224.79.160/31 Amazon
163643.224.79.162/31 Amazon
163743.224.79.164/31 Amazon
163843.224.79.166/31 Amazon
163943.224.79.168/31 Amazon
164043.224.79.174/31 Amazon
164143.224.79.176/31 Amazon
164243.224.79.178/31 Amazon
164343.224.79.180/31 Amazon
164443.224.79.182/31 Amazon
164543.224.79.184/31 Amazon
164643.224.79.186/31 Amazon
164743.224.79.188/31 Amazon
164843.224.79.190/31 Amazon
164943.224.79.192/31 Amazon
165043.224.79.194/31 Amazon
165143.224.79.196/31 Amazon
165243.224.79.198/31 Amazon
165343.224.79.200/31 Amazon
165443.224.79.202/31 Amazon
165543.224.79.204/31 Amazon
165643.224.79.206/31 Amazon
165743.224.79.208/31 Amazon
165843.224.79.210/31 Amazon
165943.224.79.212/31 Amazon
166043.224.79.214/31 Amazon
166143.224.79.216/31 Amazon
166243.224.79.218/31 Amazon
166343.224.79.220/31 Amazon
166443.224.79.222/31 Amazon
166543.224.79.224/31 Amazon
166643.224.79.226/31 Amazon
166743.224.79.228/31 Amazon
166843.224.79.230/31 Amazon
166943.224.79.232/31 Amazon
167043.224.79.234/31 Amazon
167143.224.79.236/31 Amazon
167243.224.79.238/31 Amazon
167343.224.79.240/31 Amazon
167443.224.79.242/31 Amazon
167543.224.79.244/31 Amazon
167643.224.79.246/31 Amazon
167743.224.79.248/31 Amazon
167843.224.79.250/31 Amazon
167943.224.79.252/31 Amazon
168043.224.79.254/31 Amazon
168143.249.45.0/24 Amazon
168243.249.46.0/24 Amazon
168343.249.47.0/24 Amazon
168443.250.192.0/24 Amazon
168543.250.193.0/24 Amazon
168644.192.0.0/11 Amazon
168744.224.0.0/11 Amazon
168846.51.128.0/18 Amazon
168946.51.192.0/20 Amazon
169046.51.208.0/22 Amazon
169146.51.216.0/21 Amazon
169246.51.224.0/19 Amazon
169346.137.0.0/17 Amazon
169446.137.128.0/18 Amazon
169546.137.192.0/19 Amazon
169646.137.224.0/19 Amazon
169750.16.0.0/15 Amazon
169850.18.0.0/16 Amazon
169950.19.0.0/16 Amazon
170050.112.0.0/16 Amazon
170151.20.0.0/14 Amazon
170252.0.0.0/15 Amazon
170352.2.0.0/15 Amazon
170452.4.0.0/14 Amazon
170552.8.0.0/16 Amazon
170652.9.0.0/16 Amazon
170752.10.0.0/15 Amazon
170852.12.0.0/15 Amazon
170952.14.0.0/16 Amazon
171052.15.0.0/16 Amazon
171152.16.0.0/15 Amazon
171252.18.0.0/15 Amazon
171352.20.0.0/14 Amazon
171452.24.0.0/14 Amazon
171552.28.0.0/16 Amazon
171652.29.0.0/16 Amazon
171752.30.0.0/15 Amazon
171852.32.0.0/14 Amazon
171952.36.0.0/14 Amazon
172052.40.0.0/14 Amazon
172152.44.0.0/15 Amazon
172252.46.0.0/18 Amazon
172352.46.64.0/20 Amazon
172452.46.80.0/21 Amazon
172552.46.88.0/22 Amazon
172652.46.92.0/22 Amazon
172752.46.96.0/19 Amazon
172852.46.128.0/19 Amazon
172952.46.164.0/23 Amazon
173052.46.166.0/23 Amazon
173152.46.168.0/23 Amazon
173252.46.170.0/23 Amazon
173352.46.172.0/22 Amazon
173452.46.176.0/22 Amazon
173552.46.180.0/22 Amazon
173652.46.184.0/22 Amazon
173752.46.188.24/30 Amazon
173852.46.188.28/30 Amazon
173952.46.188.36/30 Amazon
174052.46.188.40/30 Amazon
174152.46.188.44/30 Amazon
174252.46.188.48/30 Amazon
174352.46.188.52/30 Amazon
174452.46.188.56/30 Amazon
174552.46.188.60/30 Amazon
174652.46.188.64/30 Amazon
174752.46.188.68/30 Amazon
174852.46.188.72/30 Amazon
174952.46.188.76/30 Amazon
175052.46.188.80/30 Amazon
175152.46.188.84/30 Amazon
175252.46.188.88/30 Amazon
175352.46.188.92/30 Amazon
175452.46.188.96/30 Amazon
175552.46.188.108/30 Amazon
175652.46.188.120/30 Amazon
175752.46.188.132/30 Amazon
175852.46.188.136/30 Amazon
175952.46.188.140/30 Amazon
176052.46.188.144/30 Amazon
176152.46.188.148/30 Amazon
176252.46.188.152/30 Amazon
176352.46.188.156/30 Amazon
176452.46.188.160/30 Amazon
176552.46.188.164/30 Amazon
176652.46.188.168/30 Amazon
176752.46.188.172/30 Amazon
176852.46.188.176/30 Amazon
176952.46.188.180/30 Amazon
177052.46.188.184/30 Amazon
177152.46.188.188/30 Amazon
177252.46.188.192/30 Amazon
177352.46.188.204/30 Amazon
177452.46.188.208/30 Amazon
177552.46.188.216/30 Amazon
177652.46.188.224/30 Amazon
177752.46.188.228/30 Amazon
177852.46.188.232/30 Amazon
177952.46.188.236/30 Amazon
178052.46.188.240/30 Amazon
178152.46.188.244/30 Amazon
178252.46.188.248/30 Amazon
178352.46.188.252/30 Amazon
178452.46.189.0/30 Amazon
178552.46.189.4/30 Amazon
178652.46.189.8/30 Amazon
178752.46.189.12/30 Amazon
178852.46.189.16/30 Amazon
178952.46.189.32/30 Amazon
179052.46.189.36/30 Amazon
179152.46.189.40/30 Amazon
179252.46.189.44/30 Amazon
179352.46.189.48/30 Amazon
179452.46.189.52/30 Amazon
179552.46.189.56/30 Amazon
179652.46.189.60/30 Amazon
179752.46.189.64/30 Amazon
179852.46.189.68/30 Amazon
179952.46.189.72/30 Amazon
180052.46.189.76/30 Amazon
180152.46.189.80/30 Amazon
180252.46.189.84/30 Amazon
180352.46.189.88/30 Amazon
180452.46.189.92/30 Amazon
180552.46.189.96/30 Amazon
180652.46.189.100/30 Amazon
180752.46.189.104/30 Amazon
180852.46.189.108/30 Amazon
180952.46.189.112/30 Amazon
181052.46.189.124/30 Amazon
181152.46.189.128/30 Amazon
181252.46.189.132/30 Amazon
181352.46.189.136/30 Amazon
181452.46.189.140/30 Amazon
181552.46.189.156/30 Amazon
181652.46.189.160/30 Amazon
181752.46.189.168/30 Amazon
181852.46.189.172/30 Amazon
181952.46.189.176/30 Amazon
182052.46.189.180/30 Amazon
182152.46.189.192/30 Amazon
182252.46.189.196/30 Amazon
182352.46.189.200/30 Amazon
182452.46.189.204/30 Amazon
182552.46.189.216/30 Amazon
182652.46.189.220/30 Amazon
182752.46.189.224/30 Amazon
182852.46.189.228/30 Amazon
182952.46.189.240/30 Amazon
183052.46.189.244/30 Amazon
183152.46.189.248/30 Amazon
183252.46.189.252/30 Amazon
183352.46.190.0/30 Amazon
183452.46.190.4/30 Amazon
183552.46.190.8/30 Amazon
183652.46.190.12/30 Amazon
183752.46.190.32/30 Amazon
183852.46.190.36/30 Amazon
183952.46.190.40/30 Amazon
184052.46.190.44/30 Amazon
184152.46.190.52/30 Amazon
184252.46.190.56/30 Amazon
184352.46.190.60/30 Amazon
184452.46.190.64/30 Amazon
184552.46.190.68/30 Amazon
184652.46.190.72/30 Amazon
184752.46.190.76/30 Amazon
184852.46.190.92/30 Amazon
184952.46.190.96/30 Amazon
185052.46.190.100/30 Amazon
185152.46.190.104/30 Amazon
185252.46.190.108/30 Amazon
185352.46.190.120/30 Amazon
185452.46.190.124/30 Amazon
185552.46.190.144/30 Amazon
185652.46.190.148/30 Amazon
185752.46.190.152/30 Amazon
185852.46.190.164/30 Amazon
185952.46.190.168/30 Amazon
186052.46.190.180/31 Amazon
186152.46.190.182/31 Amazon
186252.46.190.188/31 Amazon
186352.46.190.190/31 Amazon
186452.46.190.192/31 Amazon
186552.46.190.202/31 Amazon
186652.46.190.204/31 Amazon
186752.46.190.206/31 Amazon
186852.46.190.208/31 Amazon
186952.46.190.210/31 Amazon
187052.46.190.212/31 Amazon
187152.46.190.214/31 Amazon
187252.46.190.216/31 Amazon
187352.46.190.222/31 Amazon
187452.46.190.224/31 Amazon
187552.46.190.226/31 Amazon
187652.46.190.228/31 Amazon
187752.46.190.230/31 Amazon
187852.46.190.232/31 Amazon
187952.46.190.234/31 Amazon
188052.46.190.236/31 Amazon
188152.46.190.238/31 Amazon
188252.46.190.240/31 Amazon
188352.46.190.242/31 Amazon
188452.46.190.244/31 Amazon
188552.46.190.254/31 Amazon
188652.46.191.0/31 Amazon
188752.46.191.2/31 Amazon
188852.46.191.4/31 Amazon
188952.46.191.6/31 Amazon
189052.46.191.8/31 Amazon
189152.46.191.10/31 Amazon
189252.46.191.12/31 Amazon
189352.46.191.18/31 Amazon
189452.46.191.20/31 Amazon
189552.46.191.22/31 Amazon
189652.46.191.24/31 Amazon
189752.46.191.26/31 Amazon
189852.46.191.28/31 Amazon
189952.46.191.34/31 Amazon
190052.46.191.36/31 Amazon
190152.46.191.42/31 Amazon
190252.46.191.44/31 Amazon
190352.46.191.46/31 Amazon
190452.46.191.48/31 Amazon
190552.46.191.52/31 Amazon
190652.46.191.54/31 Amazon
190752.46.191.60/31 Amazon
190852.46.191.62/31 Amazon
190952.46.191.64/31 Amazon
191052.46.191.66/31 Amazon
191152.46.191.68/31 Amazon
191252.46.191.70/31 Amazon
191352.46.191.72/31 Amazon
191452.46.191.76/31 Amazon
191552.46.191.78/31 Amazon
191652.46.191.80/31 Amazon
191752.46.191.82/31 Amazon
191852.46.191.84/31 Amazon
191952.46.191.86/31 Amazon
192052.46.191.88/31 Amazon
192152.46.191.90/31 Amazon
192252.46.191.92/31 Amazon
192352.46.191.94/31 Amazon
192452.46.191.96/31 Amazon
192552.46.191.98/31 Amazon
192652.46.191.100/31 Amazon
192752.46.191.102/31 Amazon
192852.46.191.104/31 Amazon
192952.46.191.106/31 Amazon
193052.46.191.108/31 Amazon
193152.46.191.110/31 Amazon
193252.46.191.120/31 Amazon
193352.46.191.122/31 Amazon
193452.46.191.124/31 Amazon
193552.46.191.126/31 Amazon
193652.46.191.128/31 Amazon
193752.46.191.130/31 Amazon
193852.46.191.132/31 Amazon
193952.46.191.134/31 Amazon
194052.46.191.136/31 Amazon
194152.46.191.140/31 Amazon
194252.46.191.142/31 Amazon
194352.46.191.144/31 Amazon
194452.46.191.148/31 Amazon
194552.46.191.150/31 Amazon
194652.46.191.152/31 Amazon
194752.46.191.156/31 Amazon
194852.46.191.158/31 Amazon
194952.46.191.164/31 Amazon
195052.46.191.166/31 Amazon
195152.46.191.168/31 Amazon
195252.46.191.170/31 Amazon
195352.46.191.172/31 Amazon
195452.46.191.174/31 Amazon
195552.46.191.176/31 Amazon
195652.46.191.178/31 Amazon
195752.46.191.180/31 Amazon
195852.46.191.182/31 Amazon
195952.46.191.184/31 Amazon
196052.46.191.186/31 Amazon
196152.46.191.188/31 Amazon
196252.46.191.190/31 Amazon
196352.46.191.192/31 Amazon
196452.46.191.194/31 Amazon
196552.46.191.200/31 Amazon
196652.46.191.202/31 Amazon
196752.46.191.210/31 Amazon
196852.46.191.212/31 Amazon
196952.46.191.214/31 Amazon
197052.46.191.216/31 Amazon
197152.46.191.218/31 Amazon
197252.46.191.220/31 Amazon
197352.46.191.222/31 Amazon
197452.46.191.224/31 Amazon
197552.46.191.226/31 Amazon
197652.46.191.228/31 Amazon
197752.46.191.230/31 Amazon
197852.46.191.232/31 Amazon
197952.46.191.234/31 Amazon
198052.46.191.236/31 Amazon
198152.46.191.238/31 Amazon
198252.46.191.240/31 Amazon
198352.46.192.0/20 Amazon
198452.46.208.0/21 Amazon
198552.46.216.0/22 Amazon
198652.46.220.0/22 Amazon
198752.46.224.0/20 Amazon
198852.46.240.0/22 Amazon
198952.46.249.0/24 Amazon
199052.46.250.0/23 Amazon
199152.46.252.0/22 Amazon
199252.47.0.0/16 Amazon
199352.48.0.0/14 Amazon
199452.52.0.0/15 Amazon
199552.54.0.0/15 Amazon
199652.56.0.0/16 Amazon
199752.57.0.0/16 Amazon
199852.58.0.0/15 Amazon
199952.60.0.0/16 Amazon
200052.61.0.0/16 Amazon
200152.62.0.0/15 Amazon
200252.64.0.0/17 Amazon
200352.64.128.0/17 Amazon
200452.65.0.0/16 Amazon
200552.66.0.0/16 Amazon
200652.67.0.0/16 Amazon
200752.68.0.0/15 Amazon
200852.70.0.0/15 Amazon
200952.72.0.0/15 Amazon
201052.74.0.0/16 Amazon
201152.75.0.0/16 Amazon
201252.76.0.0/17 Amazon
201352.76.128.0/17 Amazon
201452.77.0.0/16 Amazon
201552.78.0.0/16 Amazon
201652.79.0.0/16 Amazon
201752.80.0.0/16 Amazon
201852.81.0.0/16 Amazon
201952.82.0.0/17 Amazon
202052.82.128.0/19 Amazon
202152.82.160.0/22 Amazon
202252.82.164.0/22 Amazon
202352.82.168.0/24 Amazon
202452.82.169.0/28 Amazon
202552.82.169.16/28 Amazon
202652.82.176.0/22 Amazon
202752.82.180.0/22 Amazon
202852.82.184.0/23 Amazon
202952.82.187.0/24 Amazon
203052.82.188.0/22 Amazon
203152.82.192.0/18 Amazon
203252.83.0.0/16 Amazon
203352.84.0.0/15 Amazon
203452.86.0.0/15 Amazon
203552.88.0.0/15 Amazon
203652.90.0.0/15 Amazon
203752.92.0.0/17 Amazon
203852.92.128.0/17 Amazon
203952.93.0.0/24 Amazon
204052.93.1.0/24 Amazon
204152.93.2.0/24 Amazon
204252.93.3.0/24 Amazon
204352.93.4.0/24 Amazon
204452.93.5.0/24 Amazon
204552.93.8.0/22 Amazon
204652.93.12.12/32 Amazon
204752.93.12.13/32 Amazon
204852.93.14.18/32 Amazon
204952.93.14.19/32 Amazon
205052.93.16.0/24 Amazon
205152.93.17.0/24 Amazon
205252.93.18.178/32 Amazon
205352.93.18.179/32 Amazon
205452.93.19.236/32 Amazon
205552.93.19.237/32 Amazon
205652.93.20.0/24 Amazon
205752.93.21.14/32 Amazon
205852.93.21.15/32 Amazon
205952.93.32.176/32 Amazon
206052.93.32.179/32 Amazon
206152.93.32.180/32 Amazon
206252.93.34.40/32 Amazon
206352.93.34.42/32 Amazon
206452.93.34.56/32 Amazon
206552.93.34.57/32 Amazon
206652.93.34.120/31 Amazon
206752.93.34.122/31 Amazon
206852.93.34.124/31 Amazon
206952.93.34.126/31 Amazon
207052.93.35.212/32 Amazon
207152.93.35.213/32 Amazon
207252.93.37.222/32 Amazon
207352.93.37.223/32 Amazon
207452.93.38.0/24 Amazon
207552.93.43.0/24 Amazon
207652.93.48.0/24 Amazon
207752.93.50.128/32 Amazon
207852.93.50.129/32 Amazon
207952.93.50.130/32 Amazon
208052.93.50.131/32 Amazon
208152.93.50.132/31 Amazon
208252.93.50.134/31 Amazon
208352.93.50.136/31 Amazon
208452.93.50.138/31 Amazon
208552.93.50.140/31 Amazon
208652.93.50.142/31 Amazon
208752.93.50.144/31 Amazon
208852.93.50.146/31 Amazon
208952.93.50.148/31 Amazon
209052.93.50.150/31 Amazon
209152.93.50.152/31 Amazon
209252.93.50.154/31 Amazon
209352.93.50.156/31 Amazon
209452.93.50.158/31 Amazon
209552.93.50.160/31 Amazon
209652.93.50.162/31 Amazon
209752.93.50.164/31 Amazon
209852.93.50.166/31 Amazon
209952.93.50.168/31 Amazon
210052.93.50.170/31 Amazon
210152.93.50.172/31 Amazon
210252.93.50.174/31 Amazon
210352.93.50.176/31 Amazon
210452.93.50.178/31 Amazon
210552.93.50.180/31 Amazon
210652.93.50.182/31 Amazon
210752.93.50.184/31 Amazon
210852.93.50.186/31 Amazon
210952.93.50.188/31 Amazon
211052.93.50.190/31 Amazon
211152.93.50.192/31 Amazon
211252.93.50.194/31 Amazon
211352.93.51.28/32 Amazon
211452.93.51.29/32 Amazon
211552.93.55.144/31 Amazon
211652.93.55.146/31 Amazon
211752.93.55.148/31 Amazon
211852.93.55.152/31 Amazon
211952.93.55.154/31 Amazon
212052.93.55.156/31 Amazon
212152.93.55.158/31 Amazon
212252.93.55.160/31 Amazon
212352.93.55.162/31 Amazon
212452.93.55.164/31 Amazon
212552.93.55.166/31 Amazon
212652.93.56.0/24 Amazon
212752.93.57.0/24 Amazon
212852.93.58.32/28 Amazon
212952.93.59.0/24 Amazon
213052.93.60.0/24 Amazon
213152.93.62.0/24 Amazon
213252.93.63.0/24 Amazon
213352.93.64.0/24 Amazon
213452.93.66.0/24 Amazon
213552.93.67.0/24 Amazon
213652.93.69.0/24 Amazon
213752.93.71.37/32 Amazon
213852.93.73.0/26 Amazon
213952.93.75.0/24 Amazon
214052.93.76.0/24 Amazon
214152.93.78.0/24 Amazon
214252.93.80.0/24 Amazon
214352.93.81.0/24 Amazon
214452.93.87.96/27 Amazon
214552.93.91.96/32 Amazon
214652.93.91.97/32 Amazon
214752.93.91.98/32 Amazon
214852.93.91.99/32 Amazon
214952.93.91.100/32 Amazon
215052.93.91.101/32 Amazon
215152.93.91.102/32 Amazon
215252.93.91.103/32 Amazon
215352.93.91.104/32 Amazon
215452.93.91.105/32 Amazon
215552.93.91.106/32 Amazon
215652.93.91.107/32 Amazon
215752.93.91.108/32 Amazon
215852.93.91.109/32 Amazon
215952.93.91.110/32 Amazon
216052.93.91.111/32 Amazon
216152.93.91.112/32 Amazon
216252.93.91.113/32 Amazon
216352.93.91.114/32 Amazon
216452.93.91.115/32 Amazon
216552.93.92.64/31 Amazon
216652.93.92.66/31 Amazon
216752.93.92.68/31 Amazon
216852.93.92.70/31 Amazon
216952.93.92.72/31 Amazon
217052.93.92.74/31 Amazon
217152.93.96.0/24 Amazon
217252.93.97.0/24 Amazon
217352.93.98.0/24 Amazon
217452.93.99.0/24 Amazon
217552.93.112.0/24 Amazon
217652.93.120.176/32 Amazon
217752.93.120.177/32 Amazon
217852.93.120.178/32 Amazon
217952.93.120.179/32 Amazon
218052.93.121.187/32 Amazon
218152.93.121.188/32 Amazon
218252.93.121.189/32 Amazon
218352.93.121.190/32 Amazon
218452.93.121.195/32 Amazon
218552.93.121.196/32 Amazon
218652.93.121.197/32 Amazon
218752.93.121.198/32 Amazon
218852.93.122.131/32 Amazon
218952.93.122.202/32 Amazon
219052.93.122.203/32 Amazon
219152.93.122.218/32 Amazon
219252.93.122.255/32 Amazon
219352.93.123.6/32 Amazon
219452.93.123.11/32 Amazon
219552.93.123.98/32 Amazon
219652.93.123.99/32 Amazon
219752.93.123.136/32 Amazon
219852.93.123.255/32 Amazon
219952.93.124.14/32 Amazon
220052.93.124.15/32 Amazon
220152.93.124.96/32 Amazon
220252.93.124.97/32 Amazon
220352.93.124.210/32 Amazon
220452.93.124.211/32 Amazon
220552.93.124.212/32 Amazon
220652.93.124.213/32 Amazon
220752.93.125.42/32 Amazon
220852.93.125.43/32 Amazon
220952.93.126.76/32 Amazon
221052.93.126.122/32 Amazon
221152.93.126.123/32 Amazon
221252.93.126.132/32 Amazon
221352.93.126.133/32 Amazon
221452.93.126.134/32 Amazon
221552.93.126.135/32 Amazon
221652.93.126.136/32 Amazon
221752.93.126.137/32 Amazon
221852.93.126.138/32 Amazon
221952.93.126.139/32 Amazon
222052.93.126.144/32 Amazon
222152.93.126.145/32 Amazon
222252.93.126.146/32 Amazon
222352.93.126.147/32 Amazon
222452.93.126.198/32 Amazon
222552.93.126.199/32 Amazon
222652.93.126.204/32 Amazon
222752.93.126.205/32 Amazon
222852.93.126.206/32 Amazon
222952.93.126.207/32 Amazon
223052.93.126.212/32 Amazon
223152.93.126.213/32 Amazon
223252.93.126.214/32 Amazon
223352.93.126.215/32 Amazon
223452.93.126.234/32 Amazon
223552.93.126.235/32 Amazon
223652.93.126.244/32 Amazon
223752.93.126.245/32 Amazon
223852.93.126.250/32 Amazon
223952.93.126.251/32 Amazon
224052.93.127.17/32 Amazon
224152.93.127.18/32 Amazon
224252.93.127.19/32 Amazon
224352.93.127.24/32 Amazon
224452.93.127.25/32 Amazon
224552.93.127.26/32 Amazon
224652.93.127.27/32 Amazon
224752.93.127.68/32 Amazon
224852.93.127.69/32 Amazon
224952.93.127.70/32 Amazon
225052.93.127.71/32 Amazon
225152.93.127.92/32 Amazon
225252.93.127.93/32 Amazon
225352.93.127.94/32 Amazon
225452.93.127.95/32 Amazon
225552.93.127.96/32 Amazon
225652.93.127.97/32 Amazon
225752.93.127.98/32 Amazon
225852.93.127.99/32 Amazon
225952.93.127.100/32 Amazon
226052.93.127.101/32 Amazon
226152.93.127.102/32 Amazon
226252.93.127.103/32 Amazon
226352.93.127.104/32 Amazon
226452.93.127.105/32 Amazon
226552.93.127.106/32 Amazon
226652.93.127.107/32 Amazon
226752.93.127.108/32 Amazon
226852.93.127.109/32 Amazon
226952.93.127.110/32 Amazon
227052.93.127.111/32 Amazon
227152.93.127.112/32 Amazon
227252.93.127.113/32 Amazon
227352.93.127.114/32 Amazon
227452.93.127.115/32 Amazon
227552.93.127.116/32 Amazon
227652.93.127.117/32 Amazon
227752.93.127.118/32 Amazon
227852.93.127.119/32 Amazon
227952.93.127.120/32 Amazon
228052.93.127.121/32 Amazon
228152.93.127.122/32 Amazon
228252.93.127.123/32 Amazon
228352.93.127.124/32 Amazon
228452.93.127.125/32 Amazon
228552.93.127.126/32 Amazon
228652.93.127.127/32 Amazon
228752.93.127.128/32 Amazon
228852.93.127.129/32 Amazon
228952.93.127.130/32 Amazon
229052.93.127.131/32 Amazon
229152.93.127.132/32 Amazon
229252.93.127.133/32 Amazon
229352.93.127.138/32 Amazon
229452.93.127.139/32 Amazon
229552.93.127.146/32 Amazon
229652.93.127.147/32 Amazon
229752.93.127.148/32 Amazon
229852.93.127.149/32 Amazon
229952.93.127.152/32 Amazon
230052.93.127.153/32 Amazon
230152.93.127.154/32 Amazon
230252.93.127.155/32 Amazon
230352.93.127.156/32 Amazon
230452.93.127.157/32 Amazon
230552.93.127.158/32 Amazon
230652.93.127.159/32 Amazon
230752.93.127.160/32 Amazon
230852.93.127.161/32 Amazon
230952.93.127.162/32 Amazon
231052.93.127.163/32 Amazon
231152.93.127.164/32 Amazon
231252.93.127.165/32 Amazon
231352.93.127.166/32 Amazon
231452.93.127.167/32 Amazon
231552.93.127.168/32 Amazon
231652.93.127.169/32 Amazon
231752.93.127.172/32 Amazon
231852.93.127.173/32 Amazon
231952.93.127.174/32 Amazon
232052.93.127.175/32 Amazon
232152.93.127.176/32 Amazon
232252.93.127.177/32 Amazon
232352.93.127.178/32 Amazon
232452.93.127.179/32 Amazon
232552.93.127.180/32 Amazon
232652.93.127.181/32 Amazon
232752.93.127.182/32 Amazon
232852.93.127.183/32 Amazon
232952.93.127.184/32 Amazon
233052.93.127.185/32 Amazon
233152.93.127.194/32 Amazon
233252.93.127.195/32 Amazon
233352.93.127.196/32 Amazon
233452.93.127.197/32 Amazon
233552.93.127.198/32 Amazon
233652.93.127.199/32 Amazon
233752.93.127.200/32 Amazon
233852.93.127.201/32 Amazon
233952.93.127.202/32 Amazon
234052.93.127.203/32 Amazon
234152.93.127.204/32 Amazon
234252.93.127.205/32 Amazon
234352.93.127.206/32 Amazon
234452.93.127.207/32 Amazon
234552.93.127.216/32 Amazon
234652.93.127.217/32 Amazon
234752.93.127.218/32 Amazon
234852.93.127.219/32 Amazon
234952.93.127.220/32 Amazon
235052.93.127.221/32 Amazon
235152.93.127.232/32 Amazon
235252.93.127.237/32 Amazon
235352.93.127.238/32 Amazon
235452.93.127.239/32 Amazon
235552.93.127.244/32 Amazon
235652.93.127.245/32 Amazon
235752.93.127.246/32 Amazon
235852.93.127.247/32 Amazon
235952.93.127.248/32 Amazon
236052.93.127.249/32 Amazon
236152.93.127.250/32 Amazon
236252.93.127.251/32 Amazon
236352.93.127.252/32 Amazon
236452.93.127.253/32 Amazon
236552.93.127.254/32 Amazon
236652.93.127.255/32 Amazon
236752.93.129.95/32 Amazon
236852.93.131.217/32 Amazon
236952.93.133.127/32 Amazon
237052.93.133.129/32 Amazon
237152.93.133.131/32 Amazon
237252.93.133.133/32 Amazon
237352.93.133.153/32 Amazon
237452.93.133.155/32 Amazon
237552.93.133.175/32 Amazon
237652.93.133.177/32 Amazon
237752.93.133.179/32 Amazon
237852.93.133.181/32 Amazon
237952.93.134.181/32 Amazon
238052.93.135.195/32 Amazon
238152.93.137.0/24 Amazon
238252.93.138.252/32 Amazon
238352.93.138.253/32 Amazon
238452.93.139.252/32 Amazon
238552.93.139.253/32 Amazon
238652.93.141.212/32 Amazon
238752.93.141.213/32 Amazon
238852.93.141.214/31 Amazon
238952.93.141.216/31 Amazon
239052.93.141.218/31 Amazon
239152.93.141.220/31 Amazon
239252.93.141.222/31 Amazon
239352.93.141.224/31 Amazon
239452.93.141.226/31 Amazon
239552.93.141.228/31 Amazon
239652.93.141.230/31 Amazon
239752.93.141.232/31 Amazon
239852.93.141.234/31 Amazon
239952.93.141.236/31 Amazon
240052.93.141.238/31 Amazon
240152.93.141.240/31 Amazon
240252.93.141.242/31 Amazon
240352.93.141.244/31 Amazon
240452.93.146.5/32 Amazon
240552.93.149.0/24 Amazon
240652.93.150.0/24 Amazon
240752.93.151.0/24 Amazon
240852.93.153.80/32 Amazon
240952.93.153.148/32 Amazon
241052.93.153.149/32 Amazon
241152.93.153.168/32 Amazon
241252.93.153.169/32 Amazon
241352.93.153.170/32 Amazon
241452.93.153.171/32 Amazon
241552.93.153.172/32 Amazon
241652.93.153.173/32 Amazon
241752.93.153.174/32 Amazon
241852.93.153.175/32 Amazon
241952.93.153.176/32 Amazon
242052.93.153.177/32 Amazon
242152.93.153.178/32 Amazon
242252.93.153.179/32 Amazon
242352.93.156.0/22 Amazon
242452.93.178.128/32 Amazon
242552.93.178.129/32 Amazon
242652.93.178.130/32 Amazon
242752.93.178.131/32 Amazon
242852.93.178.132/32 Amazon
242952.93.178.133/32 Amazon
243052.93.178.134/32 Amazon
243152.93.178.135/32 Amazon
243252.93.178.136/32 Amazon
243352.93.178.137/32 Amazon
243452.93.178.138/32 Amazon
243552.93.178.139/32 Amazon
243652.93.178.140/32 Amazon
243752.93.178.141/32 Amazon
243852.93.178.142/32 Amazon
243952.93.178.143/32 Amazon
244052.93.178.144/32 Amazon
244152.93.178.145/32 Amazon
244252.93.178.146/32 Amazon
244352.93.178.147/32 Amazon
244452.93.178.148/32 Amazon
244552.93.178.149/32 Amazon
244652.93.178.150/32 Amazon
244752.93.178.151/32 Amazon
244852.93.178.152/32 Amazon
244952.93.178.153/32 Amazon
245052.93.178.154/32 Amazon
245152.93.178.155/32 Amazon
245252.93.178.156/32 Amazon
245352.93.178.157/32 Amazon
245452.93.178.158/32 Amazon
245552.93.178.159/32 Amazon
245652.93.178.160/32 Amazon
245752.93.178.161/32 Amazon
245852.93.178.162/32 Amazon
245952.93.178.163/32 Amazon
246052.93.178.164/32 Amazon
246152.93.178.165/32 Amazon
246252.93.178.166/32 Amazon
246352.93.178.167/32 Amazon
246452.93.178.168/32 Amazon
246552.93.178.169/32 Amazon
246652.93.178.170/32 Amazon
246752.93.178.171/32 Amazon
246852.93.178.172/32 Amazon
246952.93.178.173/32 Amazon
247052.93.178.174/32 Amazon
247152.93.178.175/32 Amazon
247252.93.178.176/32 Amazon
247352.93.178.177/32 Amazon
247452.93.178.178/32 Amazon
247552.93.178.179/32 Amazon
247652.93.178.180/32 Amazon
247752.93.178.181/32 Amazon
247852.93.178.182/32 Amazon
247952.93.178.183/32 Amazon
248052.93.178.184/32 Amazon
248152.93.178.185/32 Amazon
248252.93.178.186/32 Amazon
248352.93.178.187/32 Amazon
248452.93.178.188/32 Amazon
248552.93.178.189/32 Amazon
248652.93.178.190/32 Amazon
248752.93.178.191/32 Amazon
248852.93.178.192/32 Amazon
248952.93.178.193/32 Amazon
249052.93.178.194/32 Amazon
249152.93.178.195/32 Amazon
249252.93.178.196/32 Amazon
249352.93.178.197/32 Amazon
249452.93.178.198/32 Amazon
249552.93.178.199/32 Amazon
249652.93.178.200/32 Amazon
249752.93.178.201/32 Amazon
249852.93.178.202/32 Amazon
249952.93.178.203/32 Amazon
250052.93.178.204/32 Amazon
250152.93.178.205/32 Amazon
250252.93.178.206/32 Amazon
250352.93.178.207/32 Amazon
250452.93.178.208/32 Amazon
250552.93.178.209/32 Amazon
250652.93.178.210/32 Amazon
250752.93.178.211/32 Amazon
250852.93.178.212/32 Amazon
250952.93.178.213/32 Amazon
251052.93.178.214/32 Amazon
251152.93.178.215/32 Amazon
251252.93.178.216/32 Amazon
251352.93.178.217/32 Amazon
251452.93.178.218/32 Amazon
251552.93.178.219/32 Amazon
251652.93.178.220/32 Amazon
251752.93.178.221/32 Amazon
251852.93.178.222/32 Amazon
251952.93.178.223/32 Amazon
252052.93.178.224/32 Amazon
252152.93.178.225/32 Amazon
252252.93.178.226/32 Amazon
252352.93.178.227/32 Amazon
252452.93.178.228/32 Amazon
252552.93.178.229/32 Amazon
252652.93.178.230/32 Amazon
252752.93.178.231/32 Amazon
252852.93.178.232/32 Amazon
252952.93.178.233/32 Amazon
253052.93.178.234/32 Amazon
253152.93.178.235/32 Amazon
253252.93.193.192/32 Amazon
253352.93.193.193/32 Amazon
253452.93.193.194/32 Amazon
253552.93.193.195/32 Amazon
253652.93.193.196/32 Amazon
253752.93.193.197/32 Amazon
253852.93.193.198/32 Amazon
253952.93.193.199/32 Amazon
254052.93.193.200/32 Amazon
254152.93.193.201/32 Amazon
254252.93.193.202/32 Amazon
254352.93.193.203/32 Amazon
254452.93.198.0/25 Amazon
254552.93.229.148/32 Amazon
254652.93.229.149/32 Amazon
254752.93.236.0/24 Amazon
254852.93.237.0/24 Amazon
254952.93.240.146/31 Amazon
255052.93.240.148/31 Amazon
255152.93.240.150/31 Amazon
255252.93.240.152/31 Amazon
255352.93.240.154/31 Amazon
255452.93.240.156/31 Amazon
255552.93.240.158/31 Amazon
255652.93.240.160/31 Amazon
255752.93.240.162/31 Amazon
255852.93.240.164/31 Amazon
255952.93.240.166/31 Amazon
256052.93.240.168/31 Amazon
256152.93.240.170/31 Amazon
256252.93.240.172/31 Amazon
256352.93.240.174/31 Amazon
256452.93.240.176/31 Amazon
256552.93.240.178/31 Amazon
256652.93.240.180/31 Amazon
256752.93.240.182/31 Amazon
256852.93.240.184/31 Amazon
256952.93.240.186/31 Amazon
257052.93.240.188/31 Amazon
257152.93.240.190/31 Amazon
257252.93.240.192/31 Amazon
257352.93.240.194/31 Amazon
257452.93.240.196/31 Amazon
257552.93.240.198/31 Amazon
257652.93.240.200/31 Amazon
257752.93.240.202/31 Amazon
257852.93.240.204/31 Amazon
257952.93.245.0/24 Amazon
258052.93.247.0/25 Amazon
258152.93.248.0/24 Amazon
258252.93.249.0/24 Amazon
258352.93.250.0/23 Amazon
258452.93.254.0/24 Amazon
258552.94.0.0/22 Amazon
258652.94.4.0/24 Amazon
258752.94.5.0/24 Amazon
258852.94.6.0/24 Amazon
258952.94.7.0/24 Amazon
259052.94.8.0/24 Amazon
259152.94.9.0/24 Amazon
259252.94.10.0/24 Amazon
259352.94.11.0/24 Amazon
259452.94.12.0/24 Amazon
259552.94.13.0/24 Amazon
259652.94.14.0/24 Amazon
259752.94.15.0/24 Amazon
259852.94.16.0/24 Amazon
259952.94.17.0/24 Amazon
260052.94.18.0/24 Amazon
260152.94.19.0/24 Amazon
260252.94.20.0/24 Amazon
260352.94.22.0/24 Amazon
260452.94.23.0/24 Amazon
260552.94.24.0/23 Amazon
260652.94.26.0/23 Amazon
260752.94.28.0/23 Amazon
260852.94.30.0/24 Amazon
260952.94.32.0/20 Amazon
261052.94.48.0/20 Amazon
261152.94.64.0/22 Amazon
261252.94.68.0/24 Amazon
261352.94.69.0/24 Amazon
261452.94.72.0/22 Amazon
261552.94.76.0/22 Amazon
261652.94.80.0/20 Amazon
261752.94.96.0/20 Amazon
261852.94.112.0/22 Amazon
261952.94.116.0/22 Amazon
262052.94.120.0/22 Amazon
262152.94.124.0/22 Amazon
262252.94.128.0/22 Amazon
262352.94.132.0/22 Amazon
262452.94.136.0/21 Amazon
262552.94.148.0/22 Amazon
262652.94.152.3/32 Amazon
262752.94.152.9/32 Amazon
262852.94.152.11/32 Amazon
262952.94.152.12/32 Amazon
263052.94.152.44/32 Amazon
263152.94.152.60/32 Amazon
263252.94.152.61/32 Amazon
263352.94.152.62/32 Amazon
263452.94.152.63/32 Amazon
263552.94.152.64/32 Amazon
263652.94.152.65/32 Amazon
263752.94.152.66/32 Amazon
263852.94.152.67/32 Amazon
263952.94.152.68/32 Amazon
264052.94.152.69/32 Amazon
264152.94.160.0/20 Amazon
264252.94.176.0/20 Amazon
264352.94.192.0/22 Amazon
264452.94.196.0/24 Amazon
264552.94.197.0/24 Amazon
264652.94.198.0/28 Amazon
264752.94.198.16/28 Amazon
264852.94.198.32/28 Amazon
264952.94.198.48/28 Amazon
265052.94.198.64/28 Amazon
265152.94.198.80/28 Amazon
265252.94.198.96/28 Amazon
265352.94.198.112/28 Amazon
265452.94.198.128/28 Amazon
265552.94.198.144/28 Amazon
265652.94.199.0/24 Amazon
265752.94.200.0/24 Amazon
265852.94.201.0/26 Amazon
265952.94.204.0/23 Amazon
266052.94.206.0/23 Amazon
266152.94.208.0/21 Amazon
266252.94.216.0/21 Amazon
266352.94.224.0/20 Amazon
266452.94.240.0/22 Amazon
266552.94.244.0/22 Amazon
266652.94.248.0/28 Amazon
266752.94.248.16/28 Amazon
266852.94.248.32/28 Amazon
266952.94.248.48/28 Amazon
267052.94.248.64/28 Amazon
267152.94.248.80/28 Amazon
267252.94.248.96/28 Amazon
267352.94.248.112/28 Amazon
267452.94.248.128/28 Amazon
267552.94.248.144/28 Amazon
267652.94.248.160/28 Amazon
267752.94.248.176/28 Amazon
267852.94.248.192/28 Amazon
267952.94.248.208/28 Amazon
268052.94.248.224/28 Amazon
268152.94.249.32/28 Amazon
268252.94.249.48/28 Amazon
268352.94.249.64/28 Amazon
268452.94.249.80/28 Amazon
268552.94.249.96/28 Amazon
268652.94.249.112/28 Amazon
268752.94.249.128/28 Amazon
268852.94.249.144/28 Amazon
268952.94.249.160/28 Amazon
269052.94.249.176/28 Amazon
269152.94.249.192/28 Amazon
269252.94.249.208/28 Amazon
269352.94.249.224/28 Amazon
269452.94.249.240/28 Amazon
269552.94.250.0/28 Amazon
269652.94.250.16/28 Amazon
269752.94.252.0/23 Amazon
269852.94.254.0/23 Amazon
269952.95.0.0/20 Amazon
270052.95.16.0/21 Amazon
270152.95.24.0/22 Amazon
270252.95.28.0/24 Amazon
270352.95.29.0/26 Amazon
270452.95.30.0/23 Amazon
270552.95.34.0/24 Amazon
270652.95.35.0/24 Amazon
270752.95.36.0/22 Amazon
270852.95.40.0/24 Amazon
270952.95.41.0/24 Amazon
271052.95.42.0/24 Amazon
271152.95.48.0/22 Amazon
271252.95.52.0/22 Amazon
271352.95.56.0/22 Amazon
271452.95.60.0/24 Amazon
271552.95.61.0/24 Amazon
271652.95.62.0/24 Amazon
271752.95.63.0/24 Amazon
271852.95.64.0/20 Amazon
271952.95.80.0/20 Amazon
272052.95.96.0/22 Amazon
272152.95.100.0/22 Amazon
272252.95.104.0/22 Amazon
272352.95.108.0/23 Amazon
272452.95.110.0/24 Amazon
272552.95.111.0/24 Amazon
272652.95.112.0/20 Amazon
272752.95.128.0/21 Amazon
272852.95.136.0/23 Amazon
272952.95.138.0/24 Amazon
273052.95.139.0/24 Amazon
273152.95.140.0/23 Amazon
273252.95.142.0/23 Amazon
273352.95.144.0/24 Amazon
273452.95.145.0/24 Amazon
273552.95.146.0/23 Amazon
273652.95.148.0/23 Amazon
273752.95.150.0/24 Amazon
273852.95.151.0/24 Amazon
273952.95.152.0/23 Amazon
274052.95.154.0/23 Amazon
274152.95.156.0/24 Amazon
274252.95.157.0/24 Amazon
274352.95.158.0/23 Amazon
274452.95.160.0/23 Amazon
274552.95.162.0/24 Amazon
274652.95.163.0/24 Amazon
274752.95.164.0/23 Amazon
274852.95.166.0/23 Amazon
274952.95.168.0/24 Amazon
275052.95.169.0/24 Amazon
275152.95.170.0/23 Amazon
275252.95.172.0/23 Amazon
275352.95.174.0/24 Amazon
275452.95.175.0/24 Amazon
275552.95.176.0/24 Amazon
275652.95.177.0/24 Amazon
275752.95.178.0/23 Amazon
275852.95.180.0/24 Amazon
275952.95.181.0/24 Amazon
276052.95.182.0/23 Amazon
276152.95.184.0/23 Amazon
276252.95.186.0/24 Amazon
276352.95.187.0/24 Amazon
276452.95.188.0/23 Amazon
276552.95.190.0/24 Amazon
276652.95.192.0/20 Amazon
276752.95.208.0/22 Amazon
276852.95.212.0/22 Amazon
276952.95.216.0/22 Amazon
277052.95.224.0/24 Amazon
277152.95.225.0/24 Amazon
277252.95.226.0/24 Amazon
277352.95.227.0/24 Amazon
277452.95.228.0/24 Amazon
277552.95.229.0/24 Amazon
277652.95.230.0/24 Amazon
277752.95.235.0/24 Amazon
277852.95.239.0/24 Amazon
277952.95.240.0/24 Amazon
278052.95.241.0/24 Amazon
278152.95.242.0/24 Amazon
278252.95.243.0/24 Amazon
278352.95.244.0/24 Amazon
278452.95.245.0/24 Amazon
278552.95.246.0/24 Amazon
278652.95.247.0/24 Amazon
278752.95.248.0/24 Amazon
278852.95.249.0/24 Amazon
278952.95.250.0/24 Amazon
279052.95.251.0/24 Amazon
279152.95.252.0/24 Amazon
279252.95.253.0/24 Amazon
279352.95.254.0/24 Amazon
279452.95.255.0/28 Amazon
279552.95.255.16/28 Amazon
279652.95.255.32/28 Amazon
279752.95.255.48/28 Amazon
279852.95.255.64/28 Amazon
279952.95.255.80/28 Amazon
280052.95.255.96/28 Amazon
280152.95.255.112/28 Amazon
280252.95.255.128/28 Amazon
280352.95.255.144/28 Amazon
280452.119.128.0/20 Amazon
280552.119.144.0/21 Amazon
280652.119.152.0/22 Amazon
280752.119.156.0/22 Amazon
280852.119.160.0/20 Amazon
280952.119.176.0/21 Amazon
281052.119.184.0/22 Amazon
281152.119.188.0/22 Amazon
281252.119.192.0/22 Amazon
281352.119.196.0/22 Amazon
281452.119.205.0/24 Amazon
281552.119.206.0/23 Amazon
281652.119.208.0/23 Amazon
281752.119.210.0/23 Amazon
281852.119.212.0/23 Amazon
281952.119.214.0/23 Amazon
282052.119.216.0/21 Amazon
282152.119.224.0/21 Amazon
282252.119.232.0/21 Amazon
282352.119.240.0/21 Amazon
282452.119.248.0/24 Amazon
282552.119.249.0/24 Amazon
282652.119.252.0/22 Amazon
282752.124.128.0/17 Amazon
282852.144.133.32/27 Amazon
282952.144.192.0/26 Amazon
283052.144.192.64/26 Amazon
283152.144.192.128/26 Amazon
283252.144.192.192/26 Amazon
283352.144.193.0/26 Amazon
283452.144.193.64/26 Amazon
283552.144.193.128/26 Amazon
283652.144.194.0/26 Amazon
283752.144.194.64/26 Amazon
283852.144.194.128/26 Amazon
283952.144.194.192/26 Amazon
284052.144.195.0/26 Amazon
284152.144.196.192/26 Amazon
284252.144.197.128/26 Amazon
284352.144.197.192/26 Amazon
284452.144.199.128/26 Amazon
284552.144.200.64/26 Amazon
284652.144.200.128/26 Amazon
284752.144.201.64/26 Amazon
284852.144.201.128/26 Amazon
284952.144.205.0/26 Amazon
285052.144.208.0/31 Amazon
285152.144.208.2/31 Amazon
285252.144.208.64/26 Amazon
285352.144.208.128/26 Amazon
285452.144.208.192/26 Amazon
285552.144.209.0/26 Amazon
285652.144.209.64/26 Amazon
285752.144.209.128/26 Amazon
285852.144.209.192/26 Amazon
285952.144.210.0/26 Amazon
286052.144.210.64/26 Amazon
286152.144.210.128/26 Amazon
286252.144.210.192/26 Amazon
286352.144.211.0/26 Amazon
286452.144.211.64/26 Amazon
286552.144.211.128/26 Amazon
286652.144.211.192/31 Amazon
286752.144.211.194/31 Amazon
286852.144.211.196/31 Amazon
286952.144.211.198/31 Amazon
287052.144.211.200/31 Amazon
287152.144.211.202/31 Amazon
287252.144.212.64/26 Amazon
287352.144.212.192/26 Amazon
287452.144.213.64/26 Amazon
287552.144.214.128/26 Amazon
287652.144.215.0/31 Amazon
287752.144.215.2/31 Amazon
287852.144.215.192/31 Amazon
287952.144.215.194/31 Amazon
288052.144.215.196/31 Amazon
288152.144.215.198/31 Amazon
288252.144.215.200/31 Amazon
288352.144.215.202/31 Amazon
288452.144.216.0/31 Amazon
288552.144.216.2/31 Amazon
288652.144.216.4/31 Amazon
288752.144.216.6/31 Amazon
288852.144.216.8/31 Amazon
288952.144.216.10/31 Amazon
289052.144.218.0/26 Amazon
289152.144.218.64/26 Amazon
289252.144.223.64/26 Amazon
289352.144.223.128/26 Amazon
289452.144.224.64/26 Amazon
289552.144.224.128/26 Amazon
289652.144.224.192/26 Amazon
289752.144.225.0/26 Amazon
289852.144.225.64/26 Amazon
289952.144.225.128/26 Amazon
290052.144.227.64/26 Amazon
290152.144.227.192/26 Amazon
290252.144.228.0/31 Amazon
290352.144.228.2/31 Amazon
290452.144.228.64/26 Amazon
290552.144.228.128/26 Amazon
290652.144.228.192/26 Amazon
290752.144.229.0/26 Amazon
290852.144.229.64/26 Amazon
290952.144.230.0/26 Amazon
291052.144.231.64/26 Amazon
291152.144.233.64/31 Amazon
291252.144.233.66/31 Amazon
291352.144.233.68/31 Amazon
291452.144.233.70/31 Amazon
291552.144.233.128/31 Amazon
291652.144.233.130/31 Amazon
291752.144.233.132/31 Amazon
291852.144.233.134/31 Amazon
291952.144.233.192/26 Amazon
292052.192.0.0/15 Amazon
292152.194.0.0/15 Amazon
292252.196.0.0/14 Amazon
292352.200.0.0/13 Amazon
292452.208.0.0/13 Amazon
292552.216.0.0/15 Amazon
292652.218.0.0/17 Amazon
292752.218.128.0/17 Amazon
292852.219.0.0/20 Amazon
292952.219.16.0/22 Amazon
293052.219.24.0/21 Amazon
293152.219.32.0/21 Amazon
293252.219.40.0/22 Amazon
293352.219.44.0/22 Amazon
293452.219.56.0/22 Amazon
293552.219.60.0/23 Amazon
293652.219.62.0/23 Amazon
293752.219.64.0/22 Amazon
293852.219.68.0/22 Amazon
293952.219.72.0/22 Amazon
294052.219.80.0/20 Amazon
294152.219.96.0/20 Amazon
294252.219.112.0/21 Amazon
294352.219.120.0/22 Amazon
294452.219.124.0/22 Amazon
294552.219.128.0/22 Amazon
294652.219.132.0/22 Amazon
294752.219.136.0/22 Amazon
294852.219.140.0/24 Amazon
294952.219.141.0/24 Amazon
295052.219.142.0/24 Amazon
295152.219.143.0/24 Amazon
295252.219.144.0/22 Amazon
295352.219.148.0/23 Amazon
295452.219.152.0/22 Amazon
295552.219.156.0/22 Amazon
295652.219.160.0/23 Amazon
295752.219.164.0/22 Amazon
295852.219.168.0/24 Amazon
295952.219.169.0/24 Amazon
296052.219.170.0/23 Amazon
296152.219.172.0/22 Amazon
296252.219.176.0/22 Amazon
296352.219.180.0/22 Amazon
296452.219.184.0/21 Amazon
296552.219.192.0/23 Amazon
296652.219.194.0/24 Amazon
296752.219.195.0/24 Amazon
296852.219.196.0/22 Amazon
296952.219.200.0/24 Amazon
297052.219.202.0/23 Amazon
297152.219.204.0/22 Amazon
297252.220.0.0/15 Amazon
297352.222.0.0/17 Amazon
297452.222.128.0/17 Amazon
297552.223.0.0/17 Amazon
297654.64.0.0/15 Amazon
297754.66.0.0/16 Amazon
297854.67.0.0/16 Amazon
297954.68.0.0/14 Amazon
298054.72.0.0/15 Amazon
298154.74.0.0/15 Amazon
298254.76.0.0/15 Amazon
298354.78.0.0/16 Amazon
298454.79.0.0/16 Amazon
298554.80.0.0/13 Amazon
298654.88.0.0/14 Amazon
298754.92.0.0/17 Amazon
298854.92.128.0/17 Amazon
298954.93.0.0/16 Amazon
299054.94.0.0/16 Amazon
299154.95.0.0/16 Amazon
299254.144.0.0/14 Amazon
299354.148.0.0/15 Amazon
299454.150.0.0/16 Amazon
299554.151.0.0/17 Amazon
299654.151.128.0/17 Amazon
299754.152.0.0/16 Amazon
299854.153.0.0/17 Amazon
299954.153.128.0/17 Amazon
300054.154.0.0/16 Amazon
300154.155.0.0/16 Amazon
300254.156.0.0/14 Amazon
300354.160.0.0/13 Amazon
300454.168.0.0/16 Amazon
300554.169.0.0/16 Amazon
300654.170.0.0/15 Amazon
300754.172.0.0/15 Amazon
300854.174.0.0/15 Amazon
300954.176.0.0/15 Amazon
301054.178.0.0/16 Amazon
301154.179.0.0/16 Amazon
301254.180.0.0/15 Amazon
301354.182.0.0/16 Amazon
301454.183.0.0/16 Amazon
301554.184.0.0/13 Amazon
301654.192.0.0/16 Amazon
301754.193.0.0/16 Amazon
301854.194.0.0/15 Amazon
301954.196.0.0/15 Amazon
302054.198.0.0/16 Amazon
302154.199.0.0/16 Amazon
302254.200.0.0/15 Amazon
302354.202.0.0/15 Amazon
302454.204.0.0/15 Amazon
302554.206.0.0/16 Amazon
302654.207.0.0/16 Amazon
302754.208.0.0/15 Amazon
302854.210.0.0/15 Amazon
302954.212.0.0/15 Amazon
303054.214.0.0/16 Amazon
303154.215.0.0/16 Amazon
303254.216.0.0/15 Amazon
303354.218.0.0/16 Amazon
303454.219.0.0/16 Amazon
303554.220.0.0/16 Amazon
303654.221.0.0/16 Amazon
303754.222.0.0/19 Amazon
303854.222.32.0/22 Amazon
303954.222.36.0/22 Amazon
304054.222.48.0/22 Amazon
304154.222.52.0/22 Amazon
304254.222.57.0/24 Amazon
304354.222.58.0/28 Amazon
304454.222.58.32/28 Amazon
304554.222.58.48/28 Amazon
304654.222.59.0/24 Amazon
304754.222.64.0/23 Amazon
304854.222.66.0/23 Amazon
304954.222.68.0/23 Amazon
305054.222.70.0/24 Amazon
305154.222.71.0/24 Amazon
305254.222.76.0/22 Amazon
305354.222.80.0/21 Amazon
305454.222.128.0/17 Amazon
305554.223.0.0/16 Amazon
305654.224.0.0/15 Amazon
305754.226.0.0/15 Amazon
305854.228.0.0/16 Amazon
305954.229.0.0/16 Amazon
306054.230.0.0/17 Amazon
306154.230.128.0/18 Amazon
306254.230.192.0/21 Amazon
306354.230.200.0/21 Amazon
306454.230.208.0/20 Amazon
306554.230.224.0/19 Amazon
306654.231.0.0/16 Amazon
306754.232.0.0/16 Amazon
306854.233.0.0/18 Amazon
306954.233.64.0/18 Amazon
307054.233.128.0/17 Amazon
307154.234.0.0/15 Amazon
307254.236.0.0/15 Amazon
307354.238.0.0/16 Amazon
307454.239.0.0/28 Amazon
307554.239.0.16/28 Amazon
307654.239.0.32/28 Amazon
307754.239.0.48/28 Amazon
307854.239.0.64/28 Amazon
307954.239.0.80/28 Amazon
308054.239.0.96/28 Amazon
308154.239.0.112/28 Amazon
308254.239.0.128/28 Amazon
308354.239.0.144/28 Amazon
308454.239.0.160/28 Amazon
308554.239.0.176/28 Amazon
308654.239.0.192/28 Amazon
308754.239.0.208/28 Amazon
308854.239.0.224/28 Amazon
308954.239.0.240/28 Amazon
309054.239.1.0/28 Amazon
309154.239.1.16/28 Amazon
309254.239.1.32/28 Amazon
309354.239.1.48/28 Amazon
309454.239.1.64/28 Amazon
309554.239.1.80/28 Amazon
309654.239.1.96/28 Amazon
309754.239.1.112/28 Amazon
309854.239.1.128/28 Amazon
309954.239.1.144/28 Amazon
310054.239.1.160/28 Amazon
310154.239.1.176/28 Amazon
310254.239.1.192/28 Amazon
310354.239.1.208/28 Amazon
310454.239.1.224/28 Amazon
310554.239.2.0/23 Amazon
310654.239.4.0/22 Amazon
310754.239.8.0/21 Amazon
310854.239.16.0/20 Amazon
310954.239.32.0/21 Amazon
311054.239.40.152/29 Amazon
311154.239.48.0/22 Amazon
311254.239.52.0/23 Amazon
311354.239.54.0/23 Amazon
311454.239.56.0/21 Amazon
311554.239.64.0/21 Amazon
311654.239.96.0/24 Amazon
311754.239.98.0/24 Amazon
311854.239.99.0/24 Amazon
311954.239.100.0/23 Amazon
312054.239.102.162/31 Amazon
312154.239.102.232/31 Amazon
312254.239.102.234/31 Amazon
312354.239.102.236/31 Amazon
312454.239.104.0/23 Amazon
312554.239.106.0/23 Amazon
312654.239.108.0/22 Amazon
312754.239.112.0/24 Amazon
312854.239.113.0/24 Amazon
312954.239.115.0/25 Amazon
313054.239.116.0/22 Amazon
313154.239.120.0/21 Amazon
313254.239.128.0/18 Amazon
313354.239.192.0/19 Amazon
313454.240.17.0/24 Amazon
313554.240.128.0/18 Amazon
313654.240.192.0/22 Amazon
313754.240.196.0/24 Amazon
313854.240.197.0/24 Amazon
313954.240.198.0/24 Amazon
314054.240.199.0/24 Amazon
314154.240.200.0/24 Amazon
314254.240.202.0/24 Amazon
314354.240.203.0/24 Amazon
314454.240.204.0/22 Amazon
314554.240.208.0/22 Amazon
314654.240.212.0/22 Amazon
314754.240.216.0/22 Amazon
314854.240.220.0/22 Amazon
314954.240.225.0/24 Amazon
315054.240.226.0/24 Amazon
315154.240.227.0/24 Amazon
315254.240.228.0/23 Amazon
315354.240.230.0/23 Amazon
315454.240.232.0/22 Amazon
315554.240.236.1/32 Amazon
315654.240.236.2/32 Amazon
315754.240.236.5/32 Amazon
315854.240.236.6/32 Amazon
315954.240.236.9/32 Amazon
316054.240.236.10/32 Amazon
316154.240.236.13/32 Amazon
316254.240.236.14/32 Amazon
316354.240.236.17/32 Amazon
316454.240.236.18/32 Amazon
316554.240.236.21/32 Amazon
316654.240.236.22/32 Amazon
316754.240.236.25/32 Amazon
316854.240.236.26/32 Amazon
316954.240.236.29/32 Amazon
317054.240.236.30/32 Amazon
317154.240.236.33/32 Amazon
317254.240.236.34/32 Amazon
317354.240.236.37/32 Amazon
317454.240.236.38/32 Amazon
317554.240.236.41/32 Amazon
317654.240.236.42/32 Amazon
317754.240.236.45/32 Amazon
317854.240.236.46/32 Amazon
317954.240.236.49/32 Amazon
318054.240.236.50/32 Amazon
318154.240.236.53/32 Amazon
318254.240.236.54/32 Amazon
318354.240.236.57/32 Amazon
318454.240.236.58/32 Amazon
318554.240.236.61/32 Amazon
318654.240.236.62/32 Amazon
318754.240.236.65/32 Amazon
318854.240.236.66/32 Amazon
318954.240.236.69/32 Amazon
319054.240.236.70/32 Amazon
319154.240.236.73/32 Amazon
319254.240.236.74/32 Amazon
319354.240.236.77/32 Amazon
319454.240.236.78/32 Amazon
319554.240.236.81/32 Amazon
319654.240.236.82/32 Amazon
319754.240.236.85/32 Amazon
319854.240.236.86/32 Amazon
319954.240.236.89/32 Amazon
320054.240.236.90/32 Amazon
320154.240.236.93/32 Amazon
320254.240.236.94/32 Amazon
320354.240.241.0/24 Amazon
320454.240.244.0/22 Amazon
320554.240.248.0/21 Amazon
320654.241.0.0/16 Amazon
320754.242.0.0/15 Amazon
320854.244.0.0/16 Amazon
320954.245.0.0/16 Amazon
321054.246.0.0/16 Amazon
321154.247.0.0/16 Amazon
321254.248.0.0/15 Amazon
321354.250.0.0/16 Amazon
321454.251.0.0/16 Amazon
321554.252.0.0/16 Amazon
321654.253.0.0/16 Amazon
321754.254.0.0/16 Amazon
321854.255.0.0/16 Amazon
321958.254.138.0/25 Amazon
322058.254.138.128/26 Amazon
322163.32.0.0/14 Amazon
322263.246.112.0/24 Amazon
322363.246.113.0/24 Amazon
322463.246.114.0/23 Amazon
322563.246.119.0/24 Amazon
322664.187.128.0/20 Amazon
322764.252.64.0/18 Amazon
322864.252.128.0/18 Amazon
322965.0.0.0/14 Amazon
323065.8.0.0/16 Amazon
323165.9.0.0/17 Amazon
323265.9.128.0/18 Amazon
323367.202.0.0/18 Amazon
323467.220.224.0/20 Amazon
323567.220.240.0/20 Amazon
323668.66.112.0/20 Amazon
323768.79.0.0/18 Amazon
323869.107.3.176/29 Amazon
323969.107.3.184/29 Amazon
324069.107.6.112/29 Amazon
324169.107.6.120/29 Amazon
324269.107.6.160/29 Amazon
324369.107.6.168/29 Amazon
324469.107.6.200/29 Amazon
324569.107.6.208/29 Amazon
324669.107.6.216/29 Amazon
324769.107.6.224/29 Amazon
324869.107.7.0/29 Amazon
324969.107.7.8/29 Amazon
325069.107.7.16/29 Amazon
325169.107.7.32/29 Amazon
325269.107.7.40/29 Amazon
325369.107.7.48/29 Amazon
325469.107.7.56/29 Amazon
325569.107.7.64/29 Amazon
325669.107.7.72/29 Amazon
325769.107.7.80/29 Amazon
325869.107.7.88/29 Amazon
325969.107.7.96/29 Amazon
326069.107.7.104/29 Amazon
326169.107.7.112/29 Amazon
326269.107.7.120/29 Amazon
326369.107.7.128/29 Amazon
326469.107.7.136/29 Amazon
326569.230.192.0/18 Amazon
326669.231.128.0/18 Amazon
326769.234.192.0/18 Amazon
326869.235.128.0/18 Amazon
326970.132.0.0/18 Amazon
327070.224.192.0/18 Amazon
327170.232.64.0/20 Amazon
327270.232.80.0/21 Amazon
327370.232.88.0/22 Amazon
327470.232.92.0/22 Amazon
327570.232.96.0/20 Amazon
327670.232.112.0/21 Amazon
327770.232.120.0/22 Amazon
327870.232.124.0/22 Amazon
327971.131.192.0/18 Amazon
328071.132.0.0/18 Amazon
328171.137.0.0/22 Amazon
328271.137.4.0/24 Amazon
328371.137.8.0/22 Amazon
328471.152.0.0/17 Amazon
328572.21.192.0/19 Amazon
328672.41.0.0/20 Amazon
328772.44.32.0/19 Amazon
328875.2.0.0/17 Amazon
328975.101.128.0/17 Amazon
329076.223.0.0/17 Amazon
329179.125.0.0/17 Amazon
329287.238.80.0/21 Amazon
329396.127.0.0/17 Amazon
329499.77.0.0/20 Amazon
329599.77.16.0/21 Amazon
329699.77.24.0/22 Amazon
329799.77.28.0/22 Amazon
329899.77.32.0/20 Amazon
329999.77.48.0/21 Amazon
330099.77.56.0/21 Amazon
330199.77.128.0/18 Amazon
330299.77.247.0/24 Amazon
330399.77.250.0/24 Amazon
330499.77.253.0/24 Amazon
330599.77.254.0/24 Amazon
330699.78.128.0/20 Amazon
330799.78.144.0/21 Amazon
330899.78.152.0/22 Amazon
330999.78.156.0/22 Amazon
331099.78.160.0/21 Amazon
331199.78.168.0/23 Amazon
331299.78.170.0/23 Amazon
331399.78.172.0/24 Amazon
331499.78.176.0/21 Amazon
331599.78.184.0/22 Amazon
331699.78.188.0/22 Amazon
331799.78.192.0/22 Amazon
331899.78.196.0/22 Amazon
331999.78.208.0/22 Amazon
332099.78.212.0/22 Amazon
332199.78.216.0/22 Amazon
332299.78.220.0/22 Amazon
332399.78.228.0/22 Amazon
332499.78.232.0/21 Amazon
332599.78.240.0/20 Amazon
332699.79.0.0/16 Amazon
332799.80.0.0/15 Amazon
332899.82.128.0/20 Amazon
332999.82.144.0/21 Amazon
333099.82.152.0/22 Amazon
333199.82.156.0/22 Amazon
333299.82.160.0/24 Amazon
333399.82.161.0/24 Amazon
333499.82.162.0/24 Amazon
333599.82.163.0/24 Amazon
333699.82.164.0/24 Amazon
333799.82.165.0/24 Amazon
333899.82.166.0/24 Amazon
333999.82.167.0/24 Amazon
334099.82.168.0/24 Amazon
334199.82.169.0/24 Amazon
334299.82.170.0/24 Amazon
334399.82.171.0/24 Amazon
334499.82.172.0/24 Amazon
334599.82.173.0/24 Amazon
334699.82.174.0/24 Amazon
334799.82.175.0/24 Amazon
334899.82.176.0/21 Amazon
334999.82.184.0/22 Amazon
335099.82.188.0/22 Amazon
335199.83.64.0/21 Amazon
335299.83.72.0/22 Amazon
335399.83.76.0/22 Amazon
335499.83.80.0/22 Amazon
335599.83.84.0/22 Amazon
335699.83.88.0/21 Amazon
335799.83.96.0/24 Amazon
335899.83.97.0/24 Amazon
335999.83.98.0/24 Amazon
336099.83.99.0/24 Amazon
336199.83.100.0/24 Amazon
336299.83.101.0/24 Amazon
336399.83.112.0/21 Amazon
336499.83.120.0/22 Amazon
336599.83.128.0/17 Amazon
336699.84.0.0/16 Amazon
336799.86.0.0/16 Amazon
336899.87.0.0/22 Amazon
336999.87.4.0/22 Amazon
337099.87.8.0/21 Amazon
337199.87.16.0/20 Amazon
337299.87.32.0/22 Amazon
337399.150.0.0/21 Amazon
337499.150.8.0/21 Amazon
337599.150.16.0/21 Amazon
337699.150.24.0/21 Amazon
337799.150.32.0/21 Amazon
337899.150.40.0/21 Amazon
337999.150.48.0/21 Amazon
338099.150.56.0/21 Amazon
338199.150.64.0/21 Amazon
338299.150.72.0/21 Amazon
338399.150.80.0/21 Amazon
338499.150.88.0/21 Amazon
338599.150.96.0/21 Amazon
338699.150.104.0/21 Amazon
338799.150.112.0/21 Amazon
338899.150.120.0/21 Amazon
338999.151.64.0/21 Amazon
339099.151.72.0/21 Amazon
339199.151.80.0/21 Amazon
339299.151.88.0/21 Amazon
339399.151.96.0/21 Amazon
339499.151.104.0/21 Amazon
339599.151.112.0/21 Amazon
339699.151.120.0/21 Amazon
339799.151.128.0/21 Amazon
339899.151.136.0/21 Amazon
339999.151.144.0/21 Amazon
3400100.20.0.0/14 Amazon
3401100.24.0.0/13 Amazon
3402103.4.8.0/21 Amazon
3403103.8.172.0/22 Amazon
3404103.246.148.0/23 Amazon
3405103.246.150.0/23 Amazon
3406104.255.56.11/32 Amazon
3407104.255.56.12/32 Amazon
3408104.255.59.81/32 Amazon
3409104.255.59.82/32 Amazon
3410104.255.59.83/32 Amazon
3411104.255.59.85/32 Amazon
3412104.255.59.86/32 Amazon
3413104.255.59.87/32 Amazon
3414104.255.59.88/32 Amazon
3415104.255.59.91/32 Amazon
3416104.255.59.101/32 Amazon
3417104.255.59.102/32 Amazon
3418104.255.59.103/32 Amazon
3419104.255.59.104/32 Amazon
3420104.255.59.105/32 Amazon
3421104.255.59.106/32 Amazon
3422104.255.59.114/32 Amazon
3423104.255.59.115/32 Amazon
3424104.255.59.118/32 Amazon
3425104.255.59.119/32 Amazon
3426104.255.59.122/32 Amazon
3427104.255.59.130/32 Amazon
3428104.255.59.131/32 Amazon
3429104.255.59.132/32 Amazon
3430104.255.59.133/32 Amazon
3431104.255.59.134/32 Amazon
3432104.255.59.135/32 Amazon
3433104.255.59.136/32 Amazon
3434104.255.59.137/32 Amazon
3435104.255.59.138/32 Amazon
3436104.255.59.139/32 Amazon
3437107.20.0.0/14 Amazon
3438107.176.0.0/15 Amazon
3439108.128.0.0/13 Amazon
3440108.136.0.0/15 Amazon
3441108.138.0.0/15 Amazon
3442108.156.0.0/14 Amazon
3443108.166.224.0/21 Amazon
3444108.166.232.0/21 Amazon
3445108.166.240.0/21 Amazon
3446108.166.248.0/21 Amazon
3447108.175.48.0/22 Amazon
3448108.175.52.0/22 Amazon
3449108.175.56.0/22 Amazon
3450108.175.60.0/22 Amazon
3451116.129.226.0/25 Amazon
3452116.129.226.128/26 Amazon
3453118.193.97.64/26 Amazon
3454118.193.97.128/25 Amazon
3455119.147.182.0/25 Amazon
3456119.147.182.128/26 Amazon
3457120.52.12.64/26 Amazon
3458120.52.22.96/27 Amazon
3459120.52.39.128/27 Amazon
3460120.52.153.192/26 Amazon
3461120.232.236.0/25 Amazon
3462120.232.236.128/26 Amazon
3463120.253.240.192/26 Amazon
3464120.253.241.160/27 Amazon
3465120.253.245.128/26 Amazon
3466120.253.245.192/27 Amazon
3467122.248.192.0/18 Amazon
3468130.176.0.0/17 Amazon
3469130.176.128.0/18 Amazon
3470130.176.192.0/19 Amazon
3471130.176.224.0/20 Amazon
3472130.176.254.0/24 Amazon
3473130.176.255.0/24 Amazon
3474140.179.0.0/16 Amazon
3475142.4.160.0/29 Amazon
3476142.4.160.8/29 Amazon
3477142.4.160.16/29 Amazon
3478142.4.160.24/29 Amazon
3479142.4.160.32/29 Amazon
3480142.4.160.40/29 Amazon
3481142.4.160.48/29 Amazon
3482142.4.160.56/29 Amazon
3483142.4.160.64/29 Amazon
3484142.4.160.72/29 Amazon
3485142.4.160.80/29 Amazon
3486142.4.160.88/29 Amazon
3487142.4.160.96/29 Amazon
3488142.4.160.104/29 Amazon
3489142.4.160.112/29 Amazon
3490143.204.0.0/16 Amazon
3491144.220.0.0/16 Amazon
3492150.222.0.16/32 Amazon
3493150.222.0.17/32 Amazon
3494150.222.0.18/32 Amazon
3495150.222.0.19/32 Amazon
3496150.222.2.0/24 Amazon
3497150.222.3.176/32 Amazon
3498150.222.3.177/32 Amazon
3499150.222.3.178/32 Amazon
3500150.222.3.179/32 Amazon
3501150.222.3.180/32 Amazon
3502150.222.3.181/32 Amazon
3503150.222.3.182/32 Amazon
3504150.222.3.183/32 Amazon
3505150.222.3.184/32 Amazon
3506150.222.3.185/32 Amazon
3507150.222.3.186/32 Amazon
3508150.222.3.187/32 Amazon
3509150.222.3.188/32 Amazon
3510150.222.3.189/32 Amazon
3511150.222.3.190/32 Amazon
3512150.222.3.191/32 Amazon
3513150.222.3.192/31 Amazon
3514150.222.3.194/31 Amazon
3515150.222.3.196/31 Amazon
3516150.222.3.198/31 Amazon
3517150.222.3.200/31 Amazon
3518150.222.3.202/31 Amazon
3519150.222.3.204/31 Amazon
3520150.222.3.206/31 Amazon
3521150.222.3.208/31 Amazon
3522150.222.3.210/31 Amazon
3523150.222.3.212/31 Amazon
3524150.222.3.214/31 Amazon
3525150.222.3.216/31 Amazon
3526150.222.3.218/31 Amazon
3527150.222.3.220/31 Amazon
3528150.222.3.222/31 Amazon
3529150.222.3.224/31 Amazon
3530150.222.3.226/31 Amazon
3531150.222.3.228/31 Amazon
3532150.222.3.230/31 Amazon
3533150.222.3.232/31 Amazon
3534150.222.3.234/31 Amazon
3535150.222.3.236/31 Amazon
3536150.222.3.238/31 Amazon
3537150.222.3.240/31 Amazon
3538150.222.3.242/31 Amazon
3539150.222.3.244/31 Amazon
3540150.222.3.246/31 Amazon
3541150.222.3.248/31 Amazon
3542150.222.3.250/31 Amazon
3543150.222.3.252/31 Amazon
3544150.222.3.254/31 Amazon
3545150.222.5.0/24 Amazon
3546150.222.6.0/24 Amazon
3547150.222.7.0/24 Amazon
3548150.222.10.0/24 Amazon
3549150.222.11.0/31 Amazon
3550150.222.11.74/31 Amazon
3551150.222.11.76/31 Amazon
3552150.222.11.78/31 Amazon
3553150.222.11.80/31 Amazon
3554150.222.11.84/31 Amazon
3555150.222.11.86/31 Amazon
3556150.222.11.88/31 Amazon
3557150.222.11.90/31 Amazon
3558150.222.11.92/31 Amazon
3559150.222.11.94/31 Amazon
3560150.222.11.96/31 Amazon
3561150.222.12.0/24 Amazon
3562150.222.13.0/24 Amazon
3563150.222.14.72/31 Amazon
3564150.222.15.124/32 Amazon
3565150.222.15.125/32 Amazon
3566150.222.15.126/32 Amazon
3567150.222.15.127/32 Amazon
3568150.222.15.128/31 Amazon
3569150.222.15.130/31 Amazon
3570150.222.28.17/32 Amazon
3571150.222.28.18/31 Amazon
3572150.222.28.104/32 Amazon
3573150.222.28.105/32 Amazon
3574150.222.28.106/31 Amazon
3575150.222.28.108/31 Amazon
3576150.222.28.110/31 Amazon
3577150.222.28.112/31 Amazon
3578150.222.28.114/31 Amazon
3579150.222.28.116/31 Amazon
3580150.222.28.118/31 Amazon
3581150.222.28.120/31 Amazon
3582150.222.28.122/31 Amazon
3583150.222.28.124/31 Amazon
3584150.222.28.126/31 Amazon
3585150.222.28.128/31 Amazon
3586150.222.28.130/31 Amazon
3587150.222.28.132/31 Amazon
3588150.222.28.134/31 Amazon
3589150.222.28.136/31 Amazon
3590150.222.28.138/31 Amazon
3591150.222.28.140/31 Amazon
3592150.222.28.142/31 Amazon
3593150.222.66.0/24 Amazon
3594150.222.67.0/24 Amazon
3595150.222.69.0/24 Amazon
3596150.222.70.0/24 Amazon
3597150.222.71.0/24 Amazon
3598150.222.72.0/24 Amazon
3599150.222.73.0/24 Amazon
3600150.222.74.0/24 Amazon
3601150.222.75.0/24 Amazon
3602150.222.76.0/24 Amazon
3603150.222.77.0/24 Amazon
3604150.222.78.0/24 Amazon
3605150.222.79.0/24 Amazon
3606150.222.80.0/24 Amazon
3607150.222.81.0/24 Amazon
3608150.222.82.0/24 Amazon
3609150.222.83.0/24 Amazon
3610150.222.84.0/24 Amazon
3611150.222.85.0/24 Amazon
3612150.222.87.0/24 Amazon
3613150.222.88.0/24 Amazon
3614150.222.89.0/24 Amazon
3615150.222.90.0/24 Amazon
3616150.222.91.0/24 Amazon
3617150.222.92.0/22 Amazon
3618150.222.96.0/24 Amazon
3619150.222.97.0/24 Amazon
3620150.222.98.0/24 Amazon
3621150.222.99.0/24 Amazon
3622150.222.100.0/24 Amazon
3623150.222.101.0/24 Amazon
3624150.222.102.0/24 Amazon
3625150.222.104.0/24 Amazon
3626150.222.105.0/24 Amazon
3627150.222.106.0/24 Amazon
3628150.222.108.0/24 Amazon
3629150.222.109.0/24 Amazon
3630150.222.110.0/24 Amazon
3631150.222.112.0/24 Amazon
3632150.222.113.0/24 Amazon
3633150.222.114.0/24 Amazon
3634150.222.115.0/24 Amazon
3635150.222.116.0/24 Amazon
3636150.222.117.0/24 Amazon
3637150.222.118.0/24 Amazon
3638150.222.119.0/24 Amazon
3639150.222.120.20/31 Amazon
3640150.222.120.62/31 Amazon
3641150.222.120.224/31 Amazon
3642150.222.120.226/31 Amazon
3643150.222.120.228/31 Amazon
3644150.222.120.230/31 Amazon
3645150.222.120.232/31 Amazon
3646150.222.120.234/31 Amazon
3647150.222.120.240/31 Amazon
3648150.222.120.242/31 Amazon
3649150.222.120.244/31 Amazon
3650150.222.120.246/31 Amazon
3651150.222.120.248/31 Amazon
3652150.222.120.250/31 Amazon
3653150.222.120.252/32 Amazon
3654150.222.120.255/32 Amazon
3655150.222.121.0/24 Amazon
3656150.222.122.92/31 Amazon
3657150.222.122.94/31 Amazon
3658150.222.122.96/31 Amazon
3659150.222.122.98/31 Amazon
3660150.222.122.100/31 Amazon
3661150.222.122.102/31 Amazon
3662150.222.122.104/31 Amazon
3663150.222.122.106/31 Amazon
3664150.222.122.108/31 Amazon
3665150.222.122.110/31 Amazon
3666150.222.122.112/31 Amazon
3667150.222.122.114/31 Amazon
3668150.222.122.116/31 Amazon
3669150.222.129.19/32 Amazon
3670150.222.129.20/31 Amazon
3671150.222.129.62/31 Amazon
3672150.222.129.64/31 Amazon
3673150.222.129.66/31 Amazon
3674150.222.129.69/32 Amazon
3675150.222.129.110/31 Amazon
3676150.222.129.112/31 Amazon
3677150.222.129.114/31 Amazon
3678150.222.129.116/31 Amazon
3679150.222.129.118/31 Amazon
3680150.222.129.120/31 Amazon
3681150.222.129.122/31 Amazon
3682150.222.129.124/31 Amazon
3683150.222.129.126/31 Amazon
3684150.222.129.128/31 Amazon
3685150.222.129.130/31 Amazon
3686150.222.129.132/31 Amazon
3687150.222.129.134/31 Amazon
3688150.222.129.136/31 Amazon
3689150.222.129.138/31 Amazon
3690150.222.129.140/31 Amazon
3691150.222.129.142/31 Amazon
3692150.222.129.144/31 Amazon
3693150.222.129.146/31 Amazon
3694150.222.129.152/31 Amazon
3695150.222.129.154/31 Amazon
3696150.222.129.156/31 Amazon
3697150.222.129.158/31 Amazon
3698150.222.129.240/31 Amazon
3699150.222.129.242/31 Amazon
3700150.222.129.244/31 Amazon
3701150.222.129.246/31 Amazon
3702150.222.129.248/31 Amazon
3703150.222.129.250/31 Amazon
3704150.222.129.252/32 Amazon
3705150.222.129.255/32 Amazon
3706150.222.133.0/24 Amazon
3707150.222.134.0/24 Amazon
3708150.222.135.0/24 Amazon
3709150.222.136.0/24 Amazon
3710150.222.138.0/24 Amazon
3711150.222.139.116/30 Amazon
3712150.222.139.120/30 Amazon
3713150.222.139.124/30 Amazon
3714150.222.140.0/24 Amazon
3715150.222.141.0/24 Amazon
3716150.222.142.0/24 Amazon
3717150.222.143.0/24 Amazon
3718150.222.164.208/31 Amazon
3719150.222.164.210/32 Amazon
3720150.222.164.211/32 Amazon
3721150.222.164.220/31 Amazon
3722150.222.164.222/32 Amazon
3723150.222.176.0/22 Amazon
3724150.222.180.0/24 Amazon
3725150.222.196.0/24 Amazon
3726150.222.199.0/25 Amazon
3727150.222.202.0/24 Amazon
3728150.222.203.0/24 Amazon
3729150.222.204.0/24 Amazon
3730150.222.205.0/24 Amazon
3731150.222.206.0/24 Amazon
3732150.222.207.0/24 Amazon
3733150.222.208.64/32 Amazon
3734150.222.208.65/32 Amazon
3735150.222.208.66/31 Amazon
3736150.222.208.68/31 Amazon
3737150.222.208.70/31 Amazon
3738150.222.208.72/31 Amazon
3739150.222.208.74/31 Amazon
3740150.222.208.76/31 Amazon
3741150.222.208.78/31 Amazon
3742150.222.208.80/31 Amazon
3743150.222.208.82/31 Amazon
3744150.222.208.84/31 Amazon
3745150.222.208.86/31 Amazon
3746150.222.208.88/31 Amazon
3747150.222.208.90/31 Amazon
3748150.222.208.92/31 Amazon
3749150.222.208.94/31 Amazon
3750150.222.208.96/31 Amazon
3751150.222.210.0/24 Amazon
3752150.222.212.0/24 Amazon
3753150.222.213.40/32 Amazon
3754150.222.213.41/32 Amazon
3755150.222.214.0/24 Amazon
3756150.222.215.0/24 Amazon
3757150.222.217.17/32 Amazon
3758150.222.217.226/31 Amazon
3759150.222.217.228/30 Amazon
3760150.222.217.232/31 Amazon
3761150.222.217.234/31 Amazon
3762150.222.217.248/31 Amazon
3763150.222.217.250/31 Amazon
3764150.222.218.0/24 Amazon
3765150.222.219.0/24 Amazon
3766150.222.220.0/24 Amazon
3767150.222.221.0/24 Amazon
3768150.222.222.0/24 Amazon
3769150.222.223.0/24 Amazon
3770150.222.224.0/24 Amazon
3771150.222.226.0/24 Amazon
3772150.222.227.0/24 Amazon
3773150.222.228.0/24 Amazon
3774150.222.229.0/24 Amazon
3775150.222.230.92/32 Amazon
3776150.222.230.93/32 Amazon
3777150.222.230.94/31 Amazon
3778150.222.230.96/31 Amazon
3779150.222.230.98/31 Amazon
3780150.222.230.100/31 Amazon
3781150.222.230.102/31 Amazon
3782150.222.230.104/31 Amazon
3783150.222.230.106/31 Amazon
3784150.222.230.108/31 Amazon
3785150.222.230.110/31 Amazon
3786150.222.230.112/31 Amazon
3787150.222.230.114/31 Amazon
3788150.222.230.116/31 Amazon
3789150.222.230.118/31 Amazon
3790150.222.230.120/31 Amazon
3791150.222.230.122/31 Amazon
3792150.222.230.124/31 Amazon
3793150.222.231.0/24 Amazon
3794150.222.232.51/32 Amazon
3795150.222.232.88/32 Amazon
3796150.222.232.94/31 Amazon
3797150.222.232.96/28 Amazon
3798150.222.232.112/31 Amazon
3799150.222.232.114/31 Amazon
3800150.222.232.116/31 Amazon
3801150.222.232.118/31 Amazon
3802150.222.232.120/31 Amazon
3803150.222.233.0/24 Amazon
3804150.222.234.0/32 Amazon
3805150.222.234.1/32 Amazon
3806150.222.234.2/32 Amazon
3807150.222.234.3/32 Amazon
3808150.222.234.4/32 Amazon
3809150.222.234.5/32 Amazon
3810150.222.234.6/31 Amazon
3811150.222.234.8/31 Amazon
3812150.222.234.10/31 Amazon
3813150.222.234.12/31 Amazon
3814150.222.234.14/31 Amazon
3815150.222.234.16/31 Amazon
3816150.222.234.18/31 Amazon
3817150.222.234.20/31 Amazon
3818150.222.234.22/31 Amazon
3819150.222.234.24/31 Amazon
3820150.222.234.26/31 Amazon
3821150.222.234.28/31 Amazon
3822150.222.234.30/31 Amazon
3823150.222.234.32/31 Amazon
3824150.222.234.34/31 Amazon
3825150.222.234.36/31 Amazon
3826150.222.234.38/31 Amazon
3827150.222.234.40/31 Amazon
3828150.222.234.42/31 Amazon
3829150.222.234.44/31 Amazon
3830150.222.234.46/31 Amazon
3831150.222.234.48/31 Amazon
3832150.222.234.50/31 Amazon
3833150.222.234.52/31 Amazon
3834150.222.234.54/31 Amazon
3835150.222.234.56/31 Amazon
3836150.222.234.58/31 Amazon
3837150.222.234.60/31 Amazon
3838150.222.234.62/31 Amazon
3839150.222.234.64/31 Amazon
3840150.222.234.66/31 Amazon
3841150.222.234.68/31 Amazon
3842150.222.234.70/31 Amazon
3843150.222.234.72/31 Amazon
3844150.222.234.74/31 Amazon
3845150.222.234.76/31 Amazon
3846150.222.234.78/31 Amazon
3847150.222.234.80/31 Amazon
3848150.222.234.82/31 Amazon
3849150.222.234.84/31 Amazon
3850150.222.234.86/31 Amazon
3851150.222.234.96/31 Amazon
3852150.222.234.98/31 Amazon
3853150.222.234.100/31 Amazon
3854150.222.234.102/32 Amazon
3855150.222.234.103/32 Amazon
3856150.222.234.104/31 Amazon
3857150.222.234.106/31 Amazon
3858150.222.234.108/31 Amazon
3859150.222.234.110/31 Amazon
3860150.222.234.112/31 Amazon
3861150.222.234.114/31 Amazon
3862150.222.234.116/31 Amazon
3863150.222.234.118/31 Amazon
3864150.222.234.120/31 Amazon
3865150.222.234.122/31 Amazon
3866150.222.234.124/31 Amazon
3867150.222.234.126/31 Amazon
3868150.222.234.128/31 Amazon
3869150.222.234.130/31 Amazon
3870150.222.234.132/31 Amazon
3871150.222.234.134/31 Amazon
3872150.222.234.136/31 Amazon
3873150.222.234.138/31 Amazon
3874150.222.234.140/31 Amazon
3875150.222.234.142/31 Amazon
3876150.222.235.0/24 Amazon
3877150.222.236.0/24 Amazon
3878150.222.237.0/24 Amazon
3879150.222.239.0/24 Amazon
3880150.222.240.131/32 Amazon
3881150.222.240.135/32 Amazon
3882150.222.240.137/32 Amazon
3883150.222.240.161/32 Amazon
3884150.222.240.207/32 Amazon
3885150.222.240.237/32 Amazon
3886150.222.240.245/32 Amazon
3887150.222.240.247/32 Amazon
3888150.222.240.249/32 Amazon
3889150.222.240.251/32 Amazon
3890150.222.242.84/31 Amazon
3891150.222.242.97/32 Amazon
3892150.222.242.99/32 Amazon
3893150.222.242.214/31 Amazon
3894150.222.242.227/32 Amazon
3895150.222.242.229/32 Amazon
3896150.222.242.231/32 Amazon
3897150.222.242.233/32 Amazon
3898150.222.243.9/32 Amazon
3899150.222.243.11/32 Amazon
3900150.222.243.13/32 Amazon
3901150.222.243.15/32 Amazon
3902150.222.243.17/32 Amazon
3903150.222.243.19/32 Amazon
3904150.222.243.33/32 Amazon
3905150.222.243.35/32 Amazon
3906150.222.243.37/32 Amazon
3907150.222.243.39/32 Amazon
3908150.222.243.41/32 Amazon
3909150.222.243.43/32 Amazon
3910150.222.243.45/32 Amazon
3911150.222.243.47/32 Amazon
3912150.222.243.51/32 Amazon
3913150.222.243.53/32 Amazon
3914150.222.243.55/32 Amazon
3915150.222.243.57/32 Amazon
3916150.222.243.59/32 Amazon
3917150.222.243.177/32 Amazon
3918150.222.244.35/32 Amazon
3919150.222.244.37/32 Amazon
3920150.222.245.122/31 Amazon
3921150.222.252.244/31 Amazon
3922150.222.252.246/31 Amazon
3923150.222.252.248/31 Amazon
3924150.222.252.250/31 Amazon
3925157.175.0.0/16 Amazon
3926157.241.0.0/16 Amazon
3927160.1.0.0/16 Amazon
3928161.188.128.0/23 Amazon
3929161.188.130.0/23 Amazon
3930161.188.132.0/23 Amazon
3931161.188.134.0/23 Amazon
3932161.188.136.0/23 Amazon
3933161.188.138.0/23 Amazon
3934161.188.140.0/23 Amazon
3935161.188.142.0/23 Amazon
3936161.188.144.0/23 Amazon
3937161.188.146.0/23 Amazon
3938161.188.148.0/23 Amazon
3939161.188.150.0/23 Amazon
3940161.188.152.0/23 Amazon
3941161.188.154.0/23 Amazon
3942161.188.156.0/23 Amazon
3943161.188.158.0/23 Amazon
3944161.188.160.0/23 Amazon
3945161.189.0.0/16 Amazon
3946162.213.232.0/24 Amazon
3947162.213.233.0/24 Amazon
3948162.213.234.0/23 Amazon
3949162.222.148.0/22 Amazon
3950162.250.236.0/24 Amazon
3951162.250.237.0/24 Amazon
3952162.250.238.0/23 Amazon
3953172.96.97.0/24 Amazon
3954172.96.98.0/24 Amazon
3955172.96.110.0/24 Amazon
3956174.129.0.0/16 Amazon
3957175.41.128.0/18 Amazon
3958175.41.192.0/18 Amazon
3959176.32.64.0/19 Amazon
3960176.32.96.0/21 Amazon
3961176.32.104.0/21 Amazon
3962176.32.112.0/21 Amazon
3963176.32.120.0/22 Amazon
3964176.32.124.128/25 Amazon
3965176.32.125.0/25 Amazon
3966176.32.125.128/26 Amazon
3967176.32.125.192/27 Amazon
3968176.32.125.224/31 Amazon
3969176.32.125.226/31 Amazon
3970176.32.125.228/31 Amazon
3971176.32.125.230/31 Amazon
3972176.32.125.232/31 Amazon
3973176.32.125.234/31 Amazon
3974176.32.125.236/31 Amazon
3975176.32.125.238/31 Amazon
3976176.32.125.240/31 Amazon
3977176.32.125.242/31 Amazon
3978176.32.125.244/31 Amazon
3979176.32.125.246/31 Amazon
3980176.32.125.248/31 Amazon
3981176.32.125.250/31 Amazon
3982176.32.125.252/31 Amazon
3983176.32.125.254/31 Amazon
3984176.34.0.0/19 Amazon
3985176.34.32.0/19 Amazon
3986176.34.64.0/18 Amazon
3987176.34.128.0/17 Amazon
3988177.71.128.0/17 Amazon
3989177.72.240.0/21 Amazon
3990178.236.0.0/20 Amazon
3991180.163.57.0/25 Amazon
3992180.163.57.128/26 Amazon
3993184.72.0.0/18 Amazon
3994184.72.64.0/18 Amazon
3995184.72.128.0/17 Amazon
3996184.73.0.0/16 Amazon
3997184.169.128.0/17 Amazon
3998185.48.120.0/22 Amazon
3999185.143.16.0/24 Amazon
4000195.17.0.0/24 Amazon
4001198.99.2.0/24 Amazon
4002199.127.232.0/22 Amazon
4003203.83.220.0/22 Amazon
4004204.45.0.0/16 Amazon
4005204.236.128.0/18 Amazon
4006204.236.192.0/18 Amazon
4007204.246.160.0/22 Amazon
4008204.246.164.0/22 Amazon
4009204.246.168.0/22 Amazon
4010204.246.172.0/24 Amazon
4011204.246.173.0/24 Amazon
4012204.246.174.0/23 Amazon
4013204.246.176.0/20 Amazon
4014205.251.192.0/21 Amazon
4015205.251.200.0/21 Amazon
4016205.251.208.0/20 Amazon
4017205.251.224.0/22 Amazon
4018205.251.228.0/22 Amazon
4019205.251.232.0/22 Amazon
4020205.251.236.0/22 Amazon
4021205.251.240.0/22 Amazon
4022205.251.244.0/23 Amazon
4023205.251.246.0/24 Amazon
4024205.251.247.0/24 Amazon
4025205.251.248.0/24 Amazon
4026205.251.249.0/24 Amazon
4027205.251.250.0/23 Amazon
4028205.251.252.0/23 Amazon
4029205.251.254.0/24 Amazon
4030207.171.160.0/20 Amazon
4031207.171.176.0/20 Amazon
4032208.86.88.0/23 Amazon
4033208.86.90.0/23 Amazon
4034208.110.48.0/20 Amazon
4035209.54.176.0/21 Amazon
4036209.54.184.0/21 Amazon
4037216.137.32.0/19 Amazon
4038216.182.224.0/21 Amazon
4039216.182.232.0/22 Amazon
4040216.182.236.0/23 Amazon
4041216.182.238.0/23 Amazon
4042223.71.11.0/27 Amazon
4043223.71.71.96/27 Amazon
4044223.71.71.128/25 Amazon
diff --git a/src/fsec-optimize/fsec_optimize.h b/src/fsec-optimize/fsec_optimize.h
index fc9dd7db8..2a77f69aa 100644
--- a/src/fsec-optimize/fsec_optimize.h
+++ b/src/fsec-optimize/fsec_optimize.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fsec-optimize/main.c b/src/fsec-optimize/main.c
index 84bf2d4f9..ec3420e16 100644
--- a/src/fsec-optimize/main.c
+++ b/src/fsec-optimize/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fsec-optimize/optimizer.c b/src/fsec-optimize/optimizer.c
index 4c02de59d..20333a8a8 100644
--- a/src/fsec-optimize/optimizer.c
+++ b/src/fsec-optimize/optimizer.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fsec-print/fsec_print.h b/src/fsec-print/fsec_print.h
index 75a82c11a..a754e2295 100644
--- a/src/fsec-print/fsec_print.h
+++ b/src/fsec-print/fsec_print.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fsec-print/main.c b/src/fsec-print/main.c
index 5bca93d50..039377999 100644
--- a/src/fsec-print/main.c
+++ b/src/fsec-print/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fsec-print/print.c b/src/fsec-print/print.c
index 143a7a53e..f6af20f04 100644
--- a/src/fsec-print/print.c
+++ b/src/fsec-print/print.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fseccomp/fseccomp.h b/src/fseccomp/fseccomp.h
index 97eac9ed8..65337da2a 100644
--- a/src/fseccomp/fseccomp.h
+++ b/src/fseccomp/fseccomp.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fseccomp/main.c b/src/fseccomp/main.c
index 326c29a44..48665ab71 100644
--- a/src/fseccomp/main.c
+++ b/src/fseccomp/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fseccomp/protocol.c b/src/fseccomp/protocol.c
index 48dda61dd..25742c173 100644
--- a/src/fseccomp/protocol.c
+++ b/src/fseccomp/protocol.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fseccomp/seccomp.c b/src/fseccomp/seccomp.c
index 99e671799..49b789755 100644
--- a/src/fseccomp/seccomp.c
+++ b/src/fseccomp/seccomp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fseccomp/seccomp_file.c b/src/fseccomp/seccomp_file.c
index 846c7f335..ee18ca74f 100644
--- a/src/fseccomp/seccomp_file.c
+++ b/src/fseccomp/seccomp_file.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fseccomp/seccomp_secondary.c b/src/fseccomp/seccomp_secondary.c
index 540892026..d4ccd96b2 100644
--- a/src/fseccomp/seccomp_secondary.c
+++ b/src/fseccomp/seccomp_secondary.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/fshaper/fshaper.sh b/src/fshaper/fshaper.sh
index f9a6c4f06..a8379612d 100755
--- a/src/fshaper/fshaper.sh
+++ b/src/fshaper/fshaper.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6TCFILE="" 6TCFILE=""
diff --git a/src/ftee/ftee.h b/src/ftee/ftee.h
index a556efb75..458308a4c 100644
--- a/src/ftee/ftee.h
+++ b/src/ftee/ftee.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/ftee/main.c b/src/ftee/main.c
index 4d447f2c4..d408566fa 100644
--- a/src/ftee/main.c
+++ b/src/ftee/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/include/common.h b/src/include/common.h
index 5bcbaad88..f72ec9738 100644
--- a/src/include/common.h
+++ b/src/include/common.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -73,6 +73,25 @@ static inline int atoip(const char *str, uint32_t *ip) {
73 return 0; 73 return 0;
74} 74}
75 75
76// read an IPv4 address in CIDR format, for example 192.168.1.0/24
77static inline int atocidr(const char *str, uint32_t *ip, uint32_t *mask) {
78 unsigned a, b, c, d, e;
79
80 // extract ip
81 int rv = sscanf(str, "%u.%u.%u.%u/%u", &a, &b, &c, &d, &e);
82 if (rv != 5 || a > 255 || b > 255 || c > 255 || d > 255 || e > 32)
83 return 1;
84 *ip = a * 0x1000000 + b * 0x10000 + c * 0x100 + d;
85
86 // extract mask
87 uint32_t tmp;
88 unsigned i;
89 for (i = 0, *mask = 0, tmp = 0x80000000; i < e; i++, tmp >>= 1) {
90 *mask |= tmp;
91 }
92 return 0;
93}
94
76// verify an ip address is in the network range given by ifip and mask 95// verify an ip address is in the network range given by ifip and mask
77static inline char *in_netrange(uint32_t ip, uint32_t ifip, uint32_t ifmask) { 96static inline char *in_netrange(uint32_t ip, uint32_t ifip, uint32_t ifmask) {
78 if ((ip & ifmask) != (ifip & ifmask)) 97 if ((ip & ifmask) != (ifip & ifmask))
@@ -123,4 +142,5 @@ int pid_proc_cmdline_x11_xpra_xephyr(const pid_t pid);
123int pid_hidepid(void); 142int pid_hidepid(void);
124void warn_dumpable(void); 143void warn_dumpable(void);
125const char *gnu_basename(const char *path); 144const char *gnu_basename(const char *path);
145int *str_to_int_array(const char *str, size_t *sz);
126#endif 146#endif
diff --git a/src/include/euid_common.h b/src/include/euid_common.h
index 8d8dd95f6..f40cbb9de 100644
--- a/src/include/euid_common.h
+++ b/src/include/euid_common.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/include/firejail_user.h b/src/include/firejail_user.h
index cf17fa0cf..6cf895db8 100644
--- a/src/include/firejail_user.h
+++ b/src/include/firejail_user.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/include/gcov_wrapper.h b/src/include/gcov_wrapper.h
index 4aafb8e18..144181ca0 100644
--- a/src/include/gcov_wrapper.h
+++ b/src/include/gcov_wrapper.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2021 Firejail Authors 2 * Copyright (C) 2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/include/ldd_utils.h b/src/include/ldd_utils.h
index ffd6e189f..e9dac1171 100644
--- a/src/include/ldd_utils.h
+++ b/src/include/ldd_utils.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/include/pid.h b/src/include/pid.h
index 17e51f660..7e235b713 100644
--- a/src/include/pid.h
+++ b/src/include/pid.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/include/rundefs.h b/src/include/rundefs.h
index 3db750da3..4ba3e27f4 100644
--- a/src/include/rundefs.h
+++ b/src/include/rundefs.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/include/seccomp.h b/src/include/seccomp.h
index 43bb73a04..9dbe25bfa 100644
--- a/src/include/seccomp.h
+++ b/src/include/seccomp.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/include/syscall.h b/src/include/syscall.h
index 015dd01b9..68be16a04 100644
--- a/src/include/syscall.h
+++ b/src/include/syscall.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/access.c b/src/jailcheck/access.c
index 3c2f46495..3e99b0b52 100644
--- a/src/jailcheck/access.c
+++ b/src/jailcheck/access.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/apparmor.c b/src/jailcheck/apparmor.c
index 64f278046..521ce047e 100644
--- a/src/jailcheck/apparmor.c
+++ b/src/jailcheck/apparmor.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/jailcheck.h b/src/jailcheck/jailcheck.h
index 3f8c89bfb..2d25ee8ce 100644
--- a/src/jailcheck/jailcheck.h
+++ b/src/jailcheck/jailcheck.h
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/main.c b/src/jailcheck/main.c
index 812ac5808..04fc3a6af 100644
--- a/src/jailcheck/main.c
+++ b/src/jailcheck/main.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/network.c b/src/jailcheck/network.c
index 636344e77..474224fc5 100644
--- a/src/jailcheck/network.c
+++ b/src/jailcheck/network.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/noexec.c b/src/jailcheck/noexec.c
index be18ac109..4cf5dabde 100644
--- a/src/jailcheck/noexec.c
+++ b/src/jailcheck/noexec.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/seccomp.c b/src/jailcheck/seccomp.c
index 9345eb970..ac8064f0b 100644
--- a/src/jailcheck/seccomp.c
+++ b/src/jailcheck/seccomp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/sysfiles.c b/src/jailcheck/sysfiles.c
index 9a0d6350e..0df95d496 100644
--- a/src/jailcheck/sysfiles.c
+++ b/src/jailcheck/sysfiles.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/utils.c b/src/jailcheck/utils.c
index c3aaae298..65431e2e1 100644
--- a/src/jailcheck/utils.c
+++ b/src/jailcheck/utils.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/jailcheck/virtual.c b/src/jailcheck/virtual.c
index 09092f9ce..93172d65c 100644
--- a/src/jailcheck/virtual.c
+++ b/src/jailcheck/virtual.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/lib/common.c b/src/lib/common.c
index f1bd7a6fe..91d5125b1 100644
--- a/src/lib/common.c
+++ b/src/lib/common.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -31,6 +31,7 @@
31#include <dirent.h> 31#include <dirent.h>
32#include <string.h> 32#include <string.h>
33#include <time.h> 33#include <time.h>
34#include <limits.h>
34#include "../include/common.h" 35#include "../include/common.h"
35#define BUFLEN 4096 36#define BUFLEN 4096
36 37
@@ -320,6 +321,55 @@ const char *gnu_basename(const char *path) {
320 return last_slash+1; 321 return last_slash+1;
321} 322}
322 323
324// takes string with comma separated int values, returns int array
325int *str_to_int_array(const char *str, size_t *sz) {
326 assert(str && sz);
327
328 size_t curr_sz = 0;
329 size_t arr_sz = 16;
330 int *rv = malloc(arr_sz * sizeof(int));
331 if (!rv)
332 errExit("malloc");
333
334 char *dup = strdup(str);
335 if (!dup)
336 errExit("strdup");
337 char *tok = strtok(dup, ",");
338 if (!tok) {
339 free(dup);
340 free(rv);
341 goto errout;
342 }
343
344 while (tok) {
345 char *end;
346 long val = strtol(tok, &end, 10);
347 if (end == tok || *end != '\0' || val < INT_MIN || val > INT_MAX) {
348 free(dup);
349 free(rv);
350 goto errout;
351 }
352
353 if (curr_sz == arr_sz) {
354 arr_sz *= 2;
355 rv = realloc(rv, arr_sz * sizeof(int));
356 if (!rv)
357 errExit("realloc");
358 }
359 rv[curr_sz++] = val;
360
361 tok = strtok(NULL, ",");
362 }
363 free(dup);
364
365 *sz = curr_sz;
366 return rv;
367
368errout:
369 *sz = 0;
370 return NULL;
371}
372
323//************************** 373//**************************
324// time trace based on getticks function 374// time trace based on getticks function
325//************************** 375//**************************
diff --git a/src/lib/errno.c b/src/lib/errno.c
index 9edb44c22..b666c5646 100644
--- a/src/lib/errno.c
+++ b/src/lib/errno.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/lib/firejail_user.c b/src/lib/firejail_user.c
index d6a3c71ab..bf338ee43 100644
--- a/src/lib/firejail_user.c
+++ b/src/lib/firejail_user.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/lib/ldd_utils.c b/src/lib/ldd_utils.c
index c5dde85b0..bc4f7cf9c 100644
--- a/src/lib/ldd_utils.c
+++ b/src/lib/ldd_utils.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/lib/pid.c b/src/lib/pid.c
index ca62aaa42..ad6403f65 100644
--- a/src/lib/pid.c
+++ b/src/lib/pid.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/lib/syscall.c b/src/lib/syscall.c
index d0d9ff5aa..a17f6423a 100644
--- a/src/lib/syscall.c
+++ b/src/lib/syscall.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
@@ -1678,14 +1678,14 @@ void syscalls_in_list(const char *list, const char *slist, int fd, char **prelis
1678 sl.postlist = NULL; 1678 sl.postlist = NULL;
1679 syscall_check_list(list, syscall_in_list, 0, 0, &sl, native); 1679 syscall_check_list(list, syscall_in_list, 0, 0, &sl, native);
1680 if (!arg_quiet) { 1680 if (!arg_quiet) {
1681 printf("Seccomp list in: %s,", list); 1681 fprintf(stderr, "Seccomp list in: %s,", list);
1682 if (sl.slist) 1682 if (sl.slist)
1683 printf(" check list: %s,", sl.slist); 1683 fprintf(stderr, " check list: %s,", sl.slist);
1684 if (sl.prelist) 1684 if (sl.prelist)
1685 printf(" prelist: %s,", sl.prelist); 1685 fprintf(stderr, " prelist: %s,", sl.prelist);
1686 if (sl.postlist) 1686 if (sl.postlist)
1687 printf(" postlist: %s", sl.postlist); 1687 fprintf(stderr, " postlist: %s", sl.postlist);
1688 printf("\n"); 1688 fprintf(stderr, "\n");
1689 } 1689 }
1690 *prelist = sl.prelist; 1690 *prelist = sl.prelist;
1691 *postlist = sl.postlist; 1691 *postlist = sl.postlist;
diff --git a/src/libpostexecseccomp/libpostexecseccomp.c b/src/libpostexecseccomp/libpostexecseccomp.c
index 1d1eb283b..e2339547e 100644
--- a/src/libpostexecseccomp/libpostexecseccomp.c
+++ b/src/libpostexecseccomp/libpostexecseccomp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/libtrace/libtrace.c b/src/libtrace/libtrace.c
index 319902ff7..c0832cbde 100644
--- a/src/libtrace/libtrace.c
+++ b/src/libtrace/libtrace.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/libtracelog/libtracelog.c b/src/libtracelog/libtracelog.c
index b946cc889..760ac7612 100644
--- a/src/libtracelog/libtracelog.c
+++ b/src/libtracelog/libtracelog.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt
index e35f2837b..e962e18da 100644
--- a/src/man/firejail-profile.txt
+++ b/src/man/firejail-profile.txt
@@ -349,6 +349,7 @@ Build a new /bin in a temporary filesystem, and copy the programs in the list.
349The files in the list must be expressed as relative to the /bin, 349The files in the list must be expressed as relative to the /bin,
350/sbin, /usr/bin, /usr/sbin, or /usr/local/bin directories. 350/sbin, /usr/bin, /usr/sbin, or /usr/local/bin directories.
351The same directory is also bind-mounted over /sbin, /usr/bin and /usr/sbin. 351The same directory is also bind-mounted over /sbin, /usr/bin and /usr/sbin.
352Multiple private-bin commands are allowed and they accumulate.
352.TP 353.TP
353\fBprivate-cache 354\fBprivate-cache
354Mount an empty temporary filesystem on top of the .cache directory in user home. All 355Mount an empty temporary filesystem on top of the .cache directory in user home. All
@@ -374,6 +375,7 @@ the /etc directory, and must not contain the / character
374(e.g., /etc/foo must be expressed as foo, but /etc/foo/bar -- 375(e.g., /etc/foo must be expressed as foo, but /etc/foo/bar --
375expressed as foo/bar -- is disallowed). 376expressed as foo/bar -- is disallowed).
376All modifications are discarded when the sandbox is closed. 377All modifications are discarded when the sandbox is closed.
378Multiple private-etc commands are allowed and they accumulate.
377#ifdef HAVE_PRIVATE_HOME 379#ifdef HAVE_PRIVATE_HOME
378.TP 380.TP
379\fBprivate-home file,directory 381\fBprivate-home file,directory
@@ -489,6 +491,9 @@ Sets the NO_NEW_PRIVS prctl. This ensures that child processes
489cannot acquire new privileges using execve(2); in particular, 491cannot acquire new privileges using execve(2); in particular,
490this means that calling a suid binary (or one with file capabilities) 492this means that calling a suid binary (or one with file capabilities)
491does not result in an increase of privilege. 493does not result in an increase of privilege.
494.TP
495\fBnoprinters
496Disable printers.
492#ifdef HAVE_USERNS 497#ifdef HAVE_USERNS
493.TP 498.TP
494\fBnoroot 499\fBnoroot
@@ -499,7 +504,8 @@ There is no root account (uid 0) defined in the namespace.
499\fBprotocol protocol1,protocol2,protocol3 504\fBprotocol protocol1,protocol2,protocol3
500Enable protocol filter. The filter is based on seccomp and checks the 505Enable protocol filter. The filter is based on seccomp and checks the
501first argument to socket system call. Recognized values: \fBunix\fR, 506first argument to socket system call. Recognized values: \fBunix\fR,
502\fBinet\fR, \fBinet6\fR, \fBnetlink\fR, \fBpacket\fR and \fBbluetooth\fR. 507\fBinet\fR, \fBinet6\fR, \fBnetlink\fR, \fBpacket\fR, and \fBbluetooth\fR.
508Multiple protocol commands are allowed.
503.TP 509.TP
504\fBseccomp 510\fBseccomp
505Enable seccomp filter and blacklist the syscalls in the default list. See man 1 firejail for more details. 511Enable seccomp filter and blacklist the syscalls in the default list. See man 1 firejail for more details.
@@ -721,6 +727,11 @@ env CFLAGS="-W -Wall -Werror"
721.TP 727.TP
722\fBipc-namespace 728\fBipc-namespace
723Enable IPC namespace. 729Enable IPC namespace.
730
731.TP
732\fBkeep-fd
733Inherit open file descriptors to sandbox.
734
724.TP 735.TP
725\fBname sandboxname 736\fBname sandboxname
726Set sandbox name. Example: 737Set sandbox name. Example:
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index b366fed7c..59dc5d310 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -185,10 +185,7 @@ $ firejail "\-\-blacklist=/home/username/My Virtual Machines"
185$ firejail \-\-blacklist=/home/username/My\\ Virtual\\ Machines 185$ firejail \-\-blacklist=/home/username/My\\ Virtual\\ Machines
186.TP 186.TP
187\fB\-\-build 187\fB\-\-build
188The command builds a whitelisted profile. The profile is printed on the screen. If /usr/bin/strace is installed on the system, it also 188The command builds a whitelisted profile. The profile is printed on the screen. The program is run in a very relaxed sandbox, with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported. Chromium and Chromium-based browsers will not work.
189builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox,
190with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported
191in order to allow strace to run. Chromium and Chromium-based browsers will not work.
192.br 189.br
193 190
194.br 191.br
@@ -197,10 +194,8 @@ Example:
197$ firejail --build vlc ~/Videos/test.mp4 194$ firejail --build vlc ~/Videos/test.mp4
198.TP 195.TP
199\fB\-\-build=profile-file 196\fB\-\-build=profile-file
200The command builds a whitelisted profile, and saves it in profile-file. If /usr/bin/strace is installed on the system, it also 197The command builds a whitelisted profile, and saves it in profile-file. The program is run in a very relaxed sandbox,
201builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox, 198with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported. Chromium and Chromium-based browsers will not work.
202with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported
203in order to allow strace to run. Chromium and Chromium-based browsers will not work.
204.br 199.br
205 200
206.br 201.br
@@ -1104,6 +1099,26 @@ Example:
1104$ firejail --keep-dev-shm --private-dev 1099$ firejail --keep-dev-shm --private-dev
1105 1100
1106.TP 1101.TP
1102\fB\-\-keep-fd=all
1103Inherit all open file descriptors to the sandbox. By default only file descriptors 0, 1 and 2 are inherited to the sandbox, and all other file descriptors are closed.
1104.br
1105
1106.br
1107Example:
1108.br
1109$ firejail --keep-fd=all
1110
1111.TP
1112\fB\-\-keep-fd=file_descriptor
1113Don't close specified open file descriptors. By default only file descriptors 0, 1 and 2 are inherited to the sandbox, and all other file descriptors are closed.
1114.br
1115
1116.br
1117Example:
1118.br
1119$ firejail --keep-fd=3,4,5
1120
1121.TP
1107\fB\-\-keep-var-tmp 1122\fB\-\-keep-var-tmp
1108/var/tmp directory is untouched. 1123/var/tmp directory is untouched.
1109.br 1124.br
@@ -1443,6 +1458,28 @@ $ firejail --name=browser --net=eth0 --netfilter firefox &
1443$ firejail --netfilter6.print=browser 1458$ firejail --netfilter6.print=browser
1444 1459
1445.TP 1460.TP
1461\fB\-\-netlock=name/pid
1462Several type of programs (email clients, multiplayer games etc.) talk to a very small
1463number of IP addresses. But the best example is tor browser. It only talks to a guard node,
1464and there are two or three more on standby in case the main one fails.
1465During startup, the browser contacts all of them, after that it keeps talking to the main
1466one... for weeks!
1467
1468Use the network locking feature to build and deploy a network firewall in your sandbox.
1469The firewall allows only the network traffic to the IP addresses detected during the program
1470startup. Traffic to any other address is quietly dropped. By default the startup monitoring
1471time is one minute. Example:
1472.br
1473
1474.br
1475$ firejail --net=eth0 --netlock \\
1476.br
1477--private=~/tor-browser_en-US ./start-tor-browser.desktop
1478.br
1479
1480.br
1481
1482.TP
1446\fB\-\-netmask=address 1483\fB\-\-netmask=address
1447Use this option when you want to assign an IP address in a new namespace and 1484Use this option when you want to assign an IP address in a new namespace and
1448the parent interface specified by --net is not configured. An IP address and 1485the parent interface specified by --net is not configured. An IP address and
@@ -1480,28 +1517,39 @@ PID User RX(KB/s) TX(KB/s) Command
1480.br 1517.br
14817383 netblue 9.045 0.112 firejail \-\-net=eth0 transmission 15187383 netblue 9.045 0.112 firejail \-\-net=eth0 transmission
1482.TP 1519.TP
1483\fB\-\-nettrace=name|pid 1520\fB\-\-nettrace[=name|pid]
1484Monitor TCP and UDP traffic coming into the sandbox specified by name or pid. Only networked sandboxes 1521Monitor TCP and UDP traffic coming into the sandbox specified by name or pid. Only networked sandboxes
1485created with \-\-net are supported. 1522created with \-\-net are supported.
1486.br 1523.br
1487 1524
1488.br 1525.br
1489$ firejail --nettrace=browser 1526Without a name/pid, Firejail will monitor the main system network namespace.
1490.br 1527.br
14919.9.9.9:53 => 192.168.1.60 UDP: 122 B/sec 1528
1492.br 1529.br
149372.21.91.29:80 => 192.168.1.60 TCP: 257 B/sec 1530 $ firejail --nettrace=browser
1494.br 1531.br
149580.92.126.65:123 => 192.168.1.60 UDP: 25 B/sec 1532
1496.br 1533.br
149769.30.241.50:443 => 192.168.1.60 TCP: 88 KB/sec 1534 95 KB/s geoip 457, IP database 4436
1498.br 1535.br
1499140.82.112.4:443 => 192.168.1.60 TCP: 1861 B/sec 1536 52 KB/s *********** 64.222.84.207:443 United States
1500.br 1537.br
1501 1538 33 KB/s ******* 89.147.74.105:63930 Hungary
1539.br
1540 0 B/s 45.90.28.0:443 NextDNS
1541.br
1542 0 B/s 94.70.122.176:52309(UDP) Greece
1543.br
1544 339 B/s 104.26.7.35:443 Cloudflare
1502.br 1545.br
1503(14 streams in the last one minute)
1504 1546
1547.br
1548If /usr/bin/geoiplookup is installed (geoip-bin package in Debian),
1549the country the IP address originates from is added to the trace.
1550We also use the static IP map in /etc/firejail/hostnames
1551to print the domain names for some of the more common websites and cloud platforms.
1552No external services are contacted for reverse IP lookup.
1505#endif 1553#endif
1506.TP 1554.TP
1507\fB\-\-nice=value 1555\fB\-\-nice=value
@@ -1634,6 +1682,10 @@ does not result in an increase of privilege. This option
1634is enabled by default if seccomp filter is activated. 1682is enabled by default if seccomp filter is activated.
1635 1683
1636.TP 1684.TP
1685\fB\-\-noprinters
1686Disable printers.
1687
1688.TP
1637\fB\-\-noprofile 1689\fB\-\-noprofile
1638Do not use a security profile. 1690Do not use a security profile.
1639.br 1691.br
@@ -1855,8 +1907,9 @@ The files in the list must be expressed as relative to the /bin,
1855/sbin, /usr/bin, /usr/sbin, or /usr/local/bin directories. 1907/sbin, /usr/bin, /usr/sbin, or /usr/local/bin directories.
1856If no listed files are found, /bin directory will be empty. 1908If no listed files are found, /bin directory will be empty.
1857The same directory is also bind-mounted over /sbin, /usr/bin, /usr/sbin and /usr/local/bin. 1909The same directory is also bind-mounted over /sbin, /usr/bin, /usr/sbin and /usr/local/bin.
1858All modifications are discarded when the sandbox is closed. File globbing is supported, 1910All modifications are discarded when the sandbox is closed.
1859see \fBFILE GLOBBING\fR section for more details. 1911Multiple private-bin commands are allowed and they accumulate.
1912File globbing is supported, see \fBFILE GLOBBING\fR section for more details.
1860.br 1913.br
1861 1914
1862.br 1915.br
@@ -1952,6 +2005,7 @@ The files and directories in the list must be expressed as relative to
1952the /etc directory (e.g., /etc/foo must be expressed as foo). 2005the /etc directory (e.g., /etc/foo must be expressed as foo).
1953If no listed file is found, /etc directory will be empty. 2006If no listed file is found, /etc directory will be empty.
1954All modifications are discarded when the sandbox is closed. 2007All modifications are discarded when the sandbox is closed.
2008Multiple private-etc commands are allowed and they accumulate.
1955.br 2009.br
1956 2010
1957.br 2011.br
@@ -2110,7 +2164,7 @@ $ firejail \-\-profile.print=browser
2110.TP 2164.TP
2111\fB\-\-protocol=protocol,protocol,protocol 2165\fB\-\-protocol=protocol,protocol,protocol
2112Enable protocol filter. The filter is based on seccomp and checks the first argument to socket system call. 2166Enable protocol filter. The filter is based on seccomp and checks the first argument to socket system call.
2113Recognized values: unix, inet, inet6, netlink, packet and bluetooth. This option is not supported for i386 architecture. 2167Recognized values: unix, inet, inet6, netlink, packet, and bluetooth. This option is not supported for i386 architecture.
2114.br 2168.br
2115 2169
2116.br 2170.br
diff --git a/src/man/preproc.awk b/src/man/preproc.awk
index 1ce5c82de..d3a2b71c9 100755
--- a/src/man/preproc.awk
+++ b/src/man/preproc.awk
@@ -1,6 +1,6 @@
1#!/usr/bin/gawk -E 1#!/usr/bin/gawk -E
2 2
3# Copyright (c) 2019-2021 rusty-snake 3# Copyright (c) 2019-2022 rusty-snake
4# 4#
5# Permission is hereby granted, free of charge, to any person obtaining a copy 5# Permission is hereby granted, free of charge, to any person obtaining a copy
6# of this software and associated documentation files (the "Software"), to deal 6# of this software and associated documentation files (the "Software"), to deal
diff --git a/src/profstats/main.c b/src/profstats/main.c
index bc5047bfe..595a94c11 100644
--- a/src/profstats/main.c
+++ b/src/profstats/main.c
@@ -1,5 +1,5 @@
1 /* 1 /*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/tools/check-caps.sh b/src/tools/check-caps.sh
index b7026b1cd..62c3b9066 100755
--- a/src/tools/check-caps.sh
+++ b/src/tools/check-caps.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6if [ $# -eq 0 ] 6if [ $# -eq 0 ]
diff --git a/src/tools/extract_caps.c b/src/tools/extract_caps.c
index 8da9c452b..5e5b3cdc6 100644
--- a/src/tools/extract_caps.c
+++ b/src/tools/extract_caps.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/tools/extract_errnos.sh b/src/tools/extract_errnos.sh
index 34c416b04..bb430b3e1 100644
--- a/src/tools/extract_errnos.sh
+++ b/src/tools/extract_errnos.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6echo -e "#include <errno.h>\n#include <attr/xattr.h>" | \ 6echo -e "#include <errno.h>\n#include <attr/xattr.h>" | \
diff --git a/src/tools/extract_seccomp.c b/src/tools/extract_seccomp.c
index b5f92d2df..6b644796b 100644
--- a/src/tools/extract_seccomp.c
+++ b/src/tools/extract_seccomp.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/tools/extract_syscalls.c b/src/tools/extract_syscalls.c
index 9159b6576..f77a84123 100644
--- a/src/tools/extract_syscalls.c
+++ b/src/tools/extract_syscalls.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/tools/mkcoverit.sh b/src/tools/mkcoverit.sh
index 86d798a11..c7a57cd21 100755
--- a/src/tools/mkcoverit.sh
+++ b/src/tools/mkcoverit.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# unpack firejail archive 6# unpack firejail archive
diff --git a/src/tools/testuid.c b/src/tools/testuid.c
index a18d57d5e..1bc617522 100644
--- a/src/tools/testuid.c
+++ b/src/tools/testuid.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/tools/ttytest.c b/src/tools/ttytest.c
index 0f72753bc..9e40d289a 100644
--- a/src/tools/ttytest.c
+++ b/src/tools/ttytest.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/tools/unixsocket.c b/src/tools/unixsocket.c
index c4ecabca7..bd638269d 100644
--- a/src/tools/unixsocket.c
+++ b/src/tools/unixsocket.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/src/zsh_completion/_firejail.in b/src/zsh_completion/_firejail.in
index 8c1d758cc..f7cd3cdff 100644
--- a/src/zsh_completion/_firejail.in
+++ b/src/zsh_completion/_firejail.in
@@ -104,6 +104,7 @@ _firejail_args=(
104 '--join-or-start=-[join the sandbox or start a new one name|pid]: :_all_firejails' 104 '--join-or-start=-[join the sandbox or start a new one name|pid]: :_all_firejails'
105 '--keep-config-pulse[disable automatic ~/.config/pulse init]' 105 '--keep-config-pulse[disable automatic ~/.config/pulse init]'
106 '--keep-dev-shm[/dev/shm directory is untouched (even with --private-dev)]' 106 '--keep-dev-shm[/dev/shm directory is untouched (even with --private-dev)]'
107 '--keep-fd[inherit open file descriptors to sandbox]'
107 '--keep-var-tmp[/var/tmp directory is untouched]' 108 '--keep-var-tmp[/var/tmp directory is untouched]'
108 '--machine-id[spoof /etc/machine-id with a random id]' 109 '--machine-id[spoof /etc/machine-id with a random id]'
109 '--memory-deny-write-execute[seccomp filter to block attempts to create memory mappings that are both writable and executable]' 110 '--memory-deny-write-execute[seccomp filter to block attempts to create memory mappings that are both writable and executable]'
@@ -123,6 +124,7 @@ _firejail_args=(
123 '--nogroups[disable supplementary groups]' 124 '--nogroups[disable supplementary groups]'
124 '--noinput[disable input devices]' 125 '--noinput[disable input devices]'
125 '--nonewprivs[sets the NO_NEW_PRIVS prctl]' 126 '--nonewprivs[sets the NO_NEW_PRIVS prctl]'
127 '--noprinters[disable printers]'
126 '--nosound[disable sound system]' 128 '--nosound[disable sound system]'
127 '--nou2f[disable U2F devices]' 129 '--nou2f[disable U2F devices]'
128 '--novideo[disable video devices]' 130 '--novideo[disable video devices]'
diff --git a/test/appimage/appimage-args.exp b/test/appimage/appimage-args.exp
index eecb9bf82..a65197a52 100755
--- a/test/appimage/appimage-args.exp
+++ b/test/appimage/appimage-args.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/appimage/appimage-trace.exp b/test/appimage/appimage-trace.exp
index 2f67eb531..dfd2aaf9b 100755
--- a/test/appimage/appimage-trace.exp
+++ b/test/appimage/appimage-trace.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/appimage/appimage-v1.exp b/test/appimage/appimage-v1.exp
index b8b6e0c96..0fc4ad0f0 100755
--- a/test/appimage/appimage-v1.exp
+++ b/test/appimage/appimage-v1.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/appimage/appimage-v2.exp b/test/appimage/appimage-v2.exp
index 243824f75..8f61de6e9 100755
--- a/test/appimage/appimage-v2.exp
+++ b/test/appimage/appimage-v2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/appimage/appimage.sh b/test/appimage/appimage.sh
index e766b1acd..9afacf5be 100755
--- a/test/appimage/appimage.sh
+++ b/test/appimage/appimage.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/appimage/filename.exp b/test/appimage/filename.exp
index 54d8d722d..711eae8d2 100755
--- a/test/appimage/filename.exp
+++ b/test/appimage/filename.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11-xorg/apps-x11-xorg.sh b/test/apps-x11-xorg/apps-x11-xorg.sh
index 7f37914aa..9ed123979 100755
--- a/test/apps-x11-xorg/apps-x11-xorg.sh
+++ b/test/apps-x11-xorg/apps-x11-xorg.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/apps-x11-xorg/firefox.exp b/test/apps-x11-xorg/firefox.exp
index 12fcc13ce..23c5d4675 100755
--- a/test/apps-x11-xorg/firefox.exp
+++ b/test/apps-x11-xorg/firefox.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11-xorg/thunderbird.exp b/test/apps-x11-xorg/thunderbird.exp
index 5c810c517..ede339cbe 100755
--- a/test/apps-x11-xorg/thunderbird.exp
+++ b/test/apps-x11-xorg/thunderbird.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11-xorg/transmission-gtk.exp b/test/apps-x11-xorg/transmission-gtk.exp
index e0f519c00..0b7d87b07 100755
--- a/test/apps-x11-xorg/transmission-gtk.exp
+++ b/test/apps-x11-xorg/transmission-gtk.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11-xorg/transmission-qt.exp b/test/apps-x11-xorg/transmission-qt.exp
index 02a015968..ef036b569 100755
--- a/test/apps-x11-xorg/transmission-qt.exp
+++ b/test/apps-x11-xorg/transmission-qt.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11/apps-x11.sh b/test/apps-x11/apps-x11.sh
index 9954cb736..a3c946ca4 100755
--- a/test/apps-x11/apps-x11.sh
+++ b/test/apps-x11/apps-x11.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/apps-x11/chromium.exp b/test/apps-x11/chromium.exp
index 92739048c..227ce66a1 100755
--- a/test/apps-x11/chromium.exp
+++ b/test/apps-x11/chromium.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11/firefox.exp b/test/apps-x11/firefox.exp
index 69efc79d9..7861187ed 100755
--- a/test/apps-x11/firefox.exp
+++ b/test/apps-x11/firefox.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11/thunderbird.exp b/test/apps-x11/thunderbird.exp
index 7cfc957b7..d9c4ca396 100755
--- a/test/apps-x11/thunderbird.exp
+++ b/test/apps-x11/thunderbird.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11/transmission-gtk.exp b/test/apps-x11/transmission-gtk.exp
index 53e396a9e..a87b76582 100755
--- a/test/apps-x11/transmission-gtk.exp
+++ b/test/apps-x11/transmission-gtk.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11/x11-none.exp b/test/apps-x11/x11-none.exp
index b45751aa7..d2cc69c98 100755
--- a/test/apps-x11/x11-none.exp
+++ b/test/apps-x11/x11-none.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11/x11-xephyr.exp b/test/apps-x11/x11-xephyr.exp
index 3da0e1a46..e3c5f2742 100755
--- a/test/apps-x11/x11-xephyr.exp
+++ b/test/apps-x11/x11-xephyr.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11/xterm-xephyr.exp b/test/apps-x11/xterm-xephyr.exp
index 5edbadad9..0e2bc8fc4 100755
--- a/test/apps-x11/xterm-xephyr.exp
+++ b/test/apps-x11/xterm-xephyr.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11/xterm-xorg.exp b/test/apps-x11/xterm-xorg.exp
index a2a027729..269ab35bf 100755
--- a/test/apps-x11/xterm-xorg.exp
+++ b/test/apps-x11/xterm-xorg.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps-x11/xterm-xpra.exp b/test/apps-x11/xterm-xpra.exp
index 0f1458d15..187d408f4 100755
--- a/test/apps-x11/xterm-xpra.exp
+++ b/test/apps-x11/xterm-xpra.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/apps.sh b/test/apps/apps.sh
index c332fe416..83e977ba0 100755
--- a/test/apps/apps.sh
+++ b/test/apps/apps.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/apps/chromium.exp b/test/apps/chromium.exp
index d65bc93a9..0248f9d88 100755
--- a/test/apps/chromium.exp
+++ b/test/apps/chromium.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/deluge.exp b/test/apps/deluge.exp
index 25c98623c..efe964b75 100755
--- a/test/apps/deluge.exp
+++ b/test/apps/deluge.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/fbreader.exp b/test/apps/fbreader.exp
index 67301c1d2..1d5c6df79 100755
--- a/test/apps/fbreader.exp
+++ b/test/apps/fbreader.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/filezilla.exp b/test/apps/filezilla.exp
index da37f1eff..b1397278c 100755
--- a/test/apps/filezilla.exp
+++ b/test/apps/filezilla.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/firefox.exp b/test/apps/firefox.exp
index 2a6f18276..706e97e18 100755
--- a/test/apps/firefox.exp
+++ b/test/apps/firefox.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/gnome-mplayer.exp b/test/apps/gnome-mplayer.exp
index 564220d95..64530e957 100755
--- a/test/apps/gnome-mplayer.exp
+++ b/test/apps/gnome-mplayer.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/gthumb.exp b/test/apps/gthumb.exp
index 569adcd34..4a381677f 100755
--- a/test/apps/gthumb.exp
+++ b/test/apps/gthumb.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/hexchat.exp b/test/apps/hexchat.exp
index adea02216..20d8dbd0f 100755
--- a/test/apps/hexchat.exp
+++ b/test/apps/hexchat.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/kcalc.exp b/test/apps/kcalc.exp
index aaeb5221d..6c2769b8f 100755
--- a/test/apps/kcalc.exp
+++ b/test/apps/kcalc.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/ktorrent.exp b/test/apps/ktorrent.exp
index 8693f5f1d..98f51dcd5 100755
--- a/test/apps/ktorrent.exp
+++ b/test/apps/ktorrent.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/midori.exp b/test/apps/midori.exp
index fae41e6da..1c6ac59a2 100755
--- a/test/apps/midori.exp
+++ b/test/apps/midori.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/opera.exp b/test/apps/opera.exp
index 990476ed5..40520f9f5 100755
--- a/test/apps/opera.exp
+++ b/test/apps/opera.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/qbittorrent.exp b/test/apps/qbittorrent.exp
index bc0386335..32d35997b 100755
--- a/test/apps/qbittorrent.exp
+++ b/test/apps/qbittorrent.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/thunderbird.exp b/test/apps/thunderbird.exp
index 10d0bb2f6..ba7b3abee 100755
--- a/test/apps/thunderbird.exp
+++ b/test/apps/thunderbird.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/transmission-qt.exp b/test/apps/transmission-qt.exp
index fec18a8bf..18bd6c469 100755
--- a/test/apps/transmission-qt.exp
+++ b/test/apps/transmission-qt.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/uget-gtk.exp b/test/apps/uget-gtk.exp
index caa4063b9..6ba56d193 100755
--- a/test/apps/uget-gtk.exp
+++ b/test/apps/uget-gtk.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/vlc.exp b/test/apps/vlc.exp
index ce3df1ba6..6114c2ee4 100755
--- a/test/apps/vlc.exp
+++ b/test/apps/vlc.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/wine.exp b/test/apps/wine.exp
index 982a0c6d9..58f2adcb6 100755
--- a/test/apps/wine.exp
+++ b/test/apps/wine.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/apps/xchat.exp b/test/apps/xchat.exp
index 9ed75d821..f5e0b545b 100755
--- a/test/apps/xchat.exp
+++ b/test/apps/xchat.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/chroot/chroot.sh b/test/chroot/chroot.sh
index 1ac5cf47e..3c3e7311b 100755
--- a/test/chroot/chroot.sh
+++ b/test/chroot/chroot.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/chroot/configure b/test/chroot/configure
index 747dc4383..3f3555193 100755
--- a/test/chroot/configure
+++ b/test/chroot/configure
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# build a very small chroot 6# build a very small chroot
diff --git a/test/chroot/fs_chroot.exp b/test/chroot/fs_chroot.exp
index 650425829..86864bc5b 100755
--- a/test/chroot/fs_chroot.exp
+++ b/test/chroot/fs_chroot.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/chroot/unchroot-as-root.exp b/test/chroot/unchroot-as-root.exp
index b88367054..aed2f8a62 100755
--- a/test/chroot/unchroot-as-root.exp
+++ b/test/chroot/unchroot-as-root.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/chroot/unchroot.c b/test/chroot/unchroot.c
index 643983ce4..5d006e318 100644
--- a/test/chroot/unchroot.c
+++ b/test/chroot/unchroot.c
@@ -1,5 +1,5 @@
1// This file is part of Firejail project 1// This file is part of Firejail project
2// Copyright (C) 2014-2021 Firejail Authors 2// Copyright (C) 2014-2022 Firejail Authors
3// License GPL v2 3// License GPL v2
4 4
5// simple unchroot example from http://linux-vserver.org/Secure_chroot_Barrier 5// simple unchroot example from http://linux-vserver.org/Secure_chroot_Barrier
diff --git a/test/compile/compile.sh b/test/compile/compile.sh
index 101998187..0a87913f1 100755
--- a/test/compile/compile.sh
+++ b/test/compile/compile.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# not currently covered 6# not currently covered
diff --git a/test/environment/allow-debuggers.exp b/test/environment/allow-debuggers.exp
index f660c123a..412e24e9b 100755
--- a/test/environment/allow-debuggers.exp
+++ b/test/environment/allow-debuggers.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/csh.exp b/test/environment/csh.exp
index f8ced07b5..eedb1bab7 100755
--- a/test/environment/csh.exp
+++ b/test/environment/csh.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/dash.exp b/test/environment/dash.exp
index 983a527cf..c2ece31f0 100755
--- a/test/environment/dash.exp
+++ b/test/environment/dash.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/deterministic-exit-code.exp b/test/environment/deterministic-exit-code.exp
index 1a1e53605..d7585c401 100755
--- a/test/environment/deterministic-exit-code.exp
+++ b/test/environment/deterministic-exit-code.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 4 6set timeout 4
diff --git a/test/environment/deterministic-shutdown.exp b/test/environment/deterministic-shutdown.exp
index 3931893be..be4e9c42e 100755
--- a/test/environment/deterministic-shutdown.exp
+++ b/test/environment/deterministic-shutdown.exp
@@ -1,16 +1,17 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 5 6set timeout 10
7spawn $env(SHELL) 7spawn $env(SHELL)
8match_max 100000 8match_max 100000
9 9
10send -- "firejail --deterministic-shutdown bash -c \"sleep 10 & exec sleep 1\"\r" 10send -- "firejail --deterministic-shutdown bash -c \"sleep 100 & exec sleep 1\"\r"
11expect { 11expect {
12 timeout {puts "TESTING ERROR 0\n";exit} 12 timeout {puts "TESTING ERROR 0\n";exit}
13 "Parent is shutting down, bye..." 13 "Parent is shutting down, bye..."
14} 14}
15after 100
15 16
16puts "\nall done\n" 17puts "\nall done\n"
diff --git a/test/environment/dns.exp b/test/environment/dns.exp
index 5b06b51c0..1fe6449b7 100755
--- a/test/environment/dns.exp
+++ b/test/environment/dns.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/doubledash.exp b/test/environment/doubledash.exp
index 275755337..1a9ecebe1 100755
--- a/test/environment/doubledash.exp
+++ b/test/environment/doubledash.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/env.exp b/test/environment/env.exp
index 4f6f8a1b7..b5ebe883c 100755
--- a/test/environment/env.exp
+++ b/test/environment/env.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/environment.sh b/test/environment/environment.sh
index c35f69b0c..2b77973ac 100755
--- a/test/environment/environment.sh
+++ b/test/environment/environment.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
@@ -127,5 +127,11 @@ echo "TESTING: deterministic exit code (test/environment/deterministic-exit-code
127echo "TESTING: deterministic shutdown (test/environment/deterministic-shutdown.exp)" 127echo "TESTING: deterministic shutdown (test/environment/deterministic-shutdown.exp)"
128./deterministic-shutdown.exp 128./deterministic-shutdown.exp
129 129
130echo "TESTING: keep fd (test/environment/keep-fd.exp)"
131./keep-fd.exp
132
133echo "TESTING: keep fd errors (test/environment/keep-fd-bad.exp)"
134./keep-fd-bad.exp
135
130echo "TESTING: retain umask (test/environment/umask.exp)" 136echo "TESTING: retain umask (test/environment/umask.exp)"
131(umask 123 && ./umask.exp) 137(umask 123 && ./umask.exp)
diff --git a/test/environment/extract_command.exp b/test/environment/extract_command.exp
index f91a10fa6..e719e6658 100755
--- a/test/environment/extract_command.exp
+++ b/test/environment/extract_command.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/firejail-in-firejail.exp b/test/environment/firejail-in-firejail.exp
index 459056260..10d5c9074 100755
--- a/test/environment/firejail-in-firejail.exp
+++ b/test/environment/firejail-in-firejail.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/hostfile.exp b/test/environment/hostfile.exp
index 6b98863e5..709eb5d36 100755
--- a/test/environment/hostfile.exp
+++ b/test/environment/hostfile.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6 6
diff --git a/test/environment/ibus.exp b/test/environment/ibus.exp
index 089736f33..e6095dc44 100755
--- a/test/environment/ibus.exp
+++ b/test/environment/ibus.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/keep-fd-bad.exp b/test/environment/keep-fd-bad.exp
new file mode 100755
index 000000000..e8b411ea0
--- /dev/null
+++ b/test/environment/keep-fd-bad.exp
@@ -0,0 +1,40 @@
1#!/usr/bin/expect -f
2# This file is part of Firejail project
3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2
5
6set timeout 10
7spawn $env(SHELL)
8match_max 100000
9
10
11send -- "firejail --noprofile --keep-fd=\r"
12expect {
13 timeout {puts "TESTING ERROR 0\n";exit}
14 "Error: invalid keep-fd option"
15}
16after 100
17
18send -- "firejail --noprofile --keep-fd=,,,\r"
19expect {
20 timeout {puts "TESTING ERROR 1\n";exit}
21 "Error: invalid keep-fd option"
22}
23after 100
24
25send -- "firejail --noprofile --keep-fd=dall\r"
26expect {
27 timeout {puts "TESTING ERROR 2\n";exit}
28 "Error: invalid keep-fd option"
29}
30after 100
31
32send -- "firejail --noprofile --keep-fd=6,7,8,10b,11\r"
33expect {
34 timeout {puts "TESTING ERROR 3\n";exit}
35 "Error: invalid keep-fd option"
36}
37after 100
38
39
40puts "\nall done\n"
diff --git a/test/environment/keep-fd.exp b/test/environment/keep-fd.exp
new file mode 100755
index 000000000..222234ceb
--- /dev/null
+++ b/test/environment/keep-fd.exp
@@ -0,0 +1,223 @@
1#!/usr/bin/expect -f
2# This file is part of Firejail project
3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2
5
6set timeout 10
7spawn $env(SHELL)
8match_max 100000
9
10
11#
12# obtain some open file descriptors
13#
14send -- "exec {WRITE_FD}> blabla\r"
15after 100
16
17send -- "readlink -v /proc/self/fd/\$WRITE_FD\r"
18expect {
19 timeout {puts "TESTING ERROR 0\n";exit}
20 "/blabla"
21}
22after 100
23
24send -- "exec {READ_FD}< blabla\r"
25after 100
26
27send -- "readlink -v /proc/self/fd/\$READ_FD\r"
28expect {
29 timeout {puts "TESTING ERROR 1\n";exit}
30 "/blabla"
31}
32after 100
33
34
35#
36# inherit environment variables
37#
38send -- "export READ_FD\r"
39send -- "export WRITE_FD\r"
40after 100
41
42
43#
44# close all file descriptors
45# 0, 1, 2 stay open
46#
47send -- "firejail --noprofile\r"
48expect {
49 timeout {puts "TESTING ERROR 2\n";exit}
50 "Child process initialized"
51}
52after 100
53
54# off by one because of ls
55send -- "ls /proc/self/fd | wc -w\r"
56expect {
57 timeout {puts "TESTING ERROR 3\n";exit}
58 "4"
59}
60after 100
61
62send -- "readlink -v /proc/self/fd/\$READ_FD\r"
63expect {
64 timeout {puts "TESTING ERROR 4\n";exit}
65 "No such file or directory"
66}
67after 100
68
69send -- "readlink -v /proc/self/fd/\$WRITE_FD\r"
70expect {
71 timeout {puts "TESTING ERROR 5\n";exit}
72 "No such file or directory"
73}
74after 100
75
76send -- "exit\r"
77after 500
78
79
80#
81# keep one file descriptor
82#
83send -- "firejail --noprofile --keep-fd=\$READ_FD\r"
84expect {
85 timeout {puts "TESTING ERROR 6\n";exit}
86 "Child process initialized"
87}
88after 100
89
90# off by one because of ls
91send -- "ls /proc/self/fd | wc -w\r"
92expect {
93 timeout {puts "TESTING ERROR 7\n";exit}
94 "5"
95}
96after 100
97
98send -- "readlink -v /proc/self/fd/\$READ_FD\r"
99expect {
100 timeout {puts "TESTING ERROR 8\n";exit}
101 "/blabla"
102}
103after 100
104
105send -- "readlink -v /proc/self/fd/\$WRITE_FD\r"
106expect {
107 timeout {puts "TESTING ERROR 9\n";exit}
108 "No such file or directory"
109}
110after 100
111
112send -- "exit\r"
113after 500
114
115
116#
117# keep other file descriptor
118#
119send -- "firejail --noprofile --keep-fd=\$WRITE_FD\r"
120expect {
121 timeout {puts "TESTING ERROR 10\n";exit}
122 "Child process initialized"
123}
124after 100
125
126# off by one because of ls
127send -- "ls /proc/self/fd | wc -w\r"
128expect {
129 timeout {puts "TESTING ERROR 11\n";exit}
130 "5"
131}
132after 100
133
134send -- "readlink -v /proc/self/fd/\$READ_FD\r"
135expect {
136 timeout {puts "TESTING ERROR 12\n";exit}
137 "No such file or directory"
138}
139after 100
140
141send -- "readlink -v /proc/self/fd/\$WRITE_FD\r"
142expect {
143 timeout {puts "TESTING ERROR 13\n";exit}
144 "/blabla"
145}
146after 100
147
148send -- "exit\r"
149after 500
150
151
152#
153# keep both file descriptors
154#
155send -- "firejail --noprofile --keep-fd=\$READ_FD,\$WRITE_FD\r"
156expect {
157 timeout {puts "TESTING ERROR 14\n";exit}
158 "Child process initialized"
159}
160after 100
161
162# off by one because of ls
163send -- "ls /proc/self/fd | wc -w\r"
164expect {
165 timeout {puts "TESTING ERROR 15\n";exit}
166 "6"
167}
168after 100
169
170send -- "readlink -v /proc/self/fd/\$READ_FD\r"
171expect {
172 timeout {puts "TESTING ERROR 16\n";exit}
173 "/blabla"
174}
175after 100
176
177send -- "readlink -v /proc/self/fd/\$WRITE_FD\r"
178expect {
179 timeout {puts "TESTING ERROR 17\n";exit}
180 "/blabla"
181}
182after 100
183
184send -- "exit\r"
185after 500
186
187
188#
189# keep all file descriptors
190#
191send -- "firejail --noprofile --keep-fd=all\r"
192expect {
193 timeout {puts "TESTING ERROR 18\n";exit}
194 "Child process initialized"
195}
196after 100
197
198send -- "readlink -v /proc/self/fd/\$READ_FD\r"
199expect {
200 timeout {puts "TESTING ERROR 19\n";exit}
201 "/blabla"
202}
203after 100
204
205send -- "readlink -v /proc/self/fd/\$WRITE_FD\r"
206expect {
207 timeout {puts "TESTING ERROR 20\n";exit}
208 "/blabla"
209}
210after 100
211
212send -- "exit\r"
213after 500
214
215
216#
217# cleanup
218#
219send -- "rm -f blabla\r"
220after 100
221
222
223puts "\nall done\n"
diff --git a/test/environment/machineid.exp b/test/environment/machineid.exp
index f0b3d2942..b7eb5c911 100755
--- a/test/environment/machineid.exp
+++ b/test/environment/machineid.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6 6
diff --git a/test/environment/nice.exp b/test/environment/nice.exp
index 80591978d..69e641448 100755
--- a/test/environment/nice.exp
+++ b/test/environment/nice.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/output.exp b/test/environment/output.exp
index dd03001d7..2b9594b61 100755
--- a/test/environment/output.exp
+++ b/test/environment/output.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/output.sh b/test/environment/output.sh
index edf7dc4cb..329cb40c7 100755
--- a/test/environment/output.sh
+++ b/test/environment/output.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6i="0" 6i="0"
diff --git a/test/environment/quiet.exp b/test/environment/quiet.exp
index 510491738..b1b3b0173 100755
--- a/test/environment/quiet.exp
+++ b/test/environment/quiet.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 4 6set timeout 4
diff --git a/test/environment/rlimit-bad-profile.exp b/test/environment/rlimit-bad-profile.exp
index b1572afb6..627cc860f 100755
--- a/test/environment/rlimit-bad-profile.exp
+++ b/test/environment/rlimit-bad-profile.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/rlimit-bad.exp b/test/environment/rlimit-bad.exp
index c05e14b97..24df1874c 100755
--- a/test/environment/rlimit-bad.exp
+++ b/test/environment/rlimit-bad.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/rlimit-join.exp b/test/environment/rlimit-join.exp
index aa8a203c0..42a8df390 100755
--- a/test/environment/rlimit-join.exp
+++ b/test/environment/rlimit-join.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/rlimit-profile.exp b/test/environment/rlimit-profile.exp
index 4071675ee..d0365d5e3 100755
--- a/test/environment/rlimit-profile.exp
+++ b/test/environment/rlimit-profile.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/rlimit.exp b/test/environment/rlimit.exp
index 6fcb554a7..3bdbab4c2 100755
--- a/test/environment/rlimit.exp
+++ b/test/environment/rlimit.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/shell-none.exp b/test/environment/shell-none.exp
index 507225326..0af1bb88b 100755
--- a/test/environment/shell-none.exp
+++ b/test/environment/shell-none.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/sound.exp b/test/environment/sound.exp
index e5fa27e77..784cdfe1b 100755
--- a/test/environment/sound.exp
+++ b/test/environment/sound.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6 6
diff --git a/test/environment/timeout.exp b/test/environment/timeout.exp
index ea0dd67b7..901bed2e8 100755
--- a/test/environment/timeout.exp
+++ b/test/environment/timeout.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/umask.exp b/test/environment/umask.exp
index e1f520fcd..d336ed2cd 100755
--- a/test/environment/umask.exp
+++ b/test/environment/umask.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/environment/zsh.exp b/test/environment/zsh.exp
index a750ac55c..13eee3433 100755
--- a/test/environment/zsh.exp
+++ b/test/environment/zsh.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fcopy/cmdline.exp b/test/fcopy/cmdline.exp
index 00e44e489..b6b404d9c 100755
--- a/test/fcopy/cmdline.exp
+++ b/test/fcopy/cmdline.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fcopy/dircopy.exp b/test/fcopy/dircopy.exp
index 633d12d08..a779f80cd 100755
--- a/test/fcopy/dircopy.exp
+++ b/test/fcopy/dircopy.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# 6#
@@ -12,9 +12,21 @@ match_max 100000
12 12
13send -- "rm -fr dest/*\r" 13send -- "rm -fr dest/*\r"
14after 100 14after 100
15send -- "cd src\r"
16after 100
17send -- "ln -s ../dircopy.exp dircopy.exp\r"
18after 100
19send -- "cd ..\r"
20after 100
15 21
16send -- "fcopy src dest\r" 22send -- "fcopy src dest\r"
17after 100 23after 100
24send -- "cd src\r"
25after 100
26send -- "ln -s ../dircopy.exp dircopy.exp\r"
27after 100
28send -- "cd ..\r"
29after 100
18 30
19send -- "find dest\r" 31send -- "find dest\r"
20expect { 32expect {
@@ -135,5 +147,7 @@ expect {
135 147
136send -- "rm -fr dest/*\r" 148send -- "rm -fr dest/*\r"
137after 100 149after 100
150send -- "rm -f src/dircopy.exp\r"
151after 100
138 152
139puts "\nall done\n" 153puts "\nall done\n"
diff --git a/test/fcopy/fcopy.sh b/test/fcopy/fcopy.sh
index 822f6a9cd..fca599889 100755
--- a/test/fcopy/fcopy.sh
+++ b/test/fcopy/fcopy.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
@@ -19,13 +19,14 @@ mkdir dest
19echo "TESTING: fcopy cmdline (test/fcopy/cmdline.exp)" 19echo "TESTING: fcopy cmdline (test/fcopy/cmdline.exp)"
20./cmdline.exp 20./cmdline.exp
21 21
22echo "TESTING: fcopy directory (test/fcopy/dircopy.exp)"
23./dircopy.exp
24
25echo "TESTING: fcopy file (test/fcopy/filecopy.exp)" 22echo "TESTING: fcopy file (test/fcopy/filecopy.exp)"
26./filecopy.exp 23./filecopy.exp
27 24
28echo "TESTING: fcopy link (test/fcopy/linkcopy.exp)" 25echo "TESTING: fcopy link (test/fcopy/linkcopy.exp)"
29./linkcopy.exp 26./linkcopy.exp
30 27
28echo "TESTING: fcopy directory (test/fcopy/dircopy.exp)"
29./dircopy.exp
30
31rm -fr dest/* 31rm -fr dest/*
32rm -f src/dircopy.exp \ No newline at end of file
diff --git a/test/fcopy/filecopy.exp b/test/fcopy/filecopy.exp
index fb911e222..155c1ce31 100755
--- a/test/fcopy/filecopy.exp
+++ b/test/fcopy/filecopy.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# 6#
diff --git a/test/fcopy/linkcopy.exp b/test/fcopy/linkcopy.exp
index dbc33c6a7..7c085e552 100755
--- a/test/fcopy/linkcopy.exp
+++ b/test/fcopy/linkcopy.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# 6#
@@ -12,6 +12,12 @@ match_max 100000
12 12
13send -- "rm -fr dest/*\r" 13send -- "rm -fr dest/*\r"
14after 100 14after 100
15send -- "cd src\r"
16after 100
17send -- "ln -s ../dircopy.exp dircopy.exp\r"
18after 100
19send -- "cd ..\r"
20after 100
15 21
16send -- "fcopy src/dircopy.exp dest\r" 22send -- "fcopy src/dircopy.exp dest\r"
17after 100 23after 100
@@ -19,7 +25,7 @@ after 100
19send -- "find dest\r" 25send -- "find dest\r"
20expect { 26expect {
21 timeout {puts "TESTING ERROR 0\n";exit} 27 timeout {puts "TESTING ERROR 0\n";exit}
22 "dest/" 28 "dest"
23} 29}
24expect { 30expect {
25 timeout {puts "TESTING ERROR 1\n";exit} 31 timeout {puts "TESTING ERROR 1\n";exit}
@@ -27,11 +33,11 @@ expect {
27} 33}
28after 100 34after 100
29 35
30
31send -- "ls -al dest\r" 36send -- "ls -al dest\r"
32expect { 37expect {
33 timeout {puts "TESTING ERROR 2\n";exit} 38 timeout {puts "TESTING ERROR 2\n";exit}
34 "lrwxrwxrwx" 39 "rwxr-xr-x" { puts "umask 0022\n" }
40 "rwxrwxr-x" { puts "umask 0002\n" }
35} 41}
36after 100 42after 100
37send -- "stty -echo\r" 43send -- "stty -echo\r"
@@ -52,5 +58,7 @@ expect {
52 58
53send -- "rm -fr dest/*\r" 59send -- "rm -fr dest/*\r"
54after 100 60after 100
61send -- "rm -f src/dircopy.exp\r"
62after 100
55 63
56puts "\nall done\n" 64puts "\nall done\n"
diff --git a/test/fcopy/src/dircopy.exp b/test/fcopy/src/dircopy.exp
deleted file mode 120000
index 2acf88f7b..000000000
--- a/test/fcopy/src/dircopy.exp
+++ /dev/null
@@ -1 +0,0 @@
1../dircopy.exp \ No newline at end of file
diff --git a/test/features/1.1.exp b/test/features/1.1.exp
index fe1e0f132..1262ff403 100755
--- a/test/features/1.1.exp
+++ b/test/features/1.1.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# disable /boot 6# disable /boot
diff --git a/test/features/1.10.exp b/test/features/1.10.exp
index 5dd03ecef..846532e71 100755
--- a/test/features/1.10.exp
+++ b/test/features/1.10.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# disable /selinux 6# disable /selinux
diff --git a/test/features/1.2.exp b/test/features/1.2.exp
index f7a55b445..76b143a40 100755
--- a/test/features/1.2.exp
+++ b/test/features/1.2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# new /proc 6# new /proc
diff --git a/test/features/1.4.exp b/test/features/1.4.exp
index 66a8c1175..7b4839bd7 100755
--- a/test/features/1.4.exp
+++ b/test/features/1.4.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# mask other users 6# mask other users
diff --git a/test/features/1.5.exp b/test/features/1.5.exp
index ba0aea220..a13a87893 100755
--- a/test/features/1.5.exp
+++ b/test/features/1.5.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# PID namespace 6# PID namespace
diff --git a/test/features/1.6.exp b/test/features/1.6.exp
index 89fa29de0..e53c6e2bf 100755
--- a/test/features/1.6.exp
+++ b/test/features/1.6.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# new /var/log 6# new /var/log
diff --git a/test/features/1.7.exp b/test/features/1.7.exp
index 3e9c0908f..f0987dcdc 100755
--- a/test/features/1.7.exp
+++ b/test/features/1.7.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# new /var/tmp 6# new /var/tmp
diff --git a/test/features/1.8.exp b/test/features/1.8.exp
index 15936c2fb..36c85e1cf 100755
--- a/test/features/1.8.exp
+++ b/test/features/1.8.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# disable /etc/firejail and ~/.config/firejail 6# disable /etc/firejail and ~/.config/firejail
diff --git a/test/features/2.1.exp b/test/features/2.1.exp
index 6e741a1c2..586ab6490 100755
--- a/test/features/2.1.exp
+++ b/test/features/2.1.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# hostname 6# hostname
diff --git a/test/features/2.2.exp b/test/features/2.2.exp
index 3f30d0bad..18828de12 100755
--- a/test/features/2.2.exp
+++ b/test/features/2.2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# DNS 6# DNS
diff --git a/test/features/2.3.exp b/test/features/2.3.exp
index 6c520fdba..dba3a47e1 100755
--- a/test/features/2.3.exp
+++ b/test/features/2.3.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# mac-vlan 6# mac-vlan
diff --git a/test/features/2.4.exp b/test/features/2.4.exp
index 74b7881f0..e2f080617 100755
--- a/test/features/2.4.exp
+++ b/test/features/2.4.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# bridge 6# bridge
diff --git a/test/features/2.5.exp b/test/features/2.5.exp
index bc3e44e8f..ed8a01b36 100755
--- a/test/features/2.5.exp
+++ b/test/features/2.5.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# interface 6# interface
diff --git a/test/features/2.6.exp b/test/features/2.6.exp
index 7c763e6f1..081bdeb94 100755
--- a/test/features/2.6.exp
+++ b/test/features/2.6.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# default gateway 6# default gateway
diff --git a/test/features/3.1.exp b/test/features/3.1.exp
index 6ba56517a..dcf51fc9c 100755
--- a/test/features/3.1.exp
+++ b/test/features/3.1.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# private 6# private
diff --git a/test/features/3.10.exp b/test/features/3.10.exp
index 4797c765b..e6dbbf93b 100755
--- a/test/features/3.10.exp
+++ b/test/features/3.10.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# whitelist tmp 6# whitelist tmp
diff --git a/test/features/3.11.exp b/test/features/3.11.exp
index b26d7b888..bf528ef25 100755
--- a/test/features/3.11.exp
+++ b/test/features/3.11.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# mkdir 6# mkdir
diff --git a/test/features/3.2.exp b/test/features/3.2.exp
index df73b9786..b4a0b04fe 100755
--- a/test/features/3.2.exp
+++ b/test/features/3.2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# read-only 6# read-only
diff --git a/test/features/3.3.exp b/test/features/3.3.exp
index 499718dbd..fc1a982ec 100755
--- a/test/features/3.3.exp
+++ b/test/features/3.3.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# blacklist 6# blacklist
diff --git a/test/features/3.4.exp b/test/features/3.4.exp
index e59ff8a38..0e1a7df5f 100755
--- a/test/features/3.4.exp
+++ b/test/features/3.4.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# whitelist home 6# whitelist home
diff --git a/test/features/3.5.exp b/test/features/3.5.exp
index 8c37aebb3..a595df398 100755
--- a/test/features/3.5.exp
+++ b/test/features/3.5.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# private-dev 6# private-dev
diff --git a/test/features/3.6.exp b/test/features/3.6.exp
index 0149a04cd..439b40411 100755
--- a/test/features/3.6.exp
+++ b/test/features/3.6.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# private-etc 6# private-etc
diff --git a/test/features/3.7.exp b/test/features/3.7.exp
index 9d3e7265c..b966f34e5 100755
--- a/test/features/3.7.exp
+++ b/test/features/3.7.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# private-tmp 6# private-tmp
diff --git a/test/features/3.8.exp b/test/features/3.8.exp
index 5546ef15b..0fa74813c 100755
--- a/test/features/3.8.exp
+++ b/test/features/3.8.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# private-bin 6# private-bin
diff --git a/test/features/3.9.exp b/test/features/3.9.exp
index 6029160a6..47db477ca 100755
--- a/test/features/3.9.exp
+++ b/test/features/3.9.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# whitelist dev 6# whitelist dev
diff --git a/test/features/test.sh b/test/features/test.sh
index 392e6c159..b507c6d37 100755
--- a/test/features/test.sh
+++ b/test/features/test.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export LC_ALL=C 6export LC_ALL=C
diff --git a/test/filters/apparmor.exp b/test/filters/apparmor.exp
index f20326fe0..c7e793ca3 100755
--- a/test/filters/apparmor.exp
+++ b/test/filters/apparmor.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/caps-join.exp b/test/filters/caps-join.exp
index 4f3a2832d..e9b5f59d0 100755
--- a/test/filters/caps-join.exp
+++ b/test/filters/caps-join.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/caps-print.exp b/test/filters/caps-print.exp
index e8465aee1..8c51bb796 100755
--- a/test/filters/caps-print.exp
+++ b/test/filters/caps-print.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/caps.exp b/test/filters/caps.exp
index 8776e83d4..c29794ea3 100755
--- a/test/filters/caps.exp
+++ b/test/filters/caps.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/debug.exp b/test/filters/debug.exp
index b2ca95191..769c03273 100755
--- a/test/filters/debug.exp
+++ b/test/filters/debug.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/filters.sh b/test/filters/filters.sh
index eb4e4702c..885c5a000 100755
--- a/test/filters/filters.sh
+++ b/test/filters/filters.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/filters/fseccomp.exp b/test/filters/fseccomp.exp
index 6becbff22..ff0179a1c 100755
--- a/test/filters/fseccomp.exp
+++ b/test/filters/fseccomp.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/memwrexe-32.exp b/test/filters/memwrexe-32.exp
index 1aeaacc82..f7b59f43f 100755
--- a/test/filters/memwrexe-32.exp
+++ b/test/filters/memwrexe-32.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/memwrexe.c b/test/filters/memwrexe.c
index d8bf4edaa..042c31086 100644
--- a/test/filters/memwrexe.c
+++ b/test/filters/memwrexe.c
@@ -1,5 +1,5 @@
1// This file is part of Firejail project 1// This file is part of Firejail project
2// Copyright (C) 2014-2021 Firejail Authors 2// Copyright (C) 2014-2022 Firejail Authors
3// License GPL v2 3// License GPL v2
4 4
5#include <stdio.h> 5#include <stdio.h>
diff --git a/test/filters/memwrexe.exp b/test/filters/memwrexe.exp
index 2b170803c..9d08509e9 100755
--- a/test/filters/memwrexe.exp
+++ b/test/filters/memwrexe.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/noroot.exp b/test/filters/noroot.exp
index 5fc16c47f..504b17239 100755
--- a/test/filters/noroot.exp
+++ b/test/filters/noroot.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/protocol.exp b/test/filters/protocol.exp
index 09c742378..cbc7fdc1a 100755
--- a/test/filters/protocol.exp
+++ b/test/filters/protocol.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-bad-empty.exp b/test/filters/seccomp-bad-empty.exp
index 5e7c8e1b5..484dc32a9 100755
--- a/test/filters/seccomp-bad-empty.exp
+++ b/test/filters/seccomp-bad-empty.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-chmod-profile.exp b/test/filters/seccomp-chmod-profile.exp
index 5587e056c..c754b48fa 100755
--- a/test/filters/seccomp-chmod-profile.exp
+++ b/test/filters/seccomp-chmod-profile.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-chmod.exp b/test/filters/seccomp-chmod.exp
index 0d01d4ff2..39baa5533 100755
--- a/test/filters/seccomp-chmod.exp
+++ b/test/filters/seccomp-chmod.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-chown.exp b/test/filters/seccomp-chown.exp
index 0a19229b4..553f164b1 100755
--- a/test/filters/seccomp-chown.exp
+++ b/test/filters/seccomp-chown.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-debug-32.exp b/test/filters/seccomp-debug-32.exp
index 677ca4e30..b232a7df3 100755
--- a/test/filters/seccomp-debug-32.exp
+++ b/test/filters/seccomp-debug-32.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-debug.exp b/test/filters/seccomp-debug.exp
index 852abf822..d2413697d 100755
--- a/test/filters/seccomp-debug.exp
+++ b/test/filters/seccomp-debug.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-empty.exp b/test/filters/seccomp-empty.exp
index 3baa7f0c6..79944b1ba 100755
--- a/test/filters/seccomp-empty.exp
+++ b/test/filters/seccomp-empty.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-errno.exp b/test/filters/seccomp-errno.exp
index 6c7c63e88..3b6759a40 100755
--- a/test/filters/seccomp-errno.exp
+++ b/test/filters/seccomp-errno.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-join.exp b/test/filters/seccomp-join.exp
index 9a8767ed7..1e62e75e7 100755
--- a/test/filters/seccomp-join.exp
+++ b/test/filters/seccomp-join.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-numeric.exp b/test/filters/seccomp-numeric.exp
index 59fc26884..fa1d8ada9 100755
--- a/test/filters/seccomp-numeric.exp
+++ b/test/filters/seccomp-numeric.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-postexec.exp b/test/filters/seccomp-postexec.exp
index fe0e40e60..1d4166067 100755
--- a/test/filters/seccomp-postexec.exp
+++ b/test/filters/seccomp-postexec.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-ptrace.exp b/test/filters/seccomp-ptrace.exp
index 05fd6eabb..c857527d6 100755
--- a/test/filters/seccomp-ptrace.exp
+++ b/test/filters/seccomp-ptrace.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-run-files.exp b/test/filters/seccomp-run-files.exp
index 1e3827f0f..59a576c20 100755
--- a/test/filters/seccomp-run-files.exp
+++ b/test/filters/seccomp-run-files.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/filters/seccomp-su.exp b/test/filters/seccomp-su.exp
index 4bd8b5e93..ddded4111 100755
--- a/test/filters/seccomp-su.exp
+++ b/test/filters/seccomp-su.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fnetfilter/cmdline.exp b/test/fnetfilter/cmdline.exp
index 16e8ccb81..514d3f890 100755
--- a/test/fnetfilter/cmdline.exp
+++ b/test/fnetfilter/cmdline.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fnetfilter/copy.exp b/test/fnetfilter/copy.exp
index 6c672141f..b03b3e19b 100755
--- a/test/fnetfilter/copy.exp
+++ b/test/fnetfilter/copy.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fnetfilter/default.exp b/test/fnetfilter/default.exp
index fee9fb5f3..8ba5f6858 100755
--- a/test/fnetfilter/default.exp
+++ b/test/fnetfilter/default.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fnetfilter/fnetfilter.sh b/test/fnetfilter/fnetfilter.sh
index 9fac92d39..9ad822753 100755
--- a/test/fnetfilter/fnetfilter.sh
+++ b/test/fnetfilter/fnetfilter.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/fnetfilter/template.exp b/test/fnetfilter/template.exp
index 0ff09a024..216762325 100755
--- a/test/fnetfilter/template.exp
+++ b/test/fnetfilter/template.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/fs.sh b/test/fs/fs.sh
index 9c3310b31..e06aacee0 100755
--- a/test/fs/fs.sh
+++ b/test/fs/fs.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/fs/fs_dev_shm.exp b/test/fs/fs_dev_shm.exp
index 5f0503494..0c819fe99 100755
--- a/test/fs/fs_dev_shm.exp
+++ b/test/fs/fs_dev_shm.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/fs_var_lock.exp b/test/fs/fs_var_lock.exp
index 3ea98c3e3..e2efd389d 100755
--- a/test/fs/fs_var_lock.exp
+++ b/test/fs/fs_var_lock.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/fs_var_tmp.exp b/test/fs/fs_var_tmp.exp
index c7d4b0c20..b8e7ea73d 100755
--- a/test/fs/fs_var_tmp.exp
+++ b/test/fs/fs_var_tmp.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/fscheck-bindnoroot.exp b/test/fs/fscheck-bindnoroot.exp
index 53a3922ee..6142a270a 100755
--- a/test/fs/fscheck-bindnoroot.exp
+++ b/test/fs/fscheck-bindnoroot.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/fscheck-private.exp b/test/fs/fscheck-private.exp
index ab39b43e1..0b3f41115 100755
--- a/test/fs/fscheck-private.exp
+++ b/test/fs/fscheck-private.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/fscheck-readonly.exp b/test/fs/fscheck-readonly.exp
index 5d4821dea..6c58f41da 100755
--- a/test/fs/fscheck-readonly.exp
+++ b/test/fs/fscheck-readonly.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/fscheck-tmpfs.exp b/test/fs/fscheck-tmpfs.exp
index 78b6efb76..c9d237d72 100755
--- a/test/fs/fscheck-tmpfs.exp
+++ b/test/fs/fscheck-tmpfs.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/invalid_filename.exp b/test/fs/invalid_filename.exp
index 7c4797976..dd63bf647 100755
--- a/test/fs/invalid_filename.exp
+++ b/test/fs/invalid_filename.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/kmsg.exp b/test/fs/kmsg.exp
index 209cb8d3b..acaca2cd0 100755
--- a/test/fs/kmsg.exp
+++ b/test/fs/kmsg.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/macro.exp b/test/fs/macro.exp
index 45e892088..1d32a9cd0 100755
--- a/test/fs/macro.exp
+++ b/test/fs/macro.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/mkdir.exp b/test/fs/mkdir.exp
index da04a431c..b9e8d5ce4 100755
--- a/test/fs/mkdir.exp
+++ b/test/fs/mkdir.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 3 6set timeout 3
diff --git a/test/fs/mkdir_mkfile.exp b/test/fs/mkdir_mkfile.exp
index eddc6ebfb..406f2c87f 100755
--- a/test/fs/mkdir_mkfile.exp
+++ b/test/fs/mkdir_mkfile.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/noblacklist-blacklist-noexec.exp b/test/fs/noblacklist-blacklist-noexec.exp
index 9f5794a7d..7a3fb8263 100755
--- a/test/fs/noblacklist-blacklist-noexec.exp
+++ b/test/fs/noblacklist-blacklist-noexec.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/noblacklist-blacklist-readonly.exp b/test/fs/noblacklist-blacklist-readonly.exp
index 558d3ac9c..d164184e7 100755
--- a/test/fs/noblacklist-blacklist-readonly.exp
+++ b/test/fs/noblacklist-blacklist-readonly.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/option_bind_user.exp b/test/fs/option_bind_user.exp
index 08b892121..c58c23d8c 100755
--- a/test/fs/option_bind_user.exp
+++ b/test/fs/option_bind_user.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/option_blacklist.exp b/test/fs/option_blacklist.exp
index 48dfcc069..f3e1ec5a1 100755
--- a/test/fs/option_blacklist.exp
+++ b/test/fs/option_blacklist.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/option_blacklist_file.exp b/test/fs/option_blacklist_file.exp
index 247e69121..638c25f6a 100755
--- a/test/fs/option_blacklist_file.exp
+++ b/test/fs/option_blacklist_file.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/option_blacklist_glob.exp b/test/fs/option_blacklist_glob.exp
index a4be4a97d..bea08767e 100755
--- a/test/fs/option_blacklist_glob.exp
+++ b/test/fs/option_blacklist_glob.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private-bin.exp b/test/fs/private-bin.exp
index b5d205780..301141579 100755
--- a/test/fs/private-bin.exp
+++ b/test/fs/private-bin.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private-cache.exp b/test/fs/private-cache.exp
index 3244c21c1..4abfdcef0 100755
--- a/test/fs/private-cache.exp
+++ b/test/fs/private-cache.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private-cwd.exp b/test/fs/private-cwd.exp
index 54804a6a6..e9c4bdacd 100755
--- a/test/fs/private-cwd.exp
+++ b/test/fs/private-cwd.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private-etc-empty.exp b/test/fs/private-etc-empty.exp
index 9be18f9bd..f1ced02c7 100755
--- a/test/fs/private-etc-empty.exp
+++ b/test/fs/private-etc-empty.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private-etc.exp b/test/fs/private-etc.exp
index 7d0e9f619..2b7fcd83d 100755
--- a/test/fs/private-etc.exp
+++ b/test/fs/private-etc.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private-home-dir.exp b/test/fs/private-home-dir.exp
index bd8cab16f..14eebaf8b 100755
--- a/test/fs/private-home-dir.exp
+++ b/test/fs/private-home-dir.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private-home.exp b/test/fs/private-home.exp
index 6fbe8b0f6..fbe40a89b 100755
--- a/test/fs/private-home.exp
+++ b/test/fs/private-home.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private-homedir.exp b/test/fs/private-homedir.exp
index 78fb705ec..f14d20c7b 100755
--- a/test/fs/private-homedir.exp
+++ b/test/fs/private-homedir.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private-lib.exp b/test/fs/private-lib.exp
index f32affabb..6ad48beb7 100755
--- a/test/fs/private-lib.exp
+++ b/test/fs/private-lib.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6 6
diff --git a/test/fs/private-whitelist.exp b/test/fs/private-whitelist.exp
index 1879a3d54..1c2a13d16 100755
--- a/test/fs/private-whitelist.exp
+++ b/test/fs/private-whitelist.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/private.exp b/test/fs/private.exp
index d4f7fc893..d2cac6b05 100755
--- a/test/fs/private.exp
+++ b/test/fs/private.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/read-write.exp b/test/fs/read-write.exp
index 6c0f755da..138834209 100755
--- a/test/fs/read-write.exp
+++ b/test/fs/read-write.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/sys_fs.exp b/test/fs/sys_fs.exp
index de7fadf6c..f501b48ca 100755
--- a/test/fs/sys_fs.exp
+++ b/test/fs/sys_fs.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/whitelist-dev.exp b/test/fs/whitelist-dev.exp
index d0466bbeb..83e6bad49 100755
--- a/test/fs/whitelist-dev.exp
+++ b/test/fs/whitelist-dev.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/whitelist-double.exp b/test/fs/whitelist-double.exp
index e653517a6..f9eeee038 100755
--- a/test/fs/whitelist-double.exp
+++ b/test/fs/whitelist-double.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/whitelist-empty.exp b/test/fs/whitelist-empty.exp
index dbc04cf30..cd72b3ef9 100755
--- a/test/fs/whitelist-empty.exp
+++ b/test/fs/whitelist-empty.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 30 6set timeout 30
diff --git a/test/fs/whitelist-noexec.exp b/test/fs/whitelist-noexec.exp
index e1c39b66f..d997aba72 100755
--- a/test/fs/whitelist-noexec.exp
+++ b/test/fs/whitelist-noexec.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/whitelist-readonly.exp b/test/fs/whitelist-readonly.exp
index f9d78b7c0..4c29c746b 100755
--- a/test/fs/whitelist-readonly.exp
+++ b/test/fs/whitelist-readonly.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/whitelist-whitespace.exp b/test/fs/whitelist-whitespace.exp
index 1b1c4c1cb..66a4f8549 100755
--- a/test/fs/whitelist-whitespace.exp
+++ b/test/fs/whitelist-whitespace.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/fs/whitelist.exp b/test/fs/whitelist.exp
index dcc2276b8..2a970ca37 100755
--- a/test/fs/whitelist.exp
+++ b/test/fs/whitelist.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/4bridges_arp.exp b/test/network/4bridges_arp.exp
index d608128f8..ccf6050fc 100755
--- a/test/network/4bridges_arp.exp
+++ b/test/network/4bridges_arp.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/4bridges_ip.exp b/test/network/4bridges_ip.exp
index 586dfcba9..af47391ef 100755
--- a/test/network/4bridges_ip.exp
+++ b/test/network/4bridges_ip.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/bandwidth.exp b/test/network/bandwidth.exp
index d73669ebe..6b85aa07f 100755
--- a/test/network/bandwidth.exp
+++ b/test/network/bandwidth.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/configure b/test/network/configure
index f75e9b23f..2b7b257bc 100755
--- a/test/network/configure
+++ b/test/network/configure
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6brctl addbr br0 6brctl addbr br0
diff --git a/test/network/dns-print.exp b/test/network/dns-print.exp
index 5ee4c0d19..760e9c252 100755
--- a/test/network/dns-print.exp
+++ b/test/network/dns-print.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/firemon-arp.exp b/test/network/firemon-arp.exp
index 8e0a0b1b0..5caa4e8bd 100755
--- a/test/network/firemon-arp.exp
+++ b/test/network/firemon-arp.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/firemon-interfaces.exp b/test/network/firemon-interfaces.exp
index 494496a26..f49e4c470 100755
--- a/test/network/firemon-interfaces.exp
+++ b/test/network/firemon-interfaces.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/firemon-route.exp b/test/network/firemon-route.exp
index a1ded08c1..a3af6b2c6 100755
--- a/test/network/firemon-route.exp
+++ b/test/network/firemon-route.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/hostname.exp b/test/network/hostname.exp
index 825f1f6cf..3fe684a75 100755
--- a/test/network/hostname.exp
+++ b/test/network/hostname.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/interface.exp b/test/network/interface.exp
index 78178e233..4ae5b1da6 100755
--- a/test/network/interface.exp
+++ b/test/network/interface.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5# 5#
6# interface 6# interface
diff --git a/test/network/ip6.exp b/test/network/ip6.exp
index ed29964c6..ddc50754f 100755
--- a/test/network/ip6.exp
+++ b/test/network/ip6.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/iprange.exp b/test/network/iprange.exp
index 2690a128a..cfb1f25c7 100755
--- a/test/network/iprange.exp
+++ b/test/network/iprange.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_arp.exp b/test/network/net_arp.exp
index 84912cddd..4c4e893b1 100755
--- a/test/network/net_arp.exp
+++ b/test/network/net_arp.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_badip.exp b/test/network/net_badip.exp
index b09f4d192..b3fde5dc1 100755
--- a/test/network/net_badip.exp
+++ b/test/network/net_badip.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_defaultgw.exp b/test/network/net_defaultgw.exp
index 19dd94dbd..e154daccf 100755
--- a/test/network/net_defaultgw.exp
+++ b/test/network/net_defaultgw.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_defaultgw2.exp b/test/network/net_defaultgw2.exp
index 4f5864822..c32549d63 100755
--- a/test/network/net_defaultgw2.exp
+++ b/test/network/net_defaultgw2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_defaultgw3.exp b/test/network/net_defaultgw3.exp
index dc3589c3c..708c37a47 100755
--- a/test/network/net_defaultgw3.exp
+++ b/test/network/net_defaultgw3.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_ip.exp b/test/network/net_ip.exp
index 098eed758..604791f69 100755
--- a/test/network/net_ip.exp
+++ b/test/network/net_ip.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_local.exp b/test/network/net_local.exp
index d5d4170e8..54e821a90 100755
--- a/test/network/net_local.exp
+++ b/test/network/net_local.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_mac.exp b/test/network/net_mac.exp
index e067f604f..05400a761 100755
--- a/test/network/net_mac.exp
+++ b/test/network/net_mac.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_macvlan2.exp b/test/network/net_macvlan2.exp
index 1f67f059e..9be0a8580 100755
--- a/test/network/net_macvlan2.exp
+++ b/test/network/net_macvlan2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_mtu.exp b/test/network/net_mtu.exp
index 439e05334..254207a4e 100755
--- a/test/network/net_mtu.exp
+++ b/test/network/net_mtu.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_netfilter.exp b/test/network/net_netfilter.exp
index 8a949c22b..65865122a 100755
--- a/test/network/net_netfilter.exp
+++ b/test/network/net_netfilter.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_noip.exp b/test/network/net_noip.exp
index 53b719f6c..37211d923 100755
--- a/test/network/net_noip.exp
+++ b/test/network/net_noip.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_noip2.exp b/test/network/net_noip2.exp
index aa74d6ba8..ebba23e81 100755
--- a/test/network/net_noip2.exp
+++ b/test/network/net_noip2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_none.exp b/test/network/net_none.exp
index c8787c342..95b1cf086 100755
--- a/test/network/net_none.exp
+++ b/test/network/net_none.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_profile.exp b/test/network/net_profile.exp
index e7c6530df..236603ff1 100755
--- a/test/network/net_profile.exp
+++ b/test/network/net_profile.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_scan.exp b/test/network/net_scan.exp
index b9260925a..90e2e6b9d 100755
--- a/test/network/net_scan.exp
+++ b/test/network/net_scan.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_unconfigured.exp b/test/network/net_unconfigured.exp
index d2b60d73c..434edaea3 100755
--- a/test/network/net_unconfigured.exp
+++ b/test/network/net_unconfigured.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/net_veth.exp b/test/network/net_veth.exp
index cd4e64e24..22388ed89 100755
--- a/test/network/net_veth.exp
+++ b/test/network/net_veth.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/netfilter-template.exp b/test/network/netfilter-template.exp
index dadea1430..f77e4f025 100755
--- a/test/network/netfilter-template.exp
+++ b/test/network/netfilter-template.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/netns.exp b/test/network/netns.exp
index 9ef4ed554..f33e5f3c0 100755
--- a/test/network/netns.exp
+++ b/test/network/netns.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/netstats.exp b/test/network/netstats.exp
index e15e2f42d..b07fbd535 100755
--- a/test/network/netstats.exp
+++ b/test/network/netstats.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/network/network.sh b/test/network/network.sh
index 9f2b9e1cd..1f676ff50 100755
--- a/test/network/network.sh
+++ b/test/network/network.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/network/tcpserver.c b/test/network/tcpserver.c
index 72730b674..d2c0a6e5d 100644
--- a/test/network/tcpserver.c
+++ b/test/network/tcpserver.c
@@ -1,5 +1,5 @@
1/* 1/*
2 * Copyright (C) 2014-2021 Firejail Authors 2 * Copyright (C) 2014-2022 Firejail Authors
3 * 3 *
4 * This file is part of firejail project 4 * This file is part of firejail project
5 * 5 *
diff --git a/test/network/veth-name.exp b/test/network/veth-name.exp
index 1790381e3..1be6a15ea 100755
--- a/test/network/veth-name.exp
+++ b/test/network/veth-name.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/overlay/firefox-x11-xorg.exp b/test/overlay/firefox-x11-xorg.exp
index ecb9288b0..da8948b86 100755
--- a/test/overlay/firefox-x11-xorg.exp
+++ b/test/overlay/firefox-x11-xorg.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/overlay/firefox-x11.exp b/test/overlay/firefox-x11.exp
index 5b7b1bec3..652385cda 100755
--- a/test/overlay/firefox-x11.exp
+++ b/test/overlay/firefox-x11.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/overlay/firefox.exp b/test/overlay/firefox.exp
index 25c6e5e07..d77d85498 100755
--- a/test/overlay/firefox.exp
+++ b/test/overlay/firefox.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/overlay/fs-named.exp b/test/overlay/fs-named.exp
index df1dfc244..d2bfd43a3 100755
--- a/test/overlay/fs-named.exp
+++ b/test/overlay/fs-named.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/overlay/fs-tmpfs.exp b/test/overlay/fs-tmpfs.exp
index 5bd2b25fc..c3794ffed 100755
--- a/test/overlay/fs-tmpfs.exp
+++ b/test/overlay/fs-tmpfs.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/overlay/fs.exp b/test/overlay/fs.exp
index 3314e849d..85d8c50b1 100755
--- a/test/overlay/fs.exp
+++ b/test/overlay/fs.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/overlay/overlay.sh b/test/overlay/overlay.sh
index f1daba935..490b180e1 100755
--- a/test/overlay/overlay.sh
+++ b/test/overlay/overlay.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/private-lib/atril.exp b/test/private-lib/atril.exp
index 679799f02..b420f4477 100755
--- a/test/private-lib/atril.exp
+++ b/test/private-lib/atril.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/dig.exp b/test/private-lib/dig.exp
index 39f3f6d49..fd40cd48c 100755
--- a/test/private-lib/dig.exp
+++ b/test/private-lib/dig.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/eog.exp b/test/private-lib/eog.exp
index ac6ecfff7..dc6771482 100755
--- a/test/private-lib/eog.exp
+++ b/test/private-lib/eog.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/eom.exp b/test/private-lib/eom.exp
index 47e749712..6ddf3edbe 100755
--- a/test/private-lib/eom.exp
+++ b/test/private-lib/eom.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/evince.exp b/test/private-lib/evince.exp
index 1e270a2ef..e21ce1fb9 100755
--- a/test/private-lib/evince.exp
+++ b/test/private-lib/evince.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/galculator.exp b/test/private-lib/galculator.exp
index 68ff9f834..7438b0be6 100755
--- a/test/private-lib/galculator.exp
+++ b/test/private-lib/galculator.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/gedit.exp b/test/private-lib/gedit.exp
index 67be5c215..c89630613 100755
--- a/test/private-lib/gedit.exp
+++ b/test/private-lib/gedit.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/gnome-calculator.exp b/test/private-lib/gnome-calculator.exp
index 67712bd67..e0e4b5f8c 100755
--- a/test/private-lib/gnome-calculator.exp
+++ b/test/private-lib/gnome-calculator.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/gnome-logs.exp b/test/private-lib/gnome-logs.exp
index f671effe4..c5ed97578 100755
--- a/test/private-lib/gnome-logs.exp
+++ b/test/private-lib/gnome-logs.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/gnome-nettool.exp b/test/private-lib/gnome-nettool.exp
index a68084776..51382ba0b 100755
--- a/test/private-lib/gnome-nettool.exp
+++ b/test/private-lib/gnome-nettool.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/gnome-system-log.exp b/test/private-lib/gnome-system-log.exp
index c3b1f2377..60047e020 100755
--- a/test/private-lib/gnome-system-log.exp
+++ b/test/private-lib/gnome-system-log.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/gpicview.exp b/test/private-lib/gpicview.exp
index b438c6de3..7aa9e6e16 100755
--- a/test/private-lib/gpicview.exp
+++ b/test/private-lib/gpicview.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/leafpad.exp b/test/private-lib/leafpad.exp
index fbe8e284c..79f13d98c 100755
--- a/test/private-lib/leafpad.exp
+++ b/test/private-lib/leafpad.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/mousepad.exp b/test/private-lib/mousepad.exp
index f47dfe464..96923caa9 100755
--- a/test/private-lib/mousepad.exp
+++ b/test/private-lib/mousepad.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/pavucontrol.exp b/test/private-lib/pavucontrol.exp
index 7b8883ade..896a53863 100755
--- a/test/private-lib/pavucontrol.exp
+++ b/test/private-lib/pavucontrol.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/pluma.exp b/test/private-lib/pluma.exp
index 99d4299fb..955142511 100755
--- a/test/private-lib/pluma.exp
+++ b/test/private-lib/pluma.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/private-lib.sh b/test/private-lib/private-lib.sh
index a70c3fad6..d168c2b1b 100755
--- a/test/private-lib/private-lib.sh
+++ b/test/private-lib/private-lib.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3g 6export MALLOC_CHECK_=3g
diff --git a/test/private-lib/transmission-gtk.exp b/test/private-lib/transmission-gtk.exp
index 3c5402c81..4ecc4fa5a 100755
--- a/test/private-lib/transmission-gtk.exp
+++ b/test/private-lib/transmission-gtk.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/whois.exp b/test/private-lib/whois.exp
index 83dc54c76..29190253c 100755
--- a/test/private-lib/whois.exp
+++ b/test/private-lib/whois.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/private-lib/xcalc.exp b/test/private-lib/xcalc.exp
index 7cd74d3bd..6eb56e360 100755
--- a/test/private-lib/xcalc.exp
+++ b/test/private-lib/xcalc.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/conditional.exp b/test/profiles/conditional.exp
index b06b983c1..97ac01503 100755
--- a/test/profiles/conditional.exp
+++ b/test/profiles/conditional.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/ignore.exp b/test/profiles/ignore.exp
index e7f210a46..7d13a8b72 100755
--- a/test/profiles/ignore.exp
+++ b/test/profiles/ignore.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/profile_appname.exp b/test/profiles/profile_appname.exp
index 240a44697..fce278b4c 100755
--- a/test/profiles/profile_appname.exp
+++ b/test/profiles/profile_appname.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/profile_comment.exp b/test/profiles/profile_comment.exp
index a2be510c1..907635c2f 100755
--- a/test/profiles/profile_comment.exp
+++ b/test/profiles/profile_comment.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/profile_followlnk.exp b/test/profiles/profile_followlnk.exp
index 0500eac35..c41276cfb 100755
--- a/test/profiles/profile_followlnk.exp
+++ b/test/profiles/profile_followlnk.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/profile_noperm.exp b/test/profiles/profile_noperm.exp
index 609364389..c6a571473 100755
--- a/test/profiles/profile_noperm.exp
+++ b/test/profiles/profile_noperm.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/profile_readonly.exp b/test/profiles/profile_readonly.exp
index 2046cc297..8dc598034 100755
--- a/test/profiles/profile_readonly.exp
+++ b/test/profiles/profile_readonly.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/profile_recursivity.exp b/test/profiles/profile_recursivity.exp
index c761a1039..a3d4843ab 100755
--- a/test/profiles/profile_recursivity.exp
+++ b/test/profiles/profile_recursivity.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/profile_syntax.exp b/test/profiles/profile_syntax.exp
index a2cccb0d4..d02bb65f0 100755
--- a/test/profiles/profile_syntax.exp
+++ b/test/profiles/profile_syntax.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/profile_syntax2.exp b/test/profiles/profile_syntax2.exp
index e2ec20ca5..2ddaded88 100755
--- a/test/profiles/profile_syntax2.exp
+++ b/test/profiles/profile_syntax2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/profiles/profiles.sh b/test/profiles/profiles.sh
index cbc6fa4d9..ce2fa32c4 100755
--- a/test/profiles/profiles.sh
+++ b/test/profiles/profiles.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/profiles/test-profile.exp b/test/profiles/test-profile.exp
index 625cb6511..5f18695a7 100755
--- a/test/profiles/test-profile.exp
+++ b/test/profiles/test-profile.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/apache2.exp b/test/root/apache2.exp
index 0b4b65dc7..c3e520224 100755
--- a/test/root/apache2.exp
+++ b/test/root/apache2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 5 6set timeout 5
diff --git a/test/root/cgroup.exp b/test/root/cgroup.exp
index d24a39d07..f64edf4b9 100755
--- a/test/root/cgroup.exp
+++ b/test/root/cgroup.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/checkcfg.exp b/test/root/checkcfg.exp
index 9a4c666e1..94d9e08fc 100755
--- a/test/root/checkcfg.exp
+++ b/test/root/checkcfg.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/firecfg.exp b/test/root/firecfg.exp
index 65ecefe5d..917cea90f 100755
--- a/test/root/firecfg.exp
+++ b/test/root/firecfg.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/firemon-events.exp b/test/root/firemon-events.exp
index 7bf51e2c8..f2c0879db 100755
--- a/test/root/firemon-events.exp
+++ b/test/root/firemon-events.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/isc-dhcp.exp b/test/root/isc-dhcp.exp
index 4c468c3e8..86291a9f9 100755
--- a/test/root/isc-dhcp.exp
+++ b/test/root/isc-dhcp.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 5 6set timeout 5
diff --git a/test/root/join.exp b/test/root/join.exp
index d995d8aa5..19b4c8f02 100755
--- a/test/root/join.exp
+++ b/test/root/join.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/login_nobody.exp b/test/root/login_nobody.exp
index 42d8fe013..cf3df268d 100755
--- a/test/root/login_nobody.exp
+++ b/test/root/login_nobody.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/nginx.exp b/test/root/nginx.exp
index 924ee8afd..af1ab8eb9 100755
--- a/test/root/nginx.exp
+++ b/test/root/nginx.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 5 6set timeout 5
diff --git a/test/root/option_bind_directory.exp b/test/root/option_bind_directory.exp
index ac6421593..122a1ea79 100755
--- a/test/root/option_bind_directory.exp
+++ b/test/root/option_bind_directory.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/option_bind_file.exp b/test/root/option_bind_file.exp
index 6ead284a8..4e02638e6 100755
--- a/test/root/option_bind_file.exp
+++ b/test/root/option_bind_file.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/option_tmpfs.exp b/test/root/option_tmpfs.exp
index 67a678c68..b40335680 100755
--- a/test/root/option_tmpfs.exp
+++ b/test/root/option_tmpfs.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/private.exp b/test/root/private.exp
index 373bd6cef..edc2520a2 100755
--- a/test/root/private.exp
+++ b/test/root/private.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/profile_tmpfs.exp b/test/root/profile_tmpfs.exp
index 8a46d666e..8625f100a 100755
--- a/test/root/profile_tmpfs.exp
+++ b/test/root/profile_tmpfs.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/root.sh b/test/root/root.sh
index d6b60cb23..78a6619d7 100755
--- a/test/root/root.sh
+++ b/test/root/root.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6# set a new firejail config file 6# set a new firejail config file
diff --git a/test/root/seccomp-chmod.exp b/test/root/seccomp-chmod.exp
index d6f8b8bcc..8fbb687d5 100755
--- a/test/root/seccomp-chmod.exp
+++ b/test/root/seccomp-chmod.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/seccomp-chown.exp b/test/root/seccomp-chown.exp
index daf3a5d06..0d9262494 100755
--- a/test/root/seccomp-chown.exp
+++ b/test/root/seccomp-chown.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/seccomp-umount.exp b/test/root/seccomp-umount.exp
index 0a7310fdd..51a7c7647 100755
--- a/test/root/seccomp-umount.exp
+++ b/test/root/seccomp-umount.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/root/snmpd.exp b/test/root/snmpd.exp
index d1fc49967..7658cfc68 100755
--- a/test/root/snmpd.exp
+++ b/test/root/snmpd.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 5 6set timeout 5
diff --git a/test/root/unbound.exp b/test/root/unbound.exp
index 710a95bf4..9e000be5e 100755
--- a/test/root/unbound.exp
+++ b/test/root/unbound.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 5 6set timeout 5
diff --git a/test/root/whitelist.exp b/test/root/whitelist.exp
index 429a4153e..1e29e3fef 100755
--- a/test/root/whitelist.exp
+++ b/test/root/whitelist.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/ssh/login.exp b/test/ssh/login.exp
index 6a5086a77..d6ff434b5 100755
--- a/test/ssh/login.exp
+++ b/test/ssh/login.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/ssh/scp.exp b/test/ssh/scp.exp
index bca6a124f..2305b8f50 100755
--- a/test/ssh/scp.exp
+++ b/test/ssh/scp.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/ssh/sftp.exp b/test/ssh/sftp.exp
index 09d3c119e..bc1647b0a 100755
--- a/test/ssh/sftp.exp
+++ b/test/ssh/sftp.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/ssh/ssh.sh b/test/ssh/ssh.sh
index bdad8cf87..c0d545a55 100755
--- a/test/ssh/ssh.sh
+++ b/test/ssh/ssh.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/stress/blacklist.exp b/test/stress/blacklist.exp
index fae874b25..255719426 100755
--- a/test/stress/blacklist.exp
+++ b/test/stress/blacklist.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/stress/env.exp b/test/stress/env.exp
index d69558114..931eef569 100755
--- a/test/stress/env.exp
+++ b/test/stress/env.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/stress/net_macvlan.exp b/test/stress/net_macvlan.exp
index a535afa2a..05c2c1589 100755
--- a/test/stress/net_macvlan.exp
+++ b/test/stress/net_macvlan.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/stress/stress.sh b/test/stress/stress.sh
index d32ffe907..675cb0614 100755
--- a/test/stress/stress.sh
+++ b/test/stress/stress.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/sysutils/cpio.exp b/test/sysutils/cpio.exp
index 4230ba375..e4ab77525 100755
--- a/test/sysutils/cpio.exp
+++ b/test/sysutils/cpio.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/sysutils/file.exp b/test/sysutils/file.exp
index b97c0c283..dcc253dad 100755
--- a/test/sysutils/file.exp
+++ b/test/sysutils/file.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/sysutils/gzip.exp b/test/sysutils/gzip.exp
index be2222f06..75b51694c 100755
--- a/test/sysutils/gzip.exp
+++ b/test/sysutils/gzip.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/sysutils/less.exp b/test/sysutils/less.exp
index 265b0e474..e6698eab0 100755
--- a/test/sysutils/less.exp
+++ b/test/sysutils/less.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/sysutils/ping.exp b/test/sysutils/ping.exp
index fac4b2ac3..dd6073234 100755
--- a/test/sysutils/ping.exp
+++ b/test/sysutils/ping.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/sysutils/strings.exp b/test/sysutils/strings.exp
index 7c91fb78a..47b75accc 100755
--- a/test/sysutils/strings.exp
+++ b/test/sysutils/strings.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/sysutils/sysutils.sh b/test/sysutils/sysutils.sh
index 96962d324..a903c7c6b 100755
--- a/test/sysutils/sysutils.sh
+++ b/test/sysutils/sysutils.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/sysutils/tar.exp b/test/sysutils/tar.exp
index 60e05f847..ed68179f9 100755
--- a/test/sysutils/tar.exp
+++ b/test/sysutils/tar.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/sysutils/xz.exp b/test/sysutils/xz.exp
index 4c6fcea9d..9ee85cde4 100755
--- a/test/sysutils/xz.exp
+++ b/test/sysutils/xz.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 60 6set timeout 60
diff --git a/test/sysutils/xzdec.exp b/test/sysutils/xzdec.exp
index 737517d54..1b525e3bd 100755
--- a/test/sysutils/xzdec.exp
+++ b/test/sysutils/xzdec.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/build.exp b/test/utils/build.exp
index b9733c137..a1f1d10fb 100755
--- a/test/utils/build.exp
+++ b/test/utils/build.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/caps-print.exp b/test/utils/caps-print.exp
index 6b6090476..76aad24f5 100755
--- a/test/utils/caps-print.exp
+++ b/test/utils/caps-print.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/catchsignal-master.sh b/test/utils/catchsignal-master.sh
index 28e646ddb..881aac270 100755
--- a/test/utils/catchsignal-master.sh
+++ b/test/utils/catchsignal-master.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6./catchsignal.sh & 6./catchsignal.sh &
diff --git a/test/utils/catchsignal.sh b/test/utils/catchsignal.sh
index f7a501011..117179143 100755
--- a/test/utils/catchsignal.sh
+++ b/test/utils/catchsignal.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6_term() { 6_term() {
diff --git a/test/utils/catchsignal2.sh b/test/utils/catchsignal2.sh
index 9ba939ef4..1bd7852cd 100755
--- a/test/utils/catchsignal2.sh
+++ b/test/utils/catchsignal2.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6_term() { 6_term() {
diff --git a/test/utils/command.exp b/test/utils/command.exp
index 6cb52a7fa..5e15efc14 100755
--- a/test/utils/command.exp
+++ b/test/utils/command.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/cpu-print.exp b/test/utils/cpu-print.exp
index e7d709cee..de081e82b 100755
--- a/test/utils/cpu-print.exp
+++ b/test/utils/cpu-print.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/dns-print.exp b/test/utils/dns-print.exp
index b3b732bee..034f2a6b9 100755
--- a/test/utils/dns-print.exp
+++ b/test/utils/dns-print.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/firemon-caps.exp b/test/utils/firemon-caps.exp
index 837d08271..dc229a85d 100755
--- a/test/utils/firemon-caps.exp
+++ b/test/utils/firemon-caps.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/firemon-cgroup.exp b/test/utils/firemon-cgroup.exp
index 3976b0c50..1e4c4a398 100755
--- a/test/utils/firemon-cgroup.exp
+++ b/test/utils/firemon-cgroup.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/firemon-cpu.exp b/test/utils/firemon-cpu.exp
index b410c764e..cb9cff188 100755
--- a/test/utils/firemon-cpu.exp
+++ b/test/utils/firemon-cpu.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/firemon-interface.exp b/test/utils/firemon-interface.exp
index 0c358d129..7e4e5f0ae 100755
--- a/test/utils/firemon-interface.exp
+++ b/test/utils/firemon-interface.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/firemon-name.exp b/test/utils/firemon-name.exp
index 57729d662..e28a45cfb 100755
--- a/test/utils/firemon-name.exp
+++ b/test/utils/firemon-name.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/firemon-seccomp.exp b/test/utils/firemon-seccomp.exp
index d35027827..bbc38f27a 100755
--- a/test/utils/firemon-seccomp.exp
+++ b/test/utils/firemon-seccomp.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/firemon-version.exp b/test/utils/firemon-version.exp
index 8e4e33ec0..81ab2e8b0 100755
--- a/test/utils/firemon-version.exp
+++ b/test/utils/firemon-version.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/fs-print.exp b/test/utils/fs-print.exp
index 4b6eac391..09f84ba49 100755
--- a/test/utils/fs-print.exp
+++ b/test/utils/fs-print.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/help.exp b/test/utils/help.exp
index 71bb5788c..4c5f46e8a 100755
--- a/test/utils/help.exp
+++ b/test/utils/help.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/join-profile.exp b/test/utils/join-profile.exp
index d6fcc50d7..0f51ca0f7 100755
--- a/test/utils/join-profile.exp
+++ b/test/utils/join-profile.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/join.exp b/test/utils/join.exp
index 25dd31922..9d3dccd92 100755
--- a/test/utils/join.exp
+++ b/test/utils/join.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/join2.exp b/test/utils/join2.exp
index dada97158..d917d42a3 100755
--- a/test/utils/join2.exp
+++ b/test/utils/join2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/join3.exp b/test/utils/join3.exp
index 305000e92..5ace21260 100755
--- a/test/utils/join3.exp
+++ b/test/utils/join3.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/join4.exp b/test/utils/join4.exp
index 8c5e91d68..23104dc9c 100755
--- a/test/utils/join4.exp
+++ b/test/utils/join4.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/join5.exp b/test/utils/join5.exp
index 3d365944d..44167cffb 100755
--- a/test/utils/join5.exp
+++ b/test/utils/join5.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/list.exp b/test/utils/list.exp
index d7d39357d..48711fe4b 100755
--- a/test/utils/list.exp
+++ b/test/utils/list.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/ls.exp b/test/utils/ls.exp
index 080bfdad2..9dac20628 100755
--- a/test/utils/ls.exp
+++ b/test/utils/ls.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/man.exp b/test/utils/man.exp
index 41f5a2ff8..3a0ca46d6 100755
--- a/test/utils/man.exp
+++ b/test/utils/man.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/name.exp b/test/utils/name.exp
index 9e5367ba7..ade119183 100755
--- a/test/utils/name.exp
+++ b/test/utils/name.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/profile_print.exp b/test/utils/profile_print.exp
index f8f6708bb..d64a4a2ad 100755
--- a/test/utils/profile_print.exp
+++ b/test/utils/profile_print.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/protocol-print.exp b/test/utils/protocol-print.exp
index 1ed92ddd6..2e581a03a 100755
--- a/test/utils/protocol-print.exp
+++ b/test/utils/protocol-print.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/seccomp-print.exp b/test/utils/seccomp-print.exp
index 86f1e9845..51bbfb874 100755
--- a/test/utils/seccomp-print.exp
+++ b/test/utils/seccomp-print.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/shutdown.exp b/test/utils/shutdown.exp
index 35d2750db..13580cbdf 100755
--- a/test/utils/shutdown.exp
+++ b/test/utils/shutdown.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 15 6set timeout 15
diff --git a/test/utils/shutdown2.exp b/test/utils/shutdown2.exp
index 7eb3d516b..2ffe2d8ae 100755
--- a/test/utils/shutdown2.exp
+++ b/test/utils/shutdown2.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/shutdown3.exp b/test/utils/shutdown3.exp
index a543bb9e5..e96ded14d 100755
--- a/test/utils/shutdown3.exp
+++ b/test/utils/shutdown3.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/shutdown4.exp b/test/utils/shutdown4.exp
index a9a3978ea..a94cac64b 100755
--- a/test/utils/shutdown4.exp
+++ b/test/utils/shutdown4.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/top.exp b/test/utils/top.exp
index 150011bba..515b4ffbf 100755
--- a/test/utils/top.exp
+++ b/test/utils/top.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/trace.exp b/test/utils/trace.exp
index 3ed09565b..890884248 100755
--- a/test/utils/trace.exp
+++ b/test/utils/trace.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 30 6set timeout 30
diff --git a/test/utils/tree.exp b/test/utils/tree.exp
index ff834bec6..9cdb09639 100755
--- a/test/utils/tree.exp
+++ b/test/utils/tree.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10
diff --git a/test/utils/utils.sh b/test/utils/utils.sh
index e3e24bd9a..18f749ed8 100755
--- a/test/utils/utils.sh
+++ b/test/utils/utils.sh
@@ -1,6 +1,6 @@
1#!/bin/bash 1#!/bin/bash
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6export MALLOC_CHECK_=3 6export MALLOC_CHECK_=3
diff --git a/test/utils/version.exp b/test/utils/version.exp
index be0d152b8..f010809f8 100755
--- a/test/utils/version.exp
+++ b/test/utils/version.exp
@@ -1,6 +1,6 @@
1#!/usr/bin/expect -f 1#!/usr/bin/expect -f
2# This file is part of Firejail project 2# This file is part of Firejail project
3# Copyright (C) 2014-2021 Firejail Authors 3# Copyright (C) 2014-2022 Firejail Authors
4# License GPL v2 4# License GPL v2
5 5
6set timeout 10 6set timeout 10