diff options
Diffstat (limited to 'README')
-rw-r--r-- | README | 225 |
1 files changed, 194 insertions, 31 deletions
@@ -18,18 +18,194 @@ License: GPL v2 | |||
18 | Firejail Authors: | 18 | Firejail Authors: |
19 | 19 | ||
20 | netblue30 (netblue30@yahoo.com) | 20 | netblue30 (netblue30@yahoo.com) |
21 | Joan Figueras (https://github.com/figue) | 21 | Reiner Herrmann (https://github.com/reinerh) |
22 | - added abrowser profile | 22 | - a number of build patches |
23 | - man page fixes | ||
24 | - Debian and Ubuntu integration | ||
25 | - clang-analyzer fixes | ||
26 | - Debian reproducible build | ||
27 | - unit testing framework | ||
28 | - moved build to .xz | ||
29 | - detached signatures for source archive | ||
30 | - recursive mkdir | ||
31 | Aleksey Manevich (https://github.com/manevich) | ||
32 | - several profile fixes | ||
33 | - fix problem with relative path in storage_find function | ||
34 | - fix build for systems without bash | ||
35 | - fix double quotes/single quotes problem | ||
36 | - big rework of argument processing subsystem | ||
37 | - --join fixes | ||
38 | - spliting up cmdline.c | ||
39 | - Busybox support | ||
40 | - X11 support rewrite | ||
41 | - gether shell selection code in one place | ||
42 | - fixed several TOCTOU security problems | ||
43 | - added --fix option to firecfg utility | ||
44 | - read_pid fix | ||
45 | - added --x11=block options | ||
46 | - x11 xpra, xphyr, none profile commands | ||
47 | - added --join-or-start command | ||
48 | - CVE-2016-7545 | ||
23 | Fred-Barclay (https://github.com/Fred-Barclay) | 49 | Fred-Barclay (https://github.com/Fred-Barclay) |
50 | - lots of profile fixes | ||
24 | - added Vivaldi, Atril profiles | 51 | - added Vivaldi, Atril profiles |
25 | - added PaleMoon profile | 52 | - added PaleMoon profile |
26 | - split Icedove and Thunderbird profiles | 53 | - split Icedove and Thunderbird profiles |
27 | - added 0ad profile | 54 | - added 0ad profile |
55 | - fixed version for .deb packages | ||
56 | - added Warzone2100 profile | ||
57 | - blacklisted VeraCrypt | ||
58 | - added Gpredict profile | ||
59 | - added Aweather, Stellarium profiles | ||
60 | - fixed HexChat and Atril profiles | ||
61 | - fixed disable-common.inc for mate-terminal | ||
62 | - blacklisted escape-happy terminals in disable-common.inc | ||
63 | - blacklisted g++ | ||
64 | - added xplayer, xreader, and xviewer profiles | ||
65 | - added Brave profile | ||
66 | - added Gitter profile | ||
67 | - various organising | ||
68 | - added LibreOffice profile | ||
69 | - added pix profile | ||
70 | - added audacity profile | ||
71 | - fixed Telegram and qtox profiles | ||
72 | - added Atom Beta and Atom profiles | ||
73 | - tightened 0ad, atril, evince, gthumb, pix, qtox, and xreader profiles | ||
74 | - several private-bin conversions | ||
75 | - added jitsi profile | ||
76 | - pidgin private-bin conversion | ||
77 | - added eom profile | ||
78 | - added gnome-chess profile | ||
79 | - added DOSBox profile | ||
80 | - evince profile enhancement | ||
81 | - tightened Spotify profile | ||
82 | - added xiphos and Tor Browser Bundle profiles | ||
83 | - added xed and pluma profiles | ||
84 | - added Cryptocat profile | ||
85 | - added wireshark profile | ||
86 | valoq (https://github.com/valoq) | ||
87 | - lots of profile fixes | ||
88 | - added support for /srv in --whitelist feature | ||
89 | - Eye of GNOME, Evolution, display (imagemagik) and Wire profiles | ||
90 | - blacklist suid binaries in disable-common.inc | ||
91 | - fix man pages | ||
92 | - added keypass2, qemu profiles | ||
93 | - added amarok, ark, atool, bleachbit, brasero, dolphin, dragon, elinks, enchant, exiftool profiles | ||
94 | - added file-roller, gedit, gjs,gnome-books, gnome-documents, gnome-maps, gnome-music profiles | ||
95 | - added gnome-photos, gnome-weather, goobox, gpa, gpg, gpg-agent, highlight profiles | ||
96 | - added img2txt, k3b, kate, lynx, mediainfo, nautilus, odt2txt, pdftotext, simple-scan profiles | ||
97 | - added skanlite, ssh-agent, transmission-cli, tracker, transmission-show, w3m, xfburn, xpra profiles | ||
98 | - added wget profile | ||
99 | - disable gnupg and systemd directories under /run/user | ||
100 | Lari Rauno (https://github.com/tuutti) | ||
101 | - qutebrowser profile fixes | ||
102 | SpotComms (https://github.com/SpotComms) | ||
103 | - added Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5 profiles | ||
104 | - added PDFSam, Pithos, and Xonotic profiles | ||
105 | Vasya Novikov (https://github.com/vn971) | ||
106 | - Wesnoth profile | ||
107 | - Hedegewars profile | ||
108 | - manpage fixes | ||
109 | - fixed firecfg clean/clear issue | ||
110 | - found the ugliest bug so far | ||
111 | - seccomp debug description in man page | ||
112 | curiosity-seeker (https://github.com/curiosity-seeker) | ||
113 | - tightening unbound and dnscrypt-proxy profiles | ||
114 | - correct and tighten QuiteRss profile | ||
115 | - dnsmasq profile | ||
116 | - okular and gwenview profiles | ||
117 | - cherrytree profile fixes | ||
118 | - added quiterss profile | ||
119 | - added guayadeque profile | ||
120 | Simon Peter (https://github.com/probonopd) | ||
121 | - set $APPIMAGE and $APPDIR environment variables | ||
122 | - AppImage version detection | ||
123 | - Leafppad type v1 and v2 appimage packages in test/appimage | ||
124 | BogDan Vatra (https://github.com/bog-dan-ro) | ||
125 | - zoom profile | ||
126 | Impyy (https://github.com/Impyy) | ||
127 | - added mumble profile | ||
128 | Vadim A. Misbakh-Soloviov (https://github.com/msva) | ||
129 | - profile fixes | ||
130 | Rafael Cavalcanti (https://github.com/rccavalcanti) | ||
131 | - chromium profile fixes for Arch Linux | ||
132 | Deelvesh Bunjun (https://github.com/DeelveshBunjun) | ||
133 | - added xpdf profile | ||
134 | Dara Adib (https://github.com/daradib) | ||
135 | - ssh profile fix | ||
136 | - evince profile fix | ||
137 | vismir2 (https://github.com/vismir2) | ||
138 | - feh, ranger, 7z, keepass, keepassx and zathura profiles | ||
139 | - claws-mail, mutt, git, emacs, vim profiles | ||
140 | - lots of profile fixes | ||
141 | - support for truecrypt and zuluCrypt | ||
142 | graywolf (https://github.com/graywolf) | ||
143 | - spelling fix | ||
144 | Tomasz Jan Góralczyk (https://github.com/tjg) | ||
145 | - fixed Steam profile | ||
146 | pwnage-pineapple (https://github.com/pwnage-pineapple) | ||
147 | - update Okular profile | ||
148 | Sergey Alirzaev (https://github.com/l29ah) | ||
149 | - firejail.h enum fix | ||
150 | greigdp (https://github.com/greigdp) | ||
151 | - Gajim IM client profile | ||
152 | - fix Slack profile | ||
153 | Icaro Perseo (https://github.com/icaroperseo) | ||
154 | - Icecat profile | ||
155 | - several profile fixes | ||
156 | hamzadis (https://github.com/hamzadis) | ||
157 | - added --overlay-named=name and --overlay-path=path | ||
158 | Gaman Gabriel (https://github.com/stelariusinfinitek) | ||
159 | - inox profile | ||
160 | greigdp (https://github.com/greigdp) | ||
161 | - fixed spotify profile | ||
162 | - added Slack profile | ||
163 | Laurent Declercq (https://github.com/nuxwin) | ||
164 | - fixed test for shell interpreter in chroots | ||
165 | Franco (nextime) Lanza (https://github.com/nextime) | ||
166 | - added --private-template/--private-home | ||
167 | xee5ch (https://github.com/xee5ch) | ||
168 | - skypeforlinux profile | ||
169 | Peter Hogg (https://github.com/pigmonkey) | ||
170 | - WeeChat profile | ||
171 | - rtorrent profile | ||
172 | - bitlbee profile fixes | ||
173 | - mutt profile fixes | ||
174 | Thomas Jarosch (https://github.com/thomasjfox) | ||
175 | - disable keepassx in disable-passwdmgr.inc | ||
176 | - added uudeview profile | ||
177 | - added tar (gtar), unzip and unrar profile | ||
178 | - added file profile | ||
179 | - improved profile list | ||
180 | - fixed small variable glitch in stat64() / lstat64() (libtracelog) | ||
181 | - added lstat() / lstat64() support to libtrace | ||
182 | - include mkuid.sh in make dist | ||
183 | Niklas Haas (https://github.com/haasn) | ||
184 | - blacklisting for keybase.io's client | ||
185 | Jaykishan Mutkawoa (https://github.com/jmutkawoa) | ||
186 | - cpio profile | ||
187 | Paupiah Yash (https://github.com/CaffeinatedStud) | ||
188 | - gzip profile | ||
189 | Akhil Hans Maulloo (https://github.com/kouul) | ||
190 | - xz profile | ||
191 | Rahul Golam (https://github.com/technoLord) | ||
192 | - strings profile | ||
193 | geg2048 (https://github.com/geg2048) | ||
194 | - kwallet profile fixes | ||
195 | maces (https://github.com/maces) | ||
196 | - Franz messenger profile | ||
197 | KellerFuchs (https://github.com/KellerFuchs) | ||
198 | - nonewpriv support, extended profiles for this feature | ||
199 | - make `restricted-network` prevent use of netfilter | ||
200 | - disable-common.inc additions | ||
201 | ValdikSS (https://github.com/ValdikSS) | ||
202 | - Psi+, Corebird, Konversation profiles | ||
203 | - various profile fixes | ||
28 | avoidr (https://github.com/avoidr) | 204 | avoidr (https://github.com/avoidr) |
29 | - whitelist fix | 205 | - whitelist fix |
30 | - recently-used.xbel fix | 206 | - recently-used.xbel fix |
31 | - added parole profile | 207 | - added parole profile |
32 | - blacklist ncat, manpage fixes, | 208 | - blacklist ncat |
33 | - hostname support in profile file | 209 | - hostname support in profile file |
34 | - Google Chrome profile rework | 210 | - Google Chrome profile rework |
35 | - added cmus profile | 211 | - added cmus profile |
@@ -37,6 +213,17 @@ avoidr (https://github.com/avoidr) | |||
37 | - add net iface support in profile files | 213 | - add net iface support in profile files |
38 | - paths fix | 214 | - paths fix |
39 | - lots of profile fixes | 215 | - lots of profile fixes |
216 | - added mcabber profile | ||
217 | - fixed mpv profile | ||
218 | - various other fixes | ||
219 | Ruan (https://github.com/ruany) | ||
220 | - fixed hexchat profile | ||
221 | Matthew Gyurgyik (https://github.com/pyther) | ||
222 | - rpm spec and several fixes | ||
223 | Joan Figueras (https://github.com/figue) | ||
224 | - added abrowser profile | ||
225 | - added Google-Play-Music-Desktop-Player | ||
226 | - added cyberfox profile | ||
40 | Petter Reinholdtsen (pere@hungry.com) | 227 | Petter Reinholdtsen (pere@hungry.com) |
41 | - Opera profile patch | 228 | - Opera profile patch |
42 | n1trux (https://github.com/n1trux) | 229 | n1trux (https://github.com/n1trux) |
@@ -52,12 +239,9 @@ dshmgh (https://github.com/dshmgh) | |||
52 | yumkam (https://github.com/yumkam) | 239 | yumkam (https://github.com/yumkam) |
53 | - add compile-time option to restrict --net= to root only | 240 | - add compile-time option to restrict --net= to root only |
54 | - man page fixes | 241 | - man page fixes |
55 | Vasya Novikov (https://github.com/vn971) | ||
56 | - Wesnoth profile | ||
57 | - Hedegewars profile | ||
58 | - manpage fixes | ||
59 | mahdi1234 (https://github.com/mahdi1234) | 242 | mahdi1234 (https://github.com/mahdi1234) |
60 | - cherrytree profile | 243 | - cherrytree profile |
244 | - Seamonkey profiles | ||
61 | jrabe (https://github.com/jrabe) | 245 | jrabe (https://github.com/jrabe) |
62 | - disallow access to kdbx files | 246 | - disallow access to kdbx files |
63 | - Epiphany profile | 247 | - Epiphany profile |
@@ -71,19 +255,14 @@ Tom Mellor (https://github.com/kalegrill) | |||
71 | Martin Carpenter (https://github.com/mcarpenter) | 255 | Martin Carpenter (https://github.com/mcarpenter) |
72 | - security audit and bug fixes | 256 | - security audit and bug fixes |
73 | - Centos 6.x support | 257 | - Centos 6.x support |
74 | Aleksey Manevich (https://github.com/manevich) | ||
75 | - several profile fixes | ||
76 | - fix problem with relative path in storage_find function | ||
77 | - fix build for systems without bash | ||
78 | pszxzsd (https://github.com/pszxzsd) | 258 | pszxzsd (https://github.com/pszxzsd) |
79 | -uGet profile | 259 | -uGet profile |
80 | Rahiel Kasim (https://github.com/rahiel) | 260 | Rahiel Kasim (https://github.com/rahiel) |
81 | - Mathematica profile | 261 | - Mathematica profile |
262 | - whitelisted Dropbox profile | ||
263 | - whitelisted keysnail config for firefox | ||
82 | creideiki (https://github.com/creideiki) | 264 | creideiki (https://github.com/creideiki) |
83 | - make the sandbox process reap all children | 265 | - make the sandbox process reap all children |
84 | curiosity-seeker (https://github.com/curiosity-seeker) | ||
85 | - tightening unbound and dnscrypt-proxy profiles | ||
86 | - dnsmasq profile | ||
87 | sinkuu (https://github.com/sinkuu) | 266 | sinkuu (https://github.com/sinkuu) |
88 | - blacklisting kwalletd | 267 | - blacklisting kwalletd |
89 | - fix symlink invocation for programs placing symlinks in $PATH | 268 | - fix symlink invocation for programs placing symlinks in $PATH |
@@ -93,8 +272,7 @@ Holger Heinz (https://github.com/hheinz) | |||
93 | - manpage work | 272 | - manpage work |
94 | Andrey Alekseenko (https://github.com/al42and) | 273 | Andrey Alekseenko (https://github.com/al42and) |
95 | - fixing lintian warnings | 274 | - fixing lintian warnings |
96 | mahdi1234 (https://github.com/mahdi1234) | 275 | - fixed Skype profile |
97 | - Seamonkey profiles | ||
98 | Ivan Kozik (https://github.com/ivan) | 276 | Ivan Kozik (https://github.com/ivan) |
99 | - speed up sandbox exit | 277 | - speed up sandbox exit |
100 | Christian Stadelmann (https://github.com/genodeftest) | 278 | Christian Stadelmann (https://github.com/genodeftest) |
@@ -105,11 +283,6 @@ Kaan Genç (https://github.com/SeriousBug) | |||
105 | - dynamic allocation of noblacklist buffer | 283 | - dynamic allocation of noblacklist buffer |
106 | Veeti Paananen (https://github.com/veeti) | 284 | Veeti Paananen (https://github.com/veeti) |
107 | - fixed Spotify profile | 285 | - fixed Spotify profile |
108 | Rahiel Kasim (https://github.com/rahiel) | ||
109 | - whitelist keysnail config for firefox | ||
110 | Peter Hogg (https://github.com/pigmonkey) | ||
111 | - WeeChat profile | ||
112 | - rtorrent profile | ||
113 | rogshdo (https://github.com/rogshdo) | 286 | rogshdo (https://github.com/rogshdo) |
114 | - BitlBee profile | 287 | - BitlBee profile |
115 | Bruno Nova (https://github.com/brunonova) | 288 | Bruno Nova (https://github.com/brunonova) |
@@ -117,8 +290,6 @@ Bruno Nova (https://github.com/brunonova) | |||
117 | - bash arguments fix | 290 | - bash arguments fix |
118 | Matt Parnell (https://github.com/ilikenwf) | 291 | Matt Parnell (https://github.com/ilikenwf) |
119 | - whitelisting for core firefox related functionality | 292 | - whitelisting for core firefox related functionality |
120 | Andrey Alekseenko (https://github.com/al42and) | ||
121 | - fixed Skype profile | ||
122 | Ondra Nekola (https://github.com/satai) | 293 | Ondra Nekola (https://github.com/satai) |
123 | - allow firefox theming with non-global themes | 294 | - allow firefox theming with non-global themes |
124 | emacsomancer (https://github.com/emacsomancer) | 295 | emacsomancer (https://github.com/emacsomancer) |
@@ -132,8 +303,6 @@ andrew160 (https://github.com/andrew160) | |||
132 | - profile and man pages fixes | 303 | - profile and man pages fixes |
133 | Loïc Damien (https://github.com/dzamlo) | 304 | Loïc Damien (https://github.com/dzamlo) |
134 | - small fixes | 305 | - small fixes |
135 | Matthew Gyurgyik (https://github.com/pyther) | ||
136 | - rpm spec and several fixes | ||
137 | greigdp (https://github.com/greigdp) | 306 | greigdp (https://github.com/greigdp) |
138 | - add Spotify profile | 307 | - add Spotify profile |
139 | Mattias Wadman (https://github.com/wader) | 308 | Mattias Wadman (https://github.com/wader) |
@@ -150,12 +319,6 @@ sarneaud (https://github.com/sarneaud) | |||
150 | - various enhancements and bug fixes | 319 | - various enhancements and bug fixes |
151 | Patrick Toomey (http://sourceforge.net/u/ptoomey/profile/) | 320 | Patrick Toomey (http://sourceforge.net/u/ptoomey/profile/) |
152 | - user namespace implementation | 321 | - user namespace implementation |
153 | Reiner Herrmann | ||
154 | - a number of build patches | ||
155 | - man page fixes | ||
156 | - Debian and Ubuntu integration | ||
157 | - clang-analyzer fixes | ||
158 | - Debian reproducible build | ||
159 | sshirokov (http://sourceforge.net/u/yshirokov/profile/) | 322 | sshirokov (http://sourceforge.net/u/yshirokov/profile/) |
160 | - Patch to output "Reading profile" to stderr instead of stdout | 323 | - Patch to output "Reading profile" to stderr instead of stdout |
161 | G4JC (http://sourceforge.net/u/gaming4jc/profile/) | 324 | G4JC (http://sourceforge.net/u/gaming4jc/profile/) |