| Commit message (Collapse) | Author | Age |
| |
|
| |
|
| |
|
|
|
| |
The `private-cache` option breaks electron related builds (see [this](https://github.com/minbrowser/min/issues/793) for an example).
|
| |
|
| |
|
|\ |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
* remove mincore
* add @default without chroot
* add @default-nodebuggers without chroot
|
| | |
|
|/
|
|
|
|
| |
users not in firejail.users should only see the error,
not the symlink warning. Also exposes less code to non-
authorized users.
|
| |
|
| |
|
| |
|
|
|
| |
Let's disable using a terminal for cron job testing by default and make this a whitelist profile.
|
| |
|
|
|
|
| |
(#2861)
|
| |
|
| |
|
|
|
|
|
|
|
| |
Use @{PID} consistently.
Remove 'deny /proc/** w,' suggestion as it will break all
whitelisted entries.
|
|
|
| |
fixes #2859
|
| |
|
|
|
|
|
|
| |
This is needed by various electron apps, see:
https://github.com/netblue30/firejail/issues/2538
https://github.com/netblue30/firejail/issues/2854
|
| |
|
| |
|
|\
| |
| | |
fix seccomp issues with standardnotes-desktop. see issue #2854
|
|/ |
|
| |
|
| |
|
| |
|
|\
| |
| | |
ipc-namespace breaks galculator on archlinux
|
| | |
|
| |
| |
| |
| | |
via lgtm.com
|
| | |
|
|\ \
| | |
| | | |
Update pid.c
|
| | |
| | |
| | | |
Remove redundant `child` variable in src/lib/pid.c
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Update libpostexecseccomp.c
Remove `if (size != 0)` condition, which is always true as there is a `if (size <= 0)` condition before.
Also note that if the `if (size <= 0)` condition wouldn't be there and `size` would be 0, there would have been an undefined behavior in due to division by zero in `(unsigned short) size / (unsigned short) sizeof(struct sock_filter);`.
Found with LGTM: https://lgtm.com/projects/g/netblue30/firejail/snapshot/961c4ca00425b60a7bc8543460031a8ebf3d8aa6/files/src/libpostexecseccomp/libpostexecseccomp.c#x838c24f710410160:1
|
| | |
| | |
| | | |
Thanks to @SkewedZeppelin for catching this, see comments in https://github.com/netblue30/firejail/pull/2584.
|
| | | |
|
|/ /
| |
| | |
less is usually used to view various text files including configs so blacklisting many of them in ${HOME} make it less(sic!) usable. We can make them read-only instead.
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* Create conplay.profile
* Create mpg123.bin.profile
* Create mpg123-alsa.profile
* Create mpg123-id3dump.profile
* Create mpg123-jack.profile
* Create mpg123-nas.profile
* Create mpg123-openal.profile
* Create mpg123-oss.profile
* Create mpg123-portaudio.profile
* Create mpg123-pulse.profile
* Create mpg123-strip.profile
* Create out123.profile
* Add mpg123 redirects to fireconfig
|
|\ \
| | |
| | | |
Fix issue #561. Refactor/Optimize code to get and use pid and process name.
|
| | | |
|
|\ \ \
| | | |
| | | | |
Add OWD and ARGV0 environment variables. Correctly create APPIMAGE envvar.
|
| |/ / |
|
|\ \ \
| |/ /
|/| | |
improve support for home directories outside /home
|