summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Add '$HOME/.local/share/pki' to blacklistLibravatar Vincent432019-02-03
| | | | | Since nss 3.42, '$HOME/.local/share/pki' is supported dir for storing certs https://hg.mozilla.org/projects/nss/rev/da45424cb9a0b4d8e45e5040e2e3b574d994e254
* relnotesLibravatar netblue302019-02-02
|
* remove noexec home from chromium-based browsersLibravatar netblue302019-02-02
|
* Merge pull request #2386 from SkewedZeppelin/noexecpfLibravatar netblue302019-02-02
|\ | | | | Temporary fix for noexec ${HOME} breakage
| * Temporary fix for noexec ${HOME} breakageLibravatar Tad2019-02-02
|/
* Add a missing path to vivaldi profile, partial fix for #2383Libravatar Tad2019-02-01
|
* Merge pull request #2384 from carloabelli/mprisLibravatar Vincent432019-02-01
|\ | | | | remove nodbus from MPRIS client profiles
| * remove nodbus from MPRIS client profilesLibravatar Carlo Abelli2019-02-01
| | | | | | | | | | | | | | MPRIS is a D-Bus interface for controlling media players. The nodbus option prevents these players from being controlled through MPRIS. It seems that most of the other media players did not have the nodbus option or it was already commented out.
* | --name reworkLibravatar netblue302019-02-01
|/
* Merge pull request #2372 from rusty-snake/additional-blacklistingLibravatar SkewedZeppelin2019-01-30
|\ | | | | additional blacklisting
| * Update some IDE profilesLibravatar rusty-snake2019-01-29
| |
| * Update wget.profileLibravatar rusty-snake2019-01-27
| |
| * additional blacklistingLibravatar rusty-snake2019-01-27
| |
* | pybitmessage.profile: remove memory-deny-write-executeLibravatar Vincent432019-01-30
| | | | | | On some systems it causes app to crash on startup, see https://github.com/netblue30/firejail/issues/2379
* | alphabetizeLibravatar smitsohu2019-01-30
| |
* | misc profile hardening (xdg blacklist, private-cache, netfilter)Libravatar smitsohu2019-01-30
| |
* | Fixup qtox profile, closes #2374Libravatar Tad2019-01-28
| |
* | Fixup cliqz profile, closes #2377Libravatar philotux2019-01-28
| |
* | Fix parsing of cgroup option in configLibravatar Reiner Herrmann2019-01-27
| |
* | enable/disable cgroup in firejail.configLibravatar netblue302019-01-27
| |
* | Merge pull request #2373 from rusty-snake/fix_gnome-mapsLibravatar Fred Barclay2019-01-27
|\ \ | | | | | | Fix gnome-maps
| * | Fix gnome-mapsLibravatar rusty-snake2019-01-27
| |/
* | Allow processes confined with AppArmor to obtain some process informationLibravatar Reiner Herrmann2019-01-27
| | | | | | | | | | | | | | | | 'firejail --apparmor chromium' logged a huge amount of apparmor denials, because it wants to use read/readby permissions. Allow those accesses, but keep full tracing disabled by default. See also: https://bugs.debian.org/912587 and apparmor.d(5)
* | moving to 0.9.59Libravatar netblue302019-01-27
|/
* Merge branch 'master' of http://github.com/netblue30/firejail0.9.58Libravatar netblue302019-01-26
|\
| * Add deb-apparmor build to Gitlab CILibravatar Fred-Barclay2019-01-26
| |
| * Switch ubuntu:latest to ubuntu:rolling for Gitlab CILibravatar Fred-Barclay2019-01-26
| | | | | | | | | | | | | | Ubuntu:rolling is the latest Ubuntu release (LTS and/or non-LTS). Since debian:latest already provides a reasonable base for testing firejail builds on older Debian-based systems, use ubuntu:rolling to test on relatively new systems.
* | fix seccomp-run-files.expLibravatar netblue302019-01-26
|/
* release 0.9.58 testingLibravatar netblue302019-01-26
|
* porting make deb-apparmor from LTS buildLibravatar netblue302019-01-26
|
* remove duplicated tests from make test-profilesLibravatar netblue302019-01-26
|
* kodi.profile: switch back to default seccomp filterLibravatar Vincent432019-01-24
| | | As mincore syscall was dropped from default list we can use it again.
* fix skypeforlinuxLibravatar netblue302019-01-23
|
* removed mincore syscall from default seccomp filterLibravatar netblue302019-01-23
|
* improve gwenview and dolphin profiles - #2306 #2348Libravatar smitsohu2019-01-22
|
* Merge pull request #2362 from glitsj16/github-desktopLibravatar glitsj162019-01-22
|\ | | | | Refactoring github-desktop profile and firecfg
| * Fix github-desktop for appimage usageLibravatar glitsj162019-01-22
| |
| * Redo github-desktop.profile as blacklist profileLibravatar glitsj162019-01-22
| | | | | | Following suggestion in https://github.com/netblue30/firejail/pull/2362 to turn this into a blacklist profile.
| * Refactor github-desktop.profileLibravatar glitsj162019-01-22
| |
| * Edit github-desktop entree in firecfgLibravatar glitsj162019-01-22
|/
* fix typoLibravatar Reiner Herrmann2019-01-21
|
* conditional testing0.9.58-rc1Libravatar netblue302019-01-21
|
* release 0.9.58-rc1Libravatar netblue302019-01-21
|
* kodi profile - removed mincore from seccomp filterLibravatar netblue302019-01-21
|
* readme/relnotesLibravatar netblue302019-01-21
|
* Add warning to thunderbird profile -- fix #2357Libravatar Fred-Barclay2019-01-20
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2019-01-20
|\
| * Merge pull request #2356 from glitsj16/gnome-calculatorLibravatar glitsj162019-01-20
| |\ | | | | | | Unbreak currency conversion for gnome-calculator
| | * Unbreak currency conversion for gnome-calculatorLibravatar glitsj162019-01-20
| | |
| * | Merge pull request #2354 from glitsj16/gcalccmdLibravatar glitsj162019-01-20
| |\ \ | | | | | | | | Create gcalccmd.profile