summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Add ktouch.profileLibravatar rusty-snake2019-05-25
|
* small private-cwd adjustmentsLibravatar smitsohu2019-05-24
|
* Merge pull request #2712 from apmorton/features/private-cwdLibravatar smitsohu2019-05-24
|\ | | | | Add private-cwd option to control working directory within jail
| * Add private-cwd option to control working directory within jailLibravatar Austin Morton2019-05-23
| |
* | add header guard to firecfg.hLibravatar smitsohu2019-05-24
| |
* | Harden gnome-chess (#2719)Libravatar rusty-snake2019-05-23
| | | | | | | | | | | | | | | | * Harden gnome-chess * Update gnome-chess.profile remove whitelisting
* | Add note about syscall enumerating program (Fixes #2095)Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2019-05-21
| |
* | Update firejail.config -- disable-mnt descriptionLibravatar rusty-snake2019-05-21
| |
* | Merge pull request #2715 from apmorton/features/deterministic-exit-codeLibravatar ಚಿರಾಗ್ ನಟರಾಜ್2019-05-21
|\ \ | | | | | | Add deterministic-exit-code option
| * | Add deterministic-exit-code option to ensure firejail exits with the first ↵Libravatar Austin Morton2019-05-20
| |/ | | | | | | childs exit code regardless of the termination ordering of orphaned children
* | Add security vulnerability disclosure best practices to README as wellLibravatar ಚಿರಾಗ್ ನಟರಾಜ್2019-05-21
| |
* | Re-add 'shell none' to gpg.profile (#2716)Libravatar glitsj162019-05-21
| | | | | | | | | | | | * Re-add 'shell none' to gpg.profile * Update seahorse.profile
* | Add meteo-qt info (#2714)Libravatar glitsj162019-05-21
|/ | | | | | | | * Add meteo-qt to RELNOTES * Add meteo-qt to README.md * Add jose1711 to README
* Create a profile for mp3splt-gtkLibravatar rusty-snake2019-05-20
|
* Expose /tmp/.X11-unix as read-only as per Issue #2269Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2019-05-19
|
* Refactor eog and eom profiles with common redirect (#2708)Libravatar glitsj162019-05-18
| | | | | | | | | | | | | | * Create eo-common.profile * Refactor eog.profile * Refactor eom.profile * Keep private-bin in eog.profile * Keep private-bin in eom.profile * Place private-bin back in eog/eom profiles
* Update eom.profileLibravatar rusty-snake2019-05-18
| | | | same fixes as in 091e12a for eog
* Create meteo-qt.profile (#2704)Libravatar Jose Riha2019-05-18
|
* Add inkview.profileLibravatar rusty-snake2019-05-18
|
* Update eog.profileLibravatar rusty-snake2019-05-18
|
* man pages: add FIREJAIL_QUIETLibravatar smitsohu2019-05-18
|
* mergesLibravatar netblue302019-05-17
|
* Merge pull request #2688 from laomaiweng/nodbus-enhancementsLibravatar netblue302019-05-17
|\ | | | | nodbus enhancements
| * Merge branch 'master' into nodbus-enhancementsLibravatar netblue302019-05-17
| |\ | |/ |/|
* | Merge pull request #2694 from laomaiweng/propagate-quietLibravatar netblue302019-05-17
|\ \ | | | | | | Propagate --quiet to children Firejail'ed processes
| * | Move export of FIREJAIL_QUIET to env_defaults()Libravatar quentin2019-05-17
| | | | | | | | | | | | So that it also works with --join. (HT @smitsohu)
| * | Propagate --quiet to children Firejail'ed processesLibravatar quentin2019-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | If quiet, set environment variable FIREJAIL_QUIET to "yes" before spawning the child process. Upon starting Firejail, become quiet if the FIREJAIL_QUIET environment variable is set to "yes". Signed-off-by: Quentin Minster <quentin@minster.io>
* | | Merge pull request #2697 from topimiettinen/dbus-block-system-busLibravatar netblue302019-05-17
|\ \ \ | | | | | | | | dbus: make --nodbus block also system D-Bus socket
| * | | dbus: make --nodbus block also system D-Bus socketLibravatar Topi Miettinen2019-05-15
| |/ / | | | | | | | | | Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
* | | Merge pull request #2701 from smitsohu/opathLibravatar netblue302019-05-17
|\ \ \ | | | | | | | | glibc missing O_PATH definition on CentOS 6
| * | | glibc missing O_PATH definition on CentOS 6 - #2696Libravatar smitsohu2019-05-16
| |/ /
* / / Cosmetic changes for pidgin.profile (#2705)Libravatar glitsj162019-05-17
|/ /
* | Merge pull request #2691 from curiosity-seeker/masterLibravatar SkewedZeppelin2019-05-13
|\ \ | | | | | | cantata.profile
| * | Remove trailing commas in cantata.profileLibravatar curiosity-seeker2019-05-13
| | |
| * | Update cantata.profileLibravatar curiosity-seeker2019-05-12
| | | | | | | | | Missed the fact that for dynamic playlists perl is needed. Deactivating apparmor is also necessary for this.
| * | Update firecfg.config for cantataLibravatar curiosity-seeker2019-05-12
| | |
| * | Update disable.programs.inc for cantataLibravatar curiosity-seeker2019-05-12
| | |
| * | cantata.profileLibravatar curiosity-seeker2019-05-12
|/ / | | | | The private-etc entries were added by firejail --build but are not complete.
* | harden & fix xiphos.profileLibravatar rusty-snake2019-05-12
| |
* | Update keepassxc.profile (#2687)Libravatar curiosity-seeker2019-05-10
| | | | | | Adding `keepassxc-proxy` to `private-bin`as without it there is a related error message in Settings->Browser Integration (via the Keepassxc-Browser add-on).
| * Fix overridden DBUS_SESSION_BUS_ADDRESS with nodbusLibravatar quentin2019-05-09
| |
| * Blacklist ~/.dbus with nodbusLibravatar quentin2019-05-09
|/
* Merge pull request #2680 from Feandil/masterLibravatar SkewedZeppelin2019-05-06
|\ | | | | Mumble: add new path for client data
| * Mumble: add new path for client dataLibravatar Vincent Brillault2019-05-06
|/ | | | | | Since Mumble 1.3, client data was moved from $HOME/.local/share/data/Mumble to $HOME/.local/share/Mumble. See https://wiki.mumble.info/wiki/Client_Settings
* Add vim syntax and ftdetect files (#2679)Libravatar Quentin Minster2019-05-05
|
* update man pages (private-dev, noexec)Libravatar smitsohu2019-05-04
|
* Update gajim.profileLibravatar rusty-snake2019-05-03
|
* Drop noblacklist ${DOWNLOADS} in bitwarden.profile (#2677)Libravatar glitsj162019-05-02
|
* Refactor min as chromium redirect profile (#2676)Libravatar glitsj162019-05-02
|
* Add Bitwarden profile (#2673)Libravatar glitsj162019-05-02
| | | | | | | | | | * Add bitwarden to firecfg * Add support for bitwarden in disable-programs.inc * Create bitwarden.profile * Fix whitelisting and no3d in bitwarden