Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add ktouch.profile | 2019-05-25 | |
| | |||
* | small private-cwd adjustments | 2019-05-24 | |
| | |||
* | Merge pull request #2712 from apmorton/features/private-cwd | 2019-05-24 | |
|\ | | | | | Add private-cwd option to control working directory within jail | ||
| * | Add private-cwd option to control working directory within jail | 2019-05-23 | |
| | | |||
* | | add header guard to firecfg.h | 2019-05-24 | |
| | | |||
* | | Harden gnome-chess (#2719) | 2019-05-23 | |
| | | | | | | | | | | | | | | | | * Harden gnome-chess * Update gnome-chess.profile remove whitelisting | ||
* | | Add note about syscall enumerating program (Fixes #2095) | 2019-05-21 | |
| | | |||
* | | Update firejail.config -- disable-mnt description | 2019-05-21 | |
| | | |||
* | | Merge pull request #2715 from apmorton/features/deterministic-exit-code | 2019-05-21 | |
|\ \ | | | | | | | Add deterministic-exit-code option | ||
| * | | Add deterministic-exit-code option to ensure firejail exits with the first ↵ | 2019-05-20 | |
| |/ | | | | | | | childs exit code regardless of the termination ordering of orphaned children | ||
* | | Add security vulnerability disclosure best practices to README as well | 2019-05-21 | |
| | | |||
* | | Re-add 'shell none' to gpg.profile (#2716) | 2019-05-21 | |
| | | | | | | | | | | | | * Re-add 'shell none' to gpg.profile * Update seahorse.profile | ||
* | | Add meteo-qt info (#2714) | 2019-05-21 | |
|/ | | | | | | | | * Add meteo-qt to RELNOTES * Add meteo-qt to README.md * Add jose1711 to README | ||
* | Create a profile for mp3splt-gtk | 2019-05-20 | |
| | |||
* | Expose /tmp/.X11-unix as read-only as per Issue #2269 | 2019-05-19 | |
| | |||
* | Refactor eog and eom profiles with common redirect (#2708) | 2019-05-18 | |
| | | | | | | | | | | | | | | * Create eo-common.profile * Refactor eog.profile * Refactor eom.profile * Keep private-bin in eog.profile * Keep private-bin in eom.profile * Place private-bin back in eog/eom profiles | ||
* | Update eom.profile | 2019-05-18 | |
| | | | | same fixes as in 091e12a for eog | ||
* | Create meteo-qt.profile (#2704) | 2019-05-18 | |
| | |||
* | Add inkview.profile | 2019-05-18 | |
| | |||
* | Update eog.profile | 2019-05-18 | |
| | |||
* | man pages: add FIREJAIL_QUIET | 2019-05-18 | |
| | |||
* | merges | 2019-05-17 | |
| | |||
* | Merge pull request #2688 from laomaiweng/nodbus-enhancements | 2019-05-17 | |
|\ | | | | | nodbus enhancements | ||
| * | Merge branch 'master' into nodbus-enhancements | 2019-05-17 | |
| |\ | |/ |/| | |||
* | | Merge pull request #2694 from laomaiweng/propagate-quiet | 2019-05-17 | |
|\ \ | | | | | | | Propagate --quiet to children Firejail'ed processes | ||
| * | | Move export of FIREJAIL_QUIET to env_defaults() | 2019-05-17 | |
| | | | | | | | | | | | | So that it also works with --join. (HT @smitsohu) | ||
| * | | Propagate --quiet to children Firejail'ed processes | 2019-05-13 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | If quiet, set environment variable FIREJAIL_QUIET to "yes" before spawning the child process. Upon starting Firejail, become quiet if the FIREJAIL_QUIET environment variable is set to "yes". Signed-off-by: Quentin Minster <quentin@minster.io> | ||
* | | | Merge pull request #2697 from topimiettinen/dbus-block-system-bus | 2019-05-17 | |
|\ \ \ | | | | | | | | | dbus: make --nodbus block also system D-Bus socket | ||
| * | | | dbus: make --nodbus block also system D-Bus socket | 2019-05-15 | |
| |/ / | | | | | | | | | | Signed-off-by: Topi Miettinen <toiwoton@gmail.com> | ||
* | | | Merge pull request #2701 from smitsohu/opath | 2019-05-17 | |
|\ \ \ | | | | | | | | | glibc missing O_PATH definition on CentOS 6 | ||
| * | | | glibc missing O_PATH definition on CentOS 6 - #2696 | 2019-05-16 | |
| |/ / | |||
* / / | Cosmetic changes for pidgin.profile (#2705) | 2019-05-17 | |
|/ / | |||
* | | Merge pull request #2691 from curiosity-seeker/master | 2019-05-13 | |
|\ \ | | | | | | | cantata.profile | ||
| * | | Remove trailing commas in cantata.profile | 2019-05-13 | |
| | | | |||
| * | | Update cantata.profile | 2019-05-12 | |
| | | | | | | | | | Missed the fact that for dynamic playlists perl is needed. Deactivating apparmor is also necessary for this. | ||
| * | | Update firecfg.config for cantata | 2019-05-12 | |
| | | | |||
| * | | Update disable.programs.inc for cantata | 2019-05-12 | |
| | | | |||
| * | | cantata.profile | 2019-05-12 | |
|/ / | | | | | The private-etc entries were added by firejail --build but are not complete. | ||
* | | harden & fix xiphos.profile | 2019-05-12 | |
| | | |||
* | | Update keepassxc.profile (#2687) | 2019-05-10 | |
| | | | | | | Adding `keepassxc-proxy` to `private-bin`as without it there is a related error message in Settings->Browser Integration (via the Keepassxc-Browser add-on). | ||
| * | Fix overridden DBUS_SESSION_BUS_ADDRESS with nodbus | 2019-05-09 | |
| | | |||
| * | Blacklist ~/.dbus with nodbus | 2019-05-09 | |
|/ | |||
* | Merge pull request #2680 from Feandil/master | 2019-05-06 | |
|\ | | | | | Mumble: add new path for client data | ||
| * | Mumble: add new path for client data | 2019-05-06 | |
|/ | | | | | | Since Mumble 1.3, client data was moved from $HOME/.local/share/data/Mumble to $HOME/.local/share/Mumble. See https://wiki.mumble.info/wiki/Client_Settings | ||
* | Add vim syntax and ftdetect files (#2679) | 2019-05-05 | |
| | |||
* | update man pages (private-dev, noexec) | 2019-05-04 | |
| | |||
* | Update gajim.profile | 2019-05-03 | |
| | |||
* | Drop noblacklist ${DOWNLOADS} in bitwarden.profile (#2677) | 2019-05-02 | |
| | |||
* | Refactor min as chromium redirect profile (#2676) | 2019-05-02 | |
| | |||
* | Add Bitwarden profile (#2673) | 2019-05-02 | |
| | | | | | | | | | | * Add bitwarden to firecfg * Add support for bitwarden in disable-programs.inc * Create bitwarden.profile * Fix whitelisting and no3d in bitwarden |