| Commit message (Collapse) | Author | Age |
| |
|
| |
|
|
|
|
| |
* Fix #2866 -- private-etc needed os-release,redhat-release,system-release,system-release-cpe
|
| |
|
|\
| |
| | |
Create rsync.profile
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
- fix sorting and private-etc, thanks to @glitsj16 for catching this
- add some missing to private-bin in firefox (still need more testing)
|
| |
| |
| |
| |
| |
| | |
- add a private-bin to firefox for fedora (still need testing)
- add a temporary workaround for #2877 ghostwriter sience this break export and preview with pandoc
- remove 'name slack' from slack.profile sience this is the only profile with name
|
|\ \
| | |
| | | |
Add Whalebird profile
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- pluma: sync private-lib from gedit to fix crashes
5e220b2da502bdcaf0f6188779e8bb0e37c9c414
- checkbashisms: fix missing library needed under CentOS 7
of note:
- yelp complains about /etc/pki but lacks network access anyway
under openSUSE Tumbleweed
- gedit is broken, see #2207
- onionshare-gui is broken, unrelated to firejail
under CentOS 7
- chromium-common is broken, commenting private-dev fixes,
potentially related to firejail, there are SELinux denials
for /dev/urandom
under Fedora and CentOS 7
- gnome-system-log is broken, as it is a script that calls logview
using pkexec, consider commenting in firecfg?
|
|\ \ \
| | | |
| | | | |
Add new Tor Browser alias
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- tor-browser in the AUR is an international package; all other
individual language variants have been removed, so, add new alias
- Add 'tor-browser' and 'mv' to private-bin in launcher profile ('mv' is
required when upgrading tor-browser versions)
- Add 'tor-browser' to firecfg.config
- Add config dir to disable-programs.inc
|
|\ \ \
| |/ /
|/| | |
Update itch profile
|
|/ /
| |
| |
| | |
itch now also uses ~/.itch for application updates
|
|\ \
| | |
| | | |
Add Zulip profile
|
| | |
| | |
| | |
| | |
| | |
| | | |
- Add Zulip config dir to disable-programs.inc
- Add disable-xdg.inc to Zulip profile
- Add Zulip to firecfg.config
|
|/ / |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
|/
|
| |
The `private-cache` option breaks electron related builds (see [this](https://github.com/minbrowser/min/issues/793) for an example).
|
| |
|
| |
|
|\ |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
* remove mincore
* add @default without chroot
* add @default-nodebuggers without chroot
|
| | |
|
|/
|
|
|
|
| |
users not in firejail.users should only see the error,
not the symlink warning. Also exposes less code to non-
authorized users.
|
| |
|
| |
|
| |
|
|
|
| |
Let's disable using a terminal for cron job testing by default and make this a whitelist profile.
|
| |
|
|
|
|
| |
(#2861)
|
| |
|
| |
|
|
|
|
|
|
|
| |
Use @{PID} consistently.
Remove 'deny /proc/** w,' suggestion as it will break all
whitelisted entries.
|
|
|
| |
fixes #2859
|