Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
| * | Inkscape: allow xcf export | 2019-09-22 | ||
| | | | | | | close #2967 | |||
| * | add allow-debuggers to steam.profile (#2971) | 2019-09-21 | ||
| | | ||||
| * | Adding sort.py to GitLab CI (#2973) | 2019-09-21 | ||
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add contrib/sort.py to Gitlab CI Not adding to Debian Jessie or CentOS since python >=3.6 is not available See https://github.com/netblue30/firejail/pull/2870 * Updates Explicitly install python3 on Ubuntu (should be pre-installed but not working as-is) Remove running python3 code on CentOS * ci: comment out contrib/sort.py for Alpine Getting this error: $ python3 contrib/sort.py etc/*.{profile,inc} [ Error ] Can't find `etc/*.{profile,inc}' ERROR: Job failed: exit code 1 For now it's better to debug later and enable this test for the other jobs | |||
| * | readd .config/dconf to whitelist-common because … | 2019-09-21 | ||
| | | | | | | | | … it breaks feedreader and potential also other programs | |||
| * | Create pngquant.profile | 2019-09-21 | ||
| | | ||||
| * | Create gnome-latex.profile | 2019-09-20 | ||
| | | ||||
* | | minor optimization | 2019-09-22 | ||
| | | ||||
* | | prevent trace from interfering with sandbox setup | 2019-09-22 | ||
| | | ||||
* | | various clarifications, minor fixes | 2019-09-22 | ||
|/ | ||||
* | apparmor: permit writing to trace file | 2019-09-18 | ||
| | ||||
* | break out fs_tracefile function | 2019-09-18 | ||
| | ||||
* | fix the fix: tune file copy limit width | 2019-09-17 | ||
| | ||||
* | fail gracefully if argc is zero | 2019-09-17 | ||
| | ||||
* | add trace file validation | 2019-09-17 | ||
| | ||||
* | move to fd based trace file mount | 2019-09-17 | ||
| | ||||
* | Add allow-perl.inc to w3m.profile (#2965) | 2019-09-16 | ||
| | | | | | | * Removed disable-interpreters.inc from w3m.profile * disable-interpreters + allow-perl | |||
* | Merge pull request #2935 from crass/fix-profile-builder | 2019-09-15 | ||
|\ | | | | | Fix profile builder | |||
| * | Merge branch 'master' into fix-profile-builder | 2019-09-15 | ||
| |\ | |/ |/| | ||||
* | | Fix #2899 | 2019-09-15 | ||
| | | ||||
* | | typos [skip ci] | 2019-09-14 | ||
| | | ||||
* | | "Net None" Option Breaks Functionality (#2962) | 2019-09-14 | ||
| | | | | | | Netfilter is fine but "net none" option breaks functionality of marketplace. | |||
* | | update seccomp in man firejail | 2019-09-13 | ||
| | | ||||
* | | Fix #2945 (Signal 1.27 Fails to Start) | 2019-09-13 | ||
| | | ||||
* | | Update SkypeForLinux profile for latest version (#2960) | 2019-09-13 | ||
| | | | | | | Fixes #2933 | |||
* | | libtrace cleanup | 2019-09-10 | ||
| | | ||||
* | | appimage --trace testing | 2019-09-10 | ||
| | | ||||
* | | Add ar profile (#2949) | 2019-09-08 | ||
| | | | | | | | | | | | | * Add ar to firecfg * Create ar.profile | |||
* | | Fix private-bin in tar.profile | 2019-09-06 | ||
| | | | | | | Fixes #2942. | |||
* | | Fix gnome-schedule | 2019-09-06 | ||
| | | | | | | This fixes #2941. | |||
* | | Update syscalls.txt | 2019-09-05 | ||
| | | ||||
* | | remove ~/.config/dconf from whitelist-common.inc | 2019-09-05 | ||
| | | | | | | | | | | - dconf database is read-only (fde6e04b) and accessed over dbus, there are no reasons to keep it in the sandbox | |||
* | | explain removal of nodbus in qpdfview.profile | 2019-09-05 | ||
| | | | | | | see previous commit, #2879 | |||
* | | Merge pull request #2879 from Edu4rdSHL/patch-1 | 2019-09-05 | ||
|\ \ | | | | | | | qpdfview: Fix issue when opening a file from file manager | |||
| * | | Fix issue when opening a file from file manager | 2019-07-29 | ||
| | | | | | | | | | I can confirm https://github.com/netblue30/firejail/pull/2837#issuecomment-511334363 when opening a file from `pcmanfm`, it doesn't open if qpdfview contains `nodbus` | |||
* | | | fix FIREJAIL_FILE_COPY_LIMIT larger than 2GB | 2019-09-05 | ||
| | | | ||||
* | | | Revert changes in #2928 to seccomp group @default | 2019-09-04 | ||
| | | | | | | | | | | | | | | | Reconstruct @default by not relying on the changed system call groups @privileged and @resources. | |||
* | | | fixup! Use new seccomp syntax from #2926 in more profiles | 2019-08-30 | ||
| | | | ||||
* | | | fix #2669 | 2019-08-30 | ||
| | | | ||||
* | | | Use new seccomp syntax (#2926) in more profiles | 2019-08-30 | ||
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Rules for redirecting profiles: - add exceptions: just add 'seccomp !SYSCALL' - remove exception: ``` seccomp ignore seccomp ``` | |||
* | | | Use new seccomp syntax from #2926 in more profiles | 2019-08-30 | ||
| | | | ||||
* | | | Use new seccomp syntax from #2926 | 2019-08-30 | ||
| | | | ||||
| | * | Make sure that we are unprivileged before creating the trace log file. | 2019-08-29 | ||
| | | | ||||
| | * | When running builder trace output should go to separate file because (1) ↵ | 2019-08-29 | ||
| | | | | | | | | | | | | trace output is logged to console, which is a pain to capture, and (2) it should not be mingled with program output anyway, which it was when sending to stdout. | |||
| | * | Update man page to note that --trace can now take an optional parameter. | 2019-08-29 | ||
| | | | ||||
| | * | Allow firejail --trace option to take an optional parameter which is the ↵ | 2019-08-29 | ||
| | | | | | | | | | | | | trace log file path. The trace log file will be created if it does not exist and then bind mounted to RUN_TRACE_FILE so that the sandboxed program can access it. | |||
| | * | Allow libtrace preload library to use for trace output a logfile specified ↵ | 2019-08-29 | ||
| | | | | | | | | | | | | by the environment variable FIREJAIL_TRACEFILE or as the RUN_TRACE_FILE if it exists ortherwise use the console as before. | |||
| | * | Fix issue where strace output file path has leading space making it an ↵ | 2019-08-29 | ||
| | | | | | | | | | | | | invalid path. | |||
| | * | Better debug handling. | 2019-08-29 | ||
| | | | ||||
| | * | Profile builder helper should use correct firejail binary path. | 2019-08-29 | ||
| |/ |/| | ||||
* | | Merge branch 'master' of https://github.com/netblue30/firejail | 2019-08-29 | ||
|\ \ |