Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | fix seahorse-tool | 2019-12-21 | ||
| | | | | | squashed: Fix private-etc ordering in seahorse-tool Thanks to @glitsj16 for this fixup | |||
* | Fix Brave's native sandbox (#3087) | 2019-12-21 | ||
| | | | | | | | | | | * Allow user access to /proc/config.gz * Fix Brave's native sandbox * Move /proc/config.gz to disable-common.inc * Move /proc/config.gz to disable-common.inc | |||
* | small fix | 2019-12-21 | ||
| | ||||
* | configure script, version, relnotes | 2019-12-14 | ||
| | ||||
* | Fix --appimage on linux 5.4.x kernel | 2019-12-14 | ||
| | | | Fixes #3068. | |||
* | wine: enable allow-debuggers by default - #446 | 2019-12-11 | ||
| | ||||
* | little things | 2019-12-11 | ||
| | ||||
* | gpg additions (#3077) | 2019-12-10 | ||
| | | | | | | | | * Add 'quiet' to gpg.profile * Add 'quiet' to gpg-agent.profile * Create gpg2.profile | |||
* | tentative fix for #3075 | 2019-12-08 | ||
| | ||||
* | Fix DeVeDe-NG export | 2019-12-06 | ||
| | | | | It is better to comment wusc in ffmpeg? | |||
* | fix brasero | 2019-12-06 | ||
| | ||||
* | mainline moving to 0.9.63 for new development; release 0.9.62 is handled on ↵ | 2019-12-06 | ||
| | | | | release-0.9.62 branch | |||
* | merges | 2019-12-03 | ||
| | ||||
* | Merge pull request #3065 from the-antz/profile-thunderbird-wayland | 2019-12-03 | ||
|\ | | | | | Minor profile tweaks. | |||
| * | Minor profile tweaks. | 2019-11-26 | ||
| | | | | | | | | thunderbird-wayland profile did not include thunderbird-wayland.local | |||
* | | cleanup | 2019-12-03 | ||
| | | ||||
* | | fix stack alignment | 2019-11-30 | ||
| | | | | | | | | apparently on x86 and on other platforms like aarch64 a 16 byte aligned stack is expected todo: replace this with a generic check | |||
* | | libreoffice aliasen | 2019-11-28 | ||
| | | ||||
* | | add private-tmp debug message | 2019-11-28 | ||
| | | ||||
* | | mask more private options runtime directories, just to be sure | 2019-11-28 | ||
| | | ||||
* | | fix interaction between private options and allusers option | 2019-11-28 | ||
| | | ||||
* | | Fix profile: ffmpeg (#3064) | 2019-11-27 | ||
|/ | | | Fix broken libx265 encoding (needs the set_mempolicy syscall). | |||
* | blacklist /tmp/.X11-unix in gist.profile | 2019-11-25 | ||
| | | | Thanks to @rusty-snake for requesting this in https://github.com/netblue30/firejail/pull/3061. | |||
* | Update README.md | 2019-11-25 | ||
| | ||||
* | Update RELNOTES | 2019-11-25 | ||
| | ||||
* | Add gist-paste to firecfg.config | 2019-11-25 | ||
| | ||||
* | Add redirect profile for gist-paste (#3062) | 2019-11-25 | ||
| | ||||
* | Add new profile: gist (#3061) | 2019-11-25 | ||
| | | | | | | | | | | | | * Create gist.profile * Add gist config to disable-programs.inc * Add gist to firecfg.config * Update RELNOTES * Update README.md | |||
* | blacklist gksu, gksudo, kdesudo | 2019-11-25 | ||
| | ||||
* | various fixups | 2019-11-25 | ||
| | ||||
* | apparmor: misc fix for pcscd | 2019-11-24 | ||
| | ||||
* | apparmor: don't allow mounts and paths manipulation | 2019-11-24 | ||
| | | | | | | | | | | | | | AppArmor security relies on path based rules and rewriting paths may allow to bypass them. Those actions are priveliged so vast majority of apps shouldn't need them anyway. If some app need those rules then it's better to consider them as unsuitable for apparmor option rather than weaken generic profile for all apps. See related issue reported by apparmor usage in snap: https://bugs.launchpad.net/snapd/+bug/1791711 | |||
* | apparmor: allow access to pcscd socket (smartcards) | 2019-11-24 | ||
| | ||||
* | Add new profile: unf (#3060) | 2019-11-24 | ||
| | | | | | | * Create unf.profile * Add unf to firecfg.config | |||
* | Add new profile: gmpc (#3059) | 2019-11-24 | ||
| | | | | | | | | * Create gmpc.profile * Add gmpc config to disable-programs.inc * Add gmpc to firecfg.config | |||
* | Add new profile: drawio (#3058) | 2019-11-24 | ||
| | | | | | | | | * Create drawio.profile * Add drawio config to disable-programs.inc * Add drawio to firecfg.config | |||
* | Add new profile: ddgtk (#3057) | 2019-11-24 | ||
| | | | | | | * Create ddgtk.profile * Add ddgtk to firecfg.config | |||
* | Add new profile: cameramonitor (#3056) | 2019-11-24 | ||
| | | | | | | * Create cameramonitor.profile * Add cameramonitor to firecfg.config | |||
* | New profile: audio-recorder (#3055) | 2019-11-24 | ||
| | | | | | | * Create audio-recorder.profile * Add audio-recorder to firecfg.config | |||
* | merges | 2019-11-24 | ||
| | ||||
* | Merge pull request #3054 from adrianlshaw/profanity | 2019-11-24 | ||
|\ | | | | | Add profanity profile | |||
| * | profanity: reorder alphabetically | 2019-11-24 | ||
| | | ||||
| * | profanity: reorder alphabetically | 2019-11-24 | ||
| | | ||||
| * | profanity: allow Python plugins and reorder rules | 2019-11-24 | ||
| | | ||||
| * | Separate the whitelist section of profanity profile | 2019-11-24 | ||
| | | ||||
| * | Sort and harden profanity profile | 2019-11-24 | ||
| | | ||||
| * | Add profile for the Profanity chat client | 2019-11-24 | ||
|/ | ||||
* | Use seccomp ! syntax in electron-mail.profile | 2019-11-23 | ||
| | ||||
* | Add new electron-mail profile (#3053) | 2019-11-23 | ||
| | | | | | | | | * Create electron-mail.profile * Add electron-mail to disable-programs.inc * Add electron-mail to firecfg.config | |||
* | Add lensfun support for gimp | 2019-11-22 | ||
| |