firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	relnotes0.9.64.4	netblue30	2021-02-07
\|
*	disabled overlayfs, 0.9.64.4 testing	netblue30	2021-02-05
\|
*	tests: check with faudit if tests are run sandboxed	Reiner Herrmann	2021-02-03
\| \| \| \|	(cherry picked from commit c40b78148108f21b8ff903ec870ffaab76550064)
*	Fix minor typo in firecfg's manual page	irandms	2021-02-03
\| \| \| \|	(cherry picked from commit ff30ea354fa8fb46db2c03282c086110bff16689)
*	build: clean generated test/Makefile	Reiner Herrmann	2021-02-03
\| \| \| \|	(cherry picked from commit e6701a27d91f16c434c25482e8add7228140ff20)
*	tests: increase shutdown timeout a bit	Reiner Herrmann	2021-02-03
\| \| \| \| \| \|	in Debian CI and during local tests I ran into the timeout (cherry picked from commit 04ce86d0180b945e0495bd02a8f6eab9b97cdff2)
*	tests: improve check for sound capabilities (#3929)	Reiner Herrmann	2021-02-03
\| \| \| \| \|	Fixes: #3928 (cherry picked from commit af2375300c5a1697d2b5242fc11e6275788894b1)
*	temporary fix for profile tests0.9.64.2	netblue30	2021-01-27
\|
*	revert #3920 (#3921)	glitsj16	2021-01-27
\| \| \| \| \|	* revert #3920 * revert #3920
*	remove noblacklist without blacklist (#3920)	glitsj16	2021-01-27
\| \| \| \| \| \| \| \| \|	* remove noblacklist without blacklist in aosp ${HOME}/.bash_history is not blacklisted anywhere. Hence a noblacklist doesn't make sense here. * remove noblacklist without blacklist in gnome-builder ${HOME}/.bash_history is not blacklisted anywhere. Hence a noblacklist doesn't make sense here.
*	rel 0.9.64.2 testing - make test-compile	netblue30	2021-01-26
\|
*	rel 0.9.24.2 testing	netblue30	2021-01-26
\|
*	release 0.9.64.2 testing	netblue30	2021-01-26
\|
*	merge/readme update	netblue30	2021-01-25
\|
*	Merge pull request #3853 from botherder/master	netblue30	2021-01-25
\|\ \| \| \| \|	New profile for CoyIM
\| *	Added additional whitelists	Nex	2021-01-06
\| \|
\| *	Implementing some of the suggested changes from #3853	Nex	2020-12-29
\| \|
\| *	Added some more restrictions to coyim profile	Nex	2020-12-29
\| \|
\| *	Added first profile for coyim	Nex	2020-12-29
\| \|
* \|	Merge pull request #3899 from rootalc/nolocal6	netblue30	2021-01-25
\|\ \ \| \| \| \| \| \|	Create nolocal6.net
\| * \|	Create nolocal6.net	rootalc	2021-01-18
\| \| \|
* \| \|	Merge pull request #3918 from Neo00001/master	netblue30	2021-01-25
\|\ \ \ \| \| \| \| \| \| \| \|	Add profile for kdiff3
\| * \| \|	Update kdiff3.profile	Neo00001	2021-01-24
\| \| \| \|
\| * \| \|	Create kdiff3.profile	Neo00001	2021-01-24
\| \| \| \|
\| * \| \|	Update firecfg.config	Neo00001	2021-01-24
\| \| \| \|
\| * \| \|	Update disable-programs.inc	Neo00001	2021-01-24
\| \| \| \|
* \| \| \|	fix #3914	netblue30	2021-01-24
\| \| \| \|
* \| \| \|	profstats	netblue30	2021-01-24
\|/ / /
* \| \|	Update vmware.profile (#3913)	Neo00001	2021-01-24
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Update vmware.profile `private-etc` can be uncommented. * Update vmware.profile
* \| \|	misc comment fixes (#3916)	glitsj16	2021-01-24
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* fix comment in blackbox.profile * fix comment in fluxbox.profile * fix comment in i3.profile * fix comment in krunner.profile * fix comment in openbox.profile
* \| \|	refactor google-earth{-pro} (#3915)	glitsj16	2021-01-23
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* refactor google-earth{-pro} blacklisting * fix google-earth-pro.profile I've included all binaries found in the Arch Linux AUR package to private-bin. But I also added a note on ignoring private-bin because I'm not sure what google-earth is doing on other distro's. * unbreak google-earth.profile Not sure why we need grep, ls and sed in private-bin exactly but keeping them around wouldn't hurt too much I guess.
* \| \|	Update bibletime.profile, add new whitelist (#3908)	hhzek0014	2021-01-22
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	To solve issue#3907, doc directory of the bibletime has to be whitelisted. Otherwise, it always fails to start. Co-authored-by: hhnb <hhnb@nanenient.cc>
* \| \|	refactoring	smitsohu	2021-01-20
\| \| \|
* \| \|	Merge pull request #3900 from smitsohu/privatelib	smitsohu	2021-01-20
\|\ \ \ \| \| \| \| \| \| \| \|	Add $PATH expansion to private-lib
\| * \| \|	private-lib: search executables in $PATH	smitsohu	2021-01-20
\| \| \| \|
* \| \| \|	Merge pull request #3903 from smitsohu/privatelib3	smitsohu	2021-01-20
\|\ \ \ \ \| \| \| \| \| \| \| \| \| \|	private-lib: add new timetrace
\| * \| \| \|	private-lib: add timetrace for Firejail libraries	smitsohu	2021-01-18
\| \|/ / /
* \| \| \|	misc fcopy fixes	smitsohu	2021-01-20
\| \| \| \|
* \| \| \|	private-lib: simplify installation of stdc	smitsohu	2021-01-20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	as modern-day Debian only keeps a single symbolic link in /lib64, going through both directories systematically adds virtually no overhead (as indicated by the timetrace). At the same time it is simpler and more robust in producing a correct representation of the filesystem.
* \| \| \|	add pkglog to new profiles	glitsj16	2021-01-18
\| \| \| \|
* \| \| \|	add pkglog to new profiles	glitsj16	2021-01-18
\| \| \| \|
* \| \| \|	add new profile: pkglog (#3902)	glitsj16	2021-01-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* add pkglog to new profiles * Create pkglog.profile * Update README.md * fix ordering in pkglog.profile * drop extra whitespace in pkglog.profile
* \| \| \|	harden plv.profile (#3901)	glitsj16	2021-01-18
\|/ / /
* \| \|	Add 'seccomp-error-action log' to profile.template	rusty-snake	2021-01-18
\| \| \|
* \| \|	Add profile for guvcview	rusty-snake	2021-01-18
\| \| \|
* \| \|	harden and fix cheese.profile	rusty-snake	2021-01-18
\|/ / \| \| \| \| \| \| \| \|	hardening: wusc + wruc fix: settings was immutable
* \|	Add new allow include allow-bin-sh.inc	rusty-snake	2021-01-16
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	/bin/sh is usually just a symlink to bash. However this is not the case for every distro, debian for example uses dash. bash,dash and sh have a blacklist command in disable-shell.inc. An own allow-*.inc for it enusres usage of all necessary nolacklists. For private-bin sh is enough because it follows symlinks.
* \|	add realaltffour	glitsj16	2021-01-15
\| \| \| \| \| \|	See #3895.
* \|	newsboat: add lynx support (#3895)	altf_four	2021-01-15
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	* newsboat: add lynx support * newsboat: fix using sort.py * newsboat: remove unneeded perms
* \|	blacklist firejail appimage dir if not used	smitsohu	2021-01-15
\| \|