firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	add ommitted scripts from contrib (#3405)	glitsj16	2020-05-05
\| \| \|	We seem to have forgotten 3 scripts from contrib. Let's add those too.
*	Build improvements (#3401)	Topi Miettinen	2020-05-04
\| \| \| \| \| \|	Don't build all filters many times over but instead let them be built in parallel. Closes #3393
*	Follow-up for #3326 (#3397)	glitsj16	2020-05-04
\| \| \| \| \| \| \| \| \| \| \|	* use the new dbus format in chromium-common.profile * use new dbus format in firejail.config Now that #3326 landed I think it might be less confusing to keep using the --nodbus wording. Couldn't come up with a better alternative (yet), so this might need future improvements. * block dbus system bus Blocking the system bus shouldn't affect password functionality etc, as that uses the session bus.
*	Merge pull request #3395 from matu3ba/template_bug	rusty-snake	2020-05-04
\|\ \| \| \| \|	bug_template: more specific information
\| *	bug_template: more specific information like related programs, profile ↵	Jan	2020-05-04
\|/ \| \| \|	existence, lookup for installed profiles and user investigation on related problems
*	fix makefile and dbus	rusty-snake	2020-05-04
\| \| \| \| \| \|	- create vim directorys (#3396) - fix #3400 (Eye of GNOME won't open) - fix feedreader, it is broken without org.freedesktop.secrets access
*	fix #3399	rusty-snake	2020-05-04
\|
*	fixup! install vim contib files	rusty-snake	2020-05-03
\|
*	Merge pull request #3390 from Liorst4/disable-drm-by-default	rusty-snake	2020-05-02
\|\ \| \| \| \|	Disable browser drm by default.
\| *	Disable browser drm by default.	Lior Stern	2020-05-01
\| \| \| \| \| \| \| \|	Done to match whats stated in etc/firejail/firejail.config
* \|	install vim contib files	rusty-snake	2020-05-02
\| \|
* \|	dbus filter profiles (1) (#3326)	rusty-snake	2020-05-02
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	* dbus filter (1) * dbus-filter: firefox * drop org.gtk.vfs and com.canonical.AppMenu.Registrar
* \|	various hardening (#3394)	rusty-snake	2020-05-02
\|/
*	fixes for zeal.profile	glitsj16	2020-04-30
\| \| \|	Preliminary fixes tested/confirmed on Arch regarding #3389 (in-progress).
*	Print status of SELinux support with --version	Topi Miettinen	2020-04-29
\|
*	Increase MAX_ENVS to 256 (#3386)	Topi Miettinen	2020-04-26
\| \| \| \| \| \|	Some applications like Byobu, tmux and screen like to use environment and then 100 environment variables may be too few. Closes: #3350
*	drop no3d from gnome-contacts.profile	glitsj16	2020-04-26
\| \| \|	Fix for #3385.
*	Merge pull request #3380 from backspac/steam-runtime	rusty-snake	2020-04-24
\|\ \| \| \| \|	Add steam-runtime alias
\| *	Add steam-runtime alias	backspac	2020-04-24
\|/
*	cleanup private-etc in steam.profile	glitsj16	2020-04-22
\|
*	fix gcc10 static analysis warning	Reiner Herrmann	2020-04-22
\|
*	fix gcc10 static analysis warning	Reiner Herrmann	2020-04-22
\|
*	add disable-exec to file-manager-common profile	smitsohu	2020-04-22
\|
*	selinux relabeling, little things	smitsohu	2020-04-22
\|
*	small fixes	netblue30	2020-04-21
\|
*	Merge pull request #3359 from abranson/arm	netblue30	2020-04-21
\|\ \| \| \| \|	32bit ARM syscall table
\| *	Add 32bit ARM syscalls	Andrew Branson	2020-04-15
\| \|
* \|	Merge pull request #3373 from rusty-snake/firejail--build	netblue30	2020-04-21
\|\ \ \| \| \| \| \| \|	update --build
\| * \|	update --build	rusty-snake	2020-04-21
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The profile generated by --build are quite outdated. There are still a lot of things left to do. - fix #2150 (whitelist-common.inc is still opened from /etc/firejail) - include wusc and wvc (todo: remove whitelists in wusc/wvc from the generated profile.) - fix parsing wc / use ${HOME} macro instead of ~ - update profile headers - include all disable includes (mustly commented) in the output - reorder the filesystem section
* \| \|	file managers refactoring (#3375)	glitsj16	2020-04-21
\|/ / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* refactor caja.profile * refactor dolphin.profile * Create file-manager-common.profile * refactor nautilus.profile * refactor nemo.profile * refactor pcmanfm.profile * refactor ranger.profile * refactor Thunar.profile
* \|	update issue template + add ICEauthority to wruc	rusty-snake	2020-04-21
\| \|
* \|	gitlab	netblue30	2020-04-21
\| \|
* \|	gitlab pipeline fixes	netblue30	2020-04-21
\| \|
* \|	reorganize github etc directory	netblue30	2020-04-21
\| \|
* \|	small fixes	netblue30	2020-04-21
\| \|
* \|	resolve conflict between private and allusers options - #3185	smitsohu	2020-04-21
\| \|
* \|	relaxing symlink restrictions	smitsohu	2020-04-20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	More liberal use of an already existing fall back path in pulseaudio.c removes issues caused by symlinks in ~/.config/pulse (issue #3351 and some others) Don't die, but print warnings during /home directory masking, so that users with a symbolic link in their home directory path can at least make it to a shell prompt (only in combination with pulseaudio fix).
* \|	private-home: create directories as the user	smitsohu	2020-04-20
\| \|
* \|	debug seccomp as the user	smitsohu	2020-04-20
\| \|
* \|	sbox: blacklist umount syscall	smitsohu	2020-04-20
\| \|
* \|	cleanup	smitsohu	2020-04-20
\| \|
* \|	Profile for jitsi-meet-desktop (#3362)	Kishore96in	2020-04-19
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Profile for Jitsi Meet desktop app (electron) * Update description. * Correctly include global definitions. * Add jitsi-meet-desktop to firecfg. * blacklist Jitsi-meet config directory in disable-programs.inc * Disable more things. disable-exec.inc not included, as the application shows some error if I include it. * Disable more stuff. * No need to whitelist Downloads directory. I don't think this application has any file sharing / downloading feature. * Use private-bin I needed to allow the bash executable as well for this to work. * Add some whitelist rules. * Use private-cache option * include disable-exec.inc Apparently one needs to allow execution in /tmp for the program to work. * Redirect to electron.profile. * Use private-etc. * Do not whitelist Downloads directory. electron.profile does this, but I do not think this program needs it. * Rearrange whitelisted files to alphabetical order. * Move nonwhitelist to appropriate section. * Newlines as section separators.
* \|	Allow Lua for mpv in dolphin.profile	glitsj16	2020-04-18
\| \| \| \| \| \|	Fixes #3363.
* \|	Merge pull request #3348 from chrpinedo/profile-nicotine	rusty-snake	2020-04-17
\|\ \ \| \|/ \|/\|	Add new profile: nicotine
\| *	Add nicotine to firecfg.config	Christian Pinedo	2020-04-17
\| \|
\| *	Add nicotine to disable-programs.inc	Christian Pinedo	2020-04-17
\| \|
\| *	Create nicotine profile	Christian Pinedo	2020-04-17
\| \|
* \|	Revert ↵	glitsj16	2020-04-15
\| \| \| \| \| \| \| \| \| \|	https://github.com/netblue30/firejail/commit/ca6eec7dcf388c3d0bf52f54c56f7c957b8b777b As per discussion in #3333, thanks to @rusty-snake for coming up with an alternative.
* \|	fix make dependencies	netblue30	2020-04-14
\| \|
* \|	add sthortwave (#1139) and remove gjs from firecf…	rusty-snake	2020-04-13
\| \| \| \| \| \| \| \|	…g.config (#3333).