aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* disable dbus proxy at compile time (default enabled) - part 2Libravatar netblue302020-09-09
|
* disable dbus proxy at compile time (default enabled) - part 1Libravatar netblue302020-09-09
|
* profstats: track dbus-system noneLibravatar netblue302020-09-08
|
* fix #3625 -- hedgewars crashes without access to libluaLibravatar rusty-snake2020-09-07
|
* New disable include: disable-write-mnt.inc (#3622)Libravatar rusty-snake2020-09-07
| | | | | | | | | | | | | * New disable include: disable-write-mnt.inc It is for profiles which have a reasonable mnt access (we can not add disable-mnt), but no edit function (e.g. any kind of viewer). Added to - profile.template - default.profile - eo-common.profile * Update default.profile
* build: remove preproc from gitignoreLibravatar Reiner Herrmann2020-09-06
|
* build: move src/man to mydirs and fix building itLibravatar Reiner Herrmann2020-09-06
| | | | Fixes: #3623
* fix rhythmbox (2)Libravatar rusty-snake2020-09-05
|
* fix rhythmboxLibravatar rusty-snake2020-09-05
|
* manpages: configuration for user namespace, x11Libravatar startx20172020-09-03
|
* manpages: configuration for tunnel, chroot, private-homeLibravatar startx20172020-09-03
|
* ci: don't fail if strip fails, as it might not be a binaryLibravatar Reiner Herrmann2020-09-03
|
* ci: install gawk build dependencyLibravatar Reiner Herrmann2020-09-03
|
* variousLibravatar rusty-snake2020-09-03
| | | | | | | | | | | | * README.md & RELNOTES * Allow gnome-build do read and write .bash_history, it has a build-in terminal * D-Bus filter for gnome-passwordsafe * wruc for supertuxkart * wruc+wusc for totem * dbus-system none for totem * remove src/man/preproc.c it is replaced by preproc.awk * remove dead-code form preproc.awk
* Add profile for twitch,youtube,youtube-music; fix git-cola ,add cola (#3577)Libravatar kortewegdevries2020-09-03
| | | | | | | | | | | | | * Add profile for twitch,youtube wrappers * Fix git-cola, add Youtube music wrapper profiles * Fixes for git-cola again * Add profile for alternative name for git-cola * Fixes * Fix
* New profiles for balsa,trojita,kube (#3603)Libravatar kortewegdevries2020-09-03
| | | | | | | | | | | | | | | | | | | | | * Added minecraft-launcher-profile Initial * Changed minecraft-launcher profile Added space,tracelog,nodvd * New profiles for balsa,trojita,kube * Switch to whitelisting * Enable gpg,firefox uniformity between other clients * Hyperlinks * Fix Co-authored-by: kortewegdevries <k0rtic_dv@aol.com>
* bringing in awk preprocessor from rusty-snakeLibravatar netblue302020-09-02
|
* fix private-bin in smplayer.profileLibravatar glitsj162020-09-02
|
* fix private-bin in mpv.profileLibravatar glitsj162020-09-02
|
* fix private-bin in man.profileLibravatar glitsj162020-09-02
|
* fix private-etc orderingLibravatar glitsj162020-09-02
|
* manpage: remove overlayfs from non-overlayfs buildsLibravatar startx20172020-09-02
|
* manpage: remove apparmor from non-apparor buildsLibravatar startx20172020-09-02
|
* harden redeclipseLibravatar rusty-snake2020-09-02
|
* allow flatpak/exports also for systemd-wide locationLibravatar rusty-snake2020-09-02
|
* readme and relnotesLibravatar rusty-snake2020-09-02
|
* New profile for man,psi,smuxi; fix pidgin (#3590)Libravatar kortewegdevries2020-09-02
| | | | | | | | | | | | | | | | | | | * Profile for Psi * Fix pidgin buddy icon * Profile for man * Add profile for smuxi * Comment man in firecfg * Add pinentry programs * Update etc/profile-m-z/psi.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* Fix private-etc of electron-mail, fix geary,minitube (#3588)Libravatar kortewegdevries2020-09-02
| | | | | | | | | * Fix private-etc of electron-mail * Fix dbus of geary * Fix geary again, remove GPG * Fix seccomp on Arch
* Fixes #3596 (#3619)Libravatar kortewegdevries2020-09-02
|
* Various profiles # 2 (#3566)Libravatar kortewegdevries2020-09-02
| | | | | | | | | * Matrix clients Initial * Add profile for fractal, # 1139 * Fixes
* Various profiles (#3561)Libravatar kortewegdevries2020-09-02
| | | | | | | | | * Various profiles Initial * Various fixes # 1 Removed blacklist,no3d; added icon flatpak paths;sorting;added space
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar netblue302020-09-01
|\
| * Merge branch 'master' of https://github.com/netblue30/firejailLibravatar startx20172020-09-01
| |\
| | * #3106-1, include @mount in @default insted of all the syscallsLibravatar rusty-snake2020-09-01
| | |
| * | preprocessor for man pagesLibravatar startx20172020-09-01
| | |
| * | fix make test-compile - cleanupLibravatar startx20172020-09-01
| | |
| * | removed --disable-seccomp from ./configureLibravatar startx20172020-09-01
| |/
* / fshaper.sh fix (#3620)Libravatar netblue302020-09-01
|/
* shell none: avoid syscalls after seccomp_install_filtersLibravatar smitsohu2020-09-01
| | | fixes e.g. --shell=none --seccomp.drop=write --seccomp-error-action=kill
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2020-08-31
|\
| * fix #3614 -- telegram.profile needs netlink protocolLibravatar rusty-snake2020-08-30
| |
* | join: move to mmapped sandbox status indicatorLibravatar smitsohu2020-08-31
| | | | | | | | | | | | | | | | | | | | 1) close #3612 2) remove an implicit limitation on rlimit-fsize option (could not set limit to smaller than 6 bytes without affecting the ability to join a sandbox) 3) rename 'join-or-start' file to just 'join' 4) when waiting for a sandbox that is not fully configured yet, increase polling frequency from 10 per second to 100 per second
* | chroot: unify path name handlingLibravatar smitsohu2020-08-30
|/
* don't attempt to set window title if stdout is not a terminalLibravatar smitsohu2020-08-28
| | | closes #3356
* private-dev: blacklist stashed syslog socket when it is not needed anymoreLibravatar smitsohu2020-08-28
| | | closes #3584
* expose pulseaudio in chroot if FIREJAIL_CHROOT_PULSE is setLibravatar smitsohu2020-08-27
| | | | issue #3568
* chroot: little tweaksLibravatar smitsohu2020-08-27
|
* mask writable pulseaudio runtime dirLibravatar smitsohu2020-08-27
| | | | ... and don't fail hard without need if there is a FUSE mount
* improve copy_fileLibravatar smitsohu2020-08-27
| | | | don't report success if read failed
* whitelist-var-common.inc: fix certificate verificationLibravatar smitsohu2020-08-26
|