aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* fixing some of the testsLibravatar netblue302020-05-18
|
* better blacklist orderingLibravatar Reiner Herrmann2020-05-16
|
* Blacklist busybox by defaultLibravatar Reiner Herrmann2020-05-16
| | | | It's a collection of many tools, that might not be allowed individually. When it's needed, it can easily be allowed again.
* add mace015 to contributorsLibravatar glitsj162020-05-16
|
* fix ordering in disable-programs.incLibravatar glitsj162020-05-16
|
* Allow google-chrome access to the custom flags files in ~/.config. (#3418)Libravatar Mace Muilman2020-05-16
| | | | | | | | | * Allow google-chrome access to the custom flags files in ~/.config. * Added noblacklist for the custom flag files for google-chrome-stable. * Allow read access to the custom flag files for both google-chrome-beta and google-chrome-unstable. * Added the custom flag files for google-chrome stable, beta and unstable to the disable-programs.inc list.
* Add quiet to secret-toolLibravatar Tad2020-05-15
|
* fix wusc in yelp.profileLibravatar glitsj162020-05-15
|
* Configure Debian package with AA and SELinux optionsLibravatar Topi Miettinen2020-05-14
| | | | | Configure Debian package with AA and SELinux options if they are enabled.
* add new profile: plv (#3410)Libravatar glitsj162020-05-11
| | | | | | | | | | | Also fixed a typo for new profiles: nicontine --> nicotine * add plv to firecfg * add plv to disable-programs.inc * Create plv.profile * Update plv.profile
* Merge pull request #3409 from corecontingency/masterLibravatar rusty-snake2020-05-10
|\ | | | | Add several games to steam and disable-programs
| * Add several games to steam and disable-programsLibravatar corecontingency2020-05-10
|/ | | | | | | | | | | | Add Faster Than Light, Into the Breach, Paradox Interactive, and mbwarband to disable-programs.inc. Also, add Faster Than Light and Into the Breach into steam.profile. This fixes saved games being lost when steam is closed, and also lets Steam cloud sync work properly. Lastly, remove a duplicate whitelist ${HOME}/.steampid from steam.profile.
* add ommitted scripts from contrib (#3405)Libravatar glitsj162020-05-05
| | | We seem to have forgotten 3 scripts from contrib. Let's add those too.
* Build improvements (#3401)Libravatar Topi Miettinen2020-05-04
| | | | | | Don't build all filters many times over but instead let them be built in parallel. Closes #3393
* Follow-up for #3326 (#3397)Libravatar glitsj162020-05-04
| | | | | | | | | | | * use the new dbus format in chromium-common.profile * use new dbus format in firejail.config Now that #3326 landed I think it might be less confusing to keep using the --nodbus wording. Couldn't come up with a better alternative (yet), so this might need future improvements. * block dbus system bus Blocking the system bus shouldn't affect password functionality etc, as that uses the session bus.
* Merge pull request #3395 from matu3ba/template_bugLibravatar rusty-snake2020-05-04
|\ | | | | bug_template: more specific information
| * bug_template: more specific information like related programs, profile ↵Libravatar Jan2020-05-04
|/ | | | existence, lookup for installed profiles and user investigation on related problems
* fix makefile and dbusLibravatar rusty-snake2020-05-04
| | | | | | - create vim directorys (#3396) - fix #3400 (Eye of GNOME won't open) - fix feedreader, it is broken without org.freedesktop.secrets access
* fix #3399Libravatar rusty-snake2020-05-04
|
* fixup! install vim contib filesLibravatar rusty-snake2020-05-03
|
* Merge pull request #3390 from Liorst4/disable-drm-by-defaultLibravatar rusty-snake2020-05-02
|\ | | | | Disable browser drm by default.
| * Disable browser drm by default.Libravatar Lior Stern2020-05-01
| | | | | | | | Done to match whats stated in etc/firejail/firejail.config
* | install vim contib filesLibravatar rusty-snake2020-05-02
| |
* | dbus filter profiles (1) (#3326)Libravatar rusty-snake2020-05-02
| | | | | | | | | | | | | | * dbus filter (1) * dbus-filter: firefox * drop org.gtk.vfs and com.canonical.AppMenu.Registrar
* | various hardening (#3394)Libravatar rusty-snake2020-05-02
|/
* fixes for zeal.profileLibravatar glitsj162020-04-30
| | | Preliminary fixes tested/confirmed on Arch regarding #3389 (in-progress).
* Print status of SELinux support with --versionLibravatar Topi Miettinen2020-04-29
|
* Increase MAX_ENVS to 256 (#3386)Libravatar Topi Miettinen2020-04-26
| | | | | | Some applications like Byobu, tmux and screen like to use environment and then 100 environment variables may be too few. Closes: #3350
* drop no3d from gnome-contacts.profileLibravatar glitsj162020-04-26
| | | Fix for #3385.
* Merge pull request #3380 from backspac/steam-runtimeLibravatar rusty-snake2020-04-24
|\ | | | | Add steam-runtime alias
| * Add steam-runtime aliasLibravatar backspac2020-04-24
|/
* cleanup private-etc in steam.profileLibravatar glitsj162020-04-22
|
* fix gcc10 static analysis warningLibravatar Reiner Herrmann2020-04-22
|
* fix gcc10 static analysis warningLibravatar Reiner Herrmann2020-04-22
|
* add disable-exec to file-manager-common profileLibravatar smitsohu2020-04-22
|
* selinux relabeling, little thingsLibravatar smitsohu2020-04-22
|
* small fixesLibravatar netblue302020-04-21
|
* Merge pull request #3359 from abranson/armLibravatar netblue302020-04-21
|\ | | | | 32bit ARM syscall table
| * Add 32bit ARM syscallsLibravatar Andrew Branson2020-04-15
| |
* | Merge pull request #3373 from rusty-snake/firejail--buildLibravatar netblue302020-04-21
|\ \ | | | | | | update --build
| * | update --buildLibravatar rusty-snake2020-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The profile generated by --build are quite outdated. There are still a lot of things left to do. - fix #2150 (whitelist-common.inc is still opened from /etc/firejail) - include wusc and wvc (todo: remove whitelists in wusc/wvc from the generated profile.) - fix parsing wc / use ${HOME} macro instead of ~ - update profile headers - include all disable includes (mustly commented) in the output - reorder the filesystem section
* | | file managers refactoring (#3375)Libravatar glitsj162020-04-21
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refactor caja.profile * refactor dolphin.profile * Create file-manager-common.profile * refactor nautilus.profile * refactor nemo.profile * refactor pcmanfm.profile * refactor ranger.profile * refactor Thunar.profile
* | update issue template + add ICEauthority to wrucLibravatar rusty-snake2020-04-21
| |
* | gitlabLibravatar netblue302020-04-21
| |
* | gitlab pipeline fixesLibravatar netblue302020-04-21
| |
* | reorganize github etc directoryLibravatar netblue302020-04-21
| |
* | small fixesLibravatar netblue302020-04-21
| |
* | resolve conflict between private and allusers options - #3185Libravatar smitsohu2020-04-21
| |
* | relaxing symlink restrictionsLibravatar smitsohu2020-04-20
| | | | | | | | | | | | | | | | | | | | More liberal use of an already existing fall back path in pulseaudio.c removes issues caused by symlinks in ~/.config/pulse (issue #3351 and some others) Don't die, but print warnings during /home directory masking, so that users with a symbolic link in their home directory path can at least make it to a shell prompt (only in combination with pulseaudio fix).
* | private-home: create directories as the userLibravatar smitsohu2020-04-20
| |