aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Merge pull request #4374 from smitsohu/euidLibravatar smitsohu2021-06-26
|\ | | | | fs_home.c: run more code with euid of the user
| * fs_home.c: improve EUID switching, fix selinux relabelingLibravatar smitsohu2021-06-26
| |
| * copy_file_as_user function: drop not needed argumentsLibravatar smitsohu2021-06-23
| |
* | firejail.h: fix typo of "either" in license headerLibravatar Kelvin M. Klann2021-06-26
| | | | | | | | Added on commit e770ab6d8 ("appimage: automatically detect profile").
* | Merge pull request #4368 from alxjsn/masterLibravatar rusty-snake2021-06-25
|\ \ | | | | | | Address #3872 with changes in pipewire for Firefox and Chromium
| * | Address #3872 with changes for LibrewolfLibravatar Alex Leahu2021-06-22
| | |
| * | Address #3872 with changes in pipewire for Firefox and ChromiumLibravatar Alex Leahu2021-06-22
| |/
* | Merge pull request #4370 from glitsj16/fix-wuscLibravatar glitsj162021-06-23
|\ \ | |/ |/| allow access to pkgconfig
| * allow access to pkgconfigLibravatar glitsj162021-06-23
|/
* README updateLibravatar Reiner Herrmann2021-06-21
|
* Merge branch 'master' into kuesji/masterLibravatar Reiner Herrmann2021-06-21
|\
| * creating alpine.profile (#4350)Libravatar pirate4867431862021-06-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * firecfg.config alpine * Create alpinef.profile * Create alpine.profile * disable-programs.inc alpine * workaround in comment * Update etc/profile-a-l/alpine.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * deactivating whitelists in ${HOME} * comment Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * testingLibravatar smitsohu2021-06-21
| |
| * tmpfs option enhancementsLibravatar smitsohu2021-06-21
| | | | | | | | | | | | | | | | | | | | | | | | * downgrade error to warning, smiliar to read-write option; this simplifies use of tmpfs option in general purpose profiles, for example we don't need to worry about links people put in their homedir * update manpage
| * cleanupLibravatar smitsohu2021-06-20
| |
| * Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302021-06-19
| |\
| | * Fix #4363 -- minecraft-launcher not running with firejailLibravatar rusty-snake2021-06-19
| | |
| * | fixing broken buildLibravatar netblue302021-06-19
| |/
| * jailcheck: networking supportLibravatar netblue302021-06-19
| |
| * Merge pull request #4360 from kmk3/gcov-add-missing-includesLibravatar netblue302021-06-18
| |\ | | | | | | gcov: add missing gcov.h includes
| | * gcov: add missing gcov.h includesLibravatar Kelvin M. Klann2021-06-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the following "implicit declaration" warning (13 occurrences in total) when building with gcov support: $ pacman -Q gcc10 gcc10 1:10.2.0-3 $ CC=gcc-10 && export CC $ ./configure --prefix=/usr --enable-apparmor --enable-gcov >/dev/null $ make >/dev/null appimage.c: In function ‘appimage_set’: appimage.c:140:2: warning: implicit declaration of function ‘__gcov_flush’ [-Wimplicit-function-declaration] 140 | __gcov_flush(); | ^~~~~~~~~~~~ interface.c: In function ‘print_sandbox’: interface.c:149:3: warning: implicit declaration of function ‘__gcov_flush’ [-Wimplicit-function-declaration] 149 | __gcov_flush(); | ^~~~~~~~~~~~ netstats.c: In function ‘netstats’: netstats.c:246:4: warning: implicit declaration of function ‘__gcov_flush’ [-Wimplicit-function-declaration] 246 | __gcov_flush(); | ^~~~~~~~~~~~ [...] Note: The commands above were executed from makepkg, while building firejail-git from the AUR. Note2: gcc-10 was used because the build fails with the current gcc version (11.1.0) on Artix Linux. The failure happens because __gcov_flush was removed on gcc 11.1.0[1]; this will be addressed later. Note3: The following command helped find the affected files: $ git grep -Fl __gcov -- src [1] https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=811b7636cb8c10f1a550a76242b5666c7ae36da2
| * | appimage fixLibravatar netblue302021-06-17
| |/
| * appimage: automatically detect profileLibravatar netblue302021-06-14
| |
| * mention new tin profile in readme/relnotesLibravatar Reiner Herrmann2021-06-12
| |
| * profiles: add profile for tin news reader (#4356)Libravatar Reiner Herrmann2021-06-12
| |
| * README.md: minor markdown improvementsLibravatar Reiner Herrmann2021-06-11
| |
| * Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2021-06-11
| |\
| | * mcomix profile creation (#4338)Libravatar pirate4867431862021-06-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * mcomix * Create mcomix.profile * tightening * fixes * comment
| * | follow-upLibravatar smitsohu2021-06-11
| |/ | | | | | | PR #4349
| * Merge pull request #4348 from NetSysFire/patch-1Libravatar Reiner Herrmann2021-06-08
| |\ | | | | | | Update weechat.profile
| | * Update etc/profile-m-z/weechat.profile Libravatar NetSysFire2021-06-08
| | | | | | | | | | | | | | | remove whitespace to comply with the profile template Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| | * Update weechat.profileLibravatar NetSysFire2021-06-08
| | | | | | | | | weechat needs access to `/usr/share/weechat` if you have any global scripts installed. The directory is empty by default, so there is no additional risk here.
| * | Merge pull request #4347 from pirate486743186/w3mLibravatar Reiner Herrmann2021-06-08
| |\ \ | | | | | | | | Update w3m.profile
| | * | rm disable-write-mnt.incLibravatar pirate4867431862021-06-07
| | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| | * | Update w3m.profileLibravatar pirate4867431862021-06-07
| | |/
| * | Merge pull request #4344 from pirate486743186/qcomicbookLibravatar Reiner Herrmann2021-06-08
| |\ \ | | | | | | | | creating qcomicbook profile
| | * | qcomicbookLibravatar pirate4867431862021-06-06
| | | |
| | * | Create qcomicbook.profileLibravatar pirate4867431862021-06-06
| | | |
| * | | Merge pull request #4349 from smitsohu/miscLibravatar smitsohu2021-06-08
| |\ \ \ | | |_|/ | |/| | Misc hardening + refactoring
| | * | add more EUID switchingLibravatar smitsohu2021-06-08
| | | | | | | | | | | | | | | | | | | | always access files under control of the user with effective user id of the user
| | * | refactor mountingLibravatar smitsohu2021-06-08
| | | |
| | * | miscLibravatar smitsohu2021-06-07
| | | |
| | * | fix OOBLibravatar smitsohu2021-06-07
| | | |
| | * | blacklist cleaned passwd, group, utmp filesLibravatar smitsohu2021-06-06
| | | | | | | | | | | | | | | | | | | | | | | | just in case users decide to remove them completely from the sandbox, by means of private-etc or whitelist
| | * | selinux enhancementsLibravatar smitsohu2021-06-06
| |/ /
| * / fixup 9678da00301562464464099b9d7cfd76424fbb23Libravatar smitsohu2021-06-06
| |/
| * fix tuxguitarLibravatar smitsohu2021-06-06
| |
| * cleanupLibravatar smitsohu2021-06-06
| |
| * rpm: fix man page location in spec fileLibravatar Reiner Herrmann2021-06-06
| |
| * tightening zathura profile (#4343)Libravatar pirate4867431862021-06-05
| | | | | | | | | | * tightening zathura profile * sort