Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add new electron-mail profile (#3053) | glitsj16 | 2019-11-23 |
| | | | | | | | | * Create electron-mail.profile * Add electron-mail to disable-programs.inc * Add electron-mail to firecfg.config | ||
* | Add lensfun support for gimp | glitsj16 | 2019-11-22 |
| | |||
* | Add babl/gegl support for gimp (#3051) | glitsj16 | 2019-11-22 |
| | | | | | | | | * Add babl/gegl caches for gimp * Add gir-1.0 to wusc * Add babl/gegl support to gimp.profile | ||
* | improving remount performance | smitsohu | 2019-11-19 |
| | |||
* | fix previous commit | netblue30 | 2019-11-15 |
| | |||
* | enable apparmor profile from firecfg | netblue30 | 2019-11-15 |
| | |||
* | fixing the fix | smitsohu | 2019-11-14 |
| | | | | | get previous commit acbf707889ae241bfd476f5371df4599103b6606 in line with treatment of other directories in /run/firejail/mnt | ||
* | blacklist private-home runtime directory | smitsohu | 2019-11-14 |
| | | | | | as far as possible avoid creating locations in the file system that are both writable and executable | ||
* | simplify private option ownership checks and make them more consistent | smitsohu | 2019-11-14 |
| | | | | | | allowing private and home directory to be owned by different users if the home directory is inside /home was thought to add flexibility, but the scenario is maybe a bit too exotic, and ignoring it paves the way for a simplification | ||
* | readme/relnotes updates | netblue30 | 2019-11-13 |
| | |||
* | Merge pull request #3044 from netblue30/ssh_nc | netblue30 | 2019-11-13 |
|\ | | | | | RFC: profiles: allow nc in ssh profile by default | ||
| * | profiles: allow nc in ssh profile by default | Reiner Herrmann | 2019-11-13 |
| | | |||
* | | Merge pull request #3037 from vutny/fix-3029 | netblue30 | 2019-11-13 |
|\ \ | | | | | | | Resolve #3029: drop outdated Skype profile | ||
| * | | Resolve #3029: drop outdated Skype profile | Denys Havrysh | 2019-11-12 |
| | | | |||
* | | | wine: propose allow-debuggers instead | smitsohu | 2019-11-13 |
| | | | |||
* | | | harden wine profile | smitsohu | 2019-11-13 |
| |/ |/| | |||
* | | add signal mediation to apparmor profile | smitsohu | 2019-11-13 |
| | | | | | | | | second line of defense, as there is always a pid namespace, too | ||
* | | some apparmor profile cleanup | smitsohu | 2019-11-12 |
| | | | | | | | | | | | | | | | | writing in /run/firejail/profile has always been restricted to root user, and in addition this folder is blacklisted since recently; @{profile_name} is built-in and adds a bit of flexibility; apparmor cannot be used to restrict directory search permission, so add more rules for sensitive paths | ||
* | | Merge branch 'master' of https://github.com/netblue30/firejail | smitsohu | 2019-11-12 |
|\ \ | |||
| * | | Fix dig.profile on Ubuntu | glitsj16 | 2019-11-11 |
| | | | | | | | | | Fixes #3038. | ||
* | | | blacklist .fscrypt directories | smitsohu | 2019-11-12 |
| | | | |||
* | | | private-options: add homedir ownership check | smitsohu | 2019-11-12 |
| | | | |||
* | | | private-cache warning messages - #2968 | smitsohu | 2019-11-12 |
|/ / | |||
* | | Merge branch 'master' of https://github.com/netblue30/firejail | smitsohu | 2019-11-11 |
|\| | |||
| * | rework strings.profile | rusty-snake | 2019-11-10 |
| | | | | | | | | close #2988 | ||
* | | tentatively fix k3b profile - #2989 | smitsohu | 2019-11-11 |
| | | |||
* | | add HAS_NET conditional | smitsohu | 2019-11-11 |
|/ | |||
* | add kfind profile | smitsohu | 2019-11-09 |
| | |||
* | fix nano support in git profile | smitsohu | 2019-11-09 |
| | |||
* | harden baloo | smitsohu | 2019-11-09 |
| | |||
* | Fix #3024 | rusty-snake | 2019-11-08 |
| | | | | html5, flash and widevine media support unavailable since vivaldi 2.9 | ||
* | dia profile: disable interpreters but allow python | netblue30 | 2019-11-08 |
| | |||
* | Disabled --overlay for kernels 4.219 and newer until we can bring a fix in | netblue30 | 2019-11-08 |
| | |||
* | README | netblue30 | 2019-11-08 |
| | |||
* | Merge pull request #3032 from matu3ba/master | netblue30 | 2019-11-08 |
|\ | | | | | dia apparently wants access to python and crashes without | ||
| * | dia apparently wants access to python interpreter and environment for ↵ | Jan | 2019-11-08 |
|/ | | | | scripting, even though it is written in C, maybe another fix would be better | ||
* | Update QOwnNotes.profile (#3028) | Niklas Goerke | 2019-11-07 |
| | | | | | | | | | | | | | * Update QOwnNotes.profile Fix startup problem in Ubuntu 19.10: "bus[17]: D-Bus library appears to be incorrectly set up: see the manual page for dbus-uuidgen to correct this issue. (Failed to open "/var/lib/dbus/machine-id": Datei oder Verzeichnis nicht gefunden; Failed to open "/etc/machine-id": Datei oder Verzeichnis nicht gefunden) D-Bus not built with -rdynamic so unable to print a backtrace" * Update etc/QOwnNotes.profile Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com> | ||
* | dns fixes | netblue30 | 2019-10-31 |
| | |||
* | testing | netblue30 | 2019-10-31 |
| | |||
* | testing | netblue30 | 2019-10-31 |
| | |||
* | gitignore | netblue30 | 2019-10-31 |
| | |||
* | cleanup after scan-build | netblue30 | 2019-10-31 |
| | |||
* | remove scan-build warning | netblue30 | 2019-10-31 |
| | |||
* | Add libdrm to wusc | glitsj16 | 2019-10-30 |
| | |||
* | Move libdrm whitelisting to wusc | glitsj16 | 2019-10-30 |
| | |||
* | Update mpv.profile | rusty-snake | 2019-10-30 |
| | |||
* | Wusc fixes for profiles allowing perl (#3021) | glitsj16 | 2019-10-30 |
| | | | | | | | | | | | | * Grant wusc access to perl in spectre-meltdown.profile * Grant wusc access to perl for exiftool.profile * Grant wusc access to perl for conplay.profile * Grant wusc access to perl for clawsker.profile * Grant wusc access to perl for checkbashisms.profile | ||
* | Slack profile: use temporary cache (#3019) | Denys Havrysh | 2019-10-30 |
| | | | Fixes #3015 | ||
* | Fix ebook-viewer/calibre on manjaro (#2998) | rusty-snake | 2019-10-28 |
| | | | | | | | | * Fix ebook-viewer on manjaro closes #2996 * Move fix to calibre.profile | ||
* | Rework waterfox profile (#3014) | rusty-snake | 2019-10-28 |
| | | | closes #3013 |