aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Merge pull request #4030 from glitsj16/chromium-common-hardenedLibravatar glitsj162021-03-02
|\ | | | | Rename chromium-common-hardened.inc
| * rename chromium-common-hardened.incLibravatar glitsj162021-03-02
| |
| * rename chromium-common-hardened.incLibravatar glitsj162021-03-02
| |
| * Rename etc/inc/chromium-common-hardened.inc to ↵Libravatar glitsj162021-03-02
| | | | | | | | etc/profile-a-l/chromium-common-hardened.profile
* | Merge pull request #4029 from glitsj16/feh-networkLibravatar glitsj162021-03-02
|\ \ | | | | | | Rename feh-network.inc
| * | rename feh-network.incLibravatar glitsj162021-03-02
| | |
| * | add local override functionality to feh-network.profileLibravatar glitsj162021-03-02
| | |
| * | Rename etc/inc/feh-network.inc to etc/profile-a-l/feh-network.profileLibravatar glitsj162021-03-02
| |/
* | Merge pull request #4028 from glitsj16/archiver-commonLibravatar glitsj162021-03-02
|\ \ | | | | | | Rename archiver-common.inc
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | rename archiver-common.incLibravatar glitsj162021-03-02
| | |
| * | Rename etc/inc/archiver-common.inc to etc/profile-a-l/archiver-common.profileLibravatar glitsj162021-03-02
| |/
* / Fix typosLibravatar glitsj162021-03-02
|/
* Merge pull request #4024 from kmk3/improve-makefilesLibravatar Reiner Herrmann2021-03-01
|\ | | | | Makefile improvements
| * makefiles: make all, clean and distclean PHONYLibravatar Kelvin M. Klann2021-03-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Avoid a stat() call for each affected target and also potentially speed up parallel builds. From the GNU make manual[1]: > Phony targets are also useful in conjunction with recursive > invocations of make (see Recursive Use of make). In this situation > the makefile will often contain a variable which lists a number of > sub-directories to be built. [...] > The implicit rule search (see Implicit Rules) is skipped for .PHONY > targets. This is why declaring a target as .PHONY is good for > performance, even if you are not worried about the actual file > existing. Commands used to search, replace and cleanup: $ find -type f -name '*Makefile.in' -exec sed -i.bak \ -e 's/^all:/.PHONY: all\nall:/' \ -e 's/^clean:/.PHONY: clean\nclean:/' \ -e 's/^distclean:/.PHONY: distclean\ndistclean:/' '{}' + $ find -type f -name '*Makefile.in.bak' -exec rm '{}' + [1]: https://www.gnu.org/software/make/manual/html_node/Phony-Targets.html
| * makefiles: fix misc blank line consistencyLibravatar Kelvin M. Klann2021-03-01
| |
| * makefiles: fix whitespaceLibravatar Kelvin M. Klann2021-03-01
| | | | | | | | | | | | | | | | With a fun little script: $ git ls-files -z -- '*Makefile*' | xargs -0 -I '{}' sh -c \ "test -s '{}' && printf '%s\n' \"\`git stripspace <'{}'\`\" >'{}'"
* | tests: also remove arguments tests which also depend on fauditLibravatar Reiner Herrmann2021-03-01
| |
* | tests: drop (f)audit from testsLibravatar Reiner Herrmann2021-03-01
| |
* | manpage: Add log as value of seccomp-error-actionLibravatar rusty-snake2021-03-01
| | | | | | | | man firejail-profiles has it already. [skip ci]
* | chromium-browser-privacy: add cat to private-binLibravatar rusty-snake2021-03-01
| |
* | Update shell completionsLibravatar rusty-snake2021-03-01
|/ | | | | | | | | | bash: - remove --audit zsh: - add --mkdir + --mkfile - remove -audit and fix typo in 9b56dc8e
* some cleanupLibravatar netblue302021-03-01
|
* retiring --audit (replaced by jailtest)Libravatar netblue302021-03-01
|
* Merge pull request #4019 from glitsj16/protocolLibravatar glitsj162021-03-01
|\ | | | | fix protocol list
| * drop useless ignoreLibravatar glitsj162021-03-01
| |
| * add local override functionalityLibravatar glitsj162021-03-01
| | | | | | Due to https://github.com/netblue30/firejail/commit/5d88ee8957dc38a52c36f71b91c786dbec9d4ec9 we should provide an override option here IMO.
| * fix protocol listLibravatar glitsj162021-03-01
| | | | | | Now that https://github.com/netblue30/firejail/commit/5d88ee8957dc38a52c36f71b91c786dbec9d4ec9 introduces new protocol list behaviour, we need to add an ignore here due to the redirect to transmission-common.profile. See https://github.com/netblue30/firejail/issues/4017 for clarification.
* | Merge pull request #4021 from rusty-snake/force-nnp-compile-timeLibravatar netblue302021-03-01
|\ \ | | | | | | Force nnp compile time
| * | Clarify enforce_filters messageLibravatar rusty-snake2021-03-01
| | | | | | | | | | | | | | | | | | The current message misses the info that nnp and nogroups is applied too. The new mentions nnp too, but is very long. If anyone has a better wording, say it.
| * | Add ./configure --enable-force-nonewprivsLibravatar rusty-snake2021-03-01
|/ / | | | | | | This will always set 'nonewprivs', 'caps.drop all' and 'nogroups'.
* / fixesLibravatar rusty-snake2021-03-01
|/ | | | | | | | | | | | | - RELNOTS: protocol now accumulates - fix #3978 -- Android Studio: cannot create the directory Unresolved: > google-earth.profile has a 'noblacklist ${HOME}/.config/Google' too, > so we should consider to add additional blacklists for ~/.config/Google/*. - marker.profile: allow ${DOCUMENTS} - profile.template: add bluetooth protocol - profile.template: add DBus portal note - firejail-profile.txt: revert 17fe4b9e -- fix private=directory in man firejail-profile see https://github.com/netblue30/firejail/pull/3970#discussion_r574411745
* compile time: enable LTSLibravatar startx20172021-02-28
|
* compile time: disable --outputLibravatar startx20172021-02-28
|
* dbus.c: check_object_path: Allow /StatusNotifierWatcher (#4015)Libravatar rusty-snake2021-02-26
|
* typo fixLibravatar glitsj162021-02-26
|
* typo fixesLibravatar glitsj162021-02-26
|
* small fixes and updatesLibravatar netblue302021-02-26
|
* mkdir/mkfile man pagesLibravatar netblue302021-02-26
|
* Merge pull request #4009 from Tomin1/protocol_list_improvementsLibravatar netblue302021-02-26
|\ | | | | Allow changing protocol list after initial set
| * Allow changing "protocol" list after initial setLibravatar Simo Piiroinen2021-02-25
| | | | | | | | | | | | | | | | | | | | | | | | | | Firejail uses set-once logic for "protocol" list. This makes it impossible to accumulate list of allowed protocols from multiple include files. Use profile_list_augment() for maintaining list of protocols. This implicitly means protocols can be added/removed via any number of command line options / profile configuration files. Signed-off-by: Simo Piiroinen <simo.piiroinen@jolla.com> Signed-off-by: Tomi Leppänen <tomi.leppanen@jolla.com>