| Commit message (Collapse) | Author | Age |
| |
|
| |
|
|
|
| |
The included firefox.profile has wusc now. We need to whitelist /usr/share/geary to avoid breakage.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add wusc to eom
* Fix wusc in firefox
Without access to /usr/share/ca-certificates all HTTPS traffic gets the FF dialog 'Warning: Potential Security Risk Ahead'. Probably needed in thunderbird profile too (untested).
* Fix wusc ordering in meld
Just an alphabetical ordering nitpick.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Work on whitelist-usr-share-common
* sorting; add Modules + QT/KDE stuff
* add wusc.inc to more profiles [needs testing]
* update
* gitg, firefox, evince
* /usr/share/{p11-kit,pixmaps,pki,qt5,tcl8.6,terminfo}
* more profiles
* remove wusc.inc from feedreader
Even with 'whitelist /usr/share/*', feedreader trys to dereference a
NULL pointer.
* more profiles
* whitelist /usr/share breaks wget
even with whitelist /usr/share/*
* extend wusc.inc
* update
* Add alsa,crypto-policies and zoneinfo
* readd wusc.inc to wget and feedreader
* update
* testing results: Debian Buster with KDE
* more KDE stuff
* fix tb
|
| |
|
| |
|
|\
| |
| | |
Move chroot entirely from path based to file descriptor based mounts
|
| |
| |
| | |
added an additional newline in order to keep it visually separate from other unrelated error messages
|
| |
| |
| |
| | |
this is a partial revert, back to the original code
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
cf. previous commit 34e5ad65b238b698c55e4921c9ac9294e6548cc7
line buffered output is what we really want
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
|/ |
|
|
|
|
|
|
|
| |
private-lib:
- Add note about possible two-page-view breaktage
- add libgraphite2.so.*
remove mdwe
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
$ firejail ffprobe VIDEO
execvp: No such file or directory
$ firejail --noprofile --private-bin=ffprobe ffprobe VIDEO
execvp: No such file or directory
$ firejail --ignore=private-bin ffprobe VIDEO
Works
ffprobe is the only file in PATH that is touched (see --build).
|
| |
|
| |
|
|
|
|
| |
https://bugs.debian.org/941241
|
| |
|
|
|
|
| |
cf. previous commits 5bb476f74efb4754b6f5f8d711c6b77898ef9385 and 4b1a6094d7f4d9c25ff4f0f9a31bcd83732910a1
|
| |
|
| |
|
|\ |
|
| | |
|
|/ |
|
|\ |
|
| |
| |
| | |
close #2967
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* Add contrib/sort.py to Gitlab CI
Not adding to Debian Jessie or CentOS since python >=3.6 is not
available
See https://github.com/netblue30/firejail/pull/2870
* Updates
Explicitly install python3 on Ubuntu (should be pre-installed but not
working as-is)
Remove running python3 code on CentOS
* ci: comment out contrib/sort.py for Alpine
Getting this error:
$ python3 contrib/sort.py etc/*.{profile,inc}
[ Error ] Can't find `etc/*.{profile,inc}'
ERROR: Job failed: exit code 1
For now it's better to debug later and enable this test for the other
jobs
|
| |
| |
| |
| | |
… it breaks feedreader and potential also other programs
|
| | |
|
| | |
|
| | |
|
| | |
|
|/ |
|