Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | private-lib hardening | smitsohu | 2021-03-04 |
| | | | | | | | | | | | ensure that libraries are loaded from a default ld.so search path it is reasonable for firejail to expect that unprivileged users have no write permission on these paths; lax permissions there mean that the system is probably screwed anyway | ||
* | jailtest fix | smitsohu | 2021-02-23 |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | netblue30 | 2021-02-23 |
|\ | |||
| * | dosbox fix | netblue30 | 2021-02-22 |
| | | |||
* | | jailtest | netblue30 | 2021-02-23 |
| | | |||
* | | hardening ssh, tor | netblue30 | 2021-02-23 |
|/ | |||
* | more calibre profiles | netblue30 | 2021-02-22 |
| | |||
* | Fix patch-util not having access to libdl.so (#4000) | zupatisc | 2021-02-22 |
| | | | | | | | * Fix patch-util not having access to libdl.so * Update etc/profile-m-z/patch.profile Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com> | ||
* | build: include jailtest in rpm | Reiner Herrmann | 2021-02-21 |
| | |||
* | apparmor capabilities fix | netblue30 | 2021-02-21 |
| | |||
* | jaitest - simple sandbox testing utility program | netblue30 | 2021-02-20 |
| | |||
* | run sort.py | Reiner Herrmann | 2021-02-20 |
| | |||
* | fix ipcalc | netblue30 | 2021-02-19 |
| | |||
* | adding ipcalc, ipcalc-ng | netblue30 | 2021-02-19 |
| | |||
* | refresh capabilities (#3945) | smitsohu | 2021-02-19 |
| | |||
* | Merge pull request #3994 from kmk3/fix-copyright-bump | glitsj16 | 2021-02-17 |
|\ | | | | | contrib/firejail-welcome.sh: fix copyright year | ||
| * | contrib/firejail-welcome.sh: fix copyright year | Kelvin M. Klann | 2021-02-15 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Append the current year rather than replace the previous one. This amends commit 2609e5cf0 ("copyright update"). Commands that helped catch this: $ git show --pretty='' 2609e5cf0 | sed -n 's/^-.*Copyright //p' | LC_ALL=C sort | uniq (C) 2014-2020 Firejail Authors (C) 2014-2020 Firejail Authors (see README file for more details) (C) 2020 Firejail Authors (C) 2020 Firejail and systemd authors (c) 2019,2020 rusty-snake $ git show --pretty='' 2609e5cf0 | sed -n 's/^+.*Copyright //p' | LC_ALL=C sort | uniq (C) 2014-2021 Firejail Authors (C) 2014-2021 Firejail Authors (see README file for more details) (C) 2020-2021 Firejail Authors (C) 2020-2021 Firejail and systemd authors (C) 2021 Firejail Authors (c) 2019-2021 rusty-snake | ||
* | | Merge pull request #3993 from glitsj16/template | glitsj16 | 2021-02-17 |
|\ \ | | | | | | | fixes for profile.template | ||
| * | | fix Common-Extra | glitsj16 | 2021-02-17 |
| | | | | | | | | | See https://github.com/netblue30/firejail/pull/3993/files/660bc3435b43e32d156d9bb5bee2dbad2f84cf36#r577366805. | ||
| * | | fix ordering in profile.template | glitsj16 | 2021-02-16 |
| | | | |||
| * | | miscellaneous fixes to profile.template | glitsj16 | 2021-02-16 |
| | | | |||
* | | | Merge pull request #3985 from rusty-snake/sort.py-updates | rusty-snake | 2021-02-17 |
|\ \ \ | | | | | | | | | Sort.py updates | ||
| * | | | sort.py: Remove whitespace in status output | rusty-snake | 2021-02-15 |
| | | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com> | ||
| * | | | sort.py: Always show the fix in a diff like format | rusty-snake | 2021-02-14 |
| | | | | |||
| * | | | sort.py: Print how many profiles are checked | rusty-snake | 2021-02-14 |
| | | | | |||
| * | | | workflows/sort.yml: Run also if sort.py is changed | rusty-snake | 2021-02-14 |
| | | | | |||
| * | | | sort.py: Print the fixed line when running in a CI | rusty-snake | 2021-02-14 |
| | | | | |||
| * | | | sort.py: Better error message | rusty-snake | 2021-02-14 |
| | | | | |||
* | | | | Merge pull request #3995 from glitsj16/jitsi-meet-desktop | glitsj16 | 2021-02-17 |
|\ \ \ \ | | | | | | | | | | | fix private-bin in jitsi-meet-desktop | ||
| * | | | | fix private-bin in jitsi-meet-desktop | glitsj16 | 2021-02-17 |
|/ / / / | |||
* | | | | Merge pull request #3990 from glitsj16/torbrowser | glitsj16 | 2021-02-16 |
|\ \ \ \ | |_|/ / |/| | | | Follow-up fixes for torbrowser-launcher | ||
| * | | | adapt to apparmor being opt-in for torbrowser-launcher | glitsj16 | 2021-02-15 |
| | | | | |||
| * | | | make apparmor opt-in | glitsj16 | 2021-02-15 |
| | | | | |||
| * | | | add note for torbrowser-launcher opt-in | glitsj16 | 2021-02-15 |
| | | | | |||
| * | | | revert torbrowser-launcher rule | glitsj16 | 2021-02-15 |
| | | | | | | | | | | | | See https://github.com/netblue30/firejail/pull/3990#discussion_r576404417. | ||
| * | | | Avoid doubled include globals.local | glitsj16 | 2021-02-15 |
| | | | | | | | | | | | | The final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Unless there's some kind of potential race condition that needs to be avoided by changing this 'logic' we should avoid doubled includes. | ||
| * | | | Avoid doubled include globals.local | glitsj16 | 2021-02-15 |
| | | | | | | | | | | | | The final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Unless there's some kind of potential race condition that needs to be avoided by changing this 'logic' we should avoid doubled includes. | ||
| * | | | Allow access to torbrowser-launcher under ${HOME} | glitsj16 | 2021-02-15 |
| | | | | | | | | | | | | Follow up for https://github.com/netblue30/firejail/pull/3988. We need to allow access to torbrowser-launcher executables installed under ${HOME}. Thanks @rusty-snake and @Vincent43 for motivational input. | ||
* | | | | chroot: disable/enable x11 handling at compile time | smitsohu | 2021-02-16 |
| | | | | |||
* | | | | firejail in firejail: don't clear environment variables | smitsohu | 2021-02-16 |
| | | | | |||
* | | | | some cleanup | smitsohu | 2021-02-16 |
| |_|/ |/| | | | | | | | | | | | as no length checks are performed any more on environment variables, remove obsoleted code | ||
* | | | copyright update | startx2017 | 2021-02-15 |
|/ / | |||
* | | Merge branch 'master' of https://github.com/netblue30/firejail | netblue30 | 2021-02-14 |
|\ \ | |||
| * | | build: include zsh completion in rpm | Reiner Herrmann | 2021-02-14 |
| | | | |||
| * | | CI: sync codeql config with Github's template | Reiner Herrmann | 2021-02-14 |
| | | | | | | | | | | | | Fixes: #3986 | ||
* | | | fix tor browser | netblue30 | 2021-02-14 |
|/ / | |||
* | | disable .ssh and .gnupg in kdiff3 profile | netblue30 | 2021-02-14 |
| | | |||
* | | Merge pull request #3988 from glitsj16/tbl | glitsj16 | 2021-02-14 |
|\ \ | |/ |/| | add apparmor to torbrowser-launcher | ||
| * | add apparmor to torbrowser-launcher | glitsj16 | 2021-02-14 |
|/ | |||
* | Merge pull request #3864 from haraldkubota/master | rusty-snake | 2021-02-13 |
|\ | | | | | Add first version of zsh completion |