aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* vscodium.profile: add missing pathsLibravatar Kelvin M. Klann2021-10-04
| | | | | | | | | | | | | | | | | | | | | | | It creates the following directories on startup: * ~/.config/VSCodium * ~/.vscode-oss Environment: $ grep '^NAME' /etc/os-release NAME="Artix Linux" $ pacman -Q vscodium-bin vscodium-bin 1.60.2-2 Note: The following entry is already on disable-programs.inc: noblacklist ${HOME}/.vscode-oss It was added on commit de90834a8 ("Update disable-programs.inc", 2019-03-02). Relates to #3871.
* vscodium.profile: fix wrong program name in the commentsLibravatar Kelvin M. Klann2021-10-04
| | | | Added on commit 4bb7dee49 ("small changes", 2019-02-07).
* Merge pull request #4585 from smitsohu/euidLibravatar smitsohu2021-10-02
|\ | | | | add more EUID improvements
| * add more EUID improvementsLibravatar smitsohu2021-10-01
| |
* | Profile fixes and hardeningLibravatar rusty-snake2021-09-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * cheese - fix: dbus-user.own org.gnome.Cheese - fix: whitelist /usr/share/gstreamer-1.0 - fix: include allow-python3.inc - hardening: include disable-shell.inc - hardening: include whitelist-run-common.inc and whitelist /run/udev/data - hardening: whitelist /usr/libexec/gstreamer-1.0/gst-plugin-scanner - hardening: noinput - hardening: nosound - hardening: seccomp.block-secondary - hardening: private-dev * geekbench (closes #4576) - fix: noblacklist /sbin and noblacklist /usr/sbin - fix: noblacklist, blacklist, mkdir, whitelist, read-write ${HOME}/.geekbench5 - fix: comment/remove private-bin, private-lib, private-opt * inkscape - add quiet for cli usage * musixmatch (#4518) - allow chroot * pandoc - fix: include allow-bin-sh.inc - fix: drop private-bin - hardening: include whitelist-runuser-common.inc - hardening: seccomp.block-secondary
* | Rework D-Bus policy of nhekoLibravatar rusty-snake2021-09-29
| | | | | | | | | | - Allow org.freedesktop.secrets, fixes #4584 - Improve comments about notifications and systray
* | Merge pull request #4575 from a1346054/whitespace-fixLibravatar Kelvin M. Klann2021-09-27
|\ \ | |/ |/| Trim excess whitespace
| * trim excess whitespaceLibravatar a13460542021-09-25
|/
* private-lib fixupLibravatar smitsohu2021-09-25
| | | | | don't try to read /usr/bin/firejail if private-bin removed it from the sandbox filesystem
* private-lib: check firejail libraries as root user (#4576)Libravatar smitsohu2021-09-25
| | | | | | users, and fldd in particular, might have no read permission on the firejail executable, make that ok by running fldd as root
* update READMELibravatar netblue302021-09-24
|
* mergesLibravatar netblue302021-09-24
|
* Merge pull request #4514 from nidamanx/masterLibravatar netblue302021-09-24
|\ | | | | telegram: Enable private-bin
| * Update telegram.profileLibravatar Nicola Davide Mannarelli2021-09-07
| |
* | Merge pull request #4559 from rusty-snake/private-etc_ld.so.preloadLibravatar netblue302021-09-24
|\ \ | | | | | | Add ld.so.preload to all private-etc lines
| * | Add ld.so.preload to all private-etc linesLibravatar rusty-snake2021-09-18
| | | | | | | | | | | | | | | | | | | | | | | | Command: sed -i -E "s/^private-etc /private-etc ld.so.preload,/" \ $(grep -LE "^private-etc .*ld.so.preload" etc/profile-*/*) \ && python3 contrib/sort.py etc/profile-*/*
* | | Merge pull request #4564 from lecso7/masterLibravatar netblue302021-09-24
|\ \ \ | | | | | | | | Create goldendict.profile
| * | | Create goldendict.profileLibravatar lecso72021-09-20
| | | |
* | | | Merge pull request #4572 from a1346054/newline-fixLibravatar netblue302021-09-24
|\ \ \ \ | | | | | | | | | | Add missing final newlines
| * | | | add missing final newlines at end of filesLibravatar a13460542021-09-22
| | | | |
* | | | | Merge pull request #4560 from onny/nolinkcheckLibravatar netblue302021-09-24
|\ \ \ \ \ | | | | | | | | | | | | Remove /etc/hosts is_link check
| * | | | | remove hosts file link checkLibravatar Jonas Heinrich2021-09-19
| | | | | |
| * | | | | remove hosts file link checkLibravatar Jonas Heinrich2021-09-19
| | | | | |
* | | | | | Update SECURITY.mdLibravatar Reiner Herrmann2021-09-22
| | | | | |
* | | | | | fix spelling (#4573)Libravatar a13460542021-09-22
| | | | | |
* | | | | | use license file from gnu.org (#4571)Libravatar a13460542021-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current file is missing the 'How to Apply These Terms to Your New Programs' section, which is an integral part of the GPL. More info here: https://www.gnu.org/licenses/old-licenses/gpl-2.0-faq.html#GPLOmitPreamble File downloaded from: https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
* | | | | | join: add support for rlimit optionsLibravatar smitsohu2021-09-22
| | | | | |
* | | | | | hardcode PATH for internal useLibravatar smitsohu2021-09-22
| |/ / / / |/| | | |
* | | | | Merge pull request #4533 from smitsohu/exitcodeLibravatar smitsohu2021-09-22
|\ \ \ \ \ | | | | | | | | | | | | rework exitcodes
| * | | | | rework exitcodesLibravatar smitsohu2021-09-21
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | * add 128 to exitcode if child receives a fatal signal (this is similar to what bash and other shells do) * unify exitcodes across firejail: treat join'ed processes the same as processes in the primary process tree
* | | | | Merge pull request #4502 from kmk3/revert-allow-deny-manLibravatar Kelvin M. Klann2021-09-21
|\ \ \ \ \ | |_|_|/ / |/| | | | Revert "allow/deny help and man pages"
| * | | | Fix typo of "parent"Libravatar Kelvin M. Klann2021-09-02
| | | | |
| * | | | Revert "allow/deny help and man pages"Libravatar Kelvin M. Klann2021-09-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit a11707ea273e5665047f8a7d9387ba07f08d72f6. The man pages currently direct users to use the aliases instead of the commands, which some users of firejail-git may end up doing. Example: https://github.com/netblue30/firejail/discussions/4496 So revert the man page changes as well to avoid confusion. Note: This is not a full revert. The commit in question also contains some string formatting fixes on src/firejail/usage.c (related to dbus and netmask), which are left intact. Relates to #4410.
* | | | | Let programs outside librewolf sandbox open new tabs in librewolf (#4546)Libravatar crocket2021-09-19
| | | | |
* | | | | Merge pull request #4501 from tredondo/patch-9Libravatar rusty-snake2021-09-19
|\ \ \ \ \ | | | | | | | | | | | | Blacklist Exodus wallet
| * | | | | Blacklist Exodus walletLibravatar Ted Robertson2021-09-02
| |/ / / /
* | | | / Fix #4555 - Allow evince to read .cbz file formatLibravatar lecso72021-09-19
| |_|_|/ |/| | | | | | | | | | | | | | | Enable evince to display archived images (.cbz) file with plugin installed.
* | | | Update SECURITY.mdLibravatar rusty-snake2021-09-17
| | | |
* | | | Merge pull request #4515 from rusty-snake/rework-issue-templateLibravatar rusty-snake2021-09-17
|\ \ \ \ | | | | | | | | | | Rework issue templates
| * | | | bug_report.md: clarify messageLibravatar Kelvin M. Klann2021-09-17
| | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | bug_report.md: improve grammarLibravatar Kelvin M. Klann2021-09-17
| | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | bug_report.md: remove extraneous newlineLibravatar Kelvin M. Klann2021-09-16
| | | | |
| * | | | Rework issue templatesLibravatar rusty-snake2021-09-07
| | | | |
* | | | | Fix #4509 -- Nextcloud profile broken - needs 3D and system tray accessLibravatar rusty-snake2021-09-08
| | | | |
* | | | | Merge pull request #4493 from pirate486743186/fix-duplicate-globalLibravatar rusty-snake2021-09-08
|\ \ \ \ \ | | | | | | | | | | | | fix duplicate globals
| * | | | | fix duplicate globalLibravatar pirate4867431862021-08-30
| | |/ / / | |/| | |
* | | | | Fix #4367 -- gimp 2.10.22-3: gegl:introspect brokenLibravatar rusty-snake2021-09-08
| | | | |
* | | | | Update profile.template to use disable-X11.incLibravatar rusty-snake2021-09-08
| |/ / / |/| | |
* | | | Rework pipewire/waylandLibravatar rusty-snake2021-09-07
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | - closes #4483 -- mpv requires whitelisting /usr/share/pipewire - wruc: whitelist pipewire-?, pipewire is becoming more popular and was developed with isolation (container/sandbox) in mind. - wruc: whitelist wayland-? instead of only -0 and -1 - wusc: whitelist /usr/share/pipewire - remove these wruc/wusc lines from other profiles - firefox-common-addons: Make ignore wruc work again (#4512) - firefox: org.freedesktop.portal.Desktop should be enough
* | | Blacklist ~/.minisign in disable-commonLibravatar rusty-snake2021-09-07
| | |
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-21 11:32:39 +0000