Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | x11 support | netblue30 | 2016-02-26 |
| | |||
* | fix todo | netblue30 | 2016-02-25 |
| | |||
* | x11 fixes | netblue30 | 2016-02-25 |
| | |||
* | x11 work | netblue30 | 2016-02-24 |
| | |||
* | x11 work | netblue30 | 2016-02-24 |
| | |||
* | allow --interface only to root user for --enable-network=restricted | netblue30 | 2016-02-24 |
| | |||
* | ./configure --enable-network=restricted | netblue30 | 2016-02-24 |
| | |||
* | x11 work | netblue30 | 2016-02-24 |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | netblue30 | 2016-02-24 |
|\ | |||
| * | Merge pull request #319 from yumkam/network-restricted | netblue30 | 2016-02-24 |
| |\ | | | | | | | Add compile-time option to restrict --net= to root only | ||
| | * | Add compile-time option to restrict --net= to root only | Yuriy M. Kaminskiy | 2016-02-23 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ./configure --enable-network=restricted allows only --net=none to non-root users. Other variants delegate too much power to non-root users and dangerous (it completely bypasses system-wide firewall and routing, it allows introducing arbitrary-chosen MAC and IP interfaces on LAN [disregarding DHCP policy], etc). Root already had power to twiddle with anything, so no sense to restrain her, and --net=none looks safe enough (and still useful) for ordinary users. | ||
| * | | Merge pull request #317 from yumkam/fixup-ipv6-doc | netblue30 | 2016-02-24 |
| |\ \ | | |/ | |/| | man/firejail.txt: note you don't need --ip6= with SLAAC | ||
| | * | man/firejail.txt: note you don't need --ip6= with SLAAC | Yuriy M. Kaminskiy | 2016-02-23 |
| |/ | |||
* / | x11 work | netblue30 | 2016-02-23 |
|/ | |||
* | x11 work | netblue30 | 2016-02-23 |
| | |||
* | Merge pull request #315 from vn971/master | netblue30 | 2016-02-22 |
|\ | | | | | edit wesnoth profile (small fix) | ||
| * | edit wesnoth profile | Vasya Novikov | 2016-02-21 |
|/ | | | | | | * allow X11 communcation via /tmp (just for completeness sake) * fix typo | ||
* | small fixes | netblue30 | 2016-02-21 |
| | |||
* | testing | netblue30 | 2016-02-21 |
| | |||
* | moved .config/dconf handling from epiphany and polari profiles into ↵ | netblue30 | 2016-02-21 |
| | | | | whitelist-common.inc | ||
* | Merge pull request #314 from jrabe/master | netblue30 | 2016-02-21 |
|\ | | | | | Epiphany: Fix settings being saved but not loaded | ||
| * | Epiphany: Fix settings being saved but not loaded | Janik Rabe | 2016-02-21 |
|/ | |||
* | wesnoth profile | netblue30 | 2016-02-20 |
| | |||
* | Merge pull request #304 from vn971/master | netblue30 | 2016-02-20 |
|\ | | | | | profile for wesnoth | ||
| * | edit wesnoth profile: add .cache directory | Vasya Novikov | 2016-02-19 |
| | | | | | | | | it is not mandatory, but may speed-up multiple invocations of wesnoth | ||
| * | profile for wesnoth | Vasya Novikov | 2016-02-19 |
| | | | | | | | | | | | | | | | | The profile is a _white_list (in contrast to blacklist). All standard game actions work: create-save-load games, multiplayer (online) game, downloading addons and using them. | ||
* | | testing | netblue30 | 2016-02-20 |
| | | |||
* | | testing | netblue30 | 2016-02-20 |
| | | |||
* | | testing | netblue30 | 2016-02-20 |
| | | |||
* | | testing | netblue30 | 2016-02-20 |
| | | |||
* | | fixes | netblue30 | 2016-02-20 |
| | | |||
* | | testing | netblue30 | 2016-02-20 |
| | | |||
* | | euid switching | netblue30 | 2016-02-19 |
| | | |||
* | | euid switching | netblue30 | 2016-02-19 |
| | | |||
* | | moved sandbox name to /run/firejail/name/<PID> | netblue30 | 2016-02-19 |
| | | |||
* | | euid switching | netblue30 | 2016-02-18 |
|/ | |||
* | added mkdir in all whitelisted profiles | netblue30 | 2016-02-18 |
| | |||
* | Merge pull request #302 from jrabe/master | netblue30 | 2016-02-18 |
|\ | | | | | Add Polari profile | ||
| * | Add Polari profile | Janik Rabe | 2016-02-17 |
| | | |||
* | | mkdir support in profile files | netblue30 | 2016-02-17 |
|/ | |||
* | cherrytree profile | netblue30 | 2016-02-16 |
| | |||
* | Merge pull request #300 from mahdi1234/master | netblue30 | 2016-02-16 |
|\ | | | | | Adding cherrytree profile | ||
| * | Adding cherrytree profile | mahdi1234 | 2016-02-16 |
| | | | | | | http://www.giuspen.com/cherrytree/ | ||
* | | merged epiphany browser profile | netblue30 | 2016-02-16 |
| | | |||
* | | centos7 fixes; support for building rpm packages | netblue30 | 2016-02-16 |
| | | |||
* | | Merge pull request #297 from jgriffiths/rpmfixes | netblue30 | 2016-02-16 |
|\ \ | | | | | | | RPM build fixes | ||
| * | | make clean now removes rpms | Jon Griffiths | 2016-02-16 |
| | | | |||
| * | | Remove old-mkrpm.sh | Jon Griffiths | 2016-02-16 |
| | | | |||
| * | | 'make rpms' now makes the rpm files | Jon Griffiths | 2016-02-16 |
| | | | |||
| * | | Fix mkrpm.sh | Jon Griffiths | 2016-02-16 |
| | | |