Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | small private-cwd adjustments | smitsohu | 2019-05-24 |
| | |||
* | Merge pull request #2712 from apmorton/features/private-cwd | smitsohu | 2019-05-24 |
|\ | | | | | Add private-cwd option to control working directory within jail | ||
| * | Add private-cwd option to control working directory within jail | Austin Morton | 2019-05-23 |
| | | |||
* | | add header guard to firecfg.h | smitsohu | 2019-05-24 |
| | | |||
* | | Harden gnome-chess (#2719) | rusty-snake | 2019-05-23 |
| | | | | | | | | | | | | | | | | * Harden gnome-chess * Update gnome-chess.profile remove whitelisting | ||
* | | Add note about syscall enumerating program (Fixes #2095) | ಚಿರಾಗ್ ನಟರಾಜ್ | 2019-05-21 |
| | | |||
* | | Update firejail.config -- disable-mnt description | rusty-snake | 2019-05-21 |
| | | |||
* | | Merge pull request #2715 from apmorton/features/deterministic-exit-code | ಚಿರಾಗ್ ನಟರಾಜ್ | 2019-05-21 |
|\ \ | | | | | | | Add deterministic-exit-code option | ||
| * | | Add deterministic-exit-code option to ensure firejail exits with the first ↵ | Austin Morton | 2019-05-20 |
| |/ | | | | | | | childs exit code regardless of the termination ordering of orphaned children | ||
* | | Add security vulnerability disclosure best practices to README as well | ಚಿರಾಗ್ ನಟರಾಜ್ | 2019-05-21 |
| | | |||
* | | Re-add 'shell none' to gpg.profile (#2716) | glitsj16 | 2019-05-21 |
| | | | | | | | | | | | | * Re-add 'shell none' to gpg.profile * Update seahorse.profile | ||
* | | Add meteo-qt info (#2714) | glitsj16 | 2019-05-21 |
|/ | | | | | | | | * Add meteo-qt to RELNOTES * Add meteo-qt to README.md * Add jose1711 to README | ||
* | Create a profile for mp3splt-gtk | rusty-snake | 2019-05-20 |
| | |||
* | Expose /tmp/.X11-unix as read-only as per Issue #2269 | ಚಿರಾಗ್ ನಟರಾಜ್ | 2019-05-19 |
| | |||
* | Refactor eog and eom profiles with common redirect (#2708) | glitsj16 | 2019-05-18 |
| | | | | | | | | | | | | | | * Create eo-common.profile * Refactor eog.profile * Refactor eom.profile * Keep private-bin in eog.profile * Keep private-bin in eom.profile * Place private-bin back in eog/eom profiles | ||
* | Update eom.profile | rusty-snake | 2019-05-18 |
| | | | | same fixes as in 091e12a for eog | ||
* | Create meteo-qt.profile (#2704) | Jose Riha | 2019-05-18 |
| | |||
* | Add inkview.profile | rusty-snake | 2019-05-18 |
| | |||
* | Update eog.profile | rusty-snake | 2019-05-18 |
| | |||
* | man pages: add FIREJAIL_QUIET | smitsohu | 2019-05-18 |
| | |||
* | merges | netblue30 | 2019-05-17 |
| | |||
* | Merge pull request #2688 from laomaiweng/nodbus-enhancements | netblue30 | 2019-05-17 |
|\ | | | | | nodbus enhancements | ||
| * | Merge branch 'master' into nodbus-enhancements | netblue30 | 2019-05-17 |
| |\ | |/ |/| | |||
* | | Merge pull request #2694 from laomaiweng/propagate-quiet | netblue30 | 2019-05-17 |
|\ \ | | | | | | | Propagate --quiet to children Firejail'ed processes | ||
| * | | Move export of FIREJAIL_QUIET to env_defaults() | quentin | 2019-05-17 |
| | | | | | | | | | | | | So that it also works with --join. (HT @smitsohu) | ||
| * | | Propagate --quiet to children Firejail'ed processes | quentin | 2019-05-13 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | If quiet, set environment variable FIREJAIL_QUIET to "yes" before spawning the child process. Upon starting Firejail, become quiet if the FIREJAIL_QUIET environment variable is set to "yes". Signed-off-by: Quentin Minster <quentin@minster.io> | ||
* | | | Merge pull request #2697 from topimiettinen/dbus-block-system-bus | netblue30 | 2019-05-17 |
|\ \ \ | | | | | | | | | dbus: make --nodbus block also system D-Bus socket | ||
| * | | | dbus: make --nodbus block also system D-Bus socket | Topi Miettinen | 2019-05-15 |
| |/ / | | | | | | | | | | Signed-off-by: Topi Miettinen <toiwoton@gmail.com> | ||
* | | | Merge pull request #2701 from smitsohu/opath | netblue30 | 2019-05-17 |
|\ \ \ | | | | | | | | | glibc missing O_PATH definition on CentOS 6 | ||
| * | | | glibc missing O_PATH definition on CentOS 6 - #2696 | smitsohu | 2019-05-16 |
| |/ / | |||
* / / | Cosmetic changes for pidgin.profile (#2705) | glitsj16 | 2019-05-17 |
|/ / | |||
* | | Merge pull request #2691 from curiosity-seeker/master | SkewedZeppelin | 2019-05-13 |
|\ \ | | | | | | | cantata.profile | ||
| * | | Remove trailing commas in cantata.profile | curiosity-seeker | 2019-05-13 |
| | | | |||
| * | | Update cantata.profile | curiosity-seeker | 2019-05-12 |
| | | | | | | | | | Missed the fact that for dynamic playlists perl is needed. Deactivating apparmor is also necessary for this. | ||
| * | | Update firecfg.config for cantata | curiosity-seeker | 2019-05-12 |
| | | | |||
| * | | Update disable.programs.inc for cantata | curiosity-seeker | 2019-05-12 |
| | | | |||
| * | | cantata.profile | curiosity-seeker | 2019-05-12 |
|/ / | | | | | The private-etc entries were added by firejail --build but are not complete. | ||
* | | harden & fix xiphos.profile | rusty-snake | 2019-05-12 |
| | | |||
* | | Update keepassxc.profile (#2687) | curiosity-seeker | 2019-05-10 |
| | | | | | | Adding `keepassxc-proxy` to `private-bin`as without it there is a related error message in Settings->Browser Integration (via the Keepassxc-Browser add-on). | ||
| * | Fix overridden DBUS_SESSION_BUS_ADDRESS with nodbus | quentin | 2019-05-09 |
| | | |||
| * | Blacklist ~/.dbus with nodbus | quentin | 2019-05-09 |
|/ | |||
* | Merge pull request #2680 from Feandil/master | SkewedZeppelin | 2019-05-06 |
|\ | | | | | Mumble: add new path for client data | ||
| * | Mumble: add new path for client data | Vincent Brillault | 2019-05-06 |
|/ | | | | | | Since Mumble 1.3, client data was moved from $HOME/.local/share/data/Mumble to $HOME/.local/share/Mumble. See https://wiki.mumble.info/wiki/Client_Settings | ||
* | Add vim syntax and ftdetect files (#2679) | Quentin Minster | 2019-05-05 |
| | |||
* | update man pages (private-dev, noexec) | smitsohu | 2019-05-04 |
| | |||
* | Update gajim.profile | rusty-snake | 2019-05-03 |
| | |||
* | Drop noblacklist ${DOWNLOADS} in bitwarden.profile (#2677) | glitsj16 | 2019-05-02 |
| | |||
* | Refactor min as chromium redirect profile (#2676) | glitsj16 | 2019-05-02 |
| | |||
* | Add Bitwarden profile (#2673) | glitsj16 | 2019-05-02 |
| | | | | | | | | | | * Add bitwarden to firecfg * Add support for bitwarden in disable-programs.inc * Create bitwarden.profile * Fix whitelisting and no3d in bitwarden | ||
* | Support Enpass v6 (#2672) | glitsj16 | 2019-05-02 |
| | | | | | | | | | | * Refactor enpass profile Upstream enpass version 6 needs profile adjustments. These are integrated into the refactored profile without dropping support for older versions. * Support newer Enpass in disable-programs.inc * Re-add no3d and move whitelist lines in enpass.profile |