| Commit message (Collapse) | Author | Age |
|\
| |
| | |
Trim excess whitespace
|
|/ |
|
|
|
|
|
| |
don't try to read /usr/bin/firejail if private-bin removed it
from the sandbox filesystem
|
|
|
|
|
|
| |
users, and fldd in particular, might have no read permission
on the firejail executable, make that ok by running fldd
as root
|
| |
|
| |
|
|\
| |
| | |
telegram: Enable private-bin
|
| | |
|
|\ \
| | |
| | | |
Add ld.so.preload to all private-etc lines
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Command:
sed -i -E "s/^private-etc /private-etc ld.so.preload,/" \
$(grep -LE "^private-etc .*ld.so.preload" etc/profile-*/*) \
&& python3 contrib/sort.py etc/profile-*/*
|
|\ \ \
| | | |
| | | | |
Create goldendict.profile
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
Add missing final newlines
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Remove /etc/hosts is_link check
|
| | | | | | |
|
| | | | | | |
|
| | | | | | |
|
| | | | | | |
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
The current file is missing the 'How to Apply These Terms to Your New
Programs' section, which is an integral part of the GPL.
More info here:
https://www.gnu.org/licenses/old-licenses/gpl-2.0-faq.html#GPLOmitPreamble
File downloaded from:
https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
|
| | | | | | |
|
| |/ / / /
|/| | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
rework exitcodes
|
| | |_|_|/
| |/| | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* add 128 to exitcode if child receives a fatal signal
(this is similar to what bash and other shells do)
* unify exitcodes across firejail: treat join'ed processes
the same as processes in the primary process tree
|
|\ \ \ \ \
| |_|_|/ /
|/| | | | |
Revert "allow/deny help and man pages"
|
| | | | | |
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This reverts commit a11707ea273e5665047f8a7d9387ba07f08d72f6.
The man pages currently direct users to use the aliases instead of the
commands, which some users of firejail-git may end up doing. Example:
https://github.com/netblue30/firejail/discussions/4496
So revert the man page changes as well to avoid confusion.
Note: This is not a full revert. The commit in question also contains
some string formatting fixes on src/firejail/usage.c (related to dbus
and netmask), which are left intact.
Relates to #4410.
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Blacklist Exodus wallet
|
| |/ / / / |
|
| |_|_|/
|/| | |
| | | |
| | | |
| | | | |
Enable evince to display archived images (.cbz) file with plugin
installed.
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
Rework issue templates
|
| | | | |
| | | | |
| | | | |
| | | | | |
Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
fix duplicate globals
|
| | |/ / /
| |/| | | |
|
| | | | | |
|
| |/ / /
|/| | | |
|
| |/ /
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- closes #4483 -- mpv requires whitelisting /usr/share/pipewire
- wruc: whitelist pipewire-?, pipewire is becoming more popular and was
developed with isolation (container/sandbox) in mind.
- wruc: whitelist wayland-? instead of only -0 and -1
- wusc: whitelist /usr/share/pipewire
- remove these wruc/wusc lines from other profiles
- firefox-common-addons: Make ignore wruc work again (#4512)
- firefox: org.freedesktop.portal.Desktop should be enough
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- disable-programs.inc: blacklist ${HOME}/.local/state/pipewire
If you did not yet noticed, on 08th May 2021 the XDG Base Directory
Specification 0.8 was resleased (the first update since 2010). New are
$XDG_STATE_HOME and $HOME/.local/bin.
- keepassxc: mkdirs are necessary
- gnote: harden
- pngquant: harden
|
| | | |
|
| | |
| | |
| | | |
This is a quick fix of #4482 for distributions that link /etc/resolv.conf to /run/systemd/resolve/stub-resolv.conf (Arch Linux is one of them).
|
| | |
| | |
| | |
| | | |
Freetube from AUR uses a wrapper script
|
| | | |
|
|/ /
| |
| |
| |
| |
| | |
- whitelist /run/resolvconf/resolv.conf -- Fixes #4482
- Drop whitelist for /run/systemd/resolve/stub-resolv.conf,
/run/systemd/resolve/resolv.conf is the right path AIUI.
|