aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* private-lib: mask /usr/local/lib[,64] directories, tooLibravatar smitsohu2021-03-04
|
* private-lib hardeningLibravatar smitsohu2021-03-04
| | | | | | | | | | | ensure that libraries are loaded from a default ld.so search path it is reasonable for firejail to expect that unprivileged users have no write permission on these paths; lax permissions there mean that the system is probably screwed anyway
* jailtest fixLibravatar smitsohu2021-02-23
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar netblue302021-02-23
|\
| * dosbox fixLibravatar netblue302021-02-22
| |
* | jailtestLibravatar netblue302021-02-23
| |
* | hardening ssh, torLibravatar netblue302021-02-23
|/
* more calibre profilesLibravatar netblue302021-02-22
|
* Fix patch-util not having access to libdl.so (#4000)Libravatar zupatisc2021-02-22
| | | | | | | * Fix patch-util not having access to libdl.so * Update etc/profile-m-z/patch.profile Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
* build: include jailtest in rpmLibravatar Reiner Herrmann2021-02-21
|
* apparmor capabilities fixLibravatar netblue302021-02-21
|
* jaitest - simple sandbox testing utility programLibravatar netblue302021-02-20
|
* run sort.pyLibravatar Reiner Herrmann2021-02-20
|
* fix ipcalcLibravatar netblue302021-02-19
|
* adding ipcalc, ipcalc-ngLibravatar netblue302021-02-19
|
* refresh capabilities (#3945)Libravatar smitsohu2021-02-19
|
* Merge pull request #3994 from kmk3/fix-copyright-bumpLibravatar glitsj162021-02-17
|\ | | | | contrib/firejail-welcome.sh: fix copyright year
| * contrib/firejail-welcome.sh: fix copyright yearLibravatar Kelvin M. Klann2021-02-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Append the current year rather than replace the previous one. This amends commit 2609e5cf0 ("copyright update"). Commands that helped catch this: $ git show --pretty='' 2609e5cf0 | sed -n 's/^-.*Copyright //p' | LC_ALL=C sort | uniq (C) 2014-2020 Firejail Authors (C) 2014-2020 Firejail Authors (see README file for more details) (C) 2020 Firejail Authors (C) 2020 Firejail and systemd authors (c) 2019,2020 rusty-snake $ git show --pretty='' 2609e5cf0 | sed -n 's/^+.*Copyright //p' | LC_ALL=C sort | uniq (C) 2014-2021 Firejail Authors (C) 2014-2021 Firejail Authors (see README file for more details) (C) 2020-2021 Firejail Authors (C) 2020-2021 Firejail and systemd authors (C) 2021 Firejail Authors (c) 2019-2021 rusty-snake
* | Merge pull request #3993 from glitsj16/templateLibravatar glitsj162021-02-17
|\ \ | | | | | | fixes for profile.template
| * | fix Common-ExtraLibravatar glitsj162021-02-17
| | | | | | | | | See https://github.com/netblue30/firejail/pull/3993/files/660bc3435b43e32d156d9bb5bee2dbad2f84cf36#r577366805.
| * | fix ordering in profile.templateLibravatar glitsj162021-02-16
| | |
| * | miscellaneous fixes to profile.templateLibravatar glitsj162021-02-16
| | |
* | | Merge pull request #3985 from rusty-snake/sort.py-updatesLibravatar rusty-snake2021-02-17
|\ \ \ | | | | | | | | Sort.py updates
| * | | sort.py: Remove whitespace in status outputLibravatar rusty-snake2021-02-15
| | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
| * | | sort.py: Always show the fix in a diff like formatLibravatar rusty-snake2021-02-14
| | | |
| * | | sort.py: Print how many profiles are checkedLibravatar rusty-snake2021-02-14
| | | |
| * | | workflows/sort.yml: Run also if sort.py is changedLibravatar rusty-snake2021-02-14
| | | |
| * | | sort.py: Print the fixed line when running in a CILibravatar rusty-snake2021-02-14
| | | |
| * | | sort.py: Better error messageLibravatar rusty-snake2021-02-14
| | | |
* | | | Merge pull request #3995 from glitsj16/jitsi-meet-desktopLibravatar glitsj162021-02-17
|\ \ \ \ | | | | | | | | | | fix private-bin in jitsi-meet-desktop
| * | | | fix private-bin in jitsi-meet-desktopLibravatar glitsj162021-02-17
|/ / / /
* | | | Merge pull request #3990 from glitsj16/torbrowserLibravatar glitsj162021-02-16
|\ \ \ \ | |_|/ / |/| | | Follow-up fixes for torbrowser-launcher
| * | | adapt to apparmor being opt-in for torbrowser-launcherLibravatar glitsj162021-02-15
| | | |
| * | | make apparmor opt-inLibravatar glitsj162021-02-15
| | | |
| * | | add note for torbrowser-launcher opt-inLibravatar glitsj162021-02-15
| | | |
| * | | revert torbrowser-launcher ruleLibravatar glitsj162021-02-15
| | | | | | | | | | | | See https://github.com/netblue30/firejail/pull/3990#discussion_r576404417.
| * | | Avoid doubled include globals.localLibravatar glitsj162021-02-15
| | | | | | | | | | | | The final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Unless there's some kind of potential race condition that needs to be avoided by changing this 'logic' we should avoid doubled includes.
| * | | Avoid doubled include globals.localLibravatar glitsj162021-02-15
| | | | | | | | | | | | The final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Unless there's some kind of potential race condition that needs to be avoided by changing this 'logic' we should avoid doubled includes.
| * | | Allow access to torbrowser-launcher under ${HOME}Libravatar glitsj162021-02-15
| | | | | | | | | | | | Follow up for https://github.com/netblue30/firejail/pull/3988. We need to allow access to torbrowser-launcher executables installed under ${HOME}. Thanks @rusty-snake and @Vincent43 for motivational input.
* | | | chroot: disable/enable x11 handling at compile timeLibravatar smitsohu2021-02-16
| | | |
* | | | firejail in firejail: don't clear environment variablesLibravatar smitsohu2021-02-16
| | | |
* | | | some cleanupLibravatar smitsohu2021-02-16
| |_|/ |/| | | | | | | | | | | as no length checks are performed any more on environment variables, remove obsoleted code
* | | copyright updateLibravatar startx20172021-02-15
|/ /
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar netblue302021-02-14
|\ \
| * | build: include zsh completion in rpmLibravatar Reiner Herrmann2021-02-14
| | |
| * | CI: sync codeql config with Github's templateLibravatar Reiner Herrmann2021-02-14
| | | | | | | | | | | | Fixes: #3986
* | | fix tor browserLibravatar netblue302021-02-14
|/ /
* | disable .ssh and .gnupg in kdiff3 profileLibravatar netblue302021-02-14
| |
* | Merge pull request #3988 from glitsj16/tblLibravatar glitsj162021-02-14
|\ \ | |/ |/| add apparmor to torbrowser-launcher
| * add apparmor to torbrowser-launcherLibravatar glitsj162021-02-14
|/