aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Update file.profileLibravatar glitsj162018-11-05
| | | Add support for bsdtar and libfakeroot support for makepkg on Arch.
* removed transfer.sh support from travis buildLibravatar netblue302018-11-05
|
* fix --bandwidth commandLibravatar netblue302018-11-05
|
* profile fixes for recursive read-write mountsLibravatar smitsohu2018-11-04
| | | | | | | read-write and read-only are applied in sequence, don't override read-only restrictions in ~/.local/share issue #2200
* recursive remounts: add fallback for old kernels, some improvementsLibravatar smitsohu2018-11-04
| | | | | | | | | | | * vanilla kernels before 3.15 don't expose a mount id in /proc/pid/fdinfo files. This is still relevant on Ubuntu 14.04 with 3.13 kernel, CentOS 7 doesn't have this problem. In this case fall back to simple a remount and print a warning. * drop euid switching as it doesn't really serve a purpose here (paths are not opened in reading or writing mode, and we are not doing anything with it) and potentially causes problems when suid programs are sandboxed * more rigorous error handling
* mount appimages nodev,nosuidLibravatar smitsohu2018-11-04
|
* fs_whitelist: minor mountinfo check improvement, cleanupLibravatar smitsohu2018-11-04
|
* Fix gitlab badge linkLibravatar Fred-Barclay2018-11-03
|
* Begin using gitlab for building to save time on auto code tests.Libravatar Fred-Barclay2018-11-02
| | | | | | | | | | | | | | | | | | Code tests are still run on Travis CI, but distro-specific builds are run on GitLab CI. Currently these are used: 1. Debian stable 2. Ubuntu latest 3. CentOS latest 4. Fedora latest 5. Alpine Debian and CentOS are for testing builds on older systems, for *.deb vs *.rpm, respectively. Ubuntu and Fedora are for testing builds on the latest **stable** systems for *.deb and *.rpm. Alpine is used to test building/installing from source. All run concurrently. In the future may expand tests on Gitlab to cover code testing as well.
* Add Mendeley profileLibravatar Fred-Barclay2018-11-02
|
* Merge pull request #2227 from alexara/alexara-patch-1Libravatar Reiner Herrmann2018-11-01
|\ | | | | Expanded the comment about nodbus breaking stuff
| * Expanded the comment about nodbus breaking stuffLibravatar alexara2018-10-30
|/ | | | | | As I figured out nodbus may break the streaming experience with Firefox 63.0 on Plasma 5.14.2, Framework 5.51.0 * KDE Connect: Users won't be able to control a stream with KDE Connect anymore * power management: During a stream the screen may dim or turn off
* adding --net.print command line optionLibravatar netblue302018-10-29
|
* aisleriot profileLibravatar netblue302018-10-28
|
* aisleriotLibravatar netblue302018-10-28
|
* fix busybox workaroundLibravatar smitsohu2018-10-28
| | | issue obtained with busybox 1.27.2
* little tweaks, cosmetic changesLibravatar smitsohu2018-10-26
|
* Merge pull request #2218 from smitsohu/mounts2Libravatar netblue302018-10-26
|\ | | | | experimental: remounts child mount points as well
| * cleanupLibravatar smitsohu2018-10-25
| |
| * fix: return with euid 0Libravatar smitsohu2018-10-25
| |
| * experimental: remounts child mount points as well (read-only, read-write, ↵Libravatar smitsohu2018-10-25
|/ | | | noexec)
* mergesLibravatar netblue302018-10-24
|
* Merge pull request #2213 from announ/patch-1Libravatar netblue302018-10-24
|\ | | | | git.profile: Disable blacklist for default Oh My Zsh directory
| * git.profile: Disable blacklist for default Oh My Zsh directoryLibravatar announ2018-10-24
| |
* | Merge pull request #2178 from glitsj16/atoolLibravatar netblue302018-10-24
|\ \ | |/ |/| Fix atool for UID/GID > 1000
| * Fix atool for UID/GID > 1000Libravatar glitsj162018-10-13
| |
* | reverting to 0.9.57Libravatar netblue302018-10-21
| |
* | apparmor testLibravatar netblue302018-10-21
| |
* | Add QOwnNotes profileLibravatar Fred-Barclay2018-10-20
| |
* | improve some error messagesLibravatar smitsohu2018-10-17
| |
* | improve clean_pathname functionLibravatar smitsohu2018-10-17
| |
* | fs_whitelist: cache length of home directory stringLibravatar smitsohu2018-10-17
| |
* | fix #2197Libravatar netblue302018-10-17
| |
* | Merge pull request #2199 from crass/fix-2142-firefox-sandbox-appimageLibravatar netblue302018-10-17
|\ \ | | | | | | Fix #2142: Firefox appimage fails because it needs non-default seccomp
| * | Do not override user provided seccomp lists when in chroot/overlay/appimage, ↵Libravatar Glenn Washburn2018-10-16
| | | | | | | | | | | | but to use the default if none is provided.
* | | Merge pull request #2201 from SkewedZeppelin/u2f-apLibravatar netblue302018-10-17
|\ \ \ | | | | | | | | Add nou2f to all profiles
| * | | Add nou2f to all profilesLibravatar Tad2018-10-15
| | | | | | | | | | | | | | | | - Closes #2194
* | | | Fix doc: A more accurate example of profile loading by profile name.Libravatar Glenn Washburn2018-10-17
| | | |
* | | | Fix docs on default seccomp list: change mfsservctl -> nfsservctl and ↵Libravatar Glenn Washburn2018-10-17
| | | | | | | | | | | | | | | | reorder, add ni_syscall, remove duplicate process_vm_writev, add sys_debug_setcontext.
* | | | Merge pull request #2156 from crass/improve-include-handlingLibravatar crass2018-10-17
|\ \ \ \ | | | | | | | | | | Improve include handling
| * | | | Remove "/etc/firejail/" from all include paths, now that profile_read will ↵Libravatar Glenn Washburn2018-10-17
| | | | | | | | | | | | | | | | | | | | search for the file.
| * | | | Update profile manpage to detail added "include" functionality.Libravatar Glenn Washburn2018-10-17
| | | | |
| * | | | Allow include to search userdir then systemdir for "bare" profile file names.Libravatar Glenn Washburn2018-10-17
|/ / / /
* | | | Merge pull request #2158 from crass/profile_conditionalLibravatar crass2018-10-17
|\ \ \ \ | | | | | | | | | | #2158: Add support for rudimentary conditionals in profiles
| * | | | Update documentation for profile conditionals.Libravatar Glenn Washburn2018-10-16
| | | | |
| * | | | Add support for rudimentary conditionals in profiles, currently only the ↵Libravatar Glenn Washburn2018-10-16
| | |/ / | |/| | | | | | | | | | HAS_APPIMAGE conditional is supported.
* | | | firejail.config: clarify disable-mnt behaviourLibravatar Vincent432018-10-16
| | | |
* | | | manpages: update disable-mnt descriptionLibravatar Vincent432018-10-16
|/ / / | | | | | | This will better match current code.
* | | Merge branch 'improve-profile-handling'Libravatar Glenn Washburn2018-10-15
|\ \ \ | |/ / |/| |
| * | Update man pages and usage to reflect --profile enhancement.Libravatar Glenn Washburn2018-10-15
| | |
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-18 20:12:02 +0000