aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Use ?ALLOW_TRAY: (#4510) in profilesLibravatar rusty-snake2021-10-09
|
* Update README.md RELNOTESLibravatar rusty-snake2021-10-09
|
* Merge pull request #4593 from kmk3/revert-allow-deny-fbuilderLibravatar netblue302021-10-09
|\ | | | | Revert "allow/deny fbuilder"
| * Revert "allow/deny fbuilder"Libravatar Kelvin M. Klann2021-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 4438f14f2892b5c88d158ae8fad0a80a2eebfd44. Also, partially revert related commit e4307b409 ("fix whitelist/allow in make test-utils") to keep the tests working. The profiles are being generated using aliases, which are not used on the profiles in the repository. So generate them using the normal commands for consistency. See also commit dd13595b8 ("Revert "allow/deny help and man pages"") / PR #4502. Relates to #4410. Misc: I noticed this on issue #4592.
| * build_profile.c: fix typo of "begins"Libravatar Kelvin M. Klann2021-10-05
| | | | | | | | Added on commit 9af2c1472 ("Better debug handling.").
* | Merge pull request #4587 from kmk3/fix-vscodiumLibravatar netblue302021-10-09
|\ \ | | | | | | Fix vscodium
| * | Add codium.profile as a redirect to vscodium.profileLibravatar Kelvin M. Klann2021-10-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both base names are valid: $ grep '^NAME' /etc/os-release NAME="Artix Linux" $ pacman -Q vscodium-bin vscodium-bin 1.60.2-2 $ pacman -Qlq vscodium-bin | grep -v -e '/$' -e /resources/ | grep /bin/ /usr/bin/codium /usr/bin/vscodium /usr/share/vscodium-bin/bin/codium Note: The first two paths are symlinks to the third one. Fixes #3871.
| * | vscodium.profile: add missing pathsLibravatar Kelvin M. Klann2021-10-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It creates the following directories on startup: * ~/.config/VSCodium * ~/.vscode-oss Environment: $ grep '^NAME' /etc/os-release NAME="Artix Linux" $ pacman -Q vscodium-bin vscodium-bin 1.60.2-2 Note: The following entry is already on disable-programs.inc: noblacklist ${HOME}/.vscode-oss It was added on commit de90834a8 ("Update disable-programs.inc", 2019-03-02). Relates to #3871.
| * | vscodium.profile: fix wrong program name in the commentsLibravatar Kelvin M. Klann2021-10-04
| |/ | | | | | | Added on commit 4bb7dee49 ("small changes", 2019-02-07).
* | Merge pull request #4586 from smitsohu/traceLibravatar netblue302021-10-09
|\ \ | | | | | | trace, tracelog: don't truncate /etc/ld.so.preload in sandbox
| * | trace, tracelog: don't truncate /etc/ld.so.preloadLibravatar smitsohu2021-10-05
| | |
* | | Merge pull request #4561 from kmk3/issue-template-improvements2Libravatar netblue302021-10-09
|\ \ \ | | | | | | | | Issue template improvements2
| * | | bug_report.md: link to markdown formatting helpLibravatar Kelvin M. Klann2021-09-20
| | | | | | | | | | | | | | | | As suggested by @rusty-snake.
| * | | bug_report.md: add checked item exampleLibravatar Kelvin M. Klann2021-09-20
| | | | | | | | | | | | | | | | | | | | | | | | It is not uncommon for people to use other characters to try to mark an item as checked (which usually screws up the html output), so be sure to include an example with "[x]".
| * | | bug_report.md: use LC_ALL where appropriateLibravatar Kelvin M. Klann2021-09-19
| | | |
| * | | bug_report.md: use LC_ALL instead of LANGLibravatar Kelvin M. Klann2021-09-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This overrides all `LC_*` variables (and LANG) rather than just LANG. From Section 8.2, Internationalization Variables of POSIX.1-2017[1]: > LANG > This variable shall determine the locale category for native > language, local customs, and coded character set in the absence of > the LC_ALL and other LC_* (LC_COLLATE, LC_CTYPE, LC_MESSAGES, > LC_MONETARY, LC_NUMERIC, LC_TIME) environment variables. This can > be used by applications to determine the language to use for error > messages and instructions, collating sequences, date formats, and > so on. > > LC_ALL > This variable shall determine the values for all locale > categories. The value of the LC_ALL environment variable has > precedence over any of the other environment variables starting > with LC_ (LC_COLLATE, LC_CTYPE, LC_MESSAGES, LC_MONETARY, > LC_NUMERIC, LC_TIME) and the LANG environment variable. [1] https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap08.html
* | | | Merge pull request #4510 from rusty-snake/allow-tray-conditionLibravatar netblue302021-10-09
|\ \ \ \ | | | | | | | | | | Add new condition ALLOW_TRAY
| * | | | Add new condition ALLOW_TRAYLibravatar rusty-snake2021-09-04
| | | | |
* | | | | Merge pull request #4519 from rusty-snake/build-systemsLibravatar netblue302021-10-09
|\ \ \ \ \ | | | | | | | | | | | | Add profiles for build-systems (/package-managers)
| * | | | | Drop private-bin from build-systemsLibravatar rusty-snake2021-09-11
| | | | | |
| * | | | | build-systems-common: Make whitelist opt-inLibravatar rusty-snake2021-09-11
| | | | | |
| * | | | | Add profiles for build-systems (/package-managers)Libravatar rusty-snake2021-09-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Profiles: bunler, cargo (refactor), cmake (untested), make, meson, pip All redirect to build-systems-common.profile Other fixes: - blacklist ${HOME}/.bundle - blacklist ${HOME}/.cargo/* -> blacklist ${HOME}/.cargo - blacklist /usr/lib64/ruby
* | | | | | update relnotesLibravatar smitsohu2021-10-08
| | | | | |
* | | | | | profile parsing fixesLibravatar smitsohu2021-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | results from a systematic search for strncmp calls with a suspicious (non-fitting) integer literal as third argument
* | | | | | Merge pull request #4590 from smitsohu/mountidLibravatar smitsohu2021-10-06
|\ \ \ \ \ \ | | | | | | | | | | | | | | Read mount id also on legacy kernels
| * | | | | | mountinfo: get mount id from failed call to name_to_handle_atLibravatar smitsohu2021-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Enables recursive remounting on very old kernels, which has some relevance for SailfishOS community ports.
| * | | | | | simplify recursive remountingLibravatar smitsohu2021-10-05
| | |_|_|_|/ | |/| | | |
* | | | | | Merge pull request #4371 from chrpinedo/patch-1Libravatar smitsohu2021-10-05
|\ \ \ \ \ \ | |/ / / / / |/| | | | | Correct amule.profile for upnp
| * | | | | Comment to use UPnP with amule.profileLibravatar Christian Pinedo2021-10-02
| | | | | | | | | | | | | | | | | | | | | | | | In order UPnP to work netlink protocol must be enabled.
* | | | | | Merge pull request #4585 from smitsohu/euidLibravatar smitsohu2021-10-02
|\ \ \ \ \ \ | | | | | | | | | | | | | | add more EUID improvements
| * | | | | | add more EUID improvementsLibravatar smitsohu2021-10-01
| | |_|_|_|/ | |/| | | |
* | | | | | Profile fixes and hardeningLibravatar rusty-snake2021-09-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * cheese - fix: dbus-user.own org.gnome.Cheese - fix: whitelist /usr/share/gstreamer-1.0 - fix: include allow-python3.inc - hardening: include disable-shell.inc - hardening: include whitelist-run-common.inc and whitelist /run/udev/data - hardening: whitelist /usr/libexec/gstreamer-1.0/gst-plugin-scanner - hardening: noinput - hardening: nosound - hardening: seccomp.block-secondary - hardening: private-dev * geekbench (closes #4576) - fix: noblacklist /sbin and noblacklist /usr/sbin - fix: noblacklist, blacklist, mkdir, whitelist, read-write ${HOME}/.geekbench5 - fix: comment/remove private-bin, private-lib, private-opt * inkscape - add quiet for cli usage * musixmatch (#4518) - allow chroot * pandoc - fix: include allow-bin-sh.inc - fix: drop private-bin - hardening: include whitelist-runuser-common.inc - hardening: seccomp.block-secondary
* | | | | | Rework D-Bus policy of nhekoLibravatar rusty-snake2021-09-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Allow org.freedesktop.secrets, fixes #4584 - Improve comments about notifications and systray
* | | | | | Merge pull request #4575 from a1346054/whitespace-fixLibravatar Kelvin M. Klann2021-09-27
|\ \ \ \ \ \ | |/ / / / / |/| | | | | Trim excess whitespace
| * | | | | trim excess whitespaceLibravatar a13460542021-09-25
|/ / / / /
* | | | | private-lib fixupLibravatar smitsohu2021-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | don't try to read /usr/bin/firejail if private-bin removed it from the sandbox filesystem
* | | | | private-lib: check firejail libraries as root user (#4576)Libravatar smitsohu2021-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | users, and fldd in particular, might have no read permission on the firejail executable, make that ok by running fldd as root
* | | | | update READMELibravatar netblue302021-09-24
| | | | |
* | | | | mergesLibravatar netblue302021-09-24
| | | | |
* | | | | Merge pull request #4514 from nidamanx/masterLibravatar netblue302021-09-24
|\ \ \ \ \ | | | | | | | | | | | | telegram: Enable private-bin
| * | | | | Update telegram.profileLibravatar Nicola Davide Mannarelli2021-09-07
| | | | | |
* | | | | | Merge pull request #4559 from rusty-snake/private-etc_ld.so.preloadLibravatar netblue302021-09-24
|\ \ \ \ \ \ | | | | | | | | | | | | | | Add ld.so.preload to all private-etc lines
| * | | | | | Add ld.so.preload to all private-etc linesLibravatar rusty-snake2021-09-18
| | |_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Command: sed -i -E "s/^private-etc /private-etc ld.so.preload,/" \ $(grep -LE "^private-etc .*ld.so.preload" etc/profile-*/*) \ && python3 contrib/sort.py etc/profile-*/*
* | | | | | Merge pull request #4564 from lecso7/masterLibravatar netblue302021-09-24
|\ \ \ \ \ \ | | | | | | | | | | | | | | Create goldendict.profile
| * | | | | | Create goldendict.profileLibravatar lecso72021-09-20
| | | | | | |
* | | | | | | Merge pull request #4572 from a1346054/newline-fixLibravatar netblue302021-09-24
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Add missing final newlines
| * | | | | | | add missing final newlines at end of filesLibravatar a13460542021-09-22
| | | | | | | |
* | | | | | | | Merge pull request #4560 from onny/nolinkcheckLibravatar netblue302021-09-24
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | Remove /etc/hosts is_link check
| * | | | | | | | remove hosts file link checkLibravatar Jonas Heinrich2021-09-19
| | | | | | | | |
| * | | | | | | | remove hosts file link checkLibravatar Jonas Heinrich2021-09-19
| | | | | | | | |
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-19 13:04:00 +0000