aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* rel 0.9.64.2 testing - make test-compileLibravatar netblue302021-01-26
|
* rel 0.9.24.2 testingLibravatar netblue302021-01-26
|
* release 0.9.64.2 testingLibravatar netblue302021-01-26
|
* merge/readme updateLibravatar netblue302021-01-25
|
* Merge pull request #3853 from botherder/masterLibravatar netblue302021-01-25
|\ | | | | New profile for CoyIM
| * Added additional whitelistsLibravatar Nex2021-01-06
| |
| * Implementing some of the suggested changes from #3853Libravatar Nex2020-12-29
| |
| * Added some more restrictions to coyim profileLibravatar Nex2020-12-29
| |
| * Added first profile for coyimLibravatar Nex2020-12-29
| |
* | Merge pull request #3899 from rootalc/nolocal6Libravatar netblue302021-01-25
|\ \ | | | | | | Create nolocal6.net
| * | Create nolocal6.netLibravatar rootalc2021-01-18
| | |
* | | Merge pull request #3918 from Neo00001/masterLibravatar netblue302021-01-25
|\ \ \ | | | | | | | | Add profile for kdiff3
| * | | Update kdiff3.profileLibravatar Neo000012021-01-24
| | | |
| * | | Create kdiff3.profileLibravatar Neo000012021-01-24
| | | |
| * | | Update firecfg.configLibravatar Neo000012021-01-24
| | | |
| * | | Update disable-programs.incLibravatar Neo000012021-01-24
| | | |
* | | | fix #3914Libravatar netblue302021-01-24
| | | |
* | | | profstatsLibravatar netblue302021-01-24
|/ / /
* | | Update vmware.profile (#3913)Libravatar Neo000012021-01-24
| | | | | | | | | | | | | | | | | | | | | * Update vmware.profile `private-etc` can be uncommented. * Update vmware.profile
* | | misc comment fixes (#3916)Libravatar glitsj162021-01-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix comment in blackbox.profile * fix comment in fluxbox.profile * fix comment in i3.profile * fix comment in krunner.profile * fix comment in openbox.profile
* | | refactor google-earth{-pro} (#3915)Libravatar glitsj162021-01-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refactor google-earth{-pro} blacklisting * fix google-earth-pro.profile I've included all binaries found in the Arch Linux AUR package to private-bin. But I also added a note on ignoring private-bin because I'm not sure what google-earth is doing on other distro's. * unbreak google-earth.profile Not sure why we need grep, ls and sed in private-bin exactly but keeping them around wouldn't hurt too much I guess.
* | | Update bibletime.profile, add new whitelist (#3908)Libravatar hhzek00142021-01-22
| | | | | | | | | | | | | | | | | | To solve issue#3907, doc directory of the bibletime has to be whitelisted. Otherwise, it always fails to start. Co-authored-by: hhnb <hhnb@nanenient.cc>
* | | refactoringLibravatar smitsohu2021-01-20
| | |
* | | Merge pull request #3900 from smitsohu/privatelibLibravatar smitsohu2021-01-20
|\ \ \ | | | | | | | | Add $PATH expansion to private-lib
| * | | private-lib: search executables in $PATHLibravatar smitsohu2021-01-20
| | | |
* | | | Merge pull request #3903 from smitsohu/privatelib3Libravatar smitsohu2021-01-20
|\ \ \ \ | | | | | | | | | | private-lib: add new timetrace
| * | | | private-lib: add timetrace for Firejail librariesLibravatar smitsohu2021-01-18
| |/ / /
* | | | misc fcopy fixesLibravatar smitsohu2021-01-20
| | | |
* | | | private-lib: simplify installation of stdcLibravatar smitsohu2021-01-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | as modern-day Debian only keeps a single symbolic link in /lib64, going through both directories systematically adds virtually no overhead (as indicated by the timetrace). At the same time it is simpler and more robust in producing a correct representation of the filesystem.
* | | | add pkglog to new profilesLibravatar glitsj162021-01-18
| | | |
* | | | add pkglog to new profilesLibravatar glitsj162021-01-18
| | | |
* | | | add new profile: pkglog (#3902)Libravatar glitsj162021-01-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add pkglog to new profiles * Create pkglog.profile * Update README.md * fix ordering in pkglog.profile * drop extra whitespace in pkglog.profile
* | | | harden plv.profile (#3901)Libravatar glitsj162021-01-18
|/ / /
* | | Add 'seccomp-error-action log' to profile.templateLibravatar rusty-snake2021-01-18
| | |
* | | Add profile for guvcviewLibravatar rusty-snake2021-01-18
| | |
* | | harden and fix cheese.profileLibravatar rusty-snake2021-01-18
|/ / | | | | | | | | hardening: wusc + wruc fix: settings was immutable
* | Add new allow include allow-bin-sh.incLibravatar rusty-snake2021-01-16
| | | | | | | | | | | | | | | | | | /bin/sh is usually just a symlink to bash. However this is not the case for every distro, debian for example uses dash. bash,dash and sh have a blacklist command in disable-shell.inc. An own allow-*.inc for it enusres usage of all necessary nolacklists. For private-bin sh is enough because it follows symlinks.
* | add realaltffourLibravatar glitsj162021-01-15
| | | | | | See #3895.
* | newsboat: add lynx support (#3895)Libravatar altf_four2021-01-15
| | | | | | | | | | | | | | * newsboat: add lynx support * newsboat: fix using sort.py * newsboat: remove unneeded perms
* | blacklist firejail appimage dir if not usedLibravatar smitsohu2021-01-15
| |
* | fbuilder: don't suggest to whitelist strace output fileLibravatar smitsohu2021-01-15
| |
* | fbuilder: undo variable shadowingLibravatar smitsohu2021-01-15
| |
* | private-lib: install dhclient librariesLibravatar smitsohu2021-01-15
| |
* | Merge pull request #3867 from smitsohu/non-dumpableLibravatar smitsohu2021-01-15
|\ \ | | | | | | return to non-dumpable plugins
| * | fix broken tests and regression on 45304621a6c600d8e30e98bfbef05149caaf56c5Libravatar smitsohu2021-01-06
| | |
| * | non-dumpable pluginsLibravatar smitsohu2021-01-04
| | | | | | | | | | | | | | | (hopefully) fixes the issues that led to reverting commits 6abb65d328af61d67361890743190bd4c57f8e3c and 98e42dc6da4e4b1e47ed2aa020012d4dedc1e80e
* | | bug_report.md: improve wording (upstream/duplicates)Libravatar Kelvin M. Klann2021-01-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Clarify that: * "upstream profile" means the profile version on the master branch * "duplicates" refer to duplicate issues As suggested by @scruloose on https://github.com/netblue30/firejail/issues/3884#issue-784605766 https://github.com/netblue30/firejail/issues/3884#issuecomment-759528185
* | | fix mdr.profileLibravatar glitsj162021-01-13
| | | | | | | | | Thanks @rusty-snake for [spotting](https://github.com/netblue30/firejail/commit/662ebd214b0a7874072381f5aaf3fbd322f0e460) this!
* | | add qnapi to new profilesLibravatar glitsj162021-01-13
| | |
* | | new profile: qnapi (#3890)Libravatar glitsj162021-01-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add new profile: qnapi * add new profile: qnapi * Create qnapi.profile * add qnapi configs * Update README.md * Update README.md