aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* test/fs: enable private-lib in firejail.configLibravatar Kelvin M. Klann2022-06-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | Before running test/fs/private-lib.exp. Inspired by the configuration changes that are done on test/root/checkcfg.exp. Reason: Since commit 9741d0b60 ("fix disabled private-lib in /etc/firejail/firejail.config", 2022-06-23), the "build_and_test" job fails with the following error[1]: TESTING: private-lib (test/fs/private-lib.exp) spawn /bin/bash firejail --private-lib --private-bin=sh,bash,dash,ps,grep,ls,find,echo,stty runner@fv-az489-993:~/work/firejail/firejail/test/fs$ <private-bin=sh,bash,dash,ps,grep,ls,find,echo,stty Error: private-lib feature is disabled in Firejail configuration file runner@fv-az489-993:~/work/firejail/firejail/test/fs$ TESTING ERROR 1 This fixes CI. Fixes #5214. Relates to #5190. [1] https://github.com/netblue30/firejail/runs/7030862406
* fix disabled private-lib in /etc/firejail/firejail.configLibravatar netblue302022-06-23
|
* disabled private-lib in /etc/firejail/firejail.configLibravatar netblue302022-06-23
|
* nettrace dixesLibravatar netblue302022-06-23
|
* Transmission fixes: drop private-lib (#5213)Libravatar glitsj162022-06-22
| | | | | | | * drop private-lib * drop private-lib * drop private-lib
* deprecating --shell (3) (#5196)Libravatar netblue302022-06-21
|
* Revert "xonotic.profile: fix audit denial spam"Libravatar Tad2022-06-20
| | | | | | | Logging is now default disabled in c7e4c8ed592fee7f1644152a23c3e1343b01b922 See https://github.com/netblue30/firejail/issues/5207 This reverts commit c0d314f945b405f1e90a1a43719059cd22f55de7.
* deprecating --shell (2) (#5196)Libravatar netblue302022-06-20
|
* compile fixLibravatar netblue302022-06-20
|
* deprecating --shell (#5196)Libravatar netblue302022-06-20
|
* reverting previous seccomp log fix (#5207)Libravatar netblue302022-06-20
|
* shell none set as default (6)Libravatar netblue302022-06-19
|
* Merge pull request #5209 from rusty-snake/shell-none-defaultLibravatar netblue302022-06-19
|\ | | | | Remove shell none from profiles
| * Remove shell none from profilesLibravatar rusty-snake2022-06-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Command: sed -i "/^shell none/d" etc/*/* TODO: ``` etc/profile-a-l/beaker.profile:ignore shell none etc/profile-a-l/default.profile:# shell none etc/profile-a-l/fdns.profile:#shell none etc/profile-a-l/gnome-nettool.profile:#shell none etc/profile-a-l/jitsi-meet-desktop.profile:ignore shell none etc/profile-m-z/pidgin.profile:# shell none etc/profile-m-z/rocketchat.profile:ignore shell none etc/profile-m-z/server.profile:# shell none etc/templates/profile.template:# OPTIONS (caps*, net*, no*, protocol, seccomp*, shell none, tracelog) etc/templates/profile.template:#shell none ``` - manpage - RELNOTES - fbuilder
* | shell none set as default (5)Libravatar netblue302022-06-19
| |
* | shell none set as default (4)Libravatar netblue302022-06-19
| |
* | shell none set as default (3)Libravatar netblue302022-06-19
| |
* | shell none set as default (2)Libravatar netblue302022-06-19
|/
* shell none set as defaultLibravatar netblue302022-06-19
|
* removing guess_shell() function and using instead the shell configured in ↵Libravatar netblue302022-06-19
| | | | the password database (/etc/passwd file)
* Update SECURITY.mdLibravatar rusty-snake2022-06-18
|
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302022-06-18
|\
| * update_deb.sh: fix not building with apparmor supportLibravatar Kelvin M. Klann2022-06-18
| | | | | | | | | | | | | | This amends commit 9a0fbbd71 ("mkdeb.sh.in: pass remaining arguments to ./configure", 2022-05-13) / PR #5154. See also #5176.
| * errno.c: fix reference to extract_errnos.sh in commentLibravatar Kelvin M. Klann2022-06-18
| | | | | | | | | | | | | | See src/tools/extract_errnos.sh. Added on commit 081d1fbf2 ("Add seccomp errno filter support", 2015-09-23) / PR #66.
* | seccomp-log support in firejail.configLibravatar netblue302022-06-18
|/
* remving src/fgitLibravatar netblue302022-06-17
|
* Merge pull request #5206 from kmk3/fix-file-mode-shLibravatar netblue302022-06-17
|\ | | | | build: fix file mode of shell scripts (644 -> 755)
| * build: fix file mode of shell scripts (644 -> 755)Libravatar Kelvin M. Klann2022-06-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some shell scripts are not executable, so fix their file modes: $ git grep -Elz '^#!/bin/(ba)?sh' | xargs -0 -I '{}' \ chmod +x '{}' Files changed: * src/fgit/fgit-uninstall.sh * src/tools/extract_errnos.sh Note: I have manually checked that the files above are indeed intended to be executable directly and not just sourced, as a script of the latter kind could also contain a shebang (for example, to help ensure proper syntax highlighting). Misc: The affected files were added on commit e46dd3e95 ("git-install", 2017-02-04) and on commit 081d1fbf2 ("Add seccomp errno filter support", 2015-09-23) / PR #66, respectively.
* | fixing seccomp log (#5207)Libravatar netblue302022-06-17
|/
* fix artha and add dbus-user filteringLibravatar glitsj162022-06-16
|
* update_deb.sh: remove cgroup-related codeLibravatar Kelvin M. Klann2022-06-16
| | | | | | | The "cgroup" option was removed from etc/firejail.config on commit 73b089092 ("disable cgroup code", 2022-06-13). Relates to #5200.
* more on removing cgroups (#5200)Libravatar netblue302022-06-16
|
* fix CILibravatar netblue302022-06-15
|
* configure*: Move LDFLAGS below CFLAGSLibravatar Kelvin M. Klann2022-06-15
| | | | | | | To match the usual usage order. Relates to commit 222a2d772 ("order options alphabetically in configure.ac report", 2022-06-13).
* configure*: fix typo in output (--ouput -> --output)Libravatar Kelvin M. Klann2022-06-15
| | | | | This amends commit 72ba0b7e5 ("compile time: disable --output", 2021-02-28).
* test/fs/invalid_filename.exp: s/end/send/Libravatar Kelvin M. Klann2022-06-14
| | | | | This amends commit c165510dc ("CI: remove cgroup test because feature has been removed", 2022-06-13).
* CI: remove cgroup test because feature has been removedLibravatar Reiner Herrmann2022-06-13
|
* disable chroot by default in /etc/firejail/firejail.configLibravatar netblue302022-06-13
|
* order options alphabetically in configure.ac reportLibravatar netblue302022-06-13
|
* compile time: changed --disable-firetunnel into --enable-firetunnelLibravatar netblue302022-06-13
|
* more on disable cgroupsLibravatar netblue302022-06-13
|
* disable cgroup codeLibravatar netblue302022-06-13
|
* Merge pull request #5140 from kmk3/build-dedup-config-varsLibravatar Kelvin M. Klann2022-06-13
|\ | | | | build: deduplicate configure-time vars into new config files
| * mkdeb.sh.in: move configure-time vars into new config.sh.inLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | For better organization and so that they can be used by other shell scripts by just sourcing config.sh.
| * makefiles: include config.mk instead of common.mk where possibleLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | common.mk contains definitions for building programs and it includes config.mk. Some makefiles that include common.mk do not contain any targets for building programs. They depend only on configure-time variable definitions (which are defined on config.mk) rather than anything specific to common.mk. So change their includes of common.mk to config.mk.
| * makefiles: deduplicate configure-time vars into new config.mk.inLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | Currently, the configure-time variables (that is, the ones that assign to placeholders, such as "@HAVE_MAN@", which are set/replaced at configure-time) are defined on multiple files (such as on Makefile.in and on common.mk.in). To avoid duplication, centralize these variables on a single file (config.mk.in) and replace all of the other definitions of them with an include of config.mk.
| * makefiles: define root dir and include relative to itLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A non-absolute path on an include command is always treated as being relative to the directory in which "make" was started in, rather than being relative to the makefile that contains the command. For example, given the following project structure and file contents: * Makefile: include src/foo.mk * src/foo.mk: include bar.mk * src/bar.mk: Running "make" on the root project directory (that is, where "Makefile" is) yields the following: src/foo.mk:1: bar.mk: No such file or directory As "bar.mk" in "include bar.mk" is relative to the current (process) directory (that is, "./bar.mk") and not to where foo.mk is located in ("./src/bar.mk"). So on every makefile that contains an include command, define the root project directory in the ROOT variable and always include relative to it, to later enable any included mkfiles to include other mkfiles without having to worry about the correct path. Commands used to search and replace: $ git grep -Flz 'include ../common.mk' -- src | xargs -0 -I '{}' sh -c \ "printf '%s\n' \"\`sed 's|include ../common.mk|ROOT = ../..\ninclude \$(ROOT)/src/common.mk|' '{}'\`\" >'{}'" Environment: GNU make 4.3-3.1 on Artix Linux
| * common.mk.in: fix comment about file usage intentLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It currently claims to contain "common definitions for all makefiles", but it is not included by all makefiles under src/ and it contains variable definitions that may possibly clash with the ones defined on certain makefiles. Mainly, the following makefiles (which are used for building shared objects) use a different set of CFLAGS compared to src/common.mk.in: * src/libpostexecseccomp/Makefile.in * src/libtrace/Makefile.in * src/libtracelog/Makefile.in Given the contents of common.mk.in, it seems to be intended only for makefiles that build C programs and/or non-shared objects (which are most of, but not all of the makefiles under src/), so put that in the comment instead.
| * Makefile.in: stop trying to remove config.h on distcleanLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is no config.h nor config.h.in in the repository: $ git ls-files -- '*config.h*' $ The filename is only mentioned on the generated configure script, as a generic example of an autoconf config file: $ git grep -F -A 1 -B 2 config.h | grep -v '^Makefile.in' -- configure-# Set up the scripts for CONFIG_FILES section. configure-# No need to generate them if there are no CONFIG_FILES. configure:# This happens for instance with `./config.status config.h'. configure-if test -n "$CONFIG_FILES"; then -- configure- # Let's still pretend it is `configure' which instantiates (i.e., don't configure- # use $as_me), people would be surprised to read: configure: # /* config.h. Generated by config.status. */ configure- configure_input='Generated from '`
| * Makefile.in: sort DISTFILESLibravatar Kelvin M. Klann2022-06-12
| |
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-15 21:47:19 +0000