aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* gcov: fix gcov functions always declared as dummyLibravatar Kelvin M. Klann2022-03-09
| | | | | | | | | | | | | | | | | | Currently, the check to enable gcov relies on a non-existent macro due to a typo, which looks like it would cause the dummy/empty versions of the gcov functions to always be declared (even with --enable-gcov), instead of the real ones from gcov.h. This commit fixes the typo (HAS_GCOV -> HAVE_GCOV). See configure.ac for the macro declaration. This amends commit 5106b2ec4 ("gcov: use no-op functions if not enabled", 2021-06-20) / PR #4376. Occurrences of each macro with this commit applied: $ git grep -F HAVE_GCOV | wc -l 16 $ git grep -F HAS_GCOV | wc -l 0
* RELNOTES: add warning about allow-trayLibravatar Kelvin M. Klann2022-03-09
| | | | Relates to #4946.
* RELNOTES: sort items by categoryLibravatar Kelvin M. Klann2022-03-09
| | | | | | | | | Put it in a similar order to 0.9.68: features, modifs/reworks, bugfixes, ci, docs, new profiles. See commit 5fbc1cd50 ("RELNOTES: sort items by category", 2022-02-05). Misc: The last paragraph of that commit message is wrong; just ignore it.
* RELNOTES: add missing PR references; fix typoLibravatar Kelvin M. Klann2022-03-09
| | | | | | This amends commit 481321881 ("merges", 2022-03-05). Relates to #4985 #4990 #5011.
* Merge pull request #5026 from smitsohu/electronLibravatar smitsohu2022-03-09
|\ | | | | Electron app fixes
| * skypeforlinux cleanupLibravatar smitsohu2022-03-09
| |
| * fix Electron app profiles (#5012)Libravatar smitsohu2022-03-09
| |
* | fbuilder: fix suggested profileLibravatar smitsohu2022-03-09
| | | | | | | | follow-up to fdee4dc1326bb2d5ce90ef2a0410dccba56beb70
* | build option: support chromium/electron apps most of the timeLibravatar smitsohu2022-03-09
| |
* | xdg dir translation cleanupLibravatar smitsohu2022-03-09
|/ | | | remove all duplicate entries
* Bump actions/checkout from 2.4.0 to 3Libravatar dependabot[bot]2022-03-08
| | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 2.4.0 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/ec3a7ce113134d7a93b817d10a8272cb61118579...a12a3943b4bdde767164f792f33f40b04645d846) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302022-03-05
|\
| * Merge pull request #5009 from glitsj16/chromium-basedLibravatar netblue302022-03-05
| |\ | | | | | | drop redundant ignore in chromium-based browsers
| | * drop redundant ignoreLibravatar glitsj162022-03-04
| | |
| | * drop redundant ignoreLibravatar glitsj162022-03-04
| | |
| | * drop redundant ignoreLibravatar glitsj162022-03-04
| | |
| | * drop redundant ignoreLibravatar glitsj162022-03-04
| | |
| | * drop redundant ignoreLibravatar glitsj162022-03-04
| | |
| | * drop redundant ignoreLibravatar glitsj162022-03-04
| | |
| | * drop redundant ignoreLibravatar glitsj162022-03-04
| | |
| | * drop redundant ignoreLibravatar glitsj162022-03-04
| | |
| | * drop redundant ignoreLibravatar glitsj162022-03-04
| | |
* | | mergesLibravatar netblue302022-03-05
|/ /
* | Merge pull request #4985 from smitsohu/whitelistLibravatar netblue302022-03-05
|\ \ | | | | | | whitelist restructuring
| * | whitelist: avoid nested whitelist mountsLibravatar smitsohu2022-03-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Check mountids while creating path of a new mount target. If the mountid differs from the top level directory (tmpfs) mountid, this proves an earlier whitelist command. It is important to note though that this check is not exhaustive, as besides nested whitelist commands there are also nested top level directories. So a user could run: firejail --whitelist=/a/b --whitelist=/a/b/c where both a and b are (whitelist) top level directories. Such a command may result in b and c sharing the filesystem and hence mountid. In this case the nested nature of the whitelist commands will go unnoticed. A more rigorous version will probably need to apply some sorting to the whitelist command, possibly by means of glob(3).
| * | whitelist: minor restructuringLibravatar smitsohu2022-03-01
| | | | | | | | | | | | some cleanup, simplify extending the code (for example adding additional members to the TopDir struct)
| * | mount id: drop effective user id assertionsLibravatar smitsohu2022-02-25
| | | | | | | | | | | | | | | | | | | | | as functions operate on a file descriptor it should be safe to remove them; this sets the stage for improvements to the whitelist code
* | | Merge pull request #4990 from chestnykh/user_profilesLibravatar netblue302022-03-05
|\ \ \ | |_|/ |/| | Add ability to disable user profiles at compile time.
| * | Add ability to disable user profiles at compile time.Libravatar Dmitry Chestnykh2022-02-28
| | |
* | | whitelist /usr/share/gnupg2 for consistency (#5007)Libravatar glitsj162022-03-04
| | |
* | | xdg macros: add Italian, Spanish, Portuguese, GermanLibravatar smitsohu2022-03-04
| | |
* | | xdg macros: don't fall through if directory not found (#4994)Libravatar smitsohu2022-03-04
| | |
* | | drop redundant whitelisting (#5005)Libravatar glitsj162022-03-03
| | |
* | | fix sylpheed (#5003)Libravatar glitsj162022-03-03
| | |
* | | more fixes for opera-beta (#5002)Libravatar glitsj162022-03-03
| | |
* | | add opera-developer.profile (#5001)Libravatar glitsj162022-03-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add opera-developer to firecfg * add opera-developer * fix typo * add configs for opera-developer * Create opera-developer.profile * fixes for opera-developer * fix for opera-developer
* | | opera fixes/hardening (#4999)Libravatar glitsj162022-03-03
| | | | | | | | | | | | | | | * harden opera-beta * harden opera
* | | geary fixes (#4992)Libravatar glitsj162022-03-01
| | | | | | | | | | | | | | | * geary fixes * comment ipc-namespace
* | | Bump github/codeql-action from 1.1.2 to 1.1.3Libravatar dependabot[bot]2022-02-28
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.2 to 1.1.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/d39d5d5c9707b926d517b1b292905ef4c03aa777...75f07e7ab2ee63cba88752d8c696324e4df67466) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | fix mupdf redirect profiles (#4977)Libravatar glitsj162022-02-25
| |
* | gconf-editor fix (#4976)Libravatar glitsj162022-02-24
| |
* | update noprofile.profileLibravatar smitsohu2022-02-24
| |
* | fix --whitelist=/run/*Libravatar smitsohu2022-02-24
| |
* | hardening zeal.profile (#4970)Libravatar glitsj162022-02-23
| |
* | evince fixLibravatar netblue302022-02-22
| |
* | openSUSE Leap - whitelist-run-common.inc (#4954)Libravatar netblue302022-02-22
| |
* | allow printing in evinceLibravatar netblue302022-02-22
| |
* | Add support for changing appearance of the Qt6 apps with qt6ct (#4966)Libravatar avallach20002022-02-21
| | | | | | | | | | | | | | * Add support for changing appearance of the Qt6 apps with qt6ct * Remove qt5ct artifact from zeal.profile * Remove qt5ct artifact from bibletime.profile
* | Bump github/codeql-action from 1.1.0 to 1.1.2Libravatar dependabot[bot]2022-02-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.0 to 1.1.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/474bbf07f9247ffe1856c6a0f94aeeb10e7afee6...d39d5d5c9707b926d517b1b292905ef4c03aa777) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302022-02-20
|\ \