Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Merge pull request #1696 from sgtpep/patch-3 | netblue30 | 2017-12-27 |
|\ | | | | | Blacklist ~/.ethereum | ||
| * | Blacklist ~/.ethereum | Danil Semelenov | 2017-12-27 |
|/ | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | Fred-Barclay | 2017-12-24 |
|\ | |||
| * | Fix #1686: comment out icedove dirs and don't attempt to mkdir ↵ | Fred Barclay | 2017-12-23 |
| | | | | | | | | /home/fred/.icedove to avoid clash with Thunderbird on Debian systems. | ||
* | | Fix #1686: comment out icedove dirs and don't attempt to mkdir ~/.icedove to ↵ | Fred Barclay | 2017-12-24 |
|/ | | | | avoid clash with Thunderbird on Debian systems. | ||
* | Merge pull request #1691 from DiGitHubCap/master | Fred Barclay | 2017-12-22 |
|\ | | | | | Fix Deluge | ||
| * | Fix Deluge | DiGitHubCap | 2017-12-22 |
| | | | | | | | | | | Deluge needs access to more than the deluge binary if it runs as a daemon (or if you want to access it via the web or command line) | ||
* | | kwin_x11 fixes | smitsohu | 2017-12-22 |
| | | |||
* | | Merge pull request #1687 from floxo/master | smitsohu | 2017-12-22 |
|\ \ | | | | | | | Added environment variable QML_DISABLE_DISK_CACHE=1 to okular.profile. | ||
| * | | Added environment variable QML_DISABLE_DISK_CACHE=1 to okular.profile. | Flox | 2017-12-21 |
| |/ | | | | | | | | | | | | | | | Without it, recent okular versions (here 17.12.0-1 on Arch Linux) crash with mprotect failed in ExecutableAllocator::makeExecutable: Permission denied due to the noexec constraints in the firejail profile. | ||
* | | Add iana-etc's services to private-etc in steam.profile, fixes #1688 | Tad | 2017-12-22 |
| | | |||
* | | Merge pull request #1689 from gerasiov/master | Fred Barclay | 2017-12-22 |
|\ \ | |/ |/| | disable-common.inc: read-only access to ~/.ssh/authorized_keys | ||
| * | disable-common.inc: read-only access to ~/.ssh/authorized_keys | Alexander GQ Gerasiov | 2017-12-22 |
|/ | | | | | | | | | | | | | | | disable-common.inc blacklists whole .ssh, but some profiles (e.g. idea.sh) unblacklists it to allow git over ssh with public key auth. But this creates security hole, since firejailed app could modify ~/.ssh/authorized_keys and allow arbitrary code execution on the host with sshd installed (e.g. ssh localhost and run any program) or even open backdoor for remote attacker. This commits disallows write access to ~/.ssh/authorized_keys even if .ssh was unblacklisted. Signed-off-by: Alexander GQ Gerasiov <gq@cs.msu.su> | ||
* | firemon fixes | netblue30 | 2017-12-18 |
| | |||
* | Add Figaro's Password Manager 2 to disable-passwdmgr.inc | netblue30 | 2017-12-18 |
| | |||
* | Fix #1674 | Tad | 2017-12-17 |
| | | | | look into why this is breaking | ||
* | Profile fixes | Tad | 2017-12-17 |
| | |||
* | Merge pull request #1681 from gerasiov/master | Fred Barclay | 2017-12-17 |
|\ | | | | | Profiles updates | ||
| * | Add new path for TelegramDesktop files. | Alexander GQ Gerasiov | 2017-12-17 |
| | | | | | | | | | | Latest versions of TelegramDesktop supports both old (~/.TelegramDesktop) and new (~/.local/share/TelegramDesktop) location of sensitive data files. | ||
| * | disable-common.inc: Blacklist .homesick | Alexander GQ Gerasiov | 2017-12-17 |
|/ | | | | | homesick is dotfiles manager. It keeps dotfiles (e.g. .bashrc) in repository under ~/.homesick and puts symlinks into home directory. | ||
* | Fix #1680, same as #1437 | Tad | 2017-12-16 |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | startx2017 | 2017-12-14 |
|\ | |||
| * | Merge pull request #1676 from maxice8/fix-musl | Reiner Herrmann | 2017-12-14 |
| |\ | | | | | | | libtrace/libtrace.c: add missing limits.h include | ||
| | * | libtrace/libtrace.c: add missing limits.h include | maxice8 | 2017-12-13 |
| |/ | | | | | | | Fix build on Musl systems, tested on x86_64-musl Void Linux | ||
* / | redirect output messages to stderr | startx2017 | 2017-12-14 |
|/ | |||
* | fix RELNOTES | netblue30 | 2017-12-12 |
| | |||
* | RELONTES for the new version | netblue30 | 2017-12-12 |
| | |||
* | starting 0.9.53 | netblue30 | 2017-12-12 |
| | |||
* | 0.9.52 testing0.9.52 | netblue30 | 2017-12-12 |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | smitsohu | 2017-12-11 |
|\ | |||
| * | fix trash blacklist in caja profile | smitsohu | 2017-12-10 |
| | | |||
* | | fix qutebrowser | smitsohu | 2017-12-11 |
|/ | |||
* | new fix for #1670 | netblue30 | 2017-12-10 |
| | |||
* | fix (and harden) kmail - #1541 | smitsohu | 2017-12-10 |
| | |||
* | remove mutt blacklist redundancies | smitsohu | 2017-12-09 |
| | |||
* | improve fetchmail profile - #1661 | smitsohu | 2017-12-09 |
| | |||
* | firecfg fix (#1670) | netblue30 | 2017-12-09 |
| | |||
* | fix typo | Reiner Herrmann | 2017-12-08 |
| | |||
* | typo fix | smitsohu | 2017-12-08 |
| | |||
* | sort whitelist-common.inc | smitsohu | 2017-12-08 |
| | |||
* | pedantic comment fix | smitsohu | 2017-12-08 |
| | |||
* | fix sound in firefox started from thunderbird | smitsohu | 2017-12-08 |
| | | | | | and move disable-mnt from thunderbird to firefox profile, in alignment with recent commit from @Fred-Barclay | ||
* | 0.9.52 testing | netblue30 | 2017-12-07 |
| | |||
* | 0.9.52 testing | netblue30 | 2017-12-07 |
| | |||
* | more merges | smitsohu | 2017-12-07 |
| | |||
* | merges | smitsohu | 2017-12-07 |
| | |||
* | allow kcalc to read various settings | smitsohu | 2017-12-07 |
| | |||
* | fix ktorrent kio | smitsohu | 2017-12-07 |
| | | | minimal fix to get file dialog working when there is no kdeinit4 outside the sandbox (relevant e.g. for Debian up to Stretch) | ||
* | testing | netblue30 | 2017-12-06 |
| | |||
* | testing | netblue30 | 2017-12-06 |
| |