aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* mergesLibravatar netblue302018-04-02
|
* Merge pull request #1854 from melvinvermeeren/masterLibravatar netblue302018-04-02
|\ | | | | add --noautopulse arg for complex pulse setups
| * add --noautopulse arg for complex pulse setupsLibravatar Melvin Vermeeren2018-04-01
| | | | | | | | such as remote pulse servers or non-standard socket paths
* | Merge pull request #1827 from intika/masterLibravatar netblue302018-04-02
|\ \ | |/ |/| Add support for the devil musixmatch
| * Add support for the devil musixmatchLibravatar intika2018-03-23
| |
* | Fix private-lib again (#1852) for evinceLibravatar glitsj162018-04-01
| | | | | | | | | | | | | | | | | | | | | | | | * Fix private-lib During conversation around an [earlier attempt at fixing evince] (https://github.com/netblue30/firejail/pull/1829) and the entailing [revert-commit](https://github.com/netblue30/firejail/pull/1829/commits/45732a22d1ea4ec0ade0775be7243e8669b7f850) this slipped through the cracks. The fix is tested on Gnome Shell 3.26.2 and 3.28.0 (on Arch). * Remove irrelevant comment on private-lib * Update private-lib comments Done!
* | mergesLibravatar Fred-Barclay2018-04-01
| |
* | Merge pull request #1851 from glitsj16/gnome-calculatorLibravatar Fred Barclay2018-04-01
|\ \ | | | | | | Fix private-lib for gnome-calculator
| * | Fix the fixLibravatar glitsj162018-04-01
| | | | | | | | | Forgot to take out [libplotinus.so](https://github.com/p-e-w/plotinus). Something I use myself in all GTK apps, but which isn't needed whatsoever for gnome-calculator.
| * | Fix private-libLibravatar glitsj162018-04-01
| | | | | | | | | This fixes https://github.com/netblue30/firejail/issues/1841.
* | | mergesLibravatar Tad2018-04-01
| | |
* | | Merge pull request #1849 from jelford/gcloud-profileLibravatar SkewedZeppelin2018-04-01
|\ \ \ | | | | | | | | Added a basic profile for gcloud
| * | | Remove /usr/local from gcloud.profileLibravatar Tad2018-04-01
| | | |
| * | | Added a basic profile for gcloudLibravatar James Elford2018-03-31
| | | | | | | | | | | | | | | | | | | | | | | | gcloud is the Google Cloud Platform's cli. It understands how to interact with GCP's endpoint, and it need to read config and creds from the user's $HOME, plus it integrates with docker-cli
* | | | Merge pull request #1853 from glitsj16/gnome-logsLibravatar SkewedZeppelin2018-04-01
|\ \ \ \ | | | | | | | | | | Create gnome-logs.profile
| * | | | Cleanup gnome-logsLibravatar Tad2018-04-01
| | | | |
| * | | | Fixup gnome-logsLibravatar Tad2018-04-01
| | | | |
| * | | | Create gnome-logs.profileLibravatar glitsj162018-04-01
|/ / / / | | | | | | | | New profile. A few harmless warnings do show, but nothing that doesn't also show without firejail.
* | | | Disable mdwe in bleachbit - fix #1850.Libravatar Fred-Barclay2018-03-31
| | | |
* | | | gitignoreLibravatar netblue302018-03-31
| | | |
* | | | consolidate makefilesLibravatar netblue302018-03-31
| | | |
* | | | testingLibravatar netblue302018-03-31
|/ / /
* | | Merge pull request #1848 from jelford/cloud-providersLibravatar Vincent432018-03-31
|\ \ \ | | | | | | | | Add a section for cloud-providers to the default block-list
| * | | AWS and GCP store credentials in local directories as part of project setup.Libravatar James Elford2018-03-31
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | Configuration for cloud providers is sensitive information; it should be in the default block list. I didn't see profiles for gcloud or awscli, so haven't added any exclusions. boto and kubectl are not provider-specific, but also store credentials for whichever platforms they happen to be being used with.
* | | gimp fixupLibravatar smitsohu2018-03-30
| | |
* | | Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302018-03-30
|\ \ \
| * | | redirect knotes to kmail, some tweaksLibravatar smitsohu2018-03-30
| | | |
* | | | testingLibravatar netblue302018-03-30
|/ / /
* | | nodbus man pages, etc.Libravatar netblue302018-03-30
| | |
* | | enable/disable dbus handling in /etc/firejail/firejail.configLibravatar netblue302018-03-30
| | |
* | | spectre clang supportLibravatar netblue302018-03-30
| | |
* | | spectre support for clang compilerLibravatar netblue302018-03-30
| | |
* | | gnome-calculator fixupLibravatar smitsohu2018-03-30
| | |
* | | Merge pull request #1843 from smitsohu/nodbusLibravatar smitsohu2018-03-30
|\ \ \ | | | | | | | | recalibrate dbus access, deploy nodbus option
| * \ \ Merge branch 'master' into nodbusLibravatar smitsohu2018-03-30
| |\ \ \ | |/ / / |/| | |
* | | | Further improve private-bin in steamLibravatar Tad2018-03-30
| | | |
* | | | Add a disabled and extensive private-bin for SteamLibravatar Tad2018-03-29
| | | |
* | | | Add a profile for ncdu, enable private-etc in Steam again, and fixup ↵Libravatar Tad2018-03-28
| | | | | | | | | | | | | | | | gnome-recipes
* | | | various blacklist additionsLibravatar smitsohu2018-03-28
| | | |
| * | | comment apparmor, net where they interfere with dconf - #1843Libravatar smitsohu2018-03-30
| | | |
| * | | comment nodbus where it interferes with dconfLibravatar smitsohu2018-03-29
| | | | | | | | | | | | | | | | pending further discussion
| * | | recalibrate dbus access, deploy nodbus optionLibravatar smitsohu2018-03-28
|/ / / | | | | | | | | | | | | | | | | | | see #1822 and #1825. also systematically replaces 'blacklist /run/user/*/bus' with 'nodbus'. with contributions from @Fred-Barclay
* | | Enable nodbus for keepassx and keepassxc profiles.Libravatar Fred-Barclay2018-03-26
| | | | | | | | | | | | I've tested on keepassxc but should work for keepassx as well. Settings are not immutable.
* | | Spotify works with nodbus on ArchLibravatar Fred-Barclay2018-03-26
| | |
* | | Add nodbus to some profiles - part 1Libravatar Fred-Barclay2018-03-26
|/ /
* | rework akonadi integrationLibravatar smitsohu2018-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the usr.sbin.mysqld-akonadi apparmor profile, enforced by default in ubuntu and debian testing (and probably opensuse), doesn't play well with a number of firejail options. the reason for this is that once the no_new_privs bit is set, apparmor profile transitions are forbidden. enforcing our own apparmor policy instead is also no solution, because these programs don't even start without d-bus. relaxing the kmail profile was necessary so that kmail can fire up akonadi itself, just in case akonadi has not been started earlier already by another program. this is always an issue when kmail is the only installed akonadi client, but there may be more circumstances. for reasons outlined above this doesn't help debian and ubuntu (opensuse?) users though :-/ a brief summary of the seccomp exceptions: chroot is needed for qt webengine, io_prioset for the akonadi indexing agent, io_getevents, io_submit, io_setup are needed for mysqld. when akonadi has an sqlite3 backend, less exceptions to the seccomp filter are necessary, but mysqld is the default. in the future all kontact suite profiles (itm only kmail, knotes) should probably be redirections to akonadi_control, but the issues with apparmor make this somewhat impractical for now (options like 'protocol' couldn't go to akonadi_control.local any more, if current kmail redirected to there).
* | dbus.cLibravatar startx20172018-03-26
| |
* | --nodbus, first draft for #1825Libravatar startx20172018-03-26
| |
* | Add atril thumbnailer and previewer profilesLibravatar Fred-Barclay2018-03-25
| |
* | Add xplayer audio-preview and thumbnailer profilesLibravatar Fred-Barclay2018-03-25
| |
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-20 04:08:07 +0000