aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Add descriptions to profiles, pulled from Arch LinuxLibravatar Tad2018-08-13
|
* Add descriptions to profiles, pulled from Ubuntu 18.04Libravatar Tad2018-08-13
|
* Add profile for electrum0.9.56-rc1Libravatar Tad2018-08-13
| | | | + minor nitpicks to beaker.profile
* MergesLibravatar Fred-Barclay2018-08-12
|
* Merge pull request #2079 from flacks/profiles/beakerLibravatar Fred Barclay2018-08-12
|\ | | | | Add Beaker browser
| * Add Beaker browserLibravatar Jean Lucas2018-08-12
|/
* various small improvements, fixes, nitpicksLibravatar smitsohu2018-08-11
|
* clear all warnings from cppcheck static code analysisLibravatar smitsohu2018-08-11
| | | | obtained with: cppcheck --enable=warning --force --inconclusive --quiet ~/firejail/src
* release 0.9.56~rc1 testingLibravatar netblue302018-08-11
|
* xdg macro: silence resolve messages unless arg_debugLibravatar Tad2018-08-10
|
* Replace all possible HTTP links with HTTPSLibravatar Tad2018-08-08
|
* Minor private-etc cleanupLibravatar Tad2018-08-08
| | | | Command: grep "private-etc none," -Ril .
* Stop breaking PKI with private-etcLibravatar Tad2018-08-08
| | | | | Command: grep "crypto-policies" -iL $(grep "private-etc" -il $(grep "inet,inet6" . -Rl)) + fixes for #2077
* MergesLibravatar Tad2018-08-08
| | | | | + a fix for Totem + and a bit missed from 3c2a7e4c91aa030218b5ad7fa6291d16f1d51b53
* Merge pull request #2076 from Freso/additional-vim-profilesLibravatar SkewedZeppelin2018-08-08
|\ | | | | Add various `vim` related profiles
| * Add various `vim` related profilesLibravatar Frederik “Freso” S. Olesen2018-08-08
|/
* xdg macro testingLibravatar netblue302018-08-07
|
* xdg support: split xdg whitelist code in a different moduleLibravatar netblue302018-08-07
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar startx20172018-08-04
|\
| * indentation fixLibravatar smitsohu2018-08-04
| |
| * automatically trim trailing slashes for whitelisting, fix mountinfo testLibravatar smitsohu2018-08-04
| | | | | | | | | | | | Command-line autocompletion adds a trailing slash to directories, which leads to a usability problem for whitelisting. So before doing any path validation it is attempted to trim trailing slashes and dots.
* | --ignore cleanupLibravatar startx20172018-08-04
|/
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-08-02
|\
| * Check tmp1 and tmp2 for NULL before passing to parse_nowhitelist (thanks ↵Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-08-02
| | | | | | | | @smitsohu!)
* | port whitelist path creation to "at" family of functionsLibravatar smitsohu2018-08-02
| |
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-08-01
|\|
| * Fixed Documents handling (consume trailing /) and hide XDG warnings unless ↵Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-31
| | | | | | | | --debug is enabled.
| * Check to see if expand_home is called as root and switch to user (and ↵Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-31
| | | | | | | | restore root at the end)
| * Sound fixesLibravatar Tad2018-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Adds machine-id to all profiles with 'private-etc *pulse*' - This fixes sound under many profiles - This is related to #2037, except this adds etc machine-id not spoofed machine-id - Spoofed machine-id seems to break pulseaudio on some systems - We already do this in profiles like firefox-common (see the note in it) - pulseaudio's enable-shm set to yes or no doesn't fix this issue on systems where it occurs - We can revert this in the future if we find a fix - Command used: grep -e music -e videos -e audio -e pulse -e asound -il $(grep "machine-id" -iL $(grep "private-etc" . -Rl))
| * Add XDG variable support to blacklist and read-only.Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-31
| |
* | enhance safe_fd function so it can digest arbitrary pathnamesLibravatar smitsohu2018-08-01
|/
* MergesLibravatar smitsohu2018-07-30
|
* Disable private-etc for xviewer.profileLibravatar Tad2018-07-29
| | | | - Breaks xviewer under Fedora 28 Cinnamon
* line counterLibravatar netblue302018-07-27
|
* removed compile time --enable-network=restricted, --net=none allowed even if ↵Libravatar startx20172018-07-26
| | | | networking was disabled at compile time or at run time, fixed issue #2061
* Document #1945Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-25
|
* Document that nodbus breaks Ubuntu titlebar menu (#1942)Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-25
|
* MergesLibravatar Fred-Barclay2018-07-25
|
* created flameshot profile (#2063)Libravatar veloute2018-07-25
| | | | | | | | * created flameshot profile * made requested changes * private-etc fixed
* fix --net=wlanLibravatar netblue302018-07-25
|
* Add profile for patch and shellcheckLibravatar Tad2018-07-24
|
* Few disable-xdg.inc fixesLibravatar Tad2018-07-24
|
* Add disable-xdg.inc to ~15 profilesLibravatar Tad2018-07-24
|
* Add disable-xdg.inc to ~100 profilesLibravatar Tad2018-07-24
|
* Merge pull request #2060 from SkewedZeppelin/disable-xdgLibravatar netblue302018-07-24
|\ | | | | WIP: Add new disable-xdg.inc
| * Initial adding of disable-xdg.incLibravatar Tad2018-07-24
| |
| * Add disable-xdg.incLibravatar Tad2018-07-24
|/
* Add ${MUSIC}, ${VIDEOS}, ${PICTURES}, ${DOCUMENTS}, and ${DESKTOP} (Fixes #259)Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-23
|
* Fix #1638Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-23
|
* Merge pull request #2058 from ltworf/patch-2Libravatar smitsohu2018-07-23
|\ | | | | Add netlink protocol