aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* pulseaudio: use env variable fallback in more casesLibravatar smitsohu2018-12-11
| | | | | | setting the PULSE_CLIENTCONFIG environment variable to the unmounted file is a safe fallback, use it in more cases when mounting is considered not an option
* add create_empty_dir_as_user function, refactorLibravatar smitsohu2018-12-11
|
* xorg: check if Xauthority mount point was createdLibravatar smitsohu2018-12-11
| | | | and print more meaningful error message
* profile enhancements: blacklist kdesu daemon socket, rework ↵Libravatar smitsohu2018-12-11
| | | | c083a7b737050c532977b46fac6400f1dbc24ff6
* Merge pull request #2294 from rusty-snake/add-thunderbird-waylandLibravatar SkewedZeppelin2018-12-10
|\ | | | | Add a profile for thunderbird-wayland
| * Add a profile for thunderbird-waylandLibravatar rusty-snake2018-12-10
|/
* Fixes #1951Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-12-09
|
* update dolphin profileLibravatar smitsohu2018-12-07
| | | services previously started by kdeinit now run inside the sandbox due to KDE_FORK_SLAVES being set
* improve sandboxing of KDE apps: set KDE_FORK_SLAVES, blacklist slave-socketsLibravatar smitsohu2018-12-07
| | | | | | | | | | setting the KDE_FORK_SLAVES environment variable removes all inconsistencies that arise from slaves running outside the sandbox or in a different sandbox; it also makes it slightly more difficult to abuse KIO in general and helps to mitigate security problems due to thumbnailing, which now always happens inside the same sandbox. The trade-off is more concurrently running slave processes. closes #2285
* add HAS_NODBUS conditional, ${RUNUSER} makroLibravatar smitsohu2018-12-07
|
* mergesLibravatar Tad2018-11-29
|
* Merge pull request #2281 from pirate486743186/mpsyt-profileLibravatar SkewedZeppelin2018-11-29
|\ | | | | restricting more, HOME and tmp in mpsyt.profile
| * restricting more, HOME and tmp in mpsyt.profileLibravatar pirate4867431862018-11-28
|/
* Merge pull request #2276 from smitsohu/tmpfsLibravatar netblue302018-11-28
|\ | | | | refactor private-cache and tmpfs
| * refactor private-cache and tmpfsLibravatar smitsohu2018-11-26
| | | | | | | | | | | | has the immediate benefit that the result of combining --noexec and --tmpfs does not depend on the sequence of the options
* | mergesLibravatar Tad2018-11-27
| |
* | Merge pull request #2280 from pirate486743186/patch-2Libravatar SkewedZeppelin2018-11-27
|\ \ | | | | | | new profile mpsyt.profile
| * | new profile mpsyt.profileLibravatar pirate4867431862018-11-28
| | |
* | | Merge pull request #2279 from pirate486743186/patch-1Libravatar SkewedZeppelin2018-11-27
|\ \ \ | |/ / |/| | allowing youtube-dl and python in gnome-mpv
| * | allowing youtube-dl and python in gnome-mpvLibravatar pirate4867431862018-11-27
|/ /
* | Merge pull request #2275 from pirate486743186/python-localLibravatar SkewedZeppelin2018-11-27
|\ \ | | | | | | allowing local python* in mpv and youtube-dl #2262
| * | allowing local python* in mpv and youtube-dl #2262Libravatar pirate4867431862018-11-26
| |/
* | mergesLibravatar Tad2018-11-27
| |
* | Merge pull request #2278 from rusty-snake/patch-1Libravatar SkewedZeppelin2018-11-27
|\ \ | | | | | | Update kdenlive.profile
| * | Update kdenlive.profileLibravatar rusty-snake2018-11-27
|/ / | | | | Add mlt-melt to private-bin, this is needed on Fedora-systems.
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-11-27
|\ \
| * \ Merge pull request #2277 from glitsj16/ocenaudioLibravatar glitsj162018-11-27
| |\ \ | | |/ | |/| New profile ocenaudio
| | * Add ocenaudio to firecfg.configLibravatar glitsj162018-11-27
| | |
| | * Create ocenaudio.profileLibravatar glitsj162018-11-27
| | |
| | * Add ocenaudio to disable-programs.incLibravatar glitsj162018-11-27
| |/
* | firecfg: small tweaks, fixes, man page updateLibravatar smitsohu2018-11-27
| |
* | man page typoLibravatar smitsohu2018-11-27
|/
* Merge pull request #2272 from veloute/firecfgLibravatar SkewedZeppelin2018-11-24
|\ | | | | removing vim and ranger from firecfg
| * removed ranger from firecfg.configLibravatar veloute2018-11-24
| |
| * removed vim from firecfg.configLibravatar veloute2018-11-24
|/
* Merge pull request #2271 from glitsj16/transmissionLibravatar glitsj162018-11-24
|\ | | | | Add quiet option to transmission-cli profile
| * Add quiet option to transmission-cli profileLibravatar glitsj162018-11-24
|/
* Aisleriot fixes + add profile for FeedReaderLibravatar Tad2018-11-22
|
* playonlinux.profile: allow pythonLibravatar Vincent432018-11-22
| | | It won't work without it.
* Merge pull request #2268 from glitsj16/easystrokeLibravatar glitsj162018-11-22
|\ | | | | Fix easystroke.profile
| * Update easystroke.profileLibravatar glitsj162018-11-22
|/
* Merge pull request #2266 from glitsj16/aliasLibravatar glitsj162018-11-20
|\ | | | | Consistency fixes for alias profiles
| * Update thunderbird-beta.profileLibravatar glitsj162018-11-20
| |
| * Update studio.sh.profileLibravatar glitsj162018-11-20
| |
| * Update steam-native.profileLibravatar glitsj162018-11-20
| |
| * Update clamscan.profileLibravatar glitsj162018-11-20
| |
| * Update clamdtop.profileLibravatar glitsj162018-11-20
| |
| * Update clamdscan.profileLibravatar glitsj162018-11-20
| |
| * Update chromium-browser.profileLibravatar glitsj162018-11-20
| |
| * Update brave-browser.profileLibravatar glitsj162018-11-20
|/