Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Merge pull request #1555 from SpotComms/upstream | 2017-09-18 | |
|\ | | | | | Upstream many profiles from various sources | ||
| * | Update firecfg | 2017-09-18 | |
| | | |||
| * | Update README.md | 2017-09-18 | |
| | | |||
| * | Misc fixes | 2017-09-18 | |
| | | | | | | | | Thanks to @Fred-Barclay, @smitsohu and @reinerh for a bunch of these | ||
| * | Update disable-programs.inc | 2017-09-18 | |
| | | |||
| * | Add an alias for Natron | 2017-09-18 | |
| | | |||
| * | Harden 10 profiles | 2017-09-18 | |
| | | |||
| * | Fixup 12 profiles | 2017-09-18 | |
| | | |||
| * | Harden 25 profiles | 2017-09-18 | |
| | | |||
| * | Fixup 36 profiles | 2017-09-18 | |
| | | |||
| * | Add 5 profiles | 2017-09-18 | |
| | | |||
| * | Add 31 profiles | 2017-09-18 | |
| | | |||
| * | Add a profile for TeamSpeak3 | 2017-09-18 | |
|/ | |||
* | Add a profile for xmr-stak-cpu | 2017-09-18 | |
| | | | | | | - Add list of new profiles to README.md - Update firecfg - Further restrict silentarmy | ||
* | Add a profile for clamdscan, clamdtop, and freshclam | 2017-09-18 | |
| | |||
* | Add a profile for ClamAV's clamscan | 2017-09-18 | |
| | |||
* | whitelist /var | 2017-09-18 | |
| | |||
* | Add a profile for Rocket.Chat | 2017-09-18 | |
| | |||
* | Merge branch 'master' of http://github.com/netblue30/firejail | 2017-09-18 | |
|\ | |||
| * | profiles: add profile for surf browser | 2017-09-18 | |
| | | |||
* | | whitelist /var | 2017-09-18 | |
|/ | |||
* | electron profile whitelisting | 2017-09-18 | |
| | |||
* | blacklist clipboard manager in disable-common.inc | 2017-09-18 | |
| | |||
* | merges | 2017-09-18 | |
| | |||
* | Merge pull request #1561 from soredake/steamfix | 2017-09-18 | |
|\ | | | | | fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profile | ||
| * | fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profile | 2017-09-18 | |
| | | | | | | | | | | | | steam.sh executes `/sbin/ldconfig -XNv 2> /dev/null` when STEAM_RUNTIME_PREFER_HOST_LIBRARIES is not zero and fails in some cases (see https://github.com/ValveSoftware/steam-for-linux/issues/4768) because of blacklisted /sbin and missing ld.so.conf{,.d} https://steamcommunity.com/groups/SteamClientBeta/announcements/detail/586991182161672256 | ||
* | | Merge pull request #1558 from jelford/ssh-agent-noshell | 2017-09-18 | |
|\ \ | |/ |/| | Set `shell none` for ssh-agent configuration | ||
| * | Set `shell none` for ssh-agent configuration | 2017-09-17 | |
| | | | | | | | | | | | | It's common to invoke ssh-agent in shell login config, so if firejail launches it through a shell, that can lead to an infinite loop | ||
* | | whitelist /var - Xubuntu fixes | 2017-09-17 | |
| | | |||
* | | whitelist /var: temporary fix for Xubuntu | 2017-09-17 | |
| | | |||
* | | whitelisting /var | 2017-09-17 | |
| | | |||
* | | README.md description | 2017-09-17 | |
| | | |||
* | | spelling | 2017-09-17 | |
| | | |||
* | | profile build tool | 2017-09-17 | |
|/ | |||
* | cleanup | 2017-09-16 | |
| | |||
* | fixed systemd-resolved integration - bug #1531 | 2017-09-16 | |
| | |||
* | --build | 2017-09-16 | |
| | |||
* | Merge pull request #1552 from SpotComms/mf | 2017-09-15 | |
|\ | | | | | Add a profile for Terasology | ||
| * | Add a profile for Terasology | 2017-09-15 | |
|/ | |||
* | Merge pull request #1551 from smitsohu/KDEapps | 2017-09-15 | |
|\ | | | | | little KDE app enhancements | ||
| * | little KDE app enhancements | 2017-09-15 | |
| | | |||
* | | fix dependency on /etc/firejail/firejail.config when starting on symbolic links | 2017-09-15 | |
|/ | |||
* | update whitelist-common.inc | 2017-09-15 | |
| | |||
* | merges | 2017-09-15 | |
| | |||
* | Merge pull request #1549 from smitsohu/patch-1 | 2017-09-15 | |
|\ | | | | | harden baloo, clementine | ||
| * | update seccomp filter | 2017-09-14 | |
| | | |||
| * | update seccomp filter, add no3d | 2017-09-14 | |
|/ | |||
* | Merge pull request #1548 from smitsohu/patch-1 | 2017-09-14 | |
|\ | | | | | goobox enhancements | ||
| * | goobox enhancements (permit metadata retrieval) | 2017-09-14 | |
|/ | | | 1) We should permit internet access, as Goobox retrieves metadata via cddb-slave2 2) We can safely enable private-dev after the introduction of nodvd | ||
* | --writable-run-user man page | 2017-09-14 | |
| |