aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* fs_whitelist: reduce number of loop iterationsLibravatar smitsohu2018-10-01
|
* tiny memleaksLibravatar smitsohu2018-10-01
|
* regression: fix whitelisting of symlinks to other home dirs, small improvementsLibravatar smitsohu2018-10-01
| | | | | | | | handling of home dir paths is more explicit and rigorous now, which should make it easier to audit. Also this should come handy if one day fs_private() supports home directories outside /home rf. #2123
* cleanupLibravatar smitsohu2018-09-30
|
* Merge pull request #2127 from veloute/vimfixLibravatar Fred Barclay2018-09-29
|\ | | | | fixed vim missing from firecfg.config
| * fixed vim missing from firecfg.configLibravatar veloute2018-09-30
| |
* | Use list for checking multiple possible valuesLibravatar Fred-Barclay2018-09-28
| |
* | fixed fs-print testLibravatar startx20172018-09-28
|/
* manpage cleanupLibravatar netblue302018-09-26
|
* Fixes #2122Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-09-25
|
* manpages: fix apparmor profile pathLibravatar Vincent432018-09-22
|
* manpages: fix alignmentLibravatar Vincent432018-09-22
|
* manpages: update AppArmor infoLibravatar Vincent432018-09-22
|
* Add profile for spectre-meltdown-checkerLibravatar Tad2018-09-22
| | | | Will need to support allow-debuggers in profiles before it can be enabled in firecfg
* tests: skip more tests if capabilities/seccomp of host differsLibravatar Reiner Herrmann2018-09-21
|
* tests: skip tests checking for /dev/kmsg which might not be availableLibravatar Reiner Herrmann2018-09-21
|
* Fix check for nobody userLibravatar Reiner Herrmann2018-09-21
| | | | Fixes #2117
* --version 0.9.57Libravatar netblue302018-09-19
|
* Misc profile hardeningLibravatar Tad2018-09-19
|
* 0.9.56 released0.9.56Libravatar netblue302018-09-18
|
* error stringsLibravatar smitsohu2018-09-17
|
* fix --bandwidth, --cpu.printLibravatar netblue302018-09-15
|
* add start-tor-browser.desktop profileLibravatar netblue302018-09-15
|
* add start-tor-browser.desktop profileLibravatar netblue302018-09-15
|
* MergesLibravatar Tad2018-09-14
|
* Merge pull request #2115 from flacks/profiles/gnome-musicLibravatar SkewedZeppelin2018-09-15
|\ | | | | Amend gnome-music profile
| * Amend gnome-music profileLibravatar Jean Lucas2018-09-14
|/ | | | | | | - At least gnome-music 3.28.2 requires 'env' - Add 'gio-launch-desktop' and 'yelp' so launching the "Help" menu doesn't crash the application - Enabling the disabled private-etc tested to be working
* exit if execl fails (arg_audit)Libravatar smitsohu2018-09-11
|
* add switch to disable/enable private-cacheLibravatar smitsohu2018-09-10
|
* small rlimits adjustmentLibravatar smitsohu2018-09-10
|
* remove seccomp warningLibravatar netblue302018-09-09
|
* Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302018-09-09
|\
| * set rlimits at later timepoint during sandbox setupLibravatar smitsohu2018-09-09
| |
* | support for firetunnel utilityLibravatar netblue302018-09-09
|/
* remove blacklist /usr/lib/llvm* in dusable-devel.inc - problems with ↵Libravatar netblue302018-09-07
| | | | hardware acceleration on Radeon cards, see issue #2106
* Disable tracelog in Tor Browser profiles, see #1930, fixes #2108Libravatar Tad2018-09-06
|
* disallow overriding of global rlimits, tiny improvementsLibravatar smitsohu2018-09-06
|
* cleanupLibravatar netblue302018-09-05
|
* improve safe_fd() function for better readability and auditabilityLibravatar smitsohu2018-09-05
|
* fix --shellLibravatar netblue302018-09-03
|
* adding fluxbox, blackbox, awesome, i3 profilesLibravatar netblue302018-09-03
|
* minor cleanupLibravatar netblue302018-09-03
|
* mergesLibravatar netblue302018-09-03
|
* Merge pull request #2104 from matu3ba/profilesLibravatar netblue302018-09-03
|\ | | | | hardening evince, dbus not needed
| * hardening evince, dbus not neededLibravatar janph2018-09-01
| |
* | chroot problem (Debian)Libravatar netblue302018-09-03
| |
* | MergesLibravatar Tad2018-09-03
| |
* | created jdownloader profile (#2105)Libravatar veloute2018-09-03
| | | | | | | | | | | | | | | | * created jdownloader profile * fixed some issues * few more changes
* | additional restrictions for write-permissions on chrootLibravatar smitsohu2018-09-02
| |
* | chroot problem: default profile not configured by defaultLibravatar netblue302018-09-01
|/