aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* apparmor: allow writing to /proc/@{PID}/commLibravatar Vincent432019-07-14
| | | | | | This is needed by various electron apps, see: https://github.com/netblue30/firejail/issues/2538 https://github.com/netblue30/firejail/issues/2854
* homedirs: turn "informational error" into warningLibravatar smitsohu2019-07-14
|
* don't allow root directory as homeLibravatar smitsohu2019-07-14
|
* Merge pull request #2858 from veloute/sn-fixLibravatar veloute2019-07-13
|\ | | | | fix seccomp issues with standardnotes-desktop. see issue #2854
| * issues with electron-based apps. see issue #2854Libravatar veloute2019-07-13
|/
* update version tableLibravatar Reiner Herrmann2019-07-13
|
* uniformly mask /home in all private home optionsLibravatar smitsohu2019-07-12
|
* private-home: remove redundancyLibravatar smitsohu2019-07-12
|
* Merge pull request #2855 from veloute/galc-fixLibravatar rusty-snake2019-07-12
|\ | | | | ipc-namespace breaks galculator on archlinux
| * ipc-namespace breaks galculator on archlinuxLibravatar veloute2019-07-12
| |
* | rename some variables so they don't shadow others with same nameLibravatar Reiner Herrmann2019-07-11
| | | | | | | | via lgtm.com
* | fix minor issues from lgtm.comLibravatar Reiner Herrmann2019-07-11
| |
* | Merge pull request #2850 from disconnect3d/patch-1Libravatar Reiner Herrmann2019-07-11
|\ \ | | | | | | Update pid.c
| * | Update pid.cLibravatar Disconnect3d2019-07-10
| | | | | | | | | Remove redundant `child` variable in src/lib/pid.c
* | | Update libpostexecseccomp.c (#2851)Libravatar Disconnect3d2019-07-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | * Update libpostexecseccomp.c Remove `if (size != 0)` condition, which is always true as there is a `if (size <= 0)` condition before. Also note that if the `if (size <= 0)` condition wouldn't be there and `size` would be 0, there would have been an undefined behavior in due to division by zero in `(unsigned short) size / (unsigned short) sizeof(struct sock_filter);`. Found with LGTM: https://lgtm.com/projects/g/netblue30/firejail/snapshot/961c4ca00425b60a7bc8543460031a8ebf3d8aa6/files/src/libpostexecseccomp/libpostexecseccomp.c#x838c24f710410160:1
* | | Support media on other drives in youtube-dl.profileLibravatar glitsj162019-07-11
| | | | | | | | | Thanks to @SkewedZeppelin for catching this, see comments in https://github.com/netblue30/firejail/pull/2584.
* | | remove duplicate fclose/freeLibravatar Reiner Herrmann2019-07-10
| | |
* | | less.profile: make ${HOME} read-onlyLibravatar Vincent432019-07-10
|/ / | | | | less is usually used to view various text files including configs so blacklisting many of them in ${HOME} make it less(sic!) usable. We can make them read-only instead.
* | Add gdb-firejail.sh to contrib for easy debugging of firejail with gdb.Libravatar Glenn Washburn2019-07-09
| |
* | Sort private-bin in obs.profile (#2848)Libravatar glitsj162019-07-09
| |
* | Add redirects for mpg123 (#2847)Libravatar glitsj162019-07-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create conplay.profile * Create mpg123.bin.profile * Create mpg123-alsa.profile * Create mpg123-id3dump.profile * Create mpg123-jack.profile * Create mpg123-nas.profile * Create mpg123-openal.profile * Create mpg123-oss.profile * Create mpg123-portaudio.profile * Create mpg123-pulse.profile * Create mpg123-strip.profile * Create out123.profile * Add mpg123 redirects to fireconfig
* | Merge pull request #2844 from crass/fix-561-trace-appimageLibravatar netblue302019-07-09
|\ \ | | | | | | Fix issue #561. Refactor/Optimize code to get and use pid and process name.
| * | Fix issue #561. Refactor/Optimize code to get and use pid and process name.Libravatar Glenn Washburn2019-07-09
| | |
* | | Merge pull request #2843 from crass/fix-2842-extra-appimage-envvarsLibravatar netblue302019-07-09
|\ \ \ | | | | | | | | Add OWD and ARGV0 environment variables. Correctly create APPIMAGE envvar.
| * | | Add OWD and ARGV0 environment variables. Correctly create APPIMAGE envvar.Libravatar Glenn Washburn2019-07-09
| |/ /
* | | Merge pull request #2845 from smitsohu/homedir2Libravatar netblue302019-07-09
|\ \ \ | |/ / |/| | improve support for home directories outside /home
| * | main.c: define O_PATH (CentOS 6 fix)Libravatar smitsohu2019-07-09
| | |
| * | move to fd based homedir mountsLibravatar smitsohu2019-07-09
| | |
| * | add symlink resolution for home directoriesLibravatar smitsohu2019-07-09
| | |
* | | Fix #2726Libravatar Fred Barclay2019-07-08
| | | | | | | | | | | | private-bin was too restrictive and didn't allow desktop recording
* | | keep dconf database read-onlyLibravatar smitsohu2019-07-08
|/ /
* | more simplification of fs_check_chroot_dirLibravatar smitsohu2019-07-08
| |
* | Fix #2840Libravatar rusty-snake2019-07-08
| |
* | reduce redundancy in fs_check_chroot_dirLibravatar smitsohu2019-07-08
| |
* | misc cleanup (safe_fd function)Libravatar smitsohu2019-07-07
| |
* | relocate mountinfo functionality testLibravatar smitsohu2019-07-07
| |
* | Use __clone2 on ia64Libravatar Reiner Herrmann2019-07-07
| | | | | | | | | | clone has a different interfaces there, as the stack size needs to be known.
* | Add to comment on pip install in youtube-dl.profileLibravatar glitsj162019-07-07
| | | | | | Try to help users more explicitly when they have youtube installed under ${HOME}, see #2833.
* | Fix slow OSD in mpv.profileLibravatar glitsj162019-07-07
| | | | | | Fixes #2838.
* | Harden qpdfview.profile with `nodbus` (#2837)Libravatar Eduard Tolosa2019-07-07
| |
* | Fix #2834 (#2835)Libravatar Eduard Tolosa2019-07-07
| |
* | Add electron4 to allow it to launch on Arch Linux (#2832)Libravatar Nick Fox2019-07-06
| |
* | Add youtube-dl config handling (#2836)Libravatar glitsj162019-07-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add youtube-dl config to disable-programs.inc * Add config handling to youtube-dl * Add youtube-dl config handling to celluloid.profile * Add youtube-dl config handling to mpv.profile * Add youtube-dl config handling to smplayer.profile * Add youtube-dl config handling to mpsyt.profile
* | mpg123Libravatar startx20172019-07-06
| |
* | fix --timeoutLibravatar netblue302019-07-04
| |
* | Fix seccomp sorting in riot-desktopLibravatar glitsj162019-07-04
| |
* | man fix (appimage, #2807)Libravatar netblue302019-07-04
| |
* | fix #2820 - adjustable file copy limit; export FIREJAIL_DEBUG into sboxLibravatar netblue302019-07-04
| |
* | Merge pull request #2825 from Bandie/masterLibravatar rusty-snake2019-07-04
|\ \ | | | | | | Fixes #2821, riot-desktop
| * | Fixes #2821, riot-desktopLibravatar Bandie2019-07-03
| |/