Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | x11 fixes | 2016-02-25 | |
| | |||
* | x11 work | 2016-02-24 | |
| | |||
* | x11 work | 2016-02-24 | |
| | |||
* | allow --interface only to root user for --enable-network=restricted | 2016-02-24 | |
| | |||
* | ./configure --enable-network=restricted | 2016-02-24 | |
| | |||
* | x11 work | 2016-02-24 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2016-02-24 | |
|\ | |||
| * | Merge pull request #319 from yumkam/network-restricted | 2016-02-24 | |
| |\ | | | | | | | Add compile-time option to restrict --net= to root only | ||
| | * | Add compile-time option to restrict --net= to root only | 2016-02-23 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ./configure --enable-network=restricted allows only --net=none to non-root users. Other variants delegate too much power to non-root users and dangerous (it completely bypasses system-wide firewall and routing, it allows introducing arbitrary-chosen MAC and IP interfaces on LAN [disregarding DHCP policy], etc). Root already had power to twiddle with anything, so no sense to restrain her, and --net=none looks safe enough (and still useful) for ordinary users. | ||
| * | | Merge pull request #317 from yumkam/fixup-ipv6-doc | 2016-02-24 | |
| |\ \ | | |/ | |/| | man/firejail.txt: note you don't need --ip6= with SLAAC | ||
| | * | man/firejail.txt: note you don't need --ip6= with SLAAC | 2016-02-23 | |
| |/ | |||
* / | x11 work | 2016-02-23 | |
|/ | |||
* | x11 work | 2016-02-23 | |
| | |||
* | Merge pull request #315 from vn971/master | 2016-02-22 | |
|\ | | | | | edit wesnoth profile (small fix) | ||
| * | edit wesnoth profile | 2016-02-21 | |
|/ | | | | | | * allow X11 communcation via /tmp (just for completeness sake) * fix typo | ||
* | small fixes | 2016-02-21 | |
| | |||
* | testing | 2016-02-21 | |
| | |||
* | moved .config/dconf handling from epiphany and polari profiles into ↵ | 2016-02-21 | |
| | | | | whitelist-common.inc | ||
* | Merge pull request #314 from jrabe/master | 2016-02-21 | |
|\ | | | | | Epiphany: Fix settings being saved but not loaded | ||
| * | Epiphany: Fix settings being saved but not loaded | 2016-02-21 | |
|/ | |||
* | wesnoth profile | 2016-02-20 | |
| | |||
* | Merge pull request #304 from vn971/master | 2016-02-20 | |
|\ | | | | | profile for wesnoth | ||
| * | edit wesnoth profile: add .cache directory | 2016-02-19 | |
| | | | | | | | | it is not mandatory, but may speed-up multiple invocations of wesnoth | ||
| * | profile for wesnoth | 2016-02-19 | |
| | | | | | | | | | | | | | | | | The profile is a _white_list (in contrast to blacklist). All standard game actions work: create-save-load games, multiplayer (online) game, downloading addons and using them. | ||
* | | testing | 2016-02-20 | |
| | | |||
* | | testing | 2016-02-20 | |
| | | |||
* | | testing | 2016-02-20 | |
| | | |||
* | | testing | 2016-02-20 | |
| | | |||
* | | fixes | 2016-02-20 | |
| | | |||
* | | testing | 2016-02-20 | |
| | | |||
* | | euid switching | 2016-02-19 | |
| | | |||
* | | euid switching | 2016-02-19 | |
| | | |||
* | | moved sandbox name to /run/firejail/name/<PID> | 2016-02-19 | |
| | | |||
* | | euid switching | 2016-02-18 | |
|/ | |||
* | added mkdir in all whitelisted profiles | 2016-02-18 | |
| | |||
* | Merge pull request #302 from jrabe/master | 2016-02-18 | |
|\ | | | | | Add Polari profile | ||
| * | Add Polari profile | 2016-02-17 | |
| | | |||
* | | mkdir support in profile files | 2016-02-17 | |
|/ | |||
* | cherrytree profile | 2016-02-16 | |
| | |||
* | Merge pull request #300 from mahdi1234/master | 2016-02-16 | |
|\ | | | | | Adding cherrytree profile | ||
| * | Adding cherrytree profile | 2016-02-16 | |
| | | | | | | http://www.giuspen.com/cherrytree/ | ||
* | | merged epiphany browser profile | 2016-02-16 | |
| | | |||
* | | centos7 fixes; support for building rpm packages | 2016-02-16 | |
| | | |||
* | | Merge pull request #297 from jgriffiths/rpmfixes | 2016-02-16 | |
|\ \ | | | | | | | RPM build fixes | ||
| * | | make clean now removes rpms | 2016-02-16 | |
| | | | |||
| * | | Remove old-mkrpm.sh | 2016-02-16 | |
| | | | |||
| * | | 'make rpms' now makes the rpm files | 2016-02-16 | |
| | | | |||
| * | | Fix mkrpm.sh | 2016-02-16 | |
| | | | |||
| * | | Update spec file | 2016-02-16 | |
| | | | |||
* | | | fix path | 2016-02-15 | |
|/ / |