Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | homedirs: turn "informational error" into warning | 2019-07-14 | |
| | |||
* | don't allow root directory as home | 2019-07-14 | |
| | |||
* | Merge pull request #2858 from veloute/sn-fix | 2019-07-13 | |
|\ | | | | | fix seccomp issues with standardnotes-desktop. see issue #2854 | ||
| * | issues with electron-based apps. see issue #2854 | 2019-07-13 | |
|/ | |||
* | update version table | 2019-07-13 | |
| | |||
* | uniformly mask /home in all private home options | 2019-07-12 | |
| | |||
* | private-home: remove redundancy | 2019-07-12 | |
| | |||
* | Merge pull request #2855 from veloute/galc-fix | 2019-07-12 | |
|\ | | | | | ipc-namespace breaks galculator on archlinux | ||
| * | ipc-namespace breaks galculator on archlinux | 2019-07-12 | |
| | | |||
* | | rename some variables so they don't shadow others with same name | 2019-07-11 | |
| | | | | | | | | via lgtm.com | ||
* | | fix minor issues from lgtm.com | 2019-07-11 | |
| | | |||
* | | Merge pull request #2850 from disconnect3d/patch-1 | 2019-07-11 | |
|\ \ | | | | | | | Update pid.c | ||
| * | | Update pid.c | 2019-07-10 | |
| | | | | | | | | | Remove redundant `child` variable in src/lib/pid.c | ||
* | | | Update libpostexecseccomp.c (#2851) | 2019-07-11 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update libpostexecseccomp.c Remove `if (size != 0)` condition, which is always true as there is a `if (size <= 0)` condition before. Also note that if the `if (size <= 0)` condition wouldn't be there and `size` would be 0, there would have been an undefined behavior in due to division by zero in `(unsigned short) size / (unsigned short) sizeof(struct sock_filter);`. Found with LGTM: https://lgtm.com/projects/g/netblue30/firejail/snapshot/961c4ca00425b60a7bc8543460031a8ebf3d8aa6/files/src/libpostexecseccomp/libpostexecseccomp.c#x838c24f710410160:1 | ||
* | | | Support media on other drives in youtube-dl.profile | 2019-07-11 | |
| | | | | | | | | | Thanks to @SkewedZeppelin for catching this, see comments in https://github.com/netblue30/firejail/pull/2584. | ||
* | | | remove duplicate fclose/free | 2019-07-10 | |
| | | | |||
* | | | less.profile: make ${HOME} read-only | 2019-07-10 | |
|/ / | | | | | less is usually used to view various text files including configs so blacklisting many of them in ${HOME} make it less(sic!) usable. We can make them read-only instead. | ||
* | | Add gdb-firejail.sh to contrib for easy debugging of firejail with gdb. | 2019-07-09 | |
| | | |||
* | | Sort private-bin in obs.profile (#2848) | 2019-07-09 | |
| | | |||
* | | Add redirects for mpg123 (#2847) | 2019-07-09 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create conplay.profile * Create mpg123.bin.profile * Create mpg123-alsa.profile * Create mpg123-id3dump.profile * Create mpg123-jack.profile * Create mpg123-nas.profile * Create mpg123-openal.profile * Create mpg123-oss.profile * Create mpg123-portaudio.profile * Create mpg123-pulse.profile * Create mpg123-strip.profile * Create out123.profile * Add mpg123 redirects to fireconfig | ||
* | | Merge pull request #2844 from crass/fix-561-trace-appimage | 2019-07-09 | |
|\ \ | | | | | | | Fix issue #561. Refactor/Optimize code to get and use pid and process name. | ||
| * | | Fix issue #561. Refactor/Optimize code to get and use pid and process name. | 2019-07-09 | |
| | | | |||
* | | | Merge pull request #2843 from crass/fix-2842-extra-appimage-envvars | 2019-07-09 | |
|\ \ \ | | | | | | | | | Add OWD and ARGV0 environment variables. Correctly create APPIMAGE envvar. | ||
| * | | | Add OWD and ARGV0 environment variables. Correctly create APPIMAGE envvar. | 2019-07-09 | |
| |/ / | |||
* | | | Merge pull request #2845 from smitsohu/homedir2 | 2019-07-09 | |
|\ \ \ | |/ / |/| | | improve support for home directories outside /home | ||
| * | | main.c: define O_PATH (CentOS 6 fix) | 2019-07-09 | |
| | | | |||
| * | | move to fd based homedir mounts | 2019-07-09 | |
| | | | |||
| * | | add symlink resolution for home directories | 2019-07-09 | |
| | | | |||
* | | | Fix #2726 | 2019-07-08 | |
| | | | | | | | | | | | | private-bin was too restrictive and didn't allow desktop recording | ||
* | | | keep dconf database read-only | 2019-07-08 | |
|/ / | |||
* | | more simplification of fs_check_chroot_dir | 2019-07-08 | |
| | | |||
* | | Fix #2840 | 2019-07-08 | |
| | | |||
* | | reduce redundancy in fs_check_chroot_dir | 2019-07-08 | |
| | | |||
* | | misc cleanup (safe_fd function) | 2019-07-07 | |
| | | |||
* | | relocate mountinfo functionality test | 2019-07-07 | |
| | | |||
* | | Use __clone2 on ia64 | 2019-07-07 | |
| | | | | | | | | | | clone has a different interfaces there, as the stack size needs to be known. | ||
* | | Add to comment on pip install in youtube-dl.profile | 2019-07-07 | |
| | | | | | | Try to help users more explicitly when they have youtube installed under ${HOME}, see #2833. | ||
* | | Fix slow OSD in mpv.profile | 2019-07-07 | |
| | | | | | | Fixes #2838. | ||
* | | Harden qpdfview.profile with `nodbus` (#2837) | 2019-07-07 | |
| | | |||
* | | Fix #2834 (#2835) | 2019-07-07 | |
| | | |||
* | | Add electron4 to allow it to launch on Arch Linux (#2832) | 2019-07-06 | |
| | | |||
* | | Add youtube-dl config handling (#2836) | 2019-07-06 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add youtube-dl config to disable-programs.inc * Add config handling to youtube-dl * Add youtube-dl config handling to celluloid.profile * Add youtube-dl config handling to mpv.profile * Add youtube-dl config handling to smplayer.profile * Add youtube-dl config handling to mpsyt.profile | ||
* | | mpg123 | 2019-07-06 | |
| | | |||
* | | fix --timeout | 2019-07-04 | |
| | | |||
* | | Fix seccomp sorting in riot-desktop | 2019-07-04 | |
| | | |||
* | | man fix (appimage, #2807) | 2019-07-04 | |
| | | |||
* | | fix #2820 - adjustable file copy limit; export FIREJAIL_DEBUG into sbox | 2019-07-04 | |
| | | |||
* | | Merge pull request #2825 from Bandie/master | 2019-07-04 | |
|\ \ | | | | | | | Fixes #2821, riot-desktop | ||
| * | | Fixes #2821, riot-desktop | 2019-07-03 | |
| |/ | |||
* | | Merge pull request #2827 from Edu4rdSHL/patch-1 | 2019-07-03 | |
|\ \ | |/ |/| | Fix #2826 |