aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* blacklist kcmshell cacheLibravatar smitsohu2019-07-01
|
* Fixes (#2816)Libravatar glitsj162019-07-01
| | | | | | | | | | | | | | | | | | * Unbreak gconf-editor * Add x11 none to curl.profile * Add x11 none to wget.profile * Add x11 none to dnscrypt-proxy.profile * Add tracelog to ssh-agent.profile * Add x11 none to aria2c.profile * Add x11 none to arch-audit.profile * Add x11 none to archaudit-report.profile
* Update wording in templates (#2815)Libravatar glitsj162019-06-30
| | | | | | | | * Change wording in redirect_alias-profile.template * Change wording in profile.template * Update wording in redirect_alias-profile.template
* Change include/redirect logic in autokey profiles (#2814)Libravatar glitsj162019-06-30
| | | | | | | | | | | | * Change redirect logic * Change redirect logic * Change redirect logic * Change redirect logic * Change redirect logic
* thunderbird-beta: use private-opt instead of whitelistLibravatar rusty-snake2019-06-30
|
* add profile for zealLibravatar rusty-snake2019-06-30
|
* Fixup b1aff3395c77da467b7ba5e8fb8dabc33c37f8c6Libravatar Tad2019-06-30
| | | | https://github.com/netblue30/firejail/commit/b1aff3395c77da467b7ba5e8fb8dabc33c37f8c6#commitcomment-34131283
* Update profile templatesLibravatar rusty-snake2019-06-30
|
* Fix steam.profileLibravatar rusty-snake2019-06-30
|
* Add Fedora install instructionsLibravatar Fred Barclay2019-06-29
|
* typoLibravatar Fred Barclay2019-06-29
|
* free variable in error caseLibravatar Reiner Herrmann2019-06-29
|
* use strcat instead of strncat as using strlen has no benefitLibravatar Reiner Herrmann2019-06-29
| | | | Fixes #2801
* fix option skipping caused by noblacklistLibravatar smitsohu2019-06-29
| | | | closes #1235
* add allusers to file manager profilesLibravatar smitsohu2019-06-29
|
* harden bsdtar profile (net none, x11 none)Libravatar smitsohu2019-06-29
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2019-06-28
|\
| * Add fonts to private-etc in udiskie profileLibravatar Jose Riha2019-06-28
| | | | | | | | This prevents from seeing Fontconfig error in udiskie output.
| * Streamline redirect profiles (follow-up) (#2803)Libravatar glitsj162019-06-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Streamline redirect profiles (2) * Streamline redirect profiles (2) * Streamline redirect profiles (2) * Streamline redirect profiles (2) * Streamline redirect profiles (2) * Streamline redirect profiles (2) * Streamline redirect profiles (2) * Streamline redirect profiles (2) * Streamline redirect profiles (3) * Streamline redirect profiles (3) * Streamline redirect profiles (3) * Streamline redirect profiles (3) * Streamline redirect profiles (3) * Streamline redirect profiles (3) * Streamline redirect profiles (3)
| * Streamline redirect profiles (#2802)Libravatar glitsj162019-06-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirct profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profile * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles
| * Fixup 1cc468607637da1144b2d75be25dea348010c5d5Libravatar Tad2019-06-27
| |
| * profiles: add two aliases for existing gamesLibravatar Tad2019-06-27
| |
| * Fix private-bin order in jerryLibravatar glitsj162019-06-27
| |
| * Fix placing of jerryLibravatar glitsj162019-06-27
| |
| * Add profile for jerry chessLibravatar Fred Barclay2019-06-26
| |
| * Hardening a few profiles (#2800)Libravatar glitsj162019-06-26
| | | | | | | | | | | | | | | | | | | | * Harden curl.profile * Harden dnscrypt-proxy.profile * Harden unbound.profile * Harden unbound.profile
| * whitespace fixLibravatar rusty-snake2019-06-26
| |
| * testing for -fstack-clash-protection and -fstack-protector-strong compile flagsLibravatar netblue302019-06-26
| |
| * Silence xauth output in src/firejail/x11.c (#2796)Libravatar glitsj162019-06-26
| | | | | | | | | | | | | | | | | | | | * Fix typo's and install instructions for Arch * Try to silence xauth output Fixes https://github.com/netblue30/firejail/issues/2787. * Conditionally silence xauth output in x11 options
| * docs update: pkg-config package required on Debian/Ubuntu when running ↵Libravatar netblue302019-06-25
| | | | | | | | ./configure --apparmor
| * Tighten SSH with nodbus (#2789)Libravatar glitsj162019-06-24
| | | | | | | | | | | | * nodbus for ssh-agent * nodbus for ssh.profile
| * Improve profile PRs (Related to #2739) (#2784)Libravatar rusty-snake2019-06-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add contrib/sort.py and .github/pull_request_temp… * Add usage to sort.py * Install sort.py if contrib-install is set * sort.py: 0644 -> 0755 * Update sort.py * Update pull_request_template.md * Remove checkboxes from PR-Template * Update sort.py * Add examples to sort.py * Update pull_request_template.md Fix path to sort.py, it depend on the distro. * Update pull_request_template.md * Update pull_request_template.md add hint about template
| * disable firetunnel at config time (#2793)Libravatar netblue302019-06-24
| |
* | simplify octal esc conversion, minor adjustmentsLibravatar smitsohu2019-06-26
|/
* run cppcheck in gitlab-ciLibravatar Reiner Herrmann2019-06-21
|
* enable additional cppchecks and fix a warningLibravatar Reiner Herrmann2019-06-21
|
* fix indentationLibravatar Reiner Herrmann2019-06-21
|
* extend gitlab-ci configuration to run Debian CI testsLibravatar Reiner Herrmann2019-06-21
|
* fail build if any step in the script failsLibravatar Reiner Herrmann2019-06-21
|
* add pkg-config build dependency to gitlab-ci configLibravatar Reiner Herrmann2019-06-21
|
* use pkg-config macro to locate apparmor and flagsLibravatar Reiner Herrmann2019-06-21
|
* use AX_CHECK_COMPILE_FLAG to check for spectre flagsLibravatar Reiner Herrmann2019-06-21
| | | | Fixes #2661
* import ax_check_compile_flag macro from autoconf-archiveLibravatar Reiner Herrmann2019-06-21
|
* reduce redundancy in pathsLibravatar Reiner Herrmann2019-06-21
|
* Arch Linux specific changes (#2788)Libravatar glitsj162019-06-20
| | | | | | | | | | | | * Arch Linux specific addition to gzip.profile * Arch Linux specifics for tar.profile * Arch Linux specifics for gzip.profile * Minor re-ordering and wording edits for makepkg.profile * Spacing fix for cower.profile
* Merge pull request #2771 from smitsohu/homedir2Libravatar netblue302019-06-20
|\ | | | | mount new proc filesystem earlier
| * avoid running without procfs describing the pid namespaceLibravatar smitsohu2019-06-14
| |
* | make syscalls.sh executableLibravatar rusty-snake2019-06-20
| |
* | Improve profile.templateLibravatar rusty-snake2019-06-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * uncomment .local includes * add options * ##ignore noexec /tmp * ##caps.keep CAPS * ##hostname NAME * ##writable-etc * ##writable-run-user * ##writable-var * ##writable-var-log * add disable x11 * x11 none * blacklist /tmp/.X11-unix * comment when which of the both option should be used * sort private-etc template Common * add comments * machine-id: breaks sound and sometime dbus related functions * private-bin: python should be added by 'python*' * protocol: auxiliary comment for protocol line * add 'packet' to protocol list * Sections structure: OPTIONS: now has seccomp* instead of seccomp
* | add 'x11 none' to more profiles with 'net none'Libravatar rusty-snake2019-06-20
| |