| Commit message (Collapse) | Author | Age |
|---|
| ... | |
| | | |
| | |
| | |
| | |
| | | |
+ add code-oss to firecfg
+ potential fix for https://github.com/netblue30/firejail/issues/2051#issuecomment-470665213
|
| | | | |
|
| |\ \ \
| | | |
| | | | |
Add code-oss config directory
|
| | | | | |
|
| |\| | |
| | | |
| | | | |
Add code-oss profile
|
| | | | | |
|
| |/ / / |
|
| | | |
| | |
| | |
| | |
| | |
| | | |
* Harden gnome-clocks.profile
* Review #2534
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Add fakeroot support to patch.profile
* Add fakeroot support to strings.profile
* Add fakeroot support to tar.profile
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Create ffplay.profile
* Create ffprobe.profile
* Create qt-faststart.profile
|
| | | |
| | |
| | |
| | |
| | |
| | | |
* Harden ffmpeg.profile
* Review #2529
|
| |\ \ \
| | | |
| | | | |
'noexec /tmp' not causing the problem i thought it was
|
| | | |/
| |/| |
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Create gconf.profile
* Update gconf-editor.profile
* Create gconf-merge-schema.profile
* Create gconf-merge-tree.profile
* Create gconfpkg.profile
* Create gconftool-2.profile
* Create gsettings-data-convert.profile
* Create gsettings-schema-convert.profile
* Allow python2 in gconf.profile
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Update evince.profile
Needs group and password in private-etc on Arch. Took the liberty to change the memory-deny-write-execute comment. Latest firejail from git with the recent mdwx work included now no longer breaks evince on Arch. It might still break on other platforms, so I left mdwe commented.
* Fix including globals.local twice in evince-previewer
* Fix including globals.local twice in evince-thumbnailer
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* mdwx breakage in sysprof.profile
Recent mdwx (block memfd_create) work now breaks memory-deny-write-execute for the sysprof GUI on Arch.
* mdwx fixes for sysprof-cli.profile
While the GUI is now broken with mdwx on Arch, the CLI works just fine with it enabled.
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Delete hardinfo.profile
The profile is pretty broken as-is. A lot of the info is missing/incorrect and a quick-fix isn't on my horizon. Let's remove it for now and see if we can do better later on.
* Remove hardinfo from firecfg
|
| | | | |
|
| |/ / |
|
| | |
| |
| |
| |
| | |
Some profiles may need adjusting if app uses memfd_create(2) and
memory-deny-write-execute was enabled.
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* Harden transmission-cli.profile
* Harden transmission-gtk.profile
* Harden transmission-qt.profile
* Harden transmission-show.profile
* Create transmission-create.profile
* Create transmission-daemon.profile
* Create transmission-edit.profile
* Create transmission-remote.profile
* Create transmission-remote-cli.profile
* Create transmission-remote-gtk.profile
* Fix spacing in transmission-remote-cli.profile
* Add transmission-daemon to firecfg
|
| | | |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* Create gnome-schedule.profile
* Add gnome-schedule configs to disable-programs.inc
* Add gnome-schedule to firecfg
* mkfile and whitelist changes for gnome-schedule
|
| | |
| |
| |
| |
| |
| |
| |
| | |
* Fix machine-id for pavucontrol
* Update pavucontrol.profile
* Fix private-lib in regextester profile
|
| | |
| |
| |
| |
| |
| | |
This reverts commit 3702d54e5de85ab902621a68e9ee46a0b6fcef43.
https://github.com/netblue30/firejail/pull/2510#issuecomment-469083287
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* Fix machine-id for pavucontrol
* Update pavucontrol.profile
* Fix machine-id for pavucontrol
Moved machine-id as pointed out by SkewedZeppelin in https://github.com/netblue30/firejail/pull/2493#pullrequestreview-209878419.
|
| | |
| |
| | |
Another nice catch, thanks to SkewedZeppelin in https://github.com/netblue30/firejail/pull/2510 discussion.
|
| | |
| |
| | |
Really sloppy first attempt. Rectified thanks to comments in https://github.com/netblue30/firejail/pull/2487 from SkewedZeppelin.
|
| | |
| |
| | |
Fixed the profile as per comments in https://github.com/netblue30/firejail/pull/2488.
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | |
| |
| |
| | |
- still have more to go through
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | |
| |
| |
| |
| |
| |
| |
| | |
* Create transgui.profile
* Add transgui config to disable-programs.inc
* Add transgui to firecfg
|
| | |
| |
| |
| |
| |
| |
| |
| | |
* Create sysprof.profile
* Create sysprof-cli.profile
* Add sysprof to firecfg
|
| | |
| |
| |
| |
| |
| | |
* Create simplescreenrecorder.profile
* Add simplescreenrecorder to firecfg
|
| | |
| |
| |
| |
| |
| | |
* Create geekbench.profile
* Add geekbench to firecfg
|
Tad
SkewedZeppelin
Nick Fox
rusty-snake
glitsj16
smitsohu
veloute
Fred-Barclay
Topi Miettinen