aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Fixup f9aeac080a830fc1aaf07f0beff781a1ed7e42adLibravatar Tad2018-08-19
|
* fix pid_get_uid for the root userLibravatar smitsohu2018-08-19
|
* qutebrowser.profile: noblacklist /usr/lib/llvmLibravatar Vincent432018-08-19
| | | Fixes https://github.com/netblue30/firejail/issues/2087
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-08-19
|\
| * Warn when /usr/local/bin/<program> already exists and is not a symlink ↵Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-08-19
| | | | | | | | (fixes #667)
| * Revert "apparmor fix: somehow it cannot find the firejail profile to load it"Libravatar Vincent432018-08-19
| | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 949a221a1b92e422e6dcb7ea6089ed5c8d5cc22a. The 'firejail-default' is the name of 'unnatached' profile not path to it. Moreover names starting with '/' are changing profile type back to 'standard' which in this case means we literally create profile for the profile file itself '/etc/apparmor.d/firejail-default'. That means firejail would never load this profile to contain any app thus we have to revert this. For more info, see https://www.suse.com/documentation/sles-15/singlehtml/book_security/book_security.html#sec.apparmor.profiles.types.unattached
* | small enhancement to join.c (ready-for-join is always a regular file)Libravatar smitsohu2018-08-19
|/
* Fix for #2062Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-08-19
|
* fix failing travis build (make no assumptions about C standard)Libravatar smitsohu2018-08-19
| | | | plus function rename
* man: fix example for --build commandLibravatar Reiner Herrmann2018-08-19
|
* Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302018-08-19
|\
| * fix issue with join optionLibravatar smitsohu2018-08-19
| |
* | apparmor fix: somehow it cannot find the firejail profile to load itLibravatar netblue302018-08-19
| |
* | minor cleanupLibravatar netblue302018-08-19
|/
* tests: increase some timeouts in which I was runningLibravatar Reiner Herrmann2018-08-16
|
* tests: make top output independent of username, which could be too longLibravatar Reiner Herrmann2018-08-16
|
* Unlink files at endLibravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-08-16
|
* Generate temporary filenames instead of using a fixed one (fixes #2083)Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-08-16
|
* harden private-home mounting, small improvementsLibravatar smitsohu2018-08-16
|
* tests: skip fs_dev_shm.exp if /dev/shm is not writableLibravatar Reiner Herrmann2018-08-15
|
* tests: make sure needed directories existLibravatar Reiner Herrmann2018-08-15
|
* improve detection of symbolic linksLibravatar smitsohu2018-08-15
|
* fix NP derefLibravatar smitsohu2018-08-15
| | | | private-home and private-bin are included just for consistency
* wireshark.profile: enable apparmorLibravatar Vincent432018-08-15
|
* apparmor: cleanup duplicate rulesLibravatar Vincent432018-08-15
| | | Those are already covered with https://github.com/netblue30/firejail/blob/0.9.56-rc1/etc/firejail-default#L33
* apparmor: allow execution from /usr/lib64Libravatar Vincent432018-08-15
| | | /usr/lib64 was missing from execution whitelist and it's used in openSUSE, see https://github.com/netblue30/firejail/issues/2078
* Merge pull request #2081 from SkewedZeppelin/descriptionsLibravatar netblue302018-08-14
|\ | | | | Add descriptions to profiles
| * Cleanup descriptionsLibravatar Tad2018-08-13
| |
| * Add descriptions to profiles, pulled from Arch LinuxLibravatar Tad2018-08-13
| |
| * Add descriptions to profiles, pulled from Ubuntu 18.04Libravatar Tad2018-08-13
| |
* | spotify.profile: remove /sys from blacklistLibravatar Vincent432018-08-14
| | | | | | Blacklisting whole /sys is too restrictive, it may break various graphics stacks, see https://github.com/netblue30/firejail/issues/2080
* | Add seccomp line from firefox-common to Tor Browser profilesLibravatar Tad2018-08-14
|/ | | | - The next version of TBB is based on Firefox 60 and will need the same changes to prevent breakage
* Add profile for electrum0.9.56-rc1Libravatar Tad2018-08-13
| | | | + minor nitpicks to beaker.profile
* MergesLibravatar Fred-Barclay2018-08-12
|
* Merge pull request #2079 from flacks/profiles/beakerLibravatar Fred Barclay2018-08-12
|\ | | | | Add Beaker browser
| * Add Beaker browserLibravatar Jean Lucas2018-08-12
|/
* various small improvements, fixes, nitpicksLibravatar smitsohu2018-08-11
|
* clear all warnings from cppcheck static code analysisLibravatar smitsohu2018-08-11
| | | | obtained with: cppcheck --enable=warning --force --inconclusive --quiet ~/firejail/src
* release 0.9.56~rc1 testingLibravatar netblue302018-08-11
|
* xdg macro: silence resolve messages unless arg_debugLibravatar Tad2018-08-10
|
* Replace all possible HTTP links with HTTPSLibravatar Tad2018-08-08
|
* Minor private-etc cleanupLibravatar Tad2018-08-08
| | | | Command: grep "private-etc none," -Ril .
* Stop breaking PKI with private-etcLibravatar Tad2018-08-08
| | | | | Command: grep "crypto-policies" -iL $(grep "private-etc" -il $(grep "inet,inet6" . -Rl)) + fixes for #2077
* MergesLibravatar Tad2018-08-08
| | | | | + a fix for Totem + and a bit missed from 3c2a7e4c91aa030218b5ad7fa6291d16f1d51b53
* Merge pull request #2076 from Freso/additional-vim-profilesLibravatar SkewedZeppelin2018-08-08
|\ | | | | Add various `vim` related profiles
| * Add various `vim` related profilesLibravatar Frederik “Freso” S. Olesen2018-08-08
|/
* xdg macro testingLibravatar netblue302018-08-07
|
* xdg support: split xdg whitelist code in a different moduleLibravatar netblue302018-08-07
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar startx20172018-08-04
|\
| * indentation fixLibravatar smitsohu2018-08-04
| |