Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | network testing | 2017-07-27 | |
| | |||
* | tentative fix for arp cahce pollution - #1406 | 2017-07-27 | |
| | |||
* | merges | 2017-07-27 | |
| | |||
* | Merge pull request #1409 from caoliver/master | 2017-07-27 | |
|\ | | | | | Fix typo for fnet moveif invocation on 2nd interface. | ||
| * | Fix typo for fnet moveif invocation on 2nd interface. | 2017-07-27 | |
|/ | |||
* | Merge pull request #1408 from drzraf/patch-1 | 2017-07-27 | |
|\ | | | | | Zoom cache dir | ||
| * | Zoom cache dir | 2017-07-27 | |
|/ | | | | | Zoom seems to use of a QT cache-disk feature which depends upon a ~/.cache/<app>/qmlcache directory. If it can not, Zoom will segfault with mprotect failed in ExecutableAllocator::makeExecutable: Permission denied | ||
* | Allow eom and xviewer to write to user's trash | 2017-07-27 | |
| | |||
* | Updates after merges | 2017-07-27 | |
| | |||
* | Merge pull request #1407 from aidalgol/riot-profile | 2017-07-27 | |
|\ | | | | | Add Electron and Riot profiles | ||
| * | Add Electron and Riot profiles | 2017-07-27 | |
| | | | | | | | | | | | | | | * Add a generic profile for Electron applications. * Add a specific profile for Riot based on this new Electron profile. * Addresses vector-im/riot-web#3004 * Fulfils profile request for Riot.im in netblue30/firejail#1139 | ||
* | | merges | 2017-07-27 | |
|/ | |||
* | Improve cross build support by using configured compiler instead of make default | 2017-07-26 | |
| | | | | https://bugs.debian.org/869707 | ||
* | merges | 2017-07-25 | |
| | |||
* | Merge pull request #1402 from topimiettinen/nosuid-noexec-nodev-proc-sys | 2017-07-25 | |
|\ | | | | | /proc/sys can be nosuid,noexec,nodev | ||
| * | /proc/sys can be nosuid,noexec,nodev | 2017-07-25 | |
| | | |||
* | | Merge pull request #1403 from topimiettinen/seccomp-add-syscalls | 2017-07-25 | |
|\ \ | |/ |/| | Block some obsolete or unusual syscalls | ||
| * | Block some obsolete or unusual syscalls | 2017-07-25 | |
|/ | |||
* | Merge pull request #1397 from Panzerfather/master | 2017-07-22 | |
|\ | | | | | Add access to trash for eog | ||
| * | Add access to trash | 2017-07-23 | |
|/ | | | Eog needs access to trash to delete files | ||
* | apparmor fixes | 2017-07-21 | |
| | |||
* | merges | 2017-07-20 | |
| | |||
* | Merge pull request #1393 from topimiettinen/improve-mounting | 2017-07-20 | |
|\ | | | | | Improve mount handling | ||
| * | Improve mount handling | 2017-07-19 | |
| | | | | | | | | | | noexec/read-only/read-write handling: copy underlying FS flags before remounting. If the flags are already OK, don't remount unnecessarily. | ||
* | | Merge pull request #1394 from topimiettinen/fix-typo | 2017-07-20 | |
|\ \ | |/ |/| | Fix typo usr->user | ||
| * | Fix typo usr->user | 2017-07-19 | |
|/ | | | | | This typo may have prevented blacklists of /run/user/{uid}/gnupg and /run/user/{uid}/systemd from working. | ||
* | support for Xephyr screen size | 2017-07-19 | |
| | |||
* | xvfb fixes | 2017-07-17 | |
| | |||
* | Merge pull request #1390 from SpotComms/periodfix | 2017-07-17 | |
|\ | | | | | Fix #1383 | ||
| * | Fix #1383 | 2017-07-16 | |
| | | |||
* | | Merge pull request #1372 from rccavalcanti/chromium_arch | 2017-07-16 | |
|\ \ | |/ |/| | Fix permission denied for chromium-flags.conf in Arch | ||
| * | Fix permission denied for chromium-flags.conf in Arch | 2017-07-10 | |
| | | |||
* | | Fix typo | 2017-07-14 | |
| | | |||
* | | Re-add .ssh to noblacklist for andriod-studio and idea.sh | 2017-07-14 | |
| | | |||
* | | Merge pull request #1379 from announ/patch-1 | 2017-07-13 | |
|\ \ | | | | | | | Add quiet to exiftool profile | ||
| * | | Add quiet to exiftool profile | 2017-07-13 | |
|/ / | |||
* | | Merge pull request #1377 from SpotComms/fixjava | 2017-07-13 | |
|\ \ | | | | | | | Fix .java after e2449ae7d25925cec444ac08bbfb9cbc7199e647 | ||
| * | | Fix .java after e2449ae7d25925cec444ac08bbfb9cbc7199e647 | 2017-07-13 | |
|/ / | |||
* | | Update after merge #1374 | 2017-07-13 | |
| | | | | | | | | | | This introduces blacklist ~/.java to disable-programs.inc, so it may break some existing profiles that depend on it. | ||
* | | Merge pull request #1374 from SpotComms/idea | 2017-07-13 | |
|\ \ | | | | | | | Add profiles for IntelliJ IDEA and Android Studio | ||
| * | | Update idea.sh.profile | 2017-07-13 | |
| | | | | | | | | | Don't allow ~/.ssh access | ||
| * | | Update android-studio.profile | 2017-07-13 | |
| | | | | | | | | | Don't allow ~/.ssh access | ||
| * | | Add a profile for IntelliJ IDEA and Android Studio | 2017-07-11 | |
| | | | |||
* | | | Cleanup from merges #1369 and #1373 | 2017-07-13 | |
| | | | |||
* | | | fix xpra broken earlier | 2017-07-12 | |
| | | | |||
* | | | cleanup | 2017-07-12 | |
| | | | |||
* | | | Merge pull request #1373 from SpotComms/sa | 2017-07-11 | |
|\ \ \ | | | | | | | | | Add a profile for SILENTARMY | ||
| * | | | Add a profile for SILENTARMY | 2017-07-11 | |
| |/ / | |||
* | | | fix #1371; rework seccomp_filter_drop() function | 2017-07-11 | |
| | | | |||
* | | | profiles: tracelog breaks integrated browser in steam | 2017-07-11 | |
| |/ |/| | | | | | | | Thanks to @viq for the hint. Fixes: #1280 |