| Commit message (Collapse) | Author | Age |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Create gconf.profile
* Update gconf-editor.profile
* Create gconf-merge-schema.profile
* Create gconf-merge-tree.profile
* Create gconfpkg.profile
* Create gconftool-2.profile
* Create gsettings-data-convert.profile
* Create gsettings-schema-convert.profile
* Allow python2 in gconf.profile
|
| |
|
|
|
|
|
|
|
|
|
|
| |
* Update evince.profile
Needs group and password in private-etc on Arch. Took the liberty to change the memory-deny-write-execute comment. Latest firejail from git with the recent mdwx work included now no longer breaks evince on Arch. It might still break on other platforms, so I left mdwe commented.
* Fix including globals.local twice in evince-previewer
* Fix including globals.local twice in evince-thumbnailer
|
|
|
|
|
|
|
|
|
|
| |
* mdwx breakage in sysprof.profile
Recent mdwx (block memfd_create) work now breaks memory-deny-write-execute for the sysprof GUI on Arch.
* mdwx fixes for sysprof-cli.profile
While the GUI is now broken with mdwx on Arch, the CLI works just fine with it enabled.
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
* Delete hardinfo.profile
The profile is pretty broken as-is. A lot of the info is missing/incorrect and a quick-fix isn't on my horizon. Let's remove it for now and see if we can do better later on.
* Remove hardinfo from firecfg
|
| |
|
| |
|
|
|
|
|
| |
Some profiles may need adjusting if app uses memfd_create(2) and
memory-deny-write-execute was enabled.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Harden transmission-cli.profile
* Harden transmission-gtk.profile
* Harden transmission-qt.profile
* Harden transmission-show.profile
* Create transmission-create.profile
* Create transmission-daemon.profile
* Create transmission-edit.profile
* Create transmission-remote.profile
* Create transmission-remote-cli.profile
* Create transmission-remote-gtk.profile
* Fix spacing in transmission-remote-cli.profile
* Add transmission-daemon to firecfg
|
| |
|
|
|
|
|
|
|
|
|
|
| |
* Create gnome-schedule.profile
* Add gnome-schedule configs to disable-programs.inc
* Add gnome-schedule to firecfg
* mkfile and whitelist changes for gnome-schedule
|
|
|
|
|
|
|
|
| |
* Fix machine-id for pavucontrol
* Update pavucontrol.profile
* Fix private-lib in regextester profile
|
|
|
|
|
|
| |
This reverts commit 3702d54e5de85ab902621a68e9ee46a0b6fcef43.
https://github.com/netblue30/firejail/pull/2510#issuecomment-469083287
|
|
|
|
|
|
|
|
|
|
| |
* Fix machine-id for pavucontrol
* Update pavucontrol.profile
* Fix machine-id for pavucontrol
Moved machine-id as pointed out by SkewedZeppelin in https://github.com/netblue30/firejail/pull/2493#pullrequestreview-209878419.
|
|
|
| |
Another nice catch, thanks to SkewedZeppelin in https://github.com/netblue30/firejail/pull/2510 discussion.
|
|
|
| |
Really sloppy first attempt. Rectified thanks to comments in https://github.com/netblue30/firejail/pull/2487 from SkewedZeppelin.
|
|
|
| |
Fixed the profile as per comments in https://github.com/netblue30/firejail/pull/2488.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
- still have more to go through
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
* Create transgui.profile
* Add transgui config to disable-programs.inc
* Add transgui to firecfg
|
|
|
|
|
|
|
|
| |
* Create sysprof.profile
* Create sysprof-cli.profile
* Add sysprof to firecfg
|
|
|
|
|
|
| |
* Create simplescreenrecorder.profile
* Add simplescreenrecorder to firecfg
|
|
|
|
|
|
| |
* Create geekbench.profile
* Add geekbench to firecfg
|
|
|
| |
A few extra items are needed in private-lib on Debian/Ubuntu.
|
|
|
|
|
|
|
|
| |
* Create xfce4-mixer.profile
* Add xfce4-mixer config to disable-programs.inc
* Add xfce4-mixer to firecfg
|
|
|
|
|
|
|
|
| |
* Create pavucontrol.profile
* Add pavucontrol config to disable-programs.inc
* Add pavucontrol to firecfg
|
|
|
|
|
|
|
|
| |
* Create d-feet.profile
* Add d-feet config to disable-programs.inc
* Add d-feet to firecfg
|
|
|
|
|
|
|
|
| |
* Create seahorse.profile
* Create seahorse-tool.profile
* Add seahorse to firecfg
|
| |
|
|
|
|
|
|
| |
* Create gnome-keyring.profile
* Create gnome-keyring-3.profile
|
|
|
|
|
|
| |
* Create regextester.profile
* Add regextester to firecfg
|
|
|
|
|
|
| |
* Create hardinfo.profile
* Add hardinfo to firecfg
|
|
|
|
|
|
| |
* Create gnome-system-log.profile
* Add gnome-system-log to firecfg
|
|
|
|
|
|
| |
* Create gnome-nettool.profile
* Add gnome-nettool to firecfg
|
|
|
|
|
|
|
|
| |
* Create netactview.profile
* Add netactview config to disable-programs.inc
* Add netactview to firecfg
|
|
|
|
|
|
|
|
|
|
| |
* Add new config item for redshift to disable-programs.inc
As per https://github.com/jonls/redshift/blob/master/NEWS.md redshift now looks for the configuration file in `~/.config/redshift/redshift.conf`. The former location at `~/.config/redshift.conf` is deprecated but still searched as a fallback.
* Create redshift.profile
* Add redshift to firecfg
|
|\
| |
| | |
gnome-mpv -> celluloid
|