aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Add fakeroot support for makepkg on Arch (#2536)Libravatar glitsj162019-03-07
| | | | | | | | * Add fakeroot support to patch.profile * Add fakeroot support to strings.profile * Add fakeroot support to tar.profile
* Create ffmpegthumbnailer.profile (#2533)Libravatar glitsj162019-03-06
|
* Add ffmpeg redirect profiles (#2532)Libravatar glitsj162019-03-06
| | | | | | | | * Create ffplay.profile * Create ffprobe.profile * Create qt-faststart.profile
* Update ffmpeg.profile (#2529)Libravatar rusty-snake2019-03-06
| | | | | | * Harden ffmpeg.profile * Review #2529
* Merge pull request #2517 from veloute/keepassxcLibravatar smitsohu2019-03-06
|\ | | | | 'noexec /tmp' not causing the problem i thought it was
| * noexec /tmp not causing the problem i thought it wasLibravatar veloute2019-03-06
| |
* | Update evince.profile (#2530)Libravatar rusty-snake2019-03-06
| |
* | Add gconf + redirect profiles (#2528)Libravatar glitsj162019-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create gconf.profile * Update gconf-editor.profile * Create gconf-merge-schema.profile * Create gconf-merge-tree.profile * Create gconfpkg.profile * Create gconftool-2.profile * Create gsettings-data-convert.profile * Create gsettings-schema-convert.profile * Allow python2 in gconf.profile
* | Fix #2518 -- noexec HOME breaks discord (blank screen only)Libravatar Fred-Barclay2019-03-05
| |
* | Fixes for evince profiles (#2527)Libravatar glitsj162019-03-06
| | | | | | | | | | | | | | | | | | | | * Update evince.profile Needs group and password in private-etc on Arch. Took the liberty to change the memory-deny-write-execute comment. Latest firejail from git with the recent mdwx work included now no longer breaks evince on Arch. It might still break on other platforms, so I left mdwe commented. * Fix including globals.local twice in evince-previewer * Fix including globals.local twice in evince-thumbnailer
* | mdwx changes for sysprof profiles (#2526)Libravatar glitsj162019-03-06
| | | | | | | | | | | | | | | | | | | | * mdwx breakage in sysprof.profile Recent mdwx (block memfd_create) work now breaks memory-deny-write-execute for the sysprof GUI on Arch. * mdwx fixes for sysprof-cli.profile While the GUI is now broken with mdwx on Arch, the CLI works just fine with it enabled.
* | Add network functionality in sqlitebrowser.profile (#2525)Libravatar glitsj162019-03-06
| |
* | Add dirname to private-bin in spectre-meltdown-checker (#2524)Libravatar glitsj162019-03-06
| |
* | Fix pavucontrol (#2523)Libravatar glitsj162019-03-06
| |
* | Drop hardinfo profile (#2522)Libravatar glitsj162019-03-06
| | | | | | | | | | | | | | | | * Delete hardinfo.profile The profile is pretty broken as-is. A lot of the info is missing/incorrect and a quick-fix isn't on my horizon. Let's remove it for now and see if we can do better later on. * Remove hardinfo from firecfg
* | Fix typo in gpicview.profile (#2521)Libravatar glitsj162019-03-06
| |
* | Fix typos in geekbench.profile (#2520)Libravatar glitsj162019-03-06
|/
* mdwx: block memfd_createLibravatar Topi Miettinen2019-03-05
| | | | | Some profiles may need adjusting if app uses memfd_create(2) and memory-deny-write-execute was enabled.
* Refactor Transmission profiles (#2516)Libravatar glitsj162019-03-05
| | | | | | | | | | | | | | | | | | | | | | | | | | * Harden transmission-cli.profile * Harden transmission-gtk.profile * Harden transmission-qt.profile * Harden transmission-show.profile * Create transmission-create.profile * Create transmission-daemon.profile * Create transmission-edit.profile * Create transmission-remote.profile * Create transmission-remote-cli.profile * Create transmission-remote-gtk.profile * Fix spacing in transmission-remote-cli.profile * Add transmission-daemon to firecfg
* direct link for new profile requestsLibravatar Fred-Barclay2019-03-04
|
* Add new profile for gnome-schedule (#2499)Libravatar glitsj162019-03-04
| | | | | | | | | | * Create gnome-schedule.profile * Add gnome-schedule configs to disable-programs.inc * Add gnome-schedule to firecfg * mkfile and whitelist changes for gnome-schedule
* Fix private-lib in regextester profile (#2515)Libravatar glitsj162019-03-04
| | | | | | | | * Fix machine-id for pavucontrol * Update pavucontrol.profile * Fix private-lib in regextester profile
* Revert "Fix netactview (#2510)"Libravatar Tad2019-03-03
| | | | | | This reverts commit 3702d54e5de85ab902621a68e9ee46a0b6fcef43. https://github.com/netblue30/firejail/pull/2510#issuecomment-469083287
* Pavucontrol (#2511)Libravatar glitsj162019-03-04
| | | | | | | | | | * Fix machine-id for pavucontrol * Update pavucontrol.profile * Fix machine-id for pavucontrol Moved machine-id as pointed out by SkewedZeppelin in https://github.com/netblue30/firejail/pull/2493#pullrequestreview-209878419.
* Fix netactview (#2510)Libravatar glitsj162019-03-04
| | | Another nice catch, thanks to SkewedZeppelin in https://github.com/netblue30/firejail/pull/2510 discussion.
* Fix hardinfo (#2509)Libravatar glitsj162019-03-04
| | | Really sloppy first attempt. Rectified thanks to comments in https://github.com/netblue30/firejail/pull/2487 from SkewedZeppelin.
* Fix regextester (#2508)Libravatar glitsj162019-03-03
| | | Fixed the profile as per comments in https://github.com/netblue30/firejail/pull/2488.
* Minor firecfg.config updatesLibravatar Tad2019-03-03
|
* Update disable-programs.incLibravatar Tad2019-03-02
|
* A few more fixesLibravatar Tad2019-03-02
|
* Update firecfgLibravatar Tad2019-03-02
|
* More profile fixesLibravatar Tad2019-03-02
|
* Many profile fixes + mergesLibravatar Tad2019-03-02
| | | | - still have more to go through
* fix git profileLibravatar smitsohu2019-03-02
|
* update plasma vault blacklist in disable-common.incLibravatar smitsohu2019-03-02
|
* fix mutt, ranger profilesLibravatar smitsohu2019-03-02
|
* more cleanup: remove MS_REC from tmpfs mountsLibravatar smitsohu2019-03-02
|
* profile.c: errout with too many dns argsLibravatar smitsohu2019-03-02
|
* Add new profile for transgui (#2502)Libravatar glitsj162019-03-02
| | | | | | | | * Create transgui.profile * Add transgui config to disable-programs.inc * Add transgui to firecfg
* Add new profile for sysprof (#2501)Libravatar glitsj162019-03-02
| | | | | | | | * Create sysprof.profile * Create sysprof-cli.profile * Add sysprof to firecfg
* Add new profile for simplescreenrecorder (#2500)Libravatar glitsj162019-03-02
| | | | | | * Create simplescreenrecorder.profile * Add simplescreenrecorder to firecfg
* Add new profile for geekbench (#2498)Libravatar glitsj162019-03-02
| | | | | | * Create geekbench.profile * Add geekbench to firecfg
* Fix mpDris2 for Debian/Ubuntu (#2495)Libravatar glitsj162019-03-01
| | | A few extra items are needed in private-lib on Debian/Ubuntu.
* Add new profile for xfce4-mixer (#2494)Libravatar glitsj162019-03-01
| | | | | | | | * Create xfce4-mixer.profile * Add xfce4-mixer config to disable-programs.inc * Add xfce4-mixer to firecfg
* Add new profile for pavucontrol (#2493)Libravatar glitsj162019-03-01
| | | | | | | | * Create pavucontrol.profile * Add pavucontrol config to disable-programs.inc * Add pavucontrol to firecfg
* Add new profile for d-feet (#2492)Libravatar glitsj162019-03-01
| | | | | | | | * Create d-feet.profile * Add d-feet config to disable-programs.inc * Add d-feet to firecfg
* Add new profile for seahorse (#2491)Libravatar glitsj162019-03-01
| | | | | | | | * Create seahorse.profile * Create seahorse-tool.profile * Add seahorse to firecfg
* Create secret-tool.profile (#2490)Libravatar glitsj162019-03-01
|
* Add new profile for gnome-keyring (#2489)Libravatar glitsj162019-03-01
| | | | | | * Create gnome-keyring.profile * Create gnome-keyring-3.profile
* Add new profile for regextester (#2488)Libravatar glitsj162019-03-01
| | | | | | * Create regextester.profile * Add regextester to firecfg