aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* x11=none: don't fail on abstract socket if netns …Libravatar rusty-snake2020-12-19
| | | | | | …is used. fix #3838 -- --x11=none --netns=isolated invalidly errors on the abstract X11 socket being accessible
* Refactor electron.profile and electron based programs (#3807)Libravatar rusty-snake2020-12-17
| | | | | | | | | | | | | | | | | * Refactor electron.profile and electron based programs (1) * Refactor electron.profile and electron based programs (2) * Refactor electron.profile and electron based programs (3) * Refactor electron.profile and electron based programs (4) * Refactor electron.profile and electron based programs (5) * Refactor electron.profile and electron based programs (6) * Refactor electron.profile and electron based programs (7) * Refactor electron.profile and electron based programs (8)
* Archiver fixes - drop private-bin (#3832)Libravatar glitsj162020-12-16
| | | | | | | | | | | | | | | * drop private-bin * drop private-bin * drop private-bin * drop private-bin * drop private-bin * disable private-lib in tar.profile Removing private-bin caused a test to fail - see discussion in https://github.com/netblue30/firejail/pull/3832. Thanks to @reinerh for explaining why I broke things!
* disable-shell.inc: add oksh (#3829)Libravatar Kelvin2020-12-16
| | | | | | | | | | | "Portable OpenBSD ksh, based on the Public Domain Korn Shell (pdksh)." Project page: https://github.com/ibara/oksh $ pacman -Q oksh oksh 6.8.1-1 $ pacman -Qlq oksh | grep bin/ /usr/bin/ /usr/bin/oksh
* New profiles for alacarte,tootle,photoflare (#3816)Libravatar kortewegdevries2020-12-16
| | | | | | | * New profiles for alacarte,tootle,photoflare * Fix dbus Co-authored-by: kortewegdevries <kortewegdevries@protonmail.ch>
* archiver fixes (#3830)Libravatar glitsj162020-12-16
| | | | | * fix gzip * fix tar
* Refactor archivers ii (#3827)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | * harden 7z.profile * harden atool.profile * harden bsdtar.profile * harden cpio.profile * harden gzip.profile * harden tar.profile * harden unrar.profile * harden unzip.profile * harden xzdec.profile * harden zstd.profile
* Refactor archivers (#3820)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create archiver-common.inc * add apparmor to archiver-common.inc * refactor 7z.profile * refactor ar.profile * refactor atool.profile * refactor bsdtar.profile * refactor cpio.profile * refactor gzip.profile * refactor tar.profile * refactor unrar.profile * refactor unzip.profile * refactor xzdec.profile * refactor zstd.profile * rewording * blacklist ${RUNUSER} in archiver-common.inc Thanks to @rusty-snake for suggesting this. * drop non-sensical ${RUNUSER}/wayland-* blacklisting in archiver-common.inc See discussion in https://github.com/netblue30/firejail/pull/3820#discussion_r543523343
* Runuser fixes (#3826)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting
* rename softmaker-common.inc to softmaker-common.profile (#3825)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | * Rename etc/inc/softmaker-common.inc to etc/profile-m-z/softmaker-common.profile As per suggestion by @rusty-snake in https://github.com/netblue30/firejail/pull/3819#issuecomment-745244982 * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change
* re-enable nogroups with a comment in zoom.profile (#3824)Libravatar glitsj162020-12-15
| | | Better fix for #3711, see discussion there.
* rename whitelist-players.inc to whitelist-player-common.inc (#3819)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | * Update and rename whitelist-players.inc to whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc
* Fix sound in games using FMOD (#3821)Libravatar fenuks2020-12-15
| | | Co-authored-by: fenuks <fenuks>
* streamline comments in inc files (#3818)Libravatar glitsj162020-12-14
| | | | | | | | | | | * streamline comments * streamline comments * streamline comments * streamline comments * streamline comments
* Merge pull request #3812 from rusty-snake/fix-3797--firejail-welcome.shLibravatar netblue302020-12-12
|\ | | | | Create firejail-welcome.s
| * Update firejail-welcome.shLibravatar rusty-snake2020-12-12
| | | | | | | | typos, spelling and other fixes. thanks @reinerh for all these
| * Create firejail-welcome.sLibravatar rusty-snake2020-12-11
| | | | | | | | fix #3797 -- Get ride of all these u2f and drm issues
* | drill profileLibravatar netblue302020-12-12
| |
* | Merge pull request #3810 from kmk3/dc-add-ldnsLibravatar netblue302020-12-12
|\ \ | | | | | | Dc add ldns
| * | disable-common.inc: blacklist ldns toolsLibravatar Kelvin M. Klann2020-12-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | drill(1) from ldns is the first tool suggested on the Arch Wiki for DNS lookup: https://wiki.archlinux.org/index.php/Domain_name_resolution#Lookup_utilities Home page: https://www.nlnetlabs.nl/projects/ldns/about/ $ pacman -Q ldns ldns 1.7.1-2 $ pacman -Qlq ldns | grep bin /usr/bin/ /usr/bin/drill /usr/bin/ldns-chaos /usr/bin/ldns-compare-zones /usr/bin/ldns-config /usr/bin/ldns-dane /usr/bin/ldns-dpa /usr/bin/ldns-gen-zone /usr/bin/ldns-key2ds /usr/bin/ldns-keyfetcher /usr/bin/ldns-keygen /usr/bin/ldns-mx /usr/bin/ldns-notify /usr/bin/ldns-nsec3-hash /usr/bin/ldns-read-zone /usr/bin/ldns-resolver /usr/bin/ldns-revoke /usr/bin/ldns-rrsig /usr/bin/ldns-signzone /usr/bin/ldns-test-edns /usr/bin/ldns-testns /usr/bin/ldns-update /usr/bin/ldns-verify-zone /usr/bin/ldns-version /usr/bin/ldns-walk /usr/bin/ldns-zcat /usr/bin/ldns-zsplit /usr/bin/ldnsd
| * | disable-common.inc: sort DNS / RUNUSER pathsLibravatar Kelvin M. Klann2020-12-10
| |/
* | curl HSTS cache support (#3813)Libravatar glitsj162020-12-12
| | | | | | | | | | * add curl HSTS support * add HSTS support
* | refactor playonlinux as wine redirect (#3811)Libravatar rusty-snake2020-12-12
| |
* | integrate relevant options into server.profile (#3808)Libravatar glitsj162020-12-11
|/ | | | | * integrate relevant options into server.profile * relax mdwe and dbus-system in server.profile
* fix audio/video play in yelp.profileLibravatar glitsj162020-12-10
|
* re-order private-etc in telegram.profileLibravatar glitsj162020-12-10
|
* fix private-etc in telegram.profileLibravatar glitsj162020-12-10
| | | Fixes #3805.
* minor hardenings and commentsLibravatar glitsj162020-12-10
|
* Update yelp.profile (#3803)Libravatar glitsj162020-12-09
|
* harden sysprof (#3802)Libravatar glitsj162020-12-09
|
* fixesLibravatar rusty-snake2020-12-09
| | | | | | - hopefully fix #3795 finally - fix README.md codeblock - blacklist ${HOME}/.texlive20*
* Update bug_report.mdLibravatar rusty-snake2020-12-08
|
* fix #3795 -- teams chrootLibravatar rusty-snake2020-12-07
|
* check --mac= for multicast addresses (#3784)Libravatar netblue302020-12-07
|
* Merge pull request #3772 from smitsohu/smitsohu-openat2Libravatar netblue302020-12-07
|\ | | | | use openat2 syscall when available
| * use openat2 syscall when availableLibravatar smitsohu2020-11-23
| |
* | profile fixes from issuesLibravatar rusty-snake2020-12-07
| | | | | | | | closes #3786; closes #3776
* | Add profile for authenticator-rs, improve falkon (#3747)Libravatar kortewegdevries2020-12-07
| | | | | | | | | | | | | | | | | | * Add profile for authenticator-rs, improve falkon, balsa * Fix * Add private-tmp to falkon * Revert balsa
* | xfce4-screenshooter: comment mdweLibravatar rusty-snake2020-12-06
| |
* | fix #3782 -- Man pages have #ifdefs in themLibravatar rusty-snake2020-12-01
| |
* | a more portable implementation for time measurementsLibravatar netblue302020-12-01
| |
* | Add a profile for dolphin-emuLibravatar Tad2020-11-29
| | | | | | | | | | Games folder must be whitelisted in a dolphin-emu.local Its private-etc can likely be shortened
* | Small fixesLibravatar Tad2020-11-29
| | | | | | | | | | | | | | | | | | - gimp: allow mbind syscall. no start on Fedora 33 without - minetest: disable private-cache. without persistent cache connecting to servers can take many minutes - supertuxkart: allow bluetooth protocol. stk can directly connect/pair to WiiMote controllers - supertuxkart: comment private-dev to allow controller use - profiles: unify controller support comments - firecfg: comment evolution with a note, and add a note to epiphany #3647 + #2995
* | Update build.yml (#3779)Libravatar rusty-snake2020-11-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update build.yml Currently we run all actions for all commits. This is not resource friendly. Let's tweak this a bit. This commit adds support for "skip ci" tags (i.e. if the head commit contains [s k i p c i] (w/o the extra spaces used to escape here), no jobs are executed. In addition are all commits which modify non-code files (e.g. README) only excluded. Furthermore we should not run cppcheck and scan-build if only profiles are changed and sort.py need only to be execute if profiles are changed. * Create sort.yml * Update build.yml profile-sort is now in sort.yml * Update sort.yml fix syntax * Update codeql-analysis.yml paths-ignore: - CONTRIBUTING.md - README - README.md - RELNOTES - SECURITY.md - 'etc/**' * Create build-extra.yml * Update build.yml * Update build-extra.yml
* | Fix building C# projects in Godot (#3778)Libravatar RandomVoid2020-11-28
| | | | | | | | | | | | | | | | | | Since version 3.0 Godot is supporting C# as a language for writing scripts. The C# solution can be built directly in Godot editor using MSBuild, which requires access to directory /etc/mono. This directory contains configuration of Mono enviroment. If MSBuild don't have access to this directory, it's not able to determine location of DLL files and it's throwing System.DllNotFoundException at beginning of the build process.
* | fix #3777 -- lyx profile seems to be brokenLibravatar rusty-snake2020-11-27
| |
* | fixes; close #3775Libravatar rusty-snake2020-11-26
| |
* | revisit join-or-start hidepid fixLibravatar smitsohu2020-11-25
| | | | | | | | | | | | cf. 9eb9e8d4c1b8995f0e7af4d604f3becd5dc91f62 No need to expect pid's in profile files.
* | make ${HOME}/.local/lib read-onlyLibravatar rusty-snake2020-11-24
| |
* | join-or-start hidepid fixLibravatar smitsohu2020-11-24
| |
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 10:52:35 +0000