Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
| | * | Update .travis.yml | 2017-08-08 | ||
| | | | ||||
| | * | Update .travis.yml | 2017-08-08 | ||
| | | | ||||
| | * | Update .travis.yml | 2017-08-08 | ||
| | | | ||||
| | * | Update .travis.yml | 2017-08-08 | ||
| | | | ||||
| | * | Update .travis.yml | 2017-08-08 | ||
| | | | ||||
| | * | Update .travis.yml | 2017-08-08 | ||
| | | | ||||
| | * | Update .travis.yml | 2017-08-08 | ||
| | | | ||||
| | * | Update .travis.yml | 2017-08-08 | ||
| | | | ||||
| | * | Create .travis.yml | 2017-08-08 | ||
| | | | ||||
* | | | Travis CI testing | 2017-08-14 | ||
|/ / | ||||
* | | Fix compile with older kernel headers | 2017-08-13 | ||
| | | ||||
* | | Merge pull request #1466 from SpotComms/fixnd | 2017-08-13 | ||
|\ \ | | | | | | | Fix nodvd placement | |||
| * | | Fix nodvd placement | 2017-08-13 | ||
| | | | ||||
* | | | Merge pull request #1444 from SpotComms/h2 | 2017-08-13 | ||
|\ \ \ | |/ / |/| | | Harden 18 profiles using private-bin | |||
| * | | Chrom* on Arch Linux no longer uses a perl script | 2017-08-13 | ||
| | | | ||||
| * | | Harden 17 profiles using private-bin | 2017-08-13 | ||
|/ / | ||||
* | | Fix copy-paste | 2017-08-13 | ||
| | | ||||
* | | Allow any syscall to be blacklisted (#1447) | 2017-08-13 | ||
| | | | | | | | | | | | | | | Allow any syscall to be blacklisted with aid of LD_PRELOAD library, libpostexecseccomp.so. Closes: #1447 | |||
* | | merges | 2017-08-13 | ||
| | | ||||
* | | Merge pull request #1465 from pizzadude/patch-1 | 2017-08-13 | ||
|\ \ | | | | | | | fix smplayer for mpv | |||
| * | | fix smplayer for mpv | 2017-08-12 | ||
| | | | | | | | | | this fixes smplayer if you use the mpv backend | |||
* | | | modif: --output split in two commands, --output and --output-stderr; fix for ↵ | 2017-08-13 | ||
| | | | | | | | | | | | | #1458 | |||
* | | | added nodvd to most profiles | 2017-08-13 | ||
|/ / | ||||
* | | Merge branch 'master' of https://github.com/netblue30/firejail | 2017-08-12 | ||
|\ \ | ||||
| * | | Enable system call groups with minus sign | 2017-08-12 | ||
| | | | ||||
* | | | added --nodvd | 2017-08-12 | ||
|/ / | ||||
* | | Merge pull request #1461 from SpotComms/f2 | 2017-08-11 | ||
|\ \ | | | | | | | Fix notv placement | |||
| * | | Fix notv placement | 2017-08-11 | ||
|/ / | ||||
* | | private-dev enhancements | 2017-08-11 | ||
| | | ||||
* | | fix xpra profile | 2017-08-11 | ||
| | | ||||
* | | added notv to most profiles | 2017-08-11 | ||
| | | ||||
* | | Merge pull request #1460 from smitsohu/patch-2 | 2017-08-11 | ||
|\ \ | | | | | | | fix tuxguitar comments | |||
| * | | fix comments | 2017-08-11 | ||
|/ / | ||||
* | | Add TuxGuitar profile (#1453) | 2017-08-10 | ||
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add tuxguitar profile tested for versions < 1.3 * blacklist tuxguitar * add tuxguitar * add tuxguitar * add support for tuxguitar > 1.2 higher versions fail to launch without protocol=inet,inet6 and with noexec=~. Yet, net=none seems to be still tolerated, which comes handy to block talk with internet and dbus. * unbreak tuxguitar Internet access versions >= 1.3 actually run fine with net=none enabled, if the built-in internet dependent feature is not used | |||
* | | Enable syscall groups for non-internal use | 2017-08-10 | ||
| | | ||||
* | | fix mate-calculator profile | 2017-08-10 | ||
| | | ||||
* | | marking redirected profile files | 2017-08-10 | ||
| | | ||||
* | | typo | 2017-08-10 | ||
| | | ||||
* | | fix less for #1450 | 2017-08-10 | ||
| | | ||||
* | | more novideo options, enhanced mediathekview (#1451) | 2017-08-10 | ||
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add disable-mnt * support alternative media players * add novideo * fix comment, add novideo * drop disable-mnt saving to mounted locations is legitimate use | |||
* | | Merge pull request #1452 from SpotComms/fn | 2017-08-10 | ||
|\ \ | | | | | | | Add a profile alias for Firefox Nightly | |||
| * | | Add a profile alias for Firefox Nightly | 2017-08-10 | ||
|/ / | ||||
* | | --notv for #1446 | 2017-08-10 | ||
| | | ||||
* | | Merge pull request #1448 from da2x/patch-1 | 2017-08-10 | ||
|\ \ | | | | | | | Match RPM license tag with license set in COPYING | |||
| * | | Match RPM license tag with license set in COPYING | 2017-08-10 | ||
|/ / | | | | | | | Known license tag should be `GPLv2+`. https://fedoraproject.org/wiki/Licensing:Main?rd=Licensing#SoftwareLicenses | |||
* | | add /dev/dbv to private-dev list | 2017-08-09 | ||
| | | ||||
* | | Fix bad noexec sorting | 2017-08-09 | ||
| | | ||||
* | | Sorting | 2017-08-08 | ||
| | | ||||
* | | various little profile fixes and enhancements (#1442) | 2017-08-08 | ||
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add novideo * add novideo * add novideo * put noexec last * blacklist Clementine configuration and database * blacklist Clementine configuration and database * add novideo * add novideo, permit access to ~/.java * add novideo * spoof machine-id * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * drop machine-id option private-etc hides it anyway | |||
* | Merges | 2017-08-07 | ||
| |