aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* cleanupLibravatar smitsohu2018-10-25
|
* fix: return with euid 0Libravatar smitsohu2018-10-25
|
* experimental: remounts child mount points as well (read-only, read-write, ↵Libravatar smitsohu2018-10-25
| | | | noexec)
* mergesLibravatar netblue302018-10-24
|
* Merge pull request #2213 from announ/patch-1Libravatar netblue302018-10-24
|\ | | | | git.profile: Disable blacklist for default Oh My Zsh directory
| * git.profile: Disable blacklist for default Oh My Zsh directoryLibravatar announ2018-10-24
| |
* | Merge pull request #2178 from glitsj16/atoolLibravatar netblue302018-10-24
|\ \ | |/ |/| Fix atool for UID/GID > 1000
| * Fix atool for UID/GID > 1000Libravatar glitsj162018-10-13
| |
* | reverting to 0.9.57Libravatar netblue302018-10-21
| |
* | apparmor testLibravatar netblue302018-10-21
| |
* | Add QOwnNotes profileLibravatar Fred-Barclay2018-10-20
| |
* | improve some error messagesLibravatar smitsohu2018-10-17
| |
* | improve clean_pathname functionLibravatar smitsohu2018-10-17
| |
* | fs_whitelist: cache length of home directory stringLibravatar smitsohu2018-10-17
| |
* | fix #2197Libravatar netblue302018-10-17
| |
* | Merge pull request #2199 from crass/fix-2142-firefox-sandbox-appimageLibravatar netblue302018-10-17
|\ \ | | | | | | Fix #2142: Firefox appimage fails because it needs non-default seccomp
| * | Do not override user provided seccomp lists when in chroot/overlay/appimage, ↵Libravatar Glenn Washburn2018-10-16
| | | | | | | | | | | | but to use the default if none is provided.
* | | Merge pull request #2201 from SkewedZeppelin/u2f-apLibravatar netblue302018-10-17
|\ \ \ | | | | | | | | Add nou2f to all profiles
| * | | Add nou2f to all profilesLibravatar Tad2018-10-15
| | | | | | | | | | | | | | | | - Closes #2194
* | | | Fix doc: A more accurate example of profile loading by profile name.Libravatar Glenn Washburn2018-10-17
| | | |
* | | | Fix docs on default seccomp list: change mfsservctl -> nfsservctl and ↵Libravatar Glenn Washburn2018-10-17
| | | | | | | | | | | | | | | | reorder, add ni_syscall, remove duplicate process_vm_writev, add sys_debug_setcontext.
* | | | Merge pull request #2156 from crass/improve-include-handlingLibravatar crass2018-10-17
|\ \ \ \ | | | | | | | | | | Improve include handling
| * | | | Remove "/etc/firejail/" from all include paths, now that profile_read will ↵Libravatar Glenn Washburn2018-10-17
| | | | | | | | | | | | | | | | | | | | search for the file.
| * | | | Update profile manpage to detail added "include" functionality.Libravatar Glenn Washburn2018-10-17
| | | | |
| * | | | Allow include to search userdir then systemdir for "bare" profile file names.Libravatar Glenn Washburn2018-10-17
|/ / / /
* | | | Merge pull request #2158 from crass/profile_conditionalLibravatar crass2018-10-17
|\ \ \ \ | | | | | | | | | | #2158: Add support for rudimentary conditionals in profiles
| * | | | Update documentation for profile conditionals.Libravatar Glenn Washburn2018-10-16
| | | | |
| * | | | Add support for rudimentary conditionals in profiles, currently only the ↵Libravatar Glenn Washburn2018-10-16
| | |/ / | |/| | | | | | | | | | HAS_APPIMAGE conditional is supported.
* | | | firejail.config: clarify disable-mnt behaviourLibravatar Vincent432018-10-16
| | | |
* | | | manpages: update disable-mnt descriptionLibravatar Vincent432018-10-16
|/ / / | | | | | | This will better match current code.
* | | Merge branch 'improve-profile-handling'Libravatar Glenn Washburn2018-10-15
|\ \ \ | |/ / |/| |
| * | Update man pages and usage to reflect --profile enhancement.Libravatar Glenn Washburn2018-10-15
| | |
| * | Allow specifying a profile "name" with the profile option (eg. ↵Libravatar Glenn Washburn2018-10-15
| | | | | | | | | | | | --profile=firefox).
| * | rename expand_home -> expand_macros to better reflect usage and remove ↵Libravatar Glenn Washburn2018-10-15
|/ / | | | | | | unneeded homedir argument.
* | tentative fix: automatically mount libdir in chroot - #2176Libravatar smitsohu2018-10-15
| |
* | Merge branch 'master' of http://github.com/netblue30/firejailLibravatar startx20172018-10-14
|\ \
| * \ Merge pull request #2192 from crass/fix-ld.so.preload-pathLibravatar startx20172018-10-14
| |\ \ | | | | | | | | The path in ld.so.preload should point to RUN_FIREJAIL_LIB_DIR, as LIBDIR may not exist.
| | * | The path in ld.so.preload should point to RUN_FIREJAIL_LIB_DIR, as LIBDIR ↵Libravatar Glenn Washburn2018-10-13
| | | | | | | | | | | | | | | | may not exist.
| * | | Merge pull request #2193 from grimskies/join-exit-codeLibravatar startx20172018-10-14
| |\ \ \ | | | | | | | | | | Make --join return exit code of the invoked program
| | * | | Make --join return exit code of the invoked programLibravatar Paweł2018-10-14
| |/ / /
* / / / merge commits from crass and grimskiesLibravatar startx20172018-10-14
|/ / /
* | | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-10-13
|\| |
| * | Update gnome-pie profile (#2191)Libravatar glitsj162018-10-13
| | | | | | | | | | | | | | | | | | * Update gnome-pie.profile * Update disable-programs.inc for gnome-pie
| * | bringing in the fix for always have helpers in sandbox (original pull rq ↵Libravatar netblue302018-10-13
| | | | | | | | | | | | from crass)
| * | Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302018-10-13
| |\ \
| | * | MergesLibravatar Tad2018-10-13
| | | |
| | * | Merge pull request #2182 from glitsj16/mencoder-take-2Libravatar SkewedZeppelin2018-10-13
| | |\ \ | | | | | | | | | | New profile mencoder
| | | * | Redo mencoder as extending mplayer profileLibravatar glitsj162018-10-13
| | | | |
| | | * | Create mencoder.profileLibravatar glitsj162018-10-13
| | | |/
| | * | Merge pull request #2181 from glitsj16/gnome-pieLibravatar SkewedZeppelin2018-10-13
| | |\ \ | | | | | | | | | | New profile gnome pie