aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* fix artha and add dbus-user filteringLibravatar glitsj162022-06-16
|
* update_deb.sh: remove cgroup-related codeLibravatar Kelvin M. Klann2022-06-16
| | | | | | | The "cgroup" option was removed from etc/firejail.config on commit 73b089092 ("disable cgroup code", 2022-06-13). Relates to #5200.
* more on removing cgroups (#5200)Libravatar netblue302022-06-16
|
* fix CILibravatar netblue302022-06-15
|
* configure*: Move LDFLAGS below CFLAGSLibravatar Kelvin M. Klann2022-06-15
| | | | | | | To match the usual usage order. Relates to commit 222a2d772 ("order options alphabetically in configure.ac report", 2022-06-13).
* configure*: fix typo in output (--ouput -> --output)Libravatar Kelvin M. Klann2022-06-15
| | | | | This amends commit 72ba0b7e5 ("compile time: disable --output", 2021-02-28).
* test/fs/invalid_filename.exp: s/end/send/Libravatar Kelvin M. Klann2022-06-14
| | | | | This amends commit c165510dc ("CI: remove cgroup test because feature has been removed", 2022-06-13).
* CI: remove cgroup test because feature has been removedLibravatar Reiner Herrmann2022-06-13
|
* disable chroot by default in /etc/firejail/firejail.configLibravatar netblue302022-06-13
|
* order options alphabetically in configure.ac reportLibravatar netblue302022-06-13
|
* compile time: changed --disable-firetunnel into --enable-firetunnelLibravatar netblue302022-06-13
|
* more on disable cgroupsLibravatar netblue302022-06-13
|
* disable cgroup codeLibravatar netblue302022-06-13
|
* Merge pull request #5140 from kmk3/build-dedup-config-varsLibravatar Kelvin M. Klann2022-06-13
|\ | | | | build: deduplicate configure-time vars into new config files
| * mkdeb.sh.in: move configure-time vars into new config.sh.inLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | For better organization and so that they can be used by other shell scripts by just sourcing config.sh.
| * makefiles: include config.mk instead of common.mk where possibleLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | common.mk contains definitions for building programs and it includes config.mk. Some makefiles that include common.mk do not contain any targets for building programs. They depend only on configure-time variable definitions (which are defined on config.mk) rather than anything specific to common.mk. So change their includes of common.mk to config.mk.
| * makefiles: deduplicate configure-time vars into new config.mk.inLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | Currently, the configure-time variables (that is, the ones that assign to placeholders, such as "@HAVE_MAN@", which are set/replaced at configure-time) are defined on multiple files (such as on Makefile.in and on common.mk.in). To avoid duplication, centralize these variables on a single file (config.mk.in) and replace all of the other definitions of them with an include of config.mk.
| * makefiles: define root dir and include relative to itLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A non-absolute path on an include command is always treated as being relative to the directory in which "make" was started in, rather than being relative to the makefile that contains the command. For example, given the following project structure and file contents: * Makefile: include src/foo.mk * src/foo.mk: include bar.mk * src/bar.mk: Running "make" on the root project directory (that is, where "Makefile" is) yields the following: src/foo.mk:1: bar.mk: No such file or directory As "bar.mk" in "include bar.mk" is relative to the current (process) directory (that is, "./bar.mk") and not to where foo.mk is located in ("./src/bar.mk"). So on every makefile that contains an include command, define the root project directory in the ROOT variable and always include relative to it, to later enable any included mkfiles to include other mkfiles without having to worry about the correct path. Commands used to search and replace: $ git grep -Flz 'include ../common.mk' -- src | xargs -0 -I '{}' sh -c \ "printf '%s\n' \"\`sed 's|include ../common.mk|ROOT = ../..\ninclude \$(ROOT)/src/common.mk|' '{}'\`\" >'{}'" Environment: GNU make 4.3-3.1 on Artix Linux
| * common.mk.in: fix comment about file usage intentLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It currently claims to contain "common definitions for all makefiles", but it is not included by all makefiles under src/ and it contains variable definitions that may possibly clash with the ones defined on certain makefiles. Mainly, the following makefiles (which are used for building shared objects) use a different set of CFLAGS compared to src/common.mk.in: * src/libpostexecseccomp/Makefile.in * src/libtrace/Makefile.in * src/libtracelog/Makefile.in Given the contents of common.mk.in, it seems to be intended only for makefiles that build C programs and/or non-shared objects (which are most of, but not all of the makefiles under src/), so put that in the comment instead.
| * Makefile.in: stop trying to remove config.h on distcleanLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is no config.h nor config.h.in in the repository: $ git ls-files -- '*config.h*' $ The filename is only mentioned on the generated configure script, as a generic example of an autoconf config file: $ git grep -F -A 1 -B 2 config.h | grep -v '^Makefile.in' -- configure-# Set up the scripts for CONFIG_FILES section. configure-# No need to generate them if there are no CONFIG_FILES. configure:# This happens for instance with `./config.status config.h'. configure-if test -n "$CONFIG_FILES"; then -- configure- # Let's still pretend it is `configure' which instantiates (i.e., don't configure- # use $as_me), people would be surprised to read: configure: # /* config.h. Generated by config.status. */ configure- configure_input='Generated from '`
| * Makefile.in: sort DISTFILESLibravatar Kelvin M. Klann2022-06-12
| |
| * Makefile.in: list one file per line on DISTFILESLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | To make it easier to read and edit them and to make the diffs clearer. vim commands used to search and replace: :0/DISTFILES/ | s/\v ([^=])/ \\\r\1/g | s/$/\r/
| * Makefile.in: remove redundant quotes around DISTFILES varsLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | | | | | They are being double-quoted twice, as in `""$(DISTFILES)""`, which is equivalent to not using quotes at all, as each double-quote pair gets expanded into nothing, leaving only `$(DISTFILES)`. Note that DISTFILES and DISTFILES_TEST are the only variables defined with quoted values and that make does not work with filenames that contain whitespace anyway. Added on commit da19d2d1b ("Simplify dist target and add missing test/sysutils to tarball", 2016-07-25) / PR #646.
| * configure*: sort AC_CONFIG_FILESLibravatar Kelvin M. Klann2022-06-12
| |
| * configure*: list one file per line on AC_CONFIG_FILESLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | To make it easier to read and edit them and to make the diffs clearer. vim commands used to search and replace: :0/AC_CONFIG_FILES/1 | ,+3s/ \\// | -3,+1s/ /\r/g
| * configure*: run autoconfLibravatar Kelvin M. Klann2022-06-12
|/ | | | | | | An output message and some whitespace were changed on commit 9903aaa9c ("rel 0.9.68rc1 testing", 2022-01-18). Environment: autoconf 2.69 (with the runstatedir patch) on Artix Linux
* README.md updateLibravatar netblue302022-06-12
|
* 0.9.71Libravatar netblue302022-06-12
|
* Revert "fj-mkdeb.py: run distclean before ./configure"Libravatar Kelvin M. Klann2022-06-11
| | | | | | | | | | | | | | | | This reverts commit b4d0b24c533c8aebb8961bf658e3b41580b073e2. This amends commit 56b86f8ac ("Revert "Makefile.in: stop running distclean on dist"", 2022-06-08) / PR #5182. Since the revert, `make dist` itself already runs `make distclean`. This also means that it is no longer necessary to run ./configure (to generate "Makefile" from "Makefile.in") before running ./contrib/fj-mkdeb.py. Misc: This is not a clean revert. Relates to #5154.
* fix typo in firejail-welcome.shLibravatar PizzaDude2022-06-10
|
* fix typoLibravatar Reiner Herrmann2022-06-09
|
* release 0.9.70 testing0.9.70Libravatar netblue2022-06-09
|
* Merge pull request #5184 from kmk3/relnotes-new-removed-profilesLibravatar netblue302022-06-09
|\ | | | | RELNOTES: add new and removed profiles
| * RELNOTES: add removed nvm profileLibravatar Kelvin M. Klann2022-06-09
| | | | | | | | | | | | | | | | | | | | Commands used to find the profile: $ git log --pretty= --graph --name-only \ --diff-filter=DBX 0.9.68..HEAD -- etc $ tig --diff-filter=DXB 0.9.68..HEAD -- etc Relates to #5058.
| * RELNOTES: add missing new profilesLibravatar Kelvin M. Klann2022-06-09
|/ | | | | | | | | | | | Profiles: opera-developer, node-gyp, npx, semver, ping-hardened. Commands used to find the profiles: $ git log --pretty= --graph --name-only \ --diff-filter=AC 0.9.68..HEAD -- etc $ tig --diff-filter=AC 0.9.68..HEAD -- etc Relates to #5001 #5058 #5061.
* RELNOTES: sort items by done date within categoriesLibravatar Kelvin M. Klann2022-06-09
| | | | Relates to #5111 #5122 #5155.
* RELNOTES: add feature: always log seccomp errorsLibravatar Kelvin M. Klann2022-06-08
| | | | Relates to #5110.
* RELNOTES: add build entriesLibravatar Kelvin M. Klann2022-06-08
| | | | Relates to #5133 #5154.
* Merge pull request #5182 from kmk3/revert-stop-distclean-on-distLibravatar netblue302022-06-08
|\ | | | | Revert "Makefile.in: stop running distclean on dist"
| * Revert "Makefile.in: stop running distclean on dist"Libravatar Kelvin M. Klann2022-06-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 1fb814e51149d105233f1edc1abb0de202f71b4d. If distclean is not executed before copying the files on dist, then the generated files inside src/ are included in the dist archive: $ ./configure >/dev/null && make distclean >/dev/null && ./configure >/dev/null && make dist | grep 'Makefile$' | wc -l 26 This happens because src/ is copied wholesale on dist (see DISTFILES). Revert the commit to ensure that only the input files (such as the "Makefile.in" files) are archived. Related discussion: https://github.com/netblue30/firejail/pull/5154#pullrequestreview-980810845 Relates to #5142.
* | CVE-2022-31214: fixing the fix, one more timeLibravatar smitsohu2022-06-08
| | | | | | | | | | | | | | | | | | the previous commit "CVE-2022-31214: fixing the fix" made private-etc=fonts,fonts and similar commands fail with an error fix that regression by tolerating already existing directories
* | CVE-2022-31214: fixing the fixLibravatar smitsohu2022-06-08
| |
* | shutdown testingLibravatar smitsohu2022-06-08
| |
* | fixing CVE-2022-31214Libravatar smitsohu2022-06-08
|/
* RELNOTES: add feature/bugfixLibravatar Kelvin M. Klann2022-06-08
| | | | Relates to #5088 #5114.
* RELNOTES: add ci/docsLibravatar Kelvin M. Klann2022-06-07
| | | | Relates to #5078 #5147 #5148.
* RELNOTES: mention --tab option on its entryLibravatar Kelvin M. Klann2022-06-07
| | | | | | Added on commit ddd7e6fec ("merges", 2022-02-20). Relates to #4936.
* RELNOTES: sort items by category (features/modifs)Libravatar Kelvin M. Klann2022-06-07
| | | | | | Move the modif entries after the feature entries to be consistent with the notes of the previous release (0.9.68): features, modifs/reworks, removals, bugfixes, build, ci, docs, includes/profiles.
* build(deps): bump github/codeql-action from 2.1.11 to 2.1.12Libravatar dependabot[bot]2022-06-06
| | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.11 to 2.1.12. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/a3a6c128d771b6b9bdebb1c9d0583ebd2728a108...27ea8f8fe5977c00f5b37e076ab846c5bd783b96) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #5176 from kmk3/build-mkdeb-undo-apparmorLibravatar netblue302022-06-06
|\ | | | | mkdeb.sh.in: stop enabling apparmor
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-05 14:51:40 +0000