aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* compile fixLibravatar netblue302022-10-25
|
* nettrace: various fixesLibravatar netblue302022-10-25
|
* fix nolocal netfilterLibravatar netblue302022-10-25
|
* removed grsecurity supportLibravatar netblue302022-10-24
|
* --icmptraceLibravatar netblue302022-10-24
|
* Merge pull request #5431 from netblue30/musl_warningsLibravatar Reiner Herrmann2022-10-23
|\ | | | | Fix musl warnings
| * check for availability of symbols instead of glibc definesLibravatar Reiner Herrmann2022-10-23
| | | | | | | | in musl they are just redefines of the non-64 versions
| * include limits.h instead of manually defining LINE_MAXLibravatar Reiner Herrmann2022-10-23
|/
* remove deprecated --shell from man pageLibravatar netblue302022-10-23
|
* dnstrace and snitraceLibravatar netblue302022-10-23
|
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302022-10-11
|\
| * Merge pull request #5389 from glitsj16/qutebrowser-fixesLibravatar netblue302022-10-11
| |\ | | | | | | Harden qutebrowser profile
| | * Harden qutebrowserLibravatar glitsj162022-10-03
| | |
| | * Fix D-Bus mpris supportLibravatar glitsj162022-10-02
| | |
| | * unbreak D-Bus mpris supportLibravatar glitsj162022-10-02
| | |
| | * Harden qutebrowser profileLibravatar glitsj162022-10-01
| | |
| * | Merge pull request #5402 from slowpeek/masterLibravatar netblue302022-10-11
| |\ \ | | | | | | | | docs: Make appimage examples consistent with --appimage option short description
| | * | Make appimage examples consistent with --appimage option short descriptionLibravatar slowpeek2022-10-05
| | | |
| * | | Merge pull request #5298 from pirate486743186/patch-1Libravatar netblue302022-10-11
| |\ \ \ | | | | | | | | | | electron-mail.profile refactoring
| | * | | electron-mail.profile: refactor and redirect to electron.profileLibravatar pirate4867431862022-10-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: - redirect to electron.profile - fix program name - update program description - allow /bin/sh - allow opening links in Firefox - remove no3d, nonewprivs, noroot, protocol, seccomp - add machine-id, nosound - remove private-bin, disable-mnt - harden private-etc - allow D-Bus notifications, secrets
* | | | | compile fixLibravatar netblue302022-10-11
|/ / / /
* | | | nettrace-dns and nettrace-sniLibravatar netblue302022-10-11
| | | |
* | | | build(deps): bump actions/checkout from 3.0.2 to 3.1.0Libravatar dependabot[bot]2022-10-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.2 to 3.1.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/2541b1294d2704b0964813337f33b291d3f8596b...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* | | | build(deps): bump github/codeql-action from 2.1.26 to 2.1.27Libravatar dependabot[bot]2022-10-10
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.26 to 2.1.27. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e0e5ded33cabb451ae0a9768fc7b0410bad9ad44...807578363a7869ca324a79039e6db9c843e0e100) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | | disable-common.inc: blacklist doas binaryLibravatar Kelvin M. Klann2022-10-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OpenDoas is an alternative to sudo. It is an unofficial port of OpenBSD's doas. Details: $ LC_ALL=C pacman -Si galaxy/opendoas | grep -e '^Version' -e '^Description' -e '^URL' Version : 6.8.2-1 Description : Run commands as super user or another user URL : https://github.com/Duncaen/OpenDoas Environment: Artix Linux. Also, add /etc/doas.conf to etc/ids.config.
* | | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302022-10-04
|\ \ \
| * \ \ Merge pull request #5394 from ↵Libravatar netblue302022-10-04
| |\ \ \ | | | | | | | | | | | | | | | | | | | | netblue30/dependabot/github_actions/github/codeql-action-2.1.26 build(deps): bump github/codeql-action from 2.1.25 to 2.1.26
| | * | | build(deps): bump github/codeql-action from 2.1.25 to 2.1.26dependabot/github_actions/github/codeql-action-2.1.26Libravatar dependabot[bot]2022-10-03
| | | |/ | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.25 to 2.1.26. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/86f3159a697a097a813ad9bfa0002412d97690a4...e0e5ded33cabb451ae0a9768fc7b0410bad9ad44) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
| * | | Merge pull request #5400 from kmk3/mpv-fix-libLibravatar netblue302022-10-04
| |\ \ \ | | | | | | | | | | Revert "mpv: whitelist mpv-mpris (#5386)"
| | * | | Revert "mpv: whitelist mpv-mpris (#5386)"Libravatar Kelvin M. Klann2022-10-04
| | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 393c5beff2686d7732221dadb6730917f24835a0. Which broke mpv: $ mpv --version Cannot start application: No such file or directory Probably because mpv itself uses many libraries and it has plugins that may depend on files in /usr/lib as well: $ pacman -Qlq mpv | grep /lib/ | grep -v '/$' /usr/lib/libmpv.so /usr/lib/libmpv.so.1 /usr/lib/libmpv.so.1.109.0 /usr/lib/pkgconfig/mpv.pc $ strings /usr/bin/mpv | grep '^lib.*\.so' | sort -u | wc -l 53 $ pacman -Qlq yt-dlp | grep /lib/ | grep -v '/$' | cut -f -4 -d / | sort -u /usr/lib/python3.10 $ pacman -Q mpv yt-dlp mpv 1:0.34.1-5 yt-dlp 2022.09.01-1 Environment: Artix Linux. Also, private-lib is disabled by default in firejail.config (see #5190) and mpv.profile does not use private-lib, so there should be no need to whitelist anything in /usr/lib in the default profile.
* | / / nettrace - static ip map updateLibravatar netblue302022-10-04
|/ / /
* / / Add gist note to bug_report.md (#5398)Libravatar rusty-snake2022-10-03
|/ / | | | | | | | | | | We had some comments saying that the output exceeds the allowed length of a github comment (65534 characters IIRC). This commit adds a comment to instruct users to create a secret gist in that case.
* | mpv: whitelist mpv-mpris (#5386)Libravatar Hugo2022-10-01
| | | | | | | | | | This is an mpv plugin for MPRIS integration. See: https://github.com/hoyon/mpv-mpris
* | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302022-09-27
|\ \
| * | RELNOTES: add build/ci itemsLibravatar Kelvin M. Klann2022-09-26
| | | | | | | | | | | | Relates to #5275 #5357 #5370.
* | | ICMP support in --nettraceLibravatar netblue302022-09-27
|/ /
* | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302022-09-26
|\ \
| * \ Merge pull request #5360 from glitsj16/ff-dbusLibravatar netblue302022-09-26
| |\ \ | | | | | | | | Streamline Firefoxes D-Bus filtering
| | * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| | * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| | * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| | * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| | * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| | * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| | * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| | * | Add CamelCase D-Bus filter for backward-compatibilityLibravatar glitsj162022-09-05
| | | |
| | * | Add CamelCase D-Bus filter for backward-compatibilityLibravatar glitsj162022-09-05
| | | |
| | * | Re-add CamelCase D-Bus filter for backward-compatibilityLibravatar glitsj162022-09-05
| | | |
| | * | Add CamelCase D-Bus filter for backward-compatibilityLibravatar glitsj162022-09-05
| | | |
| | * | Add CamelCase D-Bus name for backward-compatibilityLibravatar glitsj162022-09-05
| | | |