aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
...
* | | "apparmor" no longer part of .deb nameLibravatar Fred Barclay2020-05-22
| | | | | | | | | | | | | | | See 87e7b313997b1d2be6553cfb22fef71b74c84ea6
* | | Fix #3403 - missed oneLibravatar Fred Barclay2020-05-22
| | |
* | | Fix #3403Libravatar Fred Barclay2020-05-22
| | |
* | | Merge pull request #3430 from karoshi42/masterLibravatar rusty-snake2020-05-22
|\ \ \ | | | | | | | | Add Ubuntu's renamed version of dino
| * | | Add Ubuntu specific name for dinoLibravatar Karoshi422020-05-22
| | | | | | | | | | | | Ubuntu packages dino as dino-im
| * | | Add profile for Ubuntu's renamed dino binaryLibravatar Karoshi422020-05-22
|/ / / | | | | | | Ubuntu named the dino instant messenger's binary ``dino-im``, so it needs to be present as profile and added to private-bin.
* | | cleanup wire-desktop.profileLibravatar glitsj162020-05-20
| | | | | | | | | After https://github.com/netblue30/firejail/commit/76127399a5811a0b5ae3fffbd999bf22fba032e1 the caps workaround is no longer needed.
* | | Add configure options when building rpm (#3422)Libravatar Haowei Yu2020-05-19
| | |
* | | fix seccomp in wire-desktop.profileLibravatar glitsj162020-05-19
| | | | | | | | | Fixes #3423.
* | | fix firejail-in-firejail testLibravatar netblue302020-05-18
| | |
* | | fix make depenciesLibravatar netblue302020-05-18
| | |
* | | fixing some of the testsLibravatar netblue302020-05-18
| | |
* | | better blacklist orderingLibravatar Reiner Herrmann2020-05-16
| | |
* | | Blacklist busybox by defaultLibravatar Reiner Herrmann2020-05-16
| | | | | | | | | | | | It's a collection of many tools, that might not be allowed individually. When it's needed, it can easily be allowed again.
* | | add mace015 to contributorsLibravatar glitsj162020-05-16
| | |
* | | fix ordering in disable-programs.incLibravatar glitsj162020-05-16
| | |
* | | Allow google-chrome access to the custom flags files in ~/.config. (#3418)Libravatar Mace Muilman2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | * Allow google-chrome access to the custom flags files in ~/.config. * Added noblacklist for the custom flag files for google-chrome-stable. * Allow read access to the custom flag files for both google-chrome-beta and google-chrome-unstable. * Added the custom flag files for google-chrome stable, beta and unstable to the disable-programs.inc list.
* | | Add quiet to secret-toolLibravatar Tad2020-05-15
| | |
* | | fix wusc in yelp.profileLibravatar glitsj162020-05-15
| | |
* | | Configure Debian package with AA and SELinux optionsLibravatar Topi Miettinen2020-05-14
| | | | | | | | | | | | | | | Configure Debian package with AA and SELinux options if they are enabled.
* | | add new profile: plv (#3410)Libravatar glitsj162020-05-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also fixed a typo for new profiles: nicontine --> nicotine * add plv to firecfg * add plv to disable-programs.inc * Create plv.profile * Update plv.profile
* | | Merge pull request #3409 from corecontingency/masterLibravatar rusty-snake2020-05-10
|\ \ \ | |/ / |/| | Add several games to steam and disable-programs
| * | Add several games to steam and disable-programsLibravatar corecontingency2020-05-10
|/ / | | | | | | | | | | | | | | | | | | | | | | Add Faster Than Light, Into the Breach, Paradox Interactive, and mbwarband to disable-programs.inc. Also, add Faster Than Light and Into the Breach into steam.profile. This fixes saved games being lost when steam is closed, and also lets Steam cloud sync work properly. Lastly, remove a duplicate whitelist ${HOME}/.steampid from steam.profile.
* | add ommitted scripts from contrib (#3405)Libravatar glitsj162020-05-05
| | | | | | We seem to have forgotten 3 scripts from contrib. Let's add those too.
* | Build improvements (#3401)Libravatar Topi Miettinen2020-05-04
| | | | | | | | | | | | Don't build all filters many times over but instead let them be built in parallel. Closes #3393
* | Follow-up for #3326 (#3397)Libravatar glitsj162020-05-04
| | | | | | | | | | | | | | | | | | | | | | * use the new dbus format in chromium-common.profile * use new dbus format in firejail.config Now that #3326 landed I think it might be less confusing to keep using the --nodbus wording. Couldn't come up with a better alternative (yet), so this might need future improvements. * block dbus system bus Blocking the system bus shouldn't affect password functionality etc, as that uses the session bus.
* | Merge pull request #3395 from matu3ba/template_bugLibravatar rusty-snake2020-05-04
|\ \ | | | | | | bug_template: more specific information
| * | bug_template: more specific information like related programs, profile ↵Libravatar Jan2020-05-04
|/ / | | | | | | existence, lookup for installed profiles and user investigation on related problems
* | fix makefile and dbusLibravatar rusty-snake2020-05-04
| | | | | | | | | | | | - create vim directorys (#3396) - fix #3400 (Eye of GNOME won't open) - fix feedreader, it is broken without org.freedesktop.secrets access
* | fix #3399Libravatar rusty-snake2020-05-04
| |
* | fixup! install vim contib filesLibravatar rusty-snake2020-05-03
| |
* | Merge pull request #3390 from Liorst4/disable-drm-by-defaultLibravatar rusty-snake2020-05-02
|\ \ | | | | | | Disable browser drm by default.
| * | Disable browser drm by default.Libravatar Lior Stern2020-05-01
| | | | | | | | | | | | Done to match whats stated in etc/firejail/firejail.config
* | | install vim contib filesLibravatar rusty-snake2020-05-02
| | |
* | | dbus filter profiles (1) (#3326)Libravatar rusty-snake2020-05-02
| | | | | | | | | | | | | | | | | | | | | * dbus filter (1) * dbus-filter: firefox * drop org.gtk.vfs and com.canonical.AppMenu.Registrar
* | | various hardening (#3394)Libravatar rusty-snake2020-05-02
|/ /
* | fixes for zeal.profileLibravatar glitsj162020-04-30
| | | | | | Preliminary fixes tested/confirmed on Arch regarding #3389 (in-progress).
* | Print status of SELinux support with --versionLibravatar Topi Miettinen2020-04-29
| |
* | Increase MAX_ENVS to 256 (#3386)Libravatar Topi Miettinen2020-04-26
| | | | | | | | | | | | Some applications like Byobu, tmux and screen like to use environment and then 100 environment variables may be too few. Closes: #3350
* | drop no3d from gnome-contacts.profileLibravatar glitsj162020-04-26
| | | | | | Fix for #3385.
* | Merge pull request #3380 from backspac/steam-runtimeLibravatar rusty-snake2020-04-24
|\ \ | | | | | | Add steam-runtime alias
| * | Add steam-runtime aliasLibravatar backspac2020-04-24
|/ /
* | cleanup private-etc in steam.profileLibravatar glitsj162020-04-22
| |
* | fix gcc10 static analysis warningLibravatar Reiner Herrmann2020-04-22
| |
* | fix gcc10 static analysis warningLibravatar Reiner Herrmann2020-04-22
| |
* | add disable-exec to file-manager-common profileLibravatar smitsohu2020-04-22
| |
* | selinux relabeling, little thingsLibravatar smitsohu2020-04-22
| |
* | small fixesLibravatar netblue302020-04-21
| |
* | Merge pull request #3359 from abranson/armLibravatar netblue302020-04-21
|\ \ | | | | | | 32bit ARM syscall table
| * | Add 32bit ARM syscallsLibravatar Andrew Branson2020-04-15
| | |