| Commit message (Collapse) | Author | Age |
|---|
| ... | |
| |/ / / / |
|
| |\ \ \ \
| |/ / /
|/| | | |
Ignore SIGTTOU during flush_stdin()
|
| | | | |
| | | |
| | | |
| | | | |
fixes #3500
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
* Update virtualbox.profile
* Update virtualbox.profile
* Update virtualbox.profile
* Update virtualbox.profile
* Update virtualbox.profile
* Update virtualbox.profile
|
| |\ \ \ \
| | | | |
| | | | | |
Github-desktop: Add chroot to seccomp
|
| |/ / / /
| | | |
| | | |
| | | | |
Add chroot
|
| | | | | |
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
* Added freetube profile
Initial
* Added freetube profile
Second:drop ignore seccomp,add disable-shell
See https://github.com/netblue30/firejail/pull/3535
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
* Added cawbird profile
See https://github.com/netblue30/firejail/pull/3533
Squash commits for merging
|
| |\ \ \ \
| | | | |
| | | | | |
Hardend Zoom profile
|
| | | |/ /
| |/| | |
|
| |\ \ \ \
| | | | |
| | | | | |
Add Mattermost desktop profile
|
| | |/ / / |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
* Update telegram.profile
* Update telegram.profile
* Update telegram.profile
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
* Add files via upload
New profile for homebank
* Update etc/profile-a-l/homebank.profile
Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* Update etc/profile-a-l/homebank.profile
Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* Update homebank.profile
* Update firecfg.config
homebank added
* Update disable-programs.inc
Added blacklist.
* Update homebank.profile
Added disable-shell,removed whitelisted docs
* Update disable-programs.inc
Changed sorting
* Update homebank.profile
Changed sorting
* Added cawbird profile
Initial
* Revert "Added cawbird profile"
This reverts commit 6b045976adf62a91882236600c55926af34b6a52.
Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
|
| | | | |
| | | |
| | | |
| | | |
| | | | |
* fix #3404
* Update teams.profile
|
| | | | |
| | | |
| | | |
| | | |
| | | | |
fixes #3528
Are there any reasons why discord has no shell none?
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
I too saw some breaktages with programs using it.
It can still be used like this:
firejail pandoc -t foo bar.tex
closes #3524
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| |\ \ \ \
| | | | |
| | | | | |
Hardend Signal desktop profile
|
| | |/ / / |
|
| |/ / / |
|
| |\ \ \
| | | |
| | | | |
fixing busybox workaround
|
| | | | | |
|
| |/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Create element-desktop.profile
* add element-desktop dirs to disable-programs.inc
* add element-desktop to firecfg.config
* Update RELNOTES
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
use it. (#3493)
* blacklist .local/share/kxmlgui5
KDE programs use this to store their toolbar config.
* noblacklist .local/share/kxmlgui5 in the relevant KDE applications.
* Whitelist kxmlgui file for okular.
* Use a glob to blacklist subfolders instead of the parent folder.
noblacklisting individual subdirectories works only if we do it this way
(tested by launching bash in the kate profile).
* Make directory, not file.
* noblacklist relevant subdirs for more KDE applications
|
| | | | |
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* hardening some profiles
- harden and fix flameshot
- wruc: frogatto, ghostwriter
- harden gnome-latex
- add whitelist opt-in note to keepassxc
- add comment to minetest
- harden openarena, tremulous, xonotic
- add profile for xonotic-sdl-wrapper
* followup
|
| |/ /
| |
| |
| |
| |
| |
| | |
* Update disable-common.inc
* Update disable-common.inc
[skip ci]
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* Whitelist some config files used by Okular.
These files are used to store the toolbar configurations.
* Whitelist files required for okular in firefox-common-addons.inc
Without this, okular does not follow the user configuration for toolbars
and keyboard shortcuts when launched inside the firefox sandbox (for
eg., while opening a downloaded PDF).
* Alphabetical sort
* Remove noblacklist for files which are not actually blacklisted.
I have blacklisted them in a separate pull request.
|
| | |
| |
| | |
Co-authored-by: noir <noir@neire.dev>
|
| | |
| |
| | |
hplip is required for scanning using HP printer/scanners.
|
| | | |
|
| | | |
|
| | |
| |
| |
| | |
configuration. (#3490)
|
| | |
| |
| |
| |
| |
| | |
(#3490)
Without this, konversation doesn't remember the settings for
notifications.
|
| | |
| |
| | |
Blender autosaves to /tmp.
|
| | |
| |
| | |
This should clarify how to configure for reading local mail after https://github.com/netblue30/firejail/commit/dfaf7a7660689c055ba45a935e42b1b548669c57.
|
| | |
| |
| |
| |
| |
| |
| | |
* clarify writing to /var/mail and /var/spool/mail in apparmor
Thunderbird seems to be our only mail client profile that enables the `apparmor` option. Users need this when they follow instructions on how to allow reading local mail.
* fix mail clients rule in firejail-default
|
| | |
| |
| |
| |
| |
| |
| | |
2345cc4 broke environment variable passing for seccomp error action
for fseccomp.
Closes #3488.
|
| | | |
|
| | | |
|
| | | |
|
Emil Gedda
smitsohu
Arne Welzel
rusty-snake
Neo00001
kortewegdevries
glitsj16
kortewegdevries
Ondřej Nový
Kishore96in
neirenoir
Carlo Abelli
Topi Miettinen