aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Update etc/profile-m-z/weechat.profile Libravatar NetSysFire2021-06-08
| | | | | remove whitespace to comply with the profile template Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* Update weechat.profileLibravatar NetSysFire2021-06-08
| | | weechat needs access to `/usr/share/weechat` if you have any global scripts installed. The directory is empty by default, so there is no additional risk here.
* fixup 9678da00301562464464099b9d7cfd76424fbb23Libravatar smitsohu2021-06-06
|
* fix tuxguitarLibravatar smitsohu2021-06-06
|
* cleanupLibravatar smitsohu2021-06-06
|
* rpm: fix man page location in spec fileLibravatar Reiner Herrmann2021-06-06
|
* tightening zathura profile (#4343)Libravatar pirate4867431862021-06-05
| | | | | * tightening zathura profile * sort
* minor fixLibravatar pirate4867431862021-06-05
|
* Update RELNOTES & README.mdLibravatar rusty-snake2021-06-05
| | | | [skip ci]
* jailcheck: fix spelling errorsLibravatar Reiner Herrmann2021-06-04
|
* man: install jailcheck man page in section 1Libravatar Reiner Herrmann2021-06-04
| | | | like it is declared in the man page itself and referenced by other pages.
* creating googler and ddgr profiles (#4333)Libravatar pirate4867431862021-06-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | * Create googler-common.profile * Create googler.profile * Create ddgr.profile * Update firecfg.config * sort fix * space * space * tightening * comment * fix comment * fix private-etc and ${DOWNLOADS} * fix sort * redundant ${DOWNLOADS}
* Merge pull request #4326 from jsquyres/pr/master/dont-quote-all-cmdlinesLibravatar netblue302021-06-04
|\ | | | | cmdline.c: optionally quote the resulting command line
| * cmdline.c: optionally quote the resulting command lineLibravatar Jeff Squyres2021-06-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If we were launched by sshd, do not add extra quotes to the command line. This is because if firejail is a login shell, sshd will launch firejail thusly: * argv[0]: /path/to/firejail * argv[1]: -c * argv[2]: user's command to execute For example, if the user executed "ssh othernode echo hello world", argv[2] will be "echo hello world". Firejail will then add *extra* quotes to it, resulting in argv[2] becoming "'echo hello world' " (without the "", of course). The user's shell (e.g., bash) will see the extra single quotes and will not split the token into multiple tokens. The shell will be unable to find an executable or intrinsic named "echo hello world ", so it will fail. This commit changes the above behavior if firejail is launched by sshd. In that case, firejail will *not* add the extra single quotes around argv[2]. Specifically: all the tokens still end up in argv[2], but there's no *extra* quotes around argv[2], so the shell will split argv[2] into multiple tokens (if necessary). In the above example, argv[2] will be "echo hello world" (without the ""), which will be split. The shell will then look for an intrinsic or executable named "echo", which will succeed, and "hello world" will ultimately be emitted. Signed-off-by: Jeff Squyres <jsquyres@cisco.com>
* | Fix sort error in profile.template (#4334)Libravatar pirate4867431862021-06-04
| |
* | Merge pull request #4330 from smitsohu/fjconfigLibravatar netblue302021-06-04
|\ \ | | | | | | add firejail.config switch for private-{bin,etc,opt,srv}
| * | add firejail.config switch for private-{bin,etc,opt,srv}Libravatar smitsohu2021-05-22
| | |
* | | Fix seahorse-adventures + CILibravatar rusty-snake2021-06-04
| | |
* | | Better error message for jail_prober.py cli usageLibravatar rusty-snake2021-06-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Curerently sys.argv is accessed without checks, resulting in an IndexError: ``` Traceback (most recent call last): File "/home/rusty-snake/Projects/firejail/contrib/jail_prober.py", line 205, in <module> main() File "/home/rusty-snake/Projects/firejail/contrib/jail_prober.py", line 170, in main profile_path = sys.argv[1] IndexError: list index out of range ``` This commit catches this IndexError and prints a more helpfull message instaed: ``` USAGE: jail_prober.py <PROFILE-PATH> <PROGRAM> ```
* | | Merge pull request #4325 from florianbegusch/fbegusch-improve-jail_prober.pyLibravatar rusty-snake2021-06-04
|\ \ \ | | | | | | | | jail_prober: enable absolut include directives
| * | | jail_prober: enable absolut include directivesLibravatar Florian Begusch2021-06-03
| | | |
* | | | some profile fixes for Debian 10Libravatar netblue302021-06-03
| | | |
* | | | simplify X11 socket whitelistingLibravatar smitsohu2021-06-03
| | | |
* | | | Update profile.templateLibravatar rusty-snake2021-06-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The header of profile.template define this order: IGNORES NOBLACKLISTS ALLOW INCLUDES BLACKLISTS DISABLE INCLUDES
* | | | kodi.profile: Add note for CEC AdaptersLibravatar rusty-snake2021-06-03
| | | | | | | | | | | | | | | | closes #4324
* | | | Fix slack.profile (fixes #4329)Libravatar rusty-snake2021-06-03
| | | |
* | | | Update manpage for whitelist2Libravatar rusty-snake2021-06-03
| | | |
* | | | Merge pull request #4327 from ordinary-dev/fix-telegram-profileLibravatar glitsj162021-06-03
|\ \ \ \ | |/ / / |/| | | Correct typo in telegram-desktop profile
| * | | Correct typo in telegram-desktop profileLibravatar Ivan Reshetnikov2021-06-03
|/ / /
* | | version 0.9.66rc1 released0.9.66rc1Libravatar netblue302021-06-02
| | |
* | | Update README.md & RELNOTESLibravatar rusty-snake2021-05-31
| | |
* | | reorganizing links browsers (#4320)Libravatar pirate4867431862021-05-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create links-common.profile * Update links.profile * Create links2.profile * Update links.profile * Update links2.profile * Update elinks.profile * Update elinks.profile * links2 * Update firecfg.config * Update xlinks.profile * .xlinks * add dbus and whitelist-usr-share-common * .xlinks doesn't exist * revert * Create xlinks2 * xlinks2 * Update xlinks2 * Update xlinks.profile * no wayland * no wayland * doesn't use /tmp/.X11-unix * doesn't use /tmp/.X11-unix * noblacklist /tmp/.X11-unix * noblacklist /tmp/.X11-unix
* | | --debug takes precedence over --quiet (#2743)Libravatar netblue302021-05-30
| | |
* | | fix fcoy error message (#2743)Libravatar netblue302021-05-30
| | |
* | | allow --debug if quite-by-default is set (#3125, #4168)Libravatar netblue302021-05-30
| | |
* | | Merge pull request #4318 from netblue30/vimLibravatar netblue302021-05-29
|\ \ \ | | | | | | | | Update vim syntax highlighting
| * | | vim: escape dots in seccomp.32Libravatar Reiner Herrmann2021-05-29
| | | |
| * | | vim: use setfiletype command for setting filetypeLibravatar Reiner Herrmann2021-05-29
| | | | | | | | | | | | | | | | | | | | this is a bit nicer, as it does not overwrite the filetype if it already has been set.
| * | | vim: use type instead of constant for seccomp actionLibravatar Reiner Herrmann2021-05-29
| | | |
| * | | vim: support commands private-cwd, dbus-*, seccomp.32, allow-debuggersLibravatar Reiner Herrmann2021-05-29
| | | |
| * | | vim: update conditionalsLibravatar Reiner Herrmann2021-05-29
| | | |
| * | | vim: update syscall groupsLibravatar Reiner Herrmann2021-05-29
| | | |
| * | | vim: highlight seccomp-error-actionLibravatar Reiner Herrmann2021-05-29
| | | |
| * | | vim: update list of syscallsLibravatar Reiner Herrmann2021-05-29
| | | |
* | | | Merge pull request #4287 from rusty-snake/restrict-usr-libexecLibravatar netblue302021-05-29
|\ \ \ \ | | | | | | | | | | Restrict /usr/libexec
| * | | | Restrict /usr/libexecLibravatar rusty-snake2021-05-29
| | |_|/ | |/| |
* | | | Merge pull request #4316 from kmk3/configure-improvementsLibravatar netblue302021-05-29
|\ \ \ \ | | | | | | | | | | Configure improvements
| * | | | configure*: use cat instead of many echoesLibravatar Kelvin M. Klann2021-05-28
| | | | | | | | | | | | | | | | | | | | For simplicity and increased portability.
| * | | | configure.ac: run autoupdate to fix autoconf warningLibravatar Kelvin M. Klann2021-05-28
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes the following warning: $ autoconf configure.ac:306: warning: AC_OUTPUT should be used without arguments. configure.ac:306: You should run autoupdate. Environment: $ grep '^NAME' /etc/os-release NAME="Artix Linux" $ pacman -Q autoconf autoconf 2.71-1 Though keep `AC_PREREQ` at 2.68 (released on 2010-09-23[1]), as version 2.71 (which autoupdate automatically bumps to) is rather recent (released on 2021-01-28[2]) and the changes do not appear to require a version bump, as on `AC_INIT` it only adds some quotes, and the rest of the changes are consistent with the autoconf 2.68 manual. From Section 18.4, Obsolete Macros[3]: > — Macro: AC_OUTPUT ([file]..., [extra-cmds], [init-cmds]) > > The use of AC_OUTPUT with arguments is deprecated. This obsoleted > interface is equivalent to: > > AC_CONFIG_FILES(file...) > AC_CONFIG_COMMANDS([default], > extra-cmds, init-cmds) > AC_OUTPUT > > See AC_CONFIG_FILES, AC_CONFIG_COMMANDS, and AC_OUTPUT. Note: The usage of the above format has been present since the inception of configure.ac, on commit 137985136 ("Baseline firejail 0.9.28"). Misc: This is a continuation of #4293. [1] https://lists.gnu.org/archive/html/info-gnu/2010-09/msg00013.html [2] https://lists.gnu.org/archive/html/autoconf/2021-01/msg00126.html [3] https://www.gnu.org/software/autoconf/manual/autoconf-2.68/html_node/Obsolete-Macros.html#index-AC_005fOUTPUT-2058
* | | | Fix #3823 -- Unable to start hexchat with firejailLibravatar rusty-snake2021-05-29
| | | |
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-26 15:07:50 +0000