Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | fix manpage wanings (#3563) | netblue30 | 2020-10-19 |
| | |||
* | readme update | netblue30 | 2020-10-17 |
| | |||
* | Merge pull request #3674 from topimiettinen/rmenv-apply-early | netblue30 | 2020-10-17 |
|\ | | | | | Apply --rmenv immediately to help to avoid the env var length check | ||
| * | Apply --rmenv immediately to help to avoid the env var length check | Topi Miettinen | 2020-10-16 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove environment variables with --rmenv immediately. This fixes removing long environment variables (LS_COLORS generated by vivid), previously the length filter would trip before the command was processed. This changes user visible behavior slightly, for example --rmenv=LANG now applies also to Firejail, while earlier it would only apply to sandboxed program. Partially fixes #3673, but not handling `rmenv` in profiles. Also suggest --rmenv when there are problems with enviroment variables. Signed-off-by: Topi Miettinen <toiwoton@gmail.com> | ||
* | | Merge pull request #3675 from hlein/fix-carriageret | netblue30 | 2020-10-17 |
|\ \ | | | | | | | Strip out \r's. | ||
| * | | Strip out \r's. | Hank Leininger | 2020-10-15 |
| | | | | | | | | | | | | | | | | | | | | | As is, this will not execute because env attempts to locate the executable 'python\r', which does not exist. Signed-off-by: Hank Leininger <hlein@korelogic.com> | ||
* | | | update firefox fedora private-bin [skip ci] | rusty-snake | 2020-10-16 |
| | | | |||
* | | | flameshot has changed it's APP-ID | rusty-snake | 2020-10-16 |
|/ / | | | | | | | closes #3643 | ||
* | | Formatting for better PEP-8 compliance | Fred Barclay | 2020-10-15 |
| | | | | | | | | Will do a more in-depth review later, these are just style improvements | ||
* | | Block VS Code preferences from being committed | Fred Barclay | 2020-10-15 |
|/ | |||
* | Merge pull request #3672 from hlein/fix-py-shebang | Reiner Herrmann | 2020-10-15 |
|\ | | | | | Updated fix_private-bin.py shebang to use env python3 like other contrib/*.py scripts | ||
| * | Updated shebang to use env python3 like other contrib/*.py scripts | Hank Leininger | 2020-10-14 |
|/ | | | | | | This will simplify some distro packagings of firejail. Signed-off-by: Hank Leininger <hlein@korelogic.com> | ||
* | Merge pull request #3670 from netblue30/scan_build | Reiner Herrmann | 2020-10-14 |
|\ | |||
| * | Remove unused variables | Reiner Herrmann | 2020-10-14 |
| | | | | | | | | | | Fixes clang-analyzer warnings: "Although the value stored to 'xxxxx' is used in the enclosing expression, the value is never actually read from 'xxxxx'" | ||
| * | build: enable CI build with scan-build | Reiner Herrmann | 2020-10-14 |
|/ | |||
* | Merge pull request #3667 from Neo00001/patch-2 | rusty-snake | 2020-10-13 |
|\ | | | | | Update wire-desktop.profile (again) | ||
| * | Update wire-desktop.profile | Neo00001 | 2020-10-13 |
| | | |||
| * | Update wire-desktop.profile (again) | Neo00001 | 2020-10-13 |
| | | | | | | On arch,wire-desktop is now depending on electron9. Using wildcard for this sorta packages would be better. | ||
* | | README | netblue30 | 2020-10-13 |
| | | |||
* | | merges, fix for #3662 etc. | netblue30 | 2020-10-13 |
| | | |||
* | | Merge pull request #3664 from dpellegr/master | netblue30 | 2020-10-13 |
|\ \ | |/ |/| | Allowing links in netns | ||
| * | allowing links in netns | dpellegr | 2020-10-12 |
|/ | |||
* | man: call preproc.awk via Makefile, as the shebang hardcodes the path | Reiner Herrmann | 2020-10-10 |
| | |||
* | build: check for presence of gawk when manpages will be built | Reiner Herrmann | 2020-10-10 |
| | | | | Fixes: #3661 | ||
* | Merge pull request #3660 from kris7t/apparmor-run | Kristóf Marussy | 2020-10-10 |
|\ | | | | | Fix AppArmor 3.0 support (closes #3659) | ||
| * | Fix AppArmor 3.0 support (closes #3659) | Kristóf Marussy | 2020-10-10 |
| | | | | | | | | | | | | | | | | | | | | | | | | AppArmor introduces the @{run} variable, which is used in <abstractions/dbus-strict> and <abstractions/dbus-session-strict> among other places. Thus, we follow suit of the built-in profiles and #include <tunables/global>, which includes <tunables/run> in AppArmor 3.0, defining the variable. As <tunables/global> exists in previous versions of AppArmor, too, this patch does not introduce a backward-compatibility issue with Apparmor 2.x. | ||
* | | Merge pull request #3653 from briaeros/master | Fred Barclay | 2020-10-10 |
|\ \ | |/ |/| | fix command test in jail_prober.py | ||
| * | jail_prober : first pass without any argument | alpha | 2020-10-09 |
| | | |||
| * | fix command test in jail_prober.py | alpha | 2020-10-05 |
| | | |||
* | | build: add -fPIE to LDFLAGS | Reiner Herrmann | 2020-10-08 |
| | | | | | | | | | | | | | | according to GCC documentation (https://gcc.gnu.org/onlinedocs/gcc/Link-Options.html): "For predictable results, you must also specify the same set of options used for compilation (-fpie, -fPIE, or model suboptions) when you specify this linker option." | ||
* | | build: let manpages depend on src/man target instead of non-existing .man files | Reiner Herrmann | 2020-10-06 |
| | | |||
* | | build: fail mkman.sh when one of the commands fails | Reiner Herrmann | 2020-10-06 |
| | | |||
* | | Merge pull request #3657 from netblue30/selinux | Reiner Herrmann | 2020-10-06 |
|\ \ | |||
| * | | selinux: exit when selinux is enabled but opening handle fails | Reiner Herrmann | 2020-10-06 |
| | | | |||
| * | | selinux: don't try to relabel path when selinux is not enabled | Reiner Herrmann | 2020-10-06 |
| | | | | | | | | | | | | Fixes: #3654 | ||
* | | | Merge pull request #3656 from Neo00001/patch-1 | rusty-snake | 2020-10-06 |
|\ \ \ | |/ / |/| | | Update vmware.profile | ||
| * | | Update vmware.profile | Neo00001 | 2020-10-06 |
| | | | | | | | | | With private-etc enabled vmware-tools doesn't get installed. Existing VM with an installed vmware-tools works as usual. For the time being keep it commented. | ||
* | | | fix indentation | Reiner Herrmann | 2020-10-06 |
|/ / | |||
* | | Revert "install vim files to addons directory instead of vimfiles" | rusty-snake | 2020-10-06 |
| | | | | | | | | | | | | | | | | | | This reverts commit 4422ce65a9d1e903e583d0f2eca9dc1ee7c839e9. ------ Revert for now as it breaks on some distros (namely Fedora), see https://github.com/netblue30/firejail/commit/4422ce65a9d1e903e583d0f2eca9dc1ee7c839e9#commitcomment-42999952 | ||
* | | DHCP fixes | netblue30 | 2020-10-06 |
| | | |||
* | | install vim files to addons directory instead of vimfiles | Reiner Herrmann | 2020-10-05 |
| | | |||
* | | Fix typo | Reiner Herrmann | 2020-10-05 |
| | | |||
* | | Fix spelling | Reiner Herrmann | 2020-10-05 |
|/ | |||
* | testing | netblue30 | 2020-10-05 |
| | |||
* | set as 0.9.64rc2 for development until we release the real one | netblue30 | 2020-10-05 |
| | |||
* | testing 0.9.64rc1 - disable dumpable working for this release, problems on ↵0.9.64rc1 | netblue | 2020-10-04 |
| | | | | Debian8; we will bring it back in the next release | ||
* | testing 0.9.64rc1 | netblue30 | 2020-10-04 |
| | |||
* | move to addgroup --system (#3632) | netblue30 | 2020-10-03 |
| | |||
* | document compile-time dependency on gawk | netblue30 | 2020-10-03 |
| | |||
* | make test-compile for disable manpages | netblue30 | 2020-10-03 |
| |