aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
...
* Merge pull request #4170 from matthew-cline/steamLibravatar Reiner Herrmann2021-04-07
|\ | | | | steam: some more games added
| * steam: also added paths to disable-programs.incLibravatar Matthew Cline2021-04-05
| |
| * steam: some more games addedLibravatar Matthew Cline2021-04-05
| | | | | | | | | | | | | | | | | | | | | | | | Games added: * Don't Starve * Dungeons of Dredmor * Epic * Loop Hero * Pillars of Eternity I * Rogue Legacy I * Slay the Spire modding * Steam World Dig I & II
* | Fix #3783 -- Google Chrome (wayland ozone) is brokenLibravatar rusty-snake2021-04-06
| |
* | Merge pull request #4167 from tredondo/patch-7Libravatar rusty-snake2021-04-06
|\ \ | | | | | | WebStorm: allow Dolphin to access its config file
| * | WebStorm: allow Dolphin to access its config fileLibravatar Ted Robertson2021-04-05
| |/
* / Encourage making overrides in *.local files (#4165)Libravatar glitsj162021-04-06
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments
* Merge pull request #4161 from glitsj16/signal-desktopLibravatar glitsj162021-04-04
|\ | | | | allow notifications + comment fixes
| * drop some stuff based on discussion with @rusty-snakeLibravatar glitsj162021-04-04
| |
| * allow notifications + comment fixesLibravatar glitsj162021-04-04
|/
* Merge pull request #4159 from vnepogodin/masterLibravatar rusty-snake2021-04-04
|\ | | | | New profile: Librewolf Nightly
| * Add Librewolf Nightly profileLibravatar Vladislav Nepogodin2021-04-04
|/
* Merge pull request #4155 from matthew-cline/dropbox-python3Libravatar Reiner Herrmann2021-04-02
|\ | | | | dropbox: allow python3, fix for issue #4150
| * dropbox: allow python3, fix for issue #4150Libravatar Matthew Cline2021-04-01
|/ | | | | | /usr/bin/dropbox needs access to python3, at least for dropbox command-line interface version 2020.03.04 as packaged by the RPM Fusion project. Fixes issue #4150
* Merge pull request #4148 from glitsj16/masterLibravatar glitsj162021-03-31
|\ | | | | Improve comments in apparmor files
| * Add examples to allow running programs from specific home dirLibravatar glitsj162021-03-30
| |
| * Recommend doing overrides in local apparmor dirLibravatar glitsj162021-03-30
| |
* | Merge pull request #4149 from nolanl/masterLibravatar rusty-snake2021-03-31
|\ \ | |/ |/| Add localtime to signal-desktop's profile.
| * Add localtime to signal-desktop's profile.Libravatar Nolan Leake2021-03-30
|/ | | | Without it, all chat timestamps are in UTC.
* Fixes (man: allow rustup; Books -> gnome-books)Libravatar rusty-snake2021-03-28
|
* Improve issue template (#4141)Libravatar rusty-snake2021-03-25
| | | | - Avoid confusing on "What changed calling the program by path" - Checklist: Questions should be asked in discussions
* private-lib: trim ending slashes and dotsLibravatar smitsohu2021-03-25
| | | | | | | | | | | | | | | | Currently pathological endings like in /foo/bar/./. are mapped to RUN_LIB_DIR, with the effect that the mount is skipped because this directory always exists at this point in time. Even though it's harmless, it is wrong behaviour, so handle trailing slashes and dots before doing the mounts. Also avoids running into an assertion if there is a trailing slash. Plus few small cosmetic changes to make things more explicit.
* fix hardening commentLibravatar rusty-snake2021-03-24
| | | | [skip ci]
* Merge pull request #4140 from glitsj16/follow-upsLibravatar glitsj162021-03-24
|\ | | | | Follow up for #4126
| * fix hardening commentLibravatar glitsj162021-03-24
| |
| * fix network access commentLibravatar glitsj162021-03-24
|/
* Merge pull request #4126 from rusty-snake/better-renamesLibravatar netblue302021-03-24
|\ | | | | Rename chromium-common-hardened and feh-network …
| * Rename chromium-common-hardened and feh-network …Libravatar rusty-snake2021-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | …again I am still not really happy about the rename from #4028, #4029, #4030 and #4031. I've no problem with moving away .inc but I don't like the result. So here's a proposal to make this better: | NAME | DESCRIPTION | | ------------------------- | ------------------------------------------------------------ | | `*-addons.profile` | (include) Allow external addons | | `*-common.profile` | (include) Common parts across multiple profiles | | `*-hardened.inc.profile` | Further hardening which can not be made default | | `*-network.inc.profile` | Allow optional network access | | `*-whitelist.inc.profile` | Enabled whitelisting (which can not be made default) ¹ | | `*.inc.profile` | Other profile specific includes | | `*.profile` | A profile for a program | | `allow-*.inc` | Multiple `noblacklist`s that should always be used together | | `disable-*.inc` | `blacklist`ing | | `whitelist-*-common.inc` | common `whitelist`s | | `*.inc` | Other generic includes | | `globals.local` | User overrides for all profiles | | `*.local` | Per profile user overrides | ¹ can be used for programs like KeePassXC or editors.
* | Merge pull request #4116 from Neo00001/masterLibravatar netblue302021-03-24
|\ \ | | | | | | Update vmware.profile & dbus-policy for amarok
| * | Update amarok.profileLibravatar Neo000012021-03-21
| | |
| * | Update vmware.profileLibravatar Neo000012021-03-21
| | |
| * | Update vmware.profileLibravatar Neo000012021-03-19
| | |
| * | Update amarok.profileLibravatar Neo000012021-03-19
| | |
* | | Merge pull request #4139 from kmk3/makefiles-rm-cclassLibravatar netblue302021-03-24
|\ \ \ | | | | | | | | makefiles: replace character class with plain char
| * | | makefiles: replace character class with plain charLibravatar Kelvin M. Klann2021-03-24
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using the "wildcard" internal functions. This usage has been present since the first "real" commit in the repository: commit 137985136 ("Baseline firejail 0.9.28"). > H_FILE_LIST = $(sort $(wildcard *.[h])) > C_FILE_LIST = $(sort $(wildcard *.c)) There is only a single character (i.e.: "h") inside the character class, so its usage should make no functional difference. It may stem from a construct that could have originally looked something like this: C_FILE_LIST = $(sort $(wildcard *.[ch])) Which would match both the implementation files and the headers. From Section 4.4, [Using Wildcard Characters in File Names][1] of the GNU make manual: > A single file name can specify many files using wildcard characters. > The wildcard characters in make are ‘*’, ‘?’ and ‘[…]’, the same as in > the Bourne shell. For example, *.c specifies a list of all the files > (in the working directory) whose names end in ‘.c’. See also Section 2.13, [Pattern Matching Notation][2] of POSIX.1-2017. Commands used to search, replace and clean up: $ find . -name .git -prune -o -type f \ \( -name Makefile -o -name Makefile.in \ -o -name '*.mk' -o -name '*.mk.in' \) -print0 | xargs -0 grep -Fl '$(wildcard *.[h])' | tr '\n' '\000' | xargs -0 sed -i.bak -e \ 's/\$(wildcard \*.\[h\])/$(wildcard *.h)/' $ find . -name .git -prune -o -type f \ -name '*.bak' -exec rm '{}' + Note: To make sure that this doesn't actually change anything functionally, I built firejail-git (AUR) on Artix from master and from this commit and diffing the resulting files produced no output (other than showing changes related to the build timestamps). Misc: Reference to the previous makefile-related changes: commit 2465f9248 ("makefiles: make all, clean and distclean PHONY") / https://github.com/netblue30/firejail/pull/4024 [1]: https://www.gnu.org/software/make/manual/html_node/Wildcards.html [2]: https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3_chap02.html
* | / Update k3b.profileLibravatar Neo000012021-03-23
| |/ |/| | | #2989
* | Merge pull request #4125 from glitsj16/gnome-logsLibravatar glitsj162021-03-21
|\ \ | | | | | | fixes for gnome-logs
| * | fixes for gnome-logsLibravatar glitsj162021-03-21
|/ /
* | Merge pull request #4119 from pirate486743186/patch-14Libravatar Reiner Herrmann2021-03-21
|\ \ | | | | | | [minor] .cache/youtube-viewer in disable-programs.inc
| * | forgoten whitelistLibravatar pirate4867431862021-03-20
| | |
| * | .cacheLibravatar pirate4867431862021-03-20
| | |
| * | adding .cache/youtube-viewerLibravatar pirate4867431862021-03-20
| | |
* | | Merge pull request #4121 from glitsj16/clawskerLibravatar glitsj162021-03-20
|\ \ \ | |/ / |/| | fix private-lib in clawsker.profile
| * | fix private-libLibravatar glitsj162021-03-20
|/ /
* | Fix nheko (#4117)Libravatar rusty-snake2021-03-19
| | | | | | closes #4115
* | man.progile: readonly instead of whitelistLibravatar rusty-snake2021-03-19
| |
* | Update README.md & RELONTS; Fix manpage HAVE_NETWORKLibravatar rusty-snake2021-03-19
| |
* | Merge pull request #4069 from rusty-snake/hasher-profilesLibravatar netblue302021-03-19
|\ \ | | | | | | Add profile for checksum tools
| * | Add profile for checksum toolsLibravatar rusty-snake2021-03-14
| | | | | | | | | | | | | | | | | | * Oops! Thanks for catching. * Add quiet
* | | Merge pull request #3984 from nidamanx/patch-1Libravatar netblue302021-03-19
|\ \ \ | | | | | | | | Fix for KeePassXC plugin
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 23:42:33 +0000