aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Add command suggested by rusty-snakeLibravatar Kishore Gopalakrishnan2021-05-02
|
* Leave the kwallet dbus stuff commented for now.Libravatar Kishore Gopalakrishnan2021-05-02
|
* Remove unnecessary permission.Libravatar Kishore Gopalakrishnan2021-05-02
| | | | | Signing in and so on works without this, so I'm not sure why it was enabled in the flatpak.
* Remove apparently unnecessary dbus permission.Libravatar Kishore Gopalakrishnan2021-05-02
| | | | | I had copied this from the flatpak listing, but the application works without this.
* Remove unnecessary include.Libravatar Kishore Gopalakrishnan2021-05-02
|
* Add cache directory to disable-programs.incLibravatar Kishore Gopalakrishnan2021-05-02
|
* Remove unnecessary noblacklist.Libravatar Kishore Gopalakrishnan2021-05-02
|
* Remove newlines and comments.Libravatar Kishore Gopalakrishnan2021-05-02
|
* Add neochat to enabled programs.Libravatar Kishore Gopalakrishnan2021-05-02
|
* Sort options using sort.pyLibravatar Kishore Gopalakrishnan2021-05-02
|
* Remove comments.Libravatar Kishore Gopalakrishnan2021-05-02
|
* Add neochat files to disable-programs.incLibravatar Kishore Gopalakrishnan2021-05-02
|
* Initial profile for neochatLibravatar Kishore Gopalakrishnan2021-05-02
|
* typo fixLibravatar glitsj162021-05-01
|
* Rework sort_protocol (sort.py) (#4226)Libravatar rusty-snake2021-04-30
| | | Support "+", "-" and "=" prefixes (introduced in cddc4832 + 5ffd9287)
* fixup! Harden some game profilesLibravatar rusty-snake2021-04-30
|
* Harden some game profilesLibravatar rusty-snake2021-04-30
|
* Merge pull request #4219 from Neo00001/masterLibravatar Neo000012021-04-28
|\ | | | | Some minor changes
| * Some minor changesLibravatar Neo000012021-04-26
| |
* | Merge pull request #4217 from kmk3/delete-profiesLibravatar Kelvin M. Klann2021-04-28
|\ \ | |/ |/| Delete *.profie
| * Delete *.profieLibravatar Kelvin M. Klann2021-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit 41f69f7a7 ("Commons of opengl-game-wrapper.sh") / PR #4071. Each one is a duplicate of a .profile file that was added on the same commit. Commands used to search and replace (which is what causes their deletion): $ git ls-files -z -- '*.profie' | xargs -0 -I '{}' sh -c "git mv -f '{}' \"\`printf '%s\n' '{}' | sed 's/.[^.]*$//'\`.profile\""
* | Fix #4218 -- Digikam - unable to customize toolbarsLibravatar rusty-snake2021-04-26
|/
* Add some more paths-ignore to build-extra.ymlLibravatar rusty-snake2021-04-24
|
* Update README.md & RELNOTES: add new profilesLibravatar rusty-snake2021-04-24
|
* Merge pull request #4071 from rusty-snake/open-game-wrapperLibravatar rusty-snake2021-04-24
|\ | | | | Commons of opengl-game-wrapper.sh
| * Commons of opengl-game-wrapper.shLibravatar rusty-snake2021-04-24
| | | | | | | | | | | | | | | | | | | | | | [skip ci] - Add allow-opengl-game.inc - Add profiles for alienarena-wrapper, ballbuster-wrapper, colorful-wrapper, etr-wrapper, gl-117-wrapper, glaxium-wrapper, neverball-wrapper, neverputt-wrapper, pinball-wrapper, supertuxkart-wrapper - Use allow-opengl-game.inc in xonotic.profile and the profiles above - xonotic.profile: simplify private-bin by using xonotic*
| * Add profiles for alienarena, ballbuster, colorful…Libravatar rusty-snake2021-04-24
| | | | | | | | | | | | | | …, gl-117, glaxium, pinball alienarena is missing in firecfg.config by intention, I didn't tested any online multiplayer.
* | Merge pull request #4179 from jose1711/gnomeconnectorLibravatar rusty-snake2021-04-24
|\ \ | | | | | | Add examples how to allow browser access to Gnome extensions connector
| * | Improve hints for allowing browser access to Gnome extensions connectorLibravatar Jose Riha2021-04-16
| | | | | | | | | | | | Fixes #4177.
* | | Add FireDragon profile (#4203)Libravatar Nico2021-04-24
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add firedragon profile * Point private-etc to firefox-common.local Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Add to firecfg.config * Add firedragon to disable-programs.inc * Correct dir * Remove private-etc Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | file-roller:private-bin: add atool,bsdtar,xzdec,unzstdLibravatar rusty-snake2021-04-21
| | | | | | | | | | | | | | | | | | | | as pointed out by @glitsj16 in 51e67fd4. > FYI, a quick check shows atool,bsdtar,xzdec,unzstd are still missing > from private-bin. Not sure if we actually need to bring those in too. They add virtually no new permissions fr has already a long private-bin with dozens of archivers. Before we break anything I add them.
* | profile fixesLibravatar rusty-snake2021-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | README.md/RELNOTES: - Add new profiles etr.profile: - adding passwd to private-etc makes it work for me file-roller.profile - add netfilter - add zstd to private-bin - add cp,mv,rm to private-bin which seems to be necessary in some cases. #4113 is likely fixed with this but wait for OP.
* | Update Librewolf profile and Add Sway profile (#4164)Libravatar Vladislav Nepogodin2021-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add Sway profile * Fix issue Not working then including firefox-common-addons.profile * Allow sway's fallback config * So I agree with @glitsj16 and @BL4CKH47H4CK3R so.. `No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options` * well.. Revert `include whitelist-usr-share-common.inc` Sync with Firefox profile * πŸ˜„ What just hapened * πŸ”„ Sync with upstream * Merge tested from PR * πŸ”„ Sync with upstream * Merge tested from PR * Revert changes * Add Sway profile * Fix issue Not working then including firefox-common-addons.profile * Allow sway's fallback config * So I agree with @glitsj16 and @BL4CKH47H4CK3R so.. `No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options` * πŸ”„ Rebase * πŸ˜„ What just hapened * Merge tested from PR * πŸ”„ Sync with upstream * Merge tested from PR * Revert changes * Update * Update librewolf.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | unblock tor support in brave (#4200)Libravatar glitsj162021-04-18
| | | | | | | | | | | | | | | | | | | | | | * opt-in for brave's native tor support * fix brave's native tor support * warn about potential tor breakage when using apparmor * update comment for opting in to tor * move brave's tor apparmor fix in brave.profile
* | broaden support for pcre in private-libLibravatar glitsj162021-04-18
| | | | | | Follow-up for https://github.com/netblue30/firejail/commit/692311bcc6fe0744d7831459ad7ec0bc5811b9a9. Thanks to @rusty-snake for tracking this down in #4202.
* | broaden support for pcre in private-libLibravatar glitsj162021-04-17
| | | | | | Fixes #4202 until we have tooling to generate system-specific lists at install time, as suggested by @loveshack.
* | Add allow-bin-sh.inc to profile.templateLibravatar rusty-snake2021-04-17
| | | | | | | | [skip ci]
* | Merge pull request #4196 from pholodniak/patch-1Libravatar glitsj162021-04-15
|\ \ | | | | | | profstats - fix printf for include globals
| * | Update main.cLibravatar pholodniak2021-04-15
|/ / | | | | profstats - correct variable for include global
* | add passwd to private-etc (#4193)Libravatar glitsj162021-04-14
| |
* | Create tmux.profile (#4188)Libravatar rusty-snake2021-04-14
| | | | | | requested in #1139 by @vatonbero
* | New profile: Quodlibet (#3983)Libravatar Bundy012021-04-14
| | | | | | | | | | * New profile: Quodlibet * New profile: Quodlibet
* | Fix export in apostropheLibravatar rusty-snake2021-04-12
| |
* | profile fixesLibravatar rusty-snake2021-04-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | discord-canary.profile: fix #4175 flameshot.profile: - private-tmp break flameshot (wayland only?) - Screengrabbing (under wayland) is done via dbus, the following names must be allowed: - GNOME: org.gnome.Shell - KDE: org.kde.KWin - Sway: org.freedesktop.portal.Desktop - Allow notifications and tray too, because org.gnome.Shell (for example) is already totaly unsafe. mumble.profile: fix #4181
* | Merge pull request #4180 from jose1711/readme_typoLibravatar Reiner Herrmann2021-04-11
|\ \ | |/ |/| Fix typo (adivsory -> advisory)
| * Fix typo (adivsory -> advisory)Libravatar Jose Riha2021-04-10
|/
* Fix typo (#4176)Libravatar Jose Riha2021-04-10
|
* Merge pull request #4174 from Neo00001/masterLibravatar Neo000012021-04-09
|\ | | | | Minor Fixes
| * Minor FixesLibravatar Neo000012021-04-09
|/
* fix comment typoLibravatar glitsj162021-04-07
|
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-05 19:32:26 +0000