aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* misc thingsLibravatar rusty-snake2020-02-22
| | | | | | - spelling suggestion from @glitsj16 on fda62527 - drop python2 from openshot it never has a python2 version - #3126 note in manpage: cannot combine --private with --private=
* Add profile for offical Linux Teams application (#3152)Libravatar Andreas Hunkeler2020-02-22
| | | | | | | | | | | | | | | | | | | | | | | | * Add profile for offical Linux Teams application * fix: add mkdir suggestions in Teams profile * Merge suggestions for Teams profile * Add suggestion to Teams profile * Add Teams to firecfg.config * Add paths from Teams profile to disable-programs * Remove the duplicated whitelist for downloads in Teams profile Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com> * Cleanup teams profile after testing * Add comment to Teams profile Co-authored-by: rusty-snake <print_hello_world+GitHub@protonmail.com>
* Allow exec from /usr/libexec & co. with AppArmorLibravatar Quentin Minster2020-02-22
|
* Add support for SELinux labelingLibravatar Topi Miettinen2020-02-22
| | | | | | | | | | | | | | | | | | | | | | | Running `firejail --noprofile --private-bin=bash,ls ls -1Za /usr/bin` shows that the SELinux labels are not correct: ``` user_u:object_r:user_tmpfs_t:s0 . system_u:object_r:usr_t:s0 .. user_u:object_r:user_tmpfs_t:s0 bash user_u:object_r:user_tmpfs_t:s0 ls ``` After fixing this: ``` system_u:object_r:bin_t:s0 . system_u:object_r:usr_t:s0 .. system_u:object_r:shell_exec_t:s0 bash system_u:object_r:bin_t:s0 ls ``` Most copied files and created directories should now have correct labels (bind mounted objects keep their labels). This is useful to avoid having to change the SELinux rules when using Firejail.
* Whitelist more /usr/share for okular and othersLibravatar Antonio Russo2020-02-17
| | | | | | | | | Some distributions include fonts in the texmf and texlive subdirectories of /usr/share. This makes those fonts accessible, addressing buggy behavior in okular where some text fails to render. This also whitelists /usr/share/config.kcfg which contains default settings that should be available to many applications.
* add tool to dump seccomp filtersLibravatar smitsohu2020-02-17
|
* apparmor: minor enhancementsLibravatar Vincent432020-02-15
| | | Allow writing some proc paths used by browsers but restrict it to their owner.
* allow networking in openshot.profileLibravatar glitsj162020-02-13
| | | Openshot 2.5.0 needs networking. This fixes #3221.
* added by included profileLibravatar rusty-snake2020-02-10
|
* harden subdownloaderLibravatar rusty-snake2020-02-10
|
* firecfg notes in profilesLibravatar rusty-snake2020-02-10
|
* Add a lot of profilesLibravatar rusty-snake2020-02-10
|
* improve baloo hardening suggestionLibravatar smitsohu2020-02-09
|
* harden wineLibravatar smitsohu2020-02-09
|
* simplescreenrecorder.profileLibravatar rusty-snake2020-02-09
| | | | | - mdwe broken - ${HOME}/.ssr
* openSUSE fix: search login.defs in /usr/etc, tooLibravatar smitsohu2020-02-09
| | | | see issue #3145
* openSUSE fix: mount private-etc on /usr/etc as wellLibravatar smitsohu2020-02-09
| | | | see issue #3145
* include wvc to more profiles (#3209)Libravatar glitsj162020-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * include wvc in aria2c.profile * include wvc in clawsker.profile * include wvc in conky.profile * include wvc in dconf.profile * include wvc in dconf-editor.profile * include wvc in exiftool.profile * include wvc in font-manager.profile * include wvc in gconf.profile * include wvc in git.profile * include wvc in gjs.profile * include wvc in gpg.profile * include wvc in img2txt.profile * include wvc in mediainfo.profile * include wvc in mpd.profile * include wvc in nitroshare.profile * include wvc in ocenaudio.profile * include wvc to ping.profile * include wvc in simple-scan.profile * include wvc in simplescreenrecorder.profile * include wvc in sysprof.profile * include wvc in tshark.profile * include wvc in uget-gtk.profile * include wvc in viewnior.profile * include wvc in weechat.profile
* harden makepkg.profileLibravatar glitsj162020-02-08
|
* fix video play in liferea.profileLibravatar glitsj162020-02-08
|
* fix includes in mencoder.profileLibravatar glitsj162020-02-08
|
* harden mencoder.profileLibravatar glitsj162020-02-08
|
* harden gpg-agent.profileLibravatar glitsj162020-02-08
|
* refactor gnome-keyring.profile as whitelistLibravatar glitsj162020-02-07
|
* refactor geekbench.profile as whitelistLibravatar glitsj162020-02-07
|
* fix preview functionality in subdownloader.profileLibravatar glitsj162020-02-07
|
* Fixed formatting (autopep8 + black + manual postprocessing). (#3208)Libravatar KOLANICH2020-02-07
| | | | | | Added typing. Replaced os.path with pathlib. Made it work. Fixes in .gitignore.
* Fixing the bug in 189772034b211578aca59540d7277f45da4f45d2 breaking meldLibravatar KOLANICH2020-02-07
|
* revert #3178Libravatar glitsj162020-02-03
| | | It is still undecided what causes #2681 for the OP. Let's not change the seccomp filter for everyone until we have reproducible issues.
* Add gnome-hexgl.profileLibravatar rusty-snake2020-02-03
|
* fix gnome-passwordsafe -- no whitelist globing yetLibravatar rusty-snake2020-02-03
|
* resolve cppcheck memleak warningLibravatar smitsohu2020-02-02
|
* Housekeeping: consistent ${HOME} instead of ~Libravatar Fred Barclay2020-02-01
|
* housekeeping: strip unneeded whitespaceLibravatar Fred Barclay2020-02-01
|
* Merge pull request #3156 from smitsohu/filenameLibravatar smitsohu2020-02-01
|\ | | | | print rejected character in invalid filenames
| * remove parentheses from set of rejected charactersLibravatar smitsohu2020-01-28
| | | | | | issue #3001
| * replace control characters and print rejected filenamesLibravatar smitsohu2020-01-22
| |
| * reject control characters in file namesLibravatar smitsohu2020-01-17
| |
| * print rejected character in invalid filenamesLibravatar smitsohu2020-01-17
| |
* | profiles: whitelist /usr/share/doc in some profilesLibravatar Reiner Herrmann2020-01-31
| |
* | Add a profile alias for multimc5Libravatar Tad2020-01-30
| |
* | add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | | | | Thanks to @rusty-snake for his comment in #3198.
* | add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | | | | Thanks to @rusty-snake for suggesting to move /usr/share/file to wusc in #3198.
* | fix wusc in nano.profileLibravatar glitsj162020-01-30
| | | | | | This fixes #3198.
* | fix spelling in disable-common.incLibravatar glitsj162020-01-29
| |
* | Add profiles for the WPS-OfficeLibravatar rusty-snake2020-01-29
| |
* | fix private-lib for Gentoo in unf.profileLibravatar glitsj162020-01-29
| | | | | | Thanks to @s-hamman for reporting this in the comments of #3193.
* | fix private-lib for Gentoo in geekbench.profileLibravatar glitsj162020-01-29
| | | | | | Thanks to @s-hamman for reporting this in the comments of #3193.
* | fix private-lib for Gentoo in zathura.profileLibravatar glitsj162020-01-29
| |
* | add florianbegusch to READMELibravatar glitsj162020-01-29
| |
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-08-01 06:42:44 +0000