aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
...
* remove dependency on sendfile syscallLibravatar smitsohu2022-07-11
|
* simplify put optionLibravatar smitsohu2022-07-11
| | | | | copy using file descriptors, similar to implementation of get option
* aria2c.profile: add comment to winetricks workaroundLibravatar Kelvin M. Klann2022-07-11
| | | | | | | | As a reminder to create a profile for winetricks instead of allowing access to its paths to programs used by winetricks (see #5238). Added on commit 0ec1c66b5 ("aria2c.profile: allow access to ~/.cache/winetricks") / PR #5238.
* testing fixLibravatar netblue302022-07-10
|
* Merge pull request #5242 from alkim0/masterLibravatar netblue302022-07-10
|\ | | | | Warn when encountering EIO during remount
| * Warn when encountering EIO during remountLibravatar Albert Kim2022-07-07
| | | | | | | | | | | | Instead of simply erroring out, just warn the user that a filesystem was unable to be remounted due to EIO. This is helpful for FUSE filesystems which might be buggy or having issues.
* | Merge pull request #5238 from davidebeatrici/aria2c-winetricks-cacheLibravatar netblue302022-07-10
|\ \ | |/ |/| aria2c.profile: allow access to ~/.cache/winetricks
| * aria2c.profile: allow access to ~/.cache/winetricksLibravatar Davide Beatrici2022-07-06
|/ | | | Otherwise winetricks fails to download packages.
* add Colossal Order to steam.profileLibravatar 0x9fff002022-07-05
|
* build(deps): bump github/codeql-action from 2.1.14 to 2.1.15Libravatar dependabot[bot]2022-07-04
| | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.14 to 2.1.15. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/41a4ada31ba866a7f1196b9602703a89edd69e22...3f62b754e23e0dd60f91b744033e1dc1654c0ec6) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* mergesLibravatar netblue302022-06-30
|
* Merge pull request #5224 from ↵Libravatar netblue302022-06-30
|\ | | | | | | | | netblue30/dependabot/github_actions/github/codeql-action-2.1.14 build(deps): bump github/codeql-action from 2.1.12 to 2.1.14
| * build(deps): bump github/codeql-action from 2.1.12 to 2.1.14dependabot/github_actions/github/codeql-action-2.1.14Libravatar dependabot[bot]2022-06-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.12 to 2.1.14. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/27ea8f8fe5977c00f5b37e076ab846c5bd783b96...41a4ada31ba866a7f1196b9602703a89edd69e22) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | Merge pull request #5223 from Serphentas/steam-paradox-launcher-fixLibravatar netblue302022-06-30
|\ \ | | | | | | add Paradox Launcher to Steam profile
| * | add Paradox Launcher to blacklisted programs listLibravatar Serphentas2022-06-26
| | |
| * | add Paradox Launcher to Steam profileLibravatar Serphentas2022-06-26
| |/
* | Merge pull request #5219 from kmk3/build-reduce-config-filesLibravatar netblue302022-06-30
|\ \ | |/ |/| build: reduce autoconf input files from 32 to 2
| * makefiles: add generated files as dependenciesLibravatar Kelvin M. Klann2022-06-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the previous commit ("makefiles: stop failing when config.mk does not exist", 2022-06-23), make will not immediately fail when trying to build a target without having the proper compile-time flags (which are defined on common.mk). For example, when running the command below: make distclean && make It will throw an error only after (mis-)compiling multiple objects. So add a dependency on config.mk on every target that uses output variables (such as @NAME@ / $(NAME)) on its recipe. And add a dependency on config.sh on targets that call shell scripts that use output variables (such as @NAME@ / $NAME). Also, add a recipe for config.mk / config.sh telling to run ./configure, to make it a bit more obvious just in case. With this commit, make will abort earlier, by detecting that the config.mk / config.sh dependency does not exist. This happens before trying to execute the recipe. This also makes the dependencies more accurate, since if config.mk (which defines some CFLAGS) is changed, the CFLAGS may also have changed, so a target that uses CFLAGS should probably be considered out of date in this case anyway. Relates to #5140.
| * makefiles: stop failing when config.mk does not existLibravatar Kelvin M. Klann2022-06-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This allows running `make clean` and `make distclean` (and possibly others) without having to run ./configure beforehand. Note that some packaging-related targets still depend on the existence of generated files. For example: * dist: config.mk * deb: config.sh Commands used to search and replace: $ git grep -Elz 'include *([^ ]*/)?config.mk' | xargs -0 -I '{}' \ sh -c "printf '%s\n' \ \"\$(sed -E 's|^include *(([^ ]*/)?config.mk)|-include \1|' '{}')\" >'{}'" Relates to #5140.
| * build: reduce autoconf input files from 32 to 2Libravatar Kelvin M. Klann2022-06-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Configure summary: autoconf essentially only parses configure.ac and generates the configure script (that is, the "./configure" shell script). The latter is what actually checks what is available on the system and internally sets the value of the output variables. It then, for every filename foo in AC_CONFIG_FILES (and for every output variable name BAR in AC_SUBST), reads foo.in, replaces every occurrence of `@BAR@` with the value of the shell variable `$BAR` and generates the file foo from the result. After this, configure is finished and `make` could be executed to start the build. Now that (as of #5140) all output variables are only defined on config.mk.in and on config.sh.in, there is no need to generate any makefile nor any other mkfile or shell script at configure time. So rename every "Makefile.in" to "Makefile", mkdeb.sh.in to mkdeb.sh, src/common.mk.in to src/common.mk and leave just config.mk and config.sh as the files to be generated at configure time. This allows editing and committing all makefiles directly, without potentially having to run ./configure in between. Commands used to rename the makefiles: $ git ls-files -z -- '*Makefile.in' | xargs -0 -I '{}' sh -c \ "git mv '{}' \"\$(dirname '{}')/Makefile\"" Additionally, from my (rudimentary) testing, this commit reduces the time it takes to run ./configure by about 20~25% compared to commit 72ece92ea ("Transmission fixes: drop private-lib (#5213)", 2022-06-22). Environment: dash 0.5.11.5-1, gcc 12.1.0-2, Artix Linux, ext4 on an HDD. Commands used for benchmarking each commit: $ : >time_configure && ./configure && make distclean && for i in $(seq 1 10); do { time -p ./configure; } 2>>time_configure; done $ grep real time_configure | awk '{ total += $2 } END { print total/NR }'
* | test/fs: enable private-lib in firejail.configLibravatar Kelvin M. Klann2022-06-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before running test/fs/private-lib.exp. Inspired by the configuration changes that are done on test/root/checkcfg.exp. Reason: Since commit 9741d0b60 ("fix disabled private-lib in /etc/firejail/firejail.config", 2022-06-23), the "build_and_test" job fails with the following error[1]: TESTING: private-lib (test/fs/private-lib.exp) spawn /bin/bash firejail --private-lib --private-bin=sh,bash,dash,ps,grep,ls,find,echo,stty runner@fv-az489-993:~/work/firejail/firejail/test/fs$ <private-bin=sh,bash,dash,ps,grep,ls,find,echo,stty Error: private-lib feature is disabled in Firejail configuration file runner@fv-az489-993:~/work/firejail/firejail/test/fs$ TESTING ERROR 1 This fixes CI. Fixes #5214. Relates to #5190. [1] https://github.com/netblue30/firejail/runs/7030862406
* | fix disabled private-lib in /etc/firejail/firejail.configLibravatar netblue302022-06-23
| |
* | disabled private-lib in /etc/firejail/firejail.configLibravatar netblue302022-06-23
| |
* | nettrace dixesLibravatar netblue302022-06-23
|/
* Transmission fixes: drop private-lib (#5213)Libravatar glitsj162022-06-22
| | | | | | | * drop private-lib * drop private-lib * drop private-lib
* deprecating --shell (3) (#5196)Libravatar netblue302022-06-21
|
* Revert "xonotic.profile: fix audit denial spam"Libravatar Tad2022-06-20
| | | | | | | Logging is now default disabled in c7e4c8ed592fee7f1644152a23c3e1343b01b922 See https://github.com/netblue30/firejail/issues/5207 This reverts commit c0d314f945b405f1e90a1a43719059cd22f55de7.
* deprecating --shell (2) (#5196)Libravatar netblue302022-06-20
|
* compile fixLibravatar netblue302022-06-20
|
* deprecating --shell (#5196)Libravatar netblue302022-06-20
|
* reverting previous seccomp log fix (#5207)Libravatar netblue302022-06-20
|
* shell none set as default (6)Libravatar netblue302022-06-19
|
* Merge pull request #5209 from rusty-snake/shell-none-defaultLibravatar netblue302022-06-19
|\ | | | | Remove shell none from profiles
| * Remove shell none from profilesLibravatar rusty-snake2022-06-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Command: sed -i "/^shell none/d" etc/*/* TODO: ``` etc/profile-a-l/beaker.profile:ignore shell none etc/profile-a-l/default.profile:# shell none etc/profile-a-l/fdns.profile:#shell none etc/profile-a-l/gnome-nettool.profile:#shell none etc/profile-a-l/jitsi-meet-desktop.profile:ignore shell none etc/profile-m-z/pidgin.profile:# shell none etc/profile-m-z/rocketchat.profile:ignore shell none etc/profile-m-z/server.profile:# shell none etc/templates/profile.template:# OPTIONS (caps*, net*, no*, protocol, seccomp*, shell none, tracelog) etc/templates/profile.template:#shell none ``` - manpage - RELNOTES - fbuilder
* | shell none set as default (5)Libravatar netblue302022-06-19
| |
* | shell none set as default (4)Libravatar netblue302022-06-19
| |
* | shell none set as default (3)Libravatar netblue302022-06-19
| |
* | shell none set as default (2)Libravatar netblue302022-06-19
|/
* shell none set as defaultLibravatar netblue302022-06-19
|
* removing guess_shell() function and using instead the shell configured in ↵Libravatar netblue302022-06-19
| | | | the password database (/etc/passwd file)
* Update SECURITY.mdLibravatar rusty-snake2022-06-18
|
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302022-06-18
|\
| * update_deb.sh: fix not building with apparmor supportLibravatar Kelvin M. Klann2022-06-18
| | | | | | | | | | | | | | This amends commit 9a0fbbd71 ("mkdeb.sh.in: pass remaining arguments to ./configure", 2022-05-13) / PR #5154. See also #5176.
| * errno.c: fix reference to extract_errnos.sh in commentLibravatar Kelvin M. Klann2022-06-18
| | | | | | | | | | | | | | See src/tools/extract_errnos.sh. Added on commit 081d1fbf2 ("Add seccomp errno filter support", 2015-09-23) / PR #66.
* | seccomp-log support in firejail.configLibravatar netblue302022-06-18
|/
* remving src/fgitLibravatar netblue302022-06-17
|
* Merge pull request #5206 from kmk3/fix-file-mode-shLibravatar netblue302022-06-17
|\ | | | | build: fix file mode of shell scripts (644 -> 755)
| * build: fix file mode of shell scripts (644 -> 755)Libravatar Kelvin M. Klann2022-06-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some shell scripts are not executable, so fix their file modes: $ git grep -Elz '^#!/bin/(ba)?sh' | xargs -0 -I '{}' \ chmod +x '{}' Files changed: * src/fgit/fgit-uninstall.sh * src/tools/extract_errnos.sh Note: I have manually checked that the files above are indeed intended to be executable directly and not just sourced, as a script of the latter kind could also contain a shebang (for example, to help ensure proper syntax highlighting). Misc: The affected files were added on commit e46dd3e95 ("git-install", 2017-02-04) and on commit 081d1fbf2 ("Add seccomp errno filter support", 2015-09-23) / PR #66, respectively.
* | fixing seccomp log (#5207)Libravatar netblue302022-06-17
|/
* fix artha and add dbus-user filteringLibravatar glitsj162022-06-16
|
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 16:38:23 +0000