aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Stop forwarding own double-dash to the shellLibravatar Kelvin M. Klann2023-01-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, if double-dash ("--") is passed to firejail, it is forwarded to the user shell: $ firejail --debug --noprofile -- echo test 2>&1 | grep -e execvp -e test Building quoted command line: 'echo' 'test' Building quoted command line: 'echo' 'test' Running 'echo' 'test' command through /bin/bash execvp argument 0: /bin/bash execvp argument 1: -c execvp argument 2: -- execvp argument 3: 'echo' 'test' test This causes issues when the user shell does not accept "--" / is not POSIX-compatible: $ /bin/bash -c -- 'echo test' test $ /bin/fish -c -- 'echo test' fish: Unknown command: -- fish: -- ^ Fixes #5599. Relates to #3434. Reported-by: @iltep64 Reported-by: @ferreum
* build(deps): bump github/codeql-action from 2.1.37 to 2.1.38Libravatar dependabot[bot]2023-01-17
| | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.37 to 2.1.38. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/959cbb7472c4d4ad70cdfe6f4976053fe48ab394...515828d97454b8354517688ddc5b48402b723750) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump step-security/harden-runner from 2.0.0 to 2.1.0Libravatar dependabot[bot]2023-01-17
| | | | | | | | | | | | | | Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.0.0 to 2.1.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5...18bf8ad2ca49c14cbb28b91346d626ccfb00c518) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* 0.9.72 released, moving to 0.9.73Libravatar netblue302023-01-16
|
* relnotes update0.9.72Libravatar netblue302023-01-16
|
* RELNOTES: sort modif itemsLibravatar Kelvin M. Klann2023-01-16
| | | | | This amends commit a100cbe99 ("RELNOTES: move etc-hide-blacklisted item to modif", 2023-01-16).
* RELNOTES: move etc-hide-blacklisted item to modifLibravatar Kelvin M. Klann2023-01-16
| | | | | | And clarify it. Relates to #5010 #5230 #5591 #5595.
* update RELNOTES dateLibravatar netblue302023-01-16
|
* mergesLibravatar netblue302023-01-16
|
* Merge pull request #5595 from kmk3/rename-etc-no-blacklistedLibravatar netblue302023-01-16
|\ | | | | Rename etc-no-blacklisted to etc-hide-blacklisted
| * firejail.config: explain potential issues with etc-hide-blacklistedLibravatar Kelvin M. Klann2023-01-16
| | | | | | | | | | | | | | Let users know that enabling this may break /etc/resolv.conf. Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591.
| * Reword CFG_ETC_HIDE_BLACKLISTED explanationLibravatar Kelvin M. Klann2023-01-16
| | | | | | | | | | | | | | To make it clearer. Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591.
| * Rename etc-no-blacklisted to etc-hide-blacklistedLibravatar Kelvin M. Klann2023-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To avoid boolean confusion (`no-foo no` / `no-foo yes`) in firejail.config: etc-no-blacklisted no etc-no-blacklisted yes Commands used to search and replace: git grep -Ilz -i 'etc.no.blacklisted' -- etc src | xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed \ -e 's/etc-no-blacklisted/etc-hide-blacklisted/' \ -e 's/ETC_NO_BLACKLISTED/ETC_HIDE_BLACKLISTED/' \ '{}')\" >'{}'" Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591.
* | Merge pull request #5594 from bymoz089/masterLibravatar netblue302023-01-16
|\ \ | |/ |/| add timezone access to make libical functional
| * add timezone access to make libical functionalLibravatar bymoz0892023-01-16
|/ | | claws-mail vcalendar-plugin uses libical to get current timezone. Libical needs access to file `/etc/timezone` to work properly.
* Merge pull request #5591 from smitsohu/private-etc-no-blacklistedLibravatar netblue302023-01-15
|\ | | | | opt-in: hide blacklisted files in /etc
| * testingLibravatar smitsohu2023-01-15
| |
| * opt-in: skip blacklisted files in private-etc - #5010, #5230Libravatar smitsohu2023-01-15
| |
* | Merge pull request #5571 from glitsj16/ec-refactorLibravatar netblue302023-01-15
|\ \ | | | | | | email-common refactoring
| * | balsa: drop private-binLibravatar glitsj162023-01-07
| | | | | | | | | Supporting 'level 1 hack' to allow opening hyperlinks with firefox needs xdg-open (besides bash,sh). Adding xdg-open to private-bin is not enough, as it pulls in a long list of other commands and that's pretty unmaintainable IMO. So I opted to drop private-bin here.
| * | email-common: simplify D-Bus filteringLibravatar glitsj162023-01-06
| | | | | | | | | Suggested in review.
| * | balsa: re-add private-bin comment for gpgLibravatar glitsj162023-01-06
| | | | | | | | | Pointed out in review that this comment was removed by mistake.
| * | email-common: refactoringLibravatar glitsj162023-01-04
| | | | | | | | | No longer used for claws-mail and sylpheed only.
| * | sylpheed: refactoringLibravatar glitsj162023-01-04
| | |
| * | claws-mail: refactoringLibravatar glitsj162023-01-04
| | |
| * | balsa: refactor as email-common.profile redirectLibravatar glitsj162023-01-04
| |/
* | Merge pull request #5563 from glitsj16/linuxqqLibravatar netblue302023-01-15
|\ \ | | | | | | New profiles: linuxqq/qq
| * \ Merge branch 'netblue30:master' into linuxqqLibravatar glitsj162023-01-04
| |\ \
| * | | linuxqq: drop commentLibravatar glitsj162023-01-04
| | | | | | | | | | | | Now that #5569 is in we can remove the hardening comment.
| * | | linuxqq: reorder optionsLibravatar glitsj162023-01-03
| | | | | | | | | | | | As suggested in review.
| * | | disable-programs.inc: fix ordering QQ configLibravatar glitsj162023-01-03
| | | |
| * | | Create qq.profileLibravatar glitsj162023-01-03
| | | |
| * | | Create linuxqq.profileLibravatar glitsj162023-01-03
| | | |
| * | | README: add linuxqq/qq contributorsLibravatar glitsj162023-01-03
| | | |
| * | | README.md: add linuxqq/qq to 'New profiles' sectionLibravatar glitsj162023-01-03
| | | |
| * | | disable-programs.inc: add QQ configLibravatar glitsj162023-01-03
| | | |
| * | | firecfg: add linuxqq/qqLibravatar glitsj162023-01-03
| | | |
* | | | RELNOTES: add related PR to --apparmor= itemLibravatar Kelvin M. Klann2023-01-14
| | | | | | | | | | | | | | | | Relates to #5274 #5475.
* | | | RELNOTES: move --profile-path in --help item to docsLibravatar Kelvin M. Klann2023-01-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit 7902594e7 ("RELNOTES: add bugfix for --profile-path in --help", 2023-01-14). Relates to #5585 #5586.
* | | | fix restrict-namespaces for Debian 10 and olderLibravatar netblue302023-01-14
| | | |
* | | | bringing back whitelisting /devLibravatar netblue302023-01-14
| | | |
* | | | RELNOTES: add bugfix for --profile-path in --helpLibravatar Kelvin M. Klann2023-01-14
| | | | | | | | | | | | | | | | Relates to #5585 #5586.
* | | | Merge pull request #5586 from netblue30/rusty-snake-patch-1Libravatar netblue302023-01-13
|\ \ \ \ | | | | | | | | | | Remove --profile-path from --help
| * | | | Remove --profile-path from --helprusty-snake-patch-1Libravatar rusty-snake2023-01-13
|/ / / / | | | | | | | | Fixes #5585
* | | | bump release dateLibravatar Reiner Herrmann2023-01-12
| | | |
* | | | fix make test-filtersLibravatar netblue302023-01-12
| | | |
* | | | rel 0.9.72 testing: disable whitelisting /dev directoryLibravatar netblue302023-01-12
| | | |
* | | | rel 0.9.72 testing: cleanup make test-private-libLibravatar netblue302023-01-12
| | | |
* | | | geary: fix opening hyperlinks via D-Bus (#5565)Libravatar glitsj162023-01-12
| | | |
* | | | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-01-12
|\ \ \ \
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-18 16:00:26 +0000