aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
...
| | * | curl: add nvm support commentLibravatar glitsj162022-03-20
| | | |
| | * | allow-nodejs.inc: add nvm supportLibravatar glitsj162022-03-20
| | |/
| * | Merge pull request #5052 from kmk3/docs-private-bugLibravatar netblue302022-03-24
| |\ \ | | | | | | | | docs: mention inconsistent homedir bug involving --private=dir
| | * | docs: mention inconsistent homedir bug involving --private=dirLibravatar Kelvin M. Klann2022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | And the workaround suggested by @smitsohu[1] and @rusty-snake[2]. Relates to #903 #5048. [1] https://github.com/netblue30/firejail/issues/903#issuecomment-946673346 [2] https://github.com/netblue30/firejail/discussions/5048#discussioncomment-2360034
| | * | docs: add missing --private note to firejail-profile.txtLibravatar Kelvin M. Klann2022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | It's currently only present on firejail.txt. This amends commit 340699fbd ("misc things", 2020-02-22).
| * | | Merge pull request #5043 from kmk3/docs-protocol-accLibravatar netblue302022-03-24
| |\ \ \ | | | | | | | | | | man: mention that the protocol command accumulates
| | * | | man: mention that the protocol command accumulatesLibravatar Kelvin M. Klann2022-03-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As mentioned by @rusty-snake[1]. This amends commit 39654d016 ("adding netlink to --protocol list (#4605)", 2022-01-21). See also commit 75073e0e4 ("man: mention that private-bin and private-etc are cumulative", 2022-01-22) and issue #4078. [1] https://github.com/netblue30/firejail/pull/5042/files#r825477891
* | | | | mergesLibravatar netblue302022-03-24
|/ / / /
* | | / build(deps): bump github/codeql-action from 1.1.4 to 1.1.5Libravatar dependabot[bot]2022-03-21
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.4 to 1.1.5. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/f5d822707ee6e8fb81b04a5c0040b736da22e587...883476649888a9e8e219d5b2e6b789dc024f690c) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | | ocenaudio hardening (#5056)Libravatar glitsj162022-03-18
| | | | | | | | | | | | | | | | | | | | | * ocenaudio: blacklist cache dir * ocenaudio: hardenings * ocenaudio: fix protocol comment
* | | cmake: fix local override & wusc (#5054)Libravatar glitsj162022-03-16
| | | | | | | | | | | | | | | * cmake: fix local override & wusc * cmake: another wusc fix
* | | pip: fixes (#5053)Libravatar glitsj162022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | * pip: fix including local override * pip: allow access to cache The shared build-systems-common.profile (to which pip.profile redirects) blacklists ${HOME}/.cache/pip. Override that here. * pip: add cache support in commented whitelist
* | | allow-common-devel.inc: add missing java/scala pathsLibravatar Kelvin M. Klann2022-03-14
| |/ |/| | | | | | | | | | | | | This amends commit f32cb8393 ("Blacklist scala devel stuff", 2022-03-05) / PR #5013. See the following review: https://github.com/netblue30/firejail/pull/5013#pullrequestreview-903794958
* | Bump github/codeql-action from 1.1.3 to 1.1.4Libravatar dependabot[bot]2022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.3 to 1.1.4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/75f07e7ab2ee63cba88752d8c696324e4df67466...f5d822707ee6e8fb81b04a5c0040b736da22e587) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | opera fixes (#5041)Libravatar glitsj162022-03-14
| | | | | | | | | | * opera fixes * disable-common.inc: add blacklist /usr/lib/opera/opera_sandbox
* | mupdf refactoring cfr. ↵Libravatar glitsj162022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://github.com/netblue30/firejail/discussions/4993 (#5042) * refactor mupdf * refactor mupdf * refactor mupdf * refactor mupdf * add mupdf-gl blacklist * move history file back to mupdf-gl * refactor mupdf-gl * add no3d to mupdf.profile * add suggestions from review * drop unix from protocol [accumulates] * fix protocol
* | fbuilder: fix private-etcLibravatar smitsohu2022-03-14
| |
* | fbuilder: update man pageLibravatar smitsohu2022-03-13
| |
* | fbuilder: whitelist globbingLibravatar smitsohu2022-03-13
| |
* | fbuilder: whitelist-run-common.inc and whitelist-runuser-common.inc supportLibravatar smitsohu2022-03-13
| |
* | fbuilder: unify callback functionsLibravatar smitsohu2022-03-13
| |
* | fbuilder: consider unix socketsLibravatar smitsohu2022-03-13
|/
* minor cleanups, no functional changes (#5040)Libravatar glitsj162022-03-13
| | | | | | | | | * drop redundant noblacklist noblacklist ${HOME}/.vscode-oss already exists in included code.profile * remove newline Nitpick for persistency with other profiles that have the comment about #2624.
* hardening onionshare-gui.profile (#4959)Libravatar glitsj162022-03-13
| | | | | | | * hardening onionshare-gui.profile * add another dbus-user filter to onionshare-gui.profile * harden onionshare
* fbuilder: don't consider flatpak/snapd directoriesLibravatar smitsohu2022-03-12
|
* fbuilder: fix Electron appsLibravatar smitsohu2022-03-12
| | | | | tracelog is known to be incompatible with Chromium/Electron apps keep it commented for the time being
* fbuilder tweaksLibravatar smitsohu2022-03-12
|
* disable-programs.inc: add ~/.preyLibravatar Kelvin M. Klann2022-03-11
| | | | | This amends commit af8f681c0 ("steam.profile: allow "${HOME}/.prey"", 2022-03-11) / PR #5029.
* moving videos to OdyseeLibravatar netblue302022-03-11
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2022-03-11
|\
| * Merge pull request #5013 from rusty-snake/scalaLibravatar netblue302022-03-11
| |\ | | | | | | Blacklist scala devel stuff
| | * Blacklist scala devel stuffLibravatar rusty-snake2022-03-05
| | |
| * | Merge pull request #5017 from TheOneric/fix_steam+protonLibravatar netblue302022-03-11
| |\ \ | | | | | | | | Fix newest Steam client and Proton ≥ 5.13
| | * | steam.profile: fix black windowLibravatar Oneric2022-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | After the Steam cleint update of the 04th March 2022 the steamwebhelper process now needs to be able to do chroot syscalls to render anything. If not all content tabs in the client will just appear black. fixes: https://github.com/netblue30/firejail/issues/5014
| | * | steam.profile: fix Proton 5.13+Libravatar Oneric2022-03-06
| | |/ | | | | | | | | | | | | | | | | | | | | | | | | Starting with version 5.13 Proton internally uses bubblewrap to create a container for the game. To make this work with firejail we need to allow these 4 additional syscalls. fixes: https://github.com/netblue30/firejail/issues/4366 fixes: https://github.com/netblue30/firejail/issues/4686
| * | Merge pull request #5028 from kmk3/fix-gcov-macroLibravatar netblue302022-03-11
| |\ \ | | | | | | | | gcov: fix gcov functions always declared as dummy
| | * | gcov: fix gcov functions always declared as dummyLibravatar Kelvin M. Klann2022-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, the check to enable gcov relies on a non-existent macro due to a typo, which looks like it would cause the dummy/empty versions of the gcov functions to always be declared (even with --enable-gcov), instead of the real ones from gcov.h. This commit fixes the typo (HAS_GCOV -> HAVE_GCOV). See configure.ac for the macro declaration. This amends commit 5106b2ec4 ("gcov: use no-op functions if not enabled", 2021-06-20) / PR #4376. Occurrences of each macro with this commit applied: $ git grep -F HAVE_GCOV | wc -l 16 $ git grep -F HAS_GCOV | wc -l 0
| * | | Merge pull request #5029 from davidebeatrici/steam-prey-2006Libravatar netblue302022-03-11
| |\ \ \ | | | | | | | | | | steam.profile: allow "${HOME}/.prey"
| | * | | steam.profile: allow "${HOME}/.prey"Libravatar Davide Beatrici2022-03-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The directory is used by the Linux binary for Prey (2006), available at https://icculus.org/prey. Not whitelisting the directory results in the game failing to launch: found DLL in pak file: /home/user/.steam/steamapps/common/Prey 2006/base/game01.pk4/gamex86.so copy gamex86.so to /home/user/.prey/base/gamex86.so dlopen '/home/user/.prey/base/gamex86.so' failed: /home/user/.prey/base/gamex86.so: failed to map segment from shared object
* | | | | mergeLibravatar smitsohu2022-03-11
| | | | |
* | | | | harden songrecLibravatar smitsohu2022-03-11
|/ / / / | | | | | | | | | | | | | | | | | | | | as suggested by @rusty-snake in addition blacklist/noblacklist/whitelist songrec application files
* | | | Merge pull request #4260 from sandsmark/martin/songrecLibravatar smitsohu2022-03-11
|\ \ \ \ | |/ / / |/| | | Add songrec
| * | | Add songrecLibravatar Martin T. H. Sandsmark2021-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | It is a Rust application using Cargo, so harden based on common supply chain attacks seen. https://github.com/marin-m/SongRec
* | | | fix testingLibravatar smitsohu2022-03-10
| | | |
* | | | fix testingLibravatar smitsohu2022-03-10
| | | |
* | | | ls: add control character filtering (similar to cat option)Libravatar smitsohu2022-03-10
| | | |
* | | | refactor meta character filteringLibravatar smitsohu2022-03-10
| |/ / |/| |
* | | RELNOTES: add warning about allow-trayLibravatar Kelvin M. Klann2022-03-09
| | | | | | | | | | | | Relates to #4946.
* | | RELNOTES: sort items by categoryLibravatar Kelvin M. Klann2022-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | Put it in a similar order to 0.9.68: features, modifs/reworks, bugfixes, ci, docs, new profiles. See commit 5fbc1cd50 ("RELNOTES: sort items by category", 2022-02-05). Misc: The last paragraph of that commit message is wrong; just ignore it.
* | | RELNOTES: add missing PR references; fix typoLibravatar Kelvin M. Klann2022-03-09
| | | | | | | | | | | | | | | | | | This amends commit 481321881 ("merges", 2022-03-05). Relates to #4985 #4990 #5011.
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 12:49:16 +0000