aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* firecfg: turn constant strings into constantsLibravatar Kelvin M. Klann2023-08-04
| | | | | | Instead of using asprintf + free. Also, use LIBDIR instead of hardcoded "/usr/lib" for fzenity.
* firecfg: fix missing free and formattingLibravatar Kelvin M. Klann2023-08-04
| | | | | | | Changes: * fix inconsistent indentation/braces * add missing free
* mpv.profile: add new XDG_STATE_HOME pathLibravatar CodeWithMa2023-08-03
| | | | | | | The new version of mpv changed the path of the watch_later folder to ~/.local/state/mpv/watch_later. See https://github.com/mpv-player/mpv/pull/10838
* New profile: reader (#5934)Libravatar glitsj162023-08-02
| | | | | | | | | | | | * Create reader.profile * firecfg.config: add reader support * reader: integrate review suggestions - blacklist whole ${RUNUSER} - drop x11 none * reader: fix 'x11 none'
* New profile: daisy (#5935)Libravatar glitsj162023-08-02
| | | | | * firecfg.config: add daisy support * Create daisy.profile
* gramps: bring in new config directory (#5933)Libravatar glitsj162023-07-31
| | | | | * disable-programs.inc: add new gramps dir * gramps: add new config dir
* thunderbird: D-Bus hardening (#5913)Libravatar glitsj162023-07-31
|
* build(deps): bump github/codeql-action from 2.21.0 to 2.21.2Libravatar dependabot[bot]2023-07-31
| | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.0 to 2.21.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8...0ba4244466797eb048eb91a6cd43d5c03ca8bd05) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0Libravatar dependabot[bot]2023-07-31
| | | | | | | | | | | | | | Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.4.1 to 2.5.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/55d479fb1c5bcad5a4f9099a5d9f37c8857b2845...cba0d00b1fc9a034e1e642ea0f1103c282990604) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* RELNOTES: add build itemsLibravatar Kelvin M. Klann2023-07-29
| | | | Relates to #5916 #5927.
* Merge pull request #5927 from kmk3/build-use-config-shLibravatar Kelvin M. Klann2023-07-30
|\ | | | | build: fix some shellcheck issues & use config.sh in more scripts
| * build: use config.sh in more scriptsLibravatar Kelvin M. Klann2023-07-28
| | | | | | | | | | | | | | This removes the need to manually pass variables such as `$(TARNAME)` and `$(VERSION)` to shell scripts in the root Makefile. Relates to #5140.
| * build: fix shellcheck issues in mkrpm.sh/compile.shLibravatar Kelvin M. Klann2023-07-28
|/
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-07-27
|\
| * Merge pull request #5916 from kmk3/build-improve-distLibravatar Kelvin M. Klann2023-07-27
| |\ | | | | | | build: dist and asc improvements
| | * build: make asc use config.shLibravatar Kelvin M. Klann2023-07-27
| | | | | | | | | | | | | | | | | | Similarly to mkdeb.sh. Relates to #5140.
| | * build: make dist depend on just cleanLibravatar Kelvin M. Klann2023-07-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The clean target is currently enough to remove all generated files other than the ones directly in the root directory, so to simplify the dist target, make it depend on clean instead of distclean. See commit 5f2785290 ("build: remove unnecessary distclean targets", 2023-07-15) / PR #5911. Relates to #5142 #5182.
| | * build: remove remaining svn-related codeLibravatar Kelvin M. Klann2023-07-24
| | | | | | | | | | | | | | | The only other svn-related code seems to have been removed on commit 7e1c057ae ("make testing", 2016-04-23).
| | * build: sort DISTFILES_TESTLibravatar Kelvin M. Klann2023-07-24
| | |
| | * build: format DISTFILES / DISTFILES_TESTLibravatar Kelvin M. Klann2023-07-24
| | |
| * | fnetlock: fix unused bw variable warningLibravatar Kelvin M. Klann2023-07-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is breaking build-clang on CI[1]: make -C src/fnetlock/ make[1]: Entering directory '/home/runner/work/firejail/firejail/src/fnetlock' clang-14 [...] -c main.c -o main.o main.c:97:11: error: variable 'bw' set but not used [-Werror,-Wunused-but-set-variable] unsigned bw = 0; // bandwidth calculations ^ 1 error generated. make[1]: *** [../../src/prog.mk:16: main.o] Error 1 make: *** [Makefile:58: src/fnetlock/fnetlock] Error 2 Added on commit 8e4b847cd ("split nettrace executable ^Cto netrace and netlock", 2023-07-25). [1]: https://github.com/netblue30/firejail/actions/runs/5669072674/job/15361026508 Cc: @netblue30
* | | cleanupLibravatar netblue302023-07-27
|/ /
* | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-07-26
|\ \
| * | spotify: D-Bus hardening (#5923)Libravatar glitsj162023-07-25
| | |
| * | audacious: D-Bus hardening (#5922)Libravatar glitsj162023-07-25
| | | | | | | | | | | | | | | * audacious: D-Bus hardening * audacious: add noprinters
| * | New profile: sniffnet (#5920)Libravatar glitsj162023-07-25
| | | | | | | | | | | | | | | | | | | | | * disable-programs.inc: add sniffnet support * Create sniffnet.profile * firecfg.config: add sniffnet support
| * | profiles: fixes and cleanups for opening links with firefox (#5919)Libravatar glitsj162023-07-25
| | |
| * | profiles: Miscellaneous cleanups (#5918)Libravatar glitsj162023-07-25
| | |
| * | firefox(-based) profiles: refactor wusc (#5914)Libravatar glitsj162023-07-25
| | |
| * | update mov-cli (#5924)Libravatar pirate4867431862023-07-25
| | | | | | | | | Co-authored-by: pirate486743186 <>
* | | netlock/nettrace cleanupLibravatar netblue302023-07-26
| | |
* | | split nettrace executable ^Cto netrace and netlockLibravatar netblue302023-07-25
| | |
* | | cleanupLibravatar netblue302023-07-25
|/ /
* | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-07-24
|\|
| * build(deps): bump github/codeql-action from 2.20.4 to 2.21.0Libravatar dependabot[bot]2023-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.20.4 to 2.21.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/489225d82a57396c6f426a40e66d461b16b3461d...1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* | integrating nettrace dnstrace and snitraceLibravatar netblue302023-07-24
| |
* | fnettrace: trace ICPM ECHO (ping) trafficLibravatar netblue302023-07-23
|/
* contrib/syntax: run make syntaxLibravatar Kelvin M. Klann2023-07-23
| | | | | | | | | | | | This adds the `shell` command. Note that it's still being parsed in profile.c, even if it's just to return an error. Commands used to remake them: rm contrib/syntax/lists/* make syntax Relates to #5627 #5894.
* RELNOTES: add modif and build itemsLibravatar Kelvin M. Klann2023-07-22
| | | | Relates to #5894 #5911.
* Merge pull request #5911 from kmk3/build-rm-distcleanLibravatar Kelvin M. Klann2023-07-22
|\ | | | | build: fix hardcoded make & remove unnecessary distclean targets
| * build: remove unnecessary distclean targetsLibravatar Kelvin M. Klann2023-07-20
| | | | | | | | This also fixes the duplicate execution of the "clean" targets.
| * build: fix hardcoded make in recursive make callsLibravatar Kelvin M. Klann2023-07-20
| | | | | | | | | | | | | | Use the `$(MAKE)` macro to ensure that the same make program is used in the recursive invocation. Note: Most recursive calls already use `$(MAKE)`.
* | Create mullvad-browser.profile (#5887)Libravatar glitsj162023-07-22
| | | | | | | | | | | | | | | | | | Homepage: https://mullvad.net/en/download/browser/linux mullvad-browser: don't use restrict-namespaces mullvad-browser: cover both installation paths Suggested in review by @kmk3.
* | torbrowser-launcher: hardening (#5886)Libravatar glitsj162023-07-22
| | | | | | | | | | | | | | torbrowser-launcher: more hardening as per review torbrowser-launcher: revert enabling restrict-namespaces Suggested in review by @rusty-snake.
* | firefox-common-addons.profile: restore vulkan whitelistLibravatar Kelvin M. Klann2023-07-20
| | | | | | | | | | | | | | | | | | | | | | | | Multiple profiles include firefox-common.profile, but not all of them include whitelist-usr-share-common.inc. Suggested by @glitsj16[1]. This amends commit 094892dfd ("profiles: remove /usr/share/vulkan already whitelisted by wusc (#5910)", 2023-07-20). [1] https://github.com/netblue30/firejail/pull/5910/files#r1269397348
* | profiles: remove /usr/share/vulkan already whitelisted by wusc (#5910)Libravatar glitsj162023-07-20
| |
* | sqlitebrowser remote support (#5909)Libravatar glitsj162023-07-20
|/ | | | | * disable-programs.inc: add remote sqlitebrowser support * sqlitebrowser: add support for remote functionality
* hostnames.c: fix scan-build warningLibravatar Kelvin M. Klann2023-07-20
| | | | | | | | | | | | | | | | This is breaking scan-build in CI[1]: /usr/share/clang/scan-build-14/bin/../libexec/ccc-analyzer [...] -c hostnames.c -o hostnames.o hostnames.c:59:10: warning: Null pointer passed to 1st parameter expecting 'nonnull' [core.NonNullParamChecker] return strdup(rv); ^~~~~~~~~~ 1 warning generated. Likely caused by commit d2802ce60 ("fnettrace cleanup", 2023-07-15). This also fixes a memory leak of `cmd`. [1] https://github.com/netblue30/firejail/actions/runs/5568460702/jobs/10171098449
* modif: drop deprecated 'shell' option references (#5894)Libravatar glitsj162023-07-19
| | | | | | | | | | | | The `shell` option has been removed. Remove stale references. This does NOT remove `shell none`-related code comments in: - src/firejail/fs_lib.c (L433-L441) - src/firejail/join.c (L415-L417) Relates to #5196. Suggested by #5891.
* zsh: add shell completion for --tabLibravatar Kelvin M. Klann2023-07-19
| | | | | | | | | | | Note: It already works for bash and it's already present in the syntax files: $ grep '^tab' contrib/syntax/lists/profile_commands_arg0.list tab Added on commit e6c50240f ("--tab: enable shell tab completion", 2022-02-20) / #4936.
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-23 03:28:58 +0000