| Commit message (Collapse) | Author | Age |
| |
|
| |
|
| |
|
|
|
|
|
| |
get previous commit acbf707889ae241bfd476f5371df4599103b6606
in line with treatment of other directories in /run/firejail/mnt
|
|
|
|
|
| |
as far as possible avoid creating locations in the file system
that are both writable and executable
|
|
|
|
|
|
| |
allowing private and home directory to be owned by different users
if the home directory is inside /home was thought to add flexibility, but the scenario is
maybe a bit too exotic, and ignoring it paves the way for a simplification
|
| |
|
|\
| |
| | |
RFC: profiles: allow nc in ssh profile by default
|
| | |
|
|\ \
| | |
| | | |
Resolve #3029: drop outdated Skype profile
|
| | | |
|
| | | |
|
| |/
|/| |
|
| |
| |
| |
| | |
second line of defense, as there is always a pid namespace, too
|
| |
| |
| |
| |
| |
| |
| |
| | |
writing in /run/firejail/profile has always been restricted to root user,
and in addition this folder is blacklisted since recently; @{profile_name}
is built-in and adds a bit of flexibility; apparmor cannot be used to
restrict directory search permission, so add more rules for sensitive
paths
|
|\ \ |
|
| | |
| | |
| | | |
Fixes #3038.
|
| | | |
|
| | | |
|
|/ / |
|
|\| |
|
| |
| |
| |
| | |
close #2988
|
| | |
|
|/ |
|
| |
|
| |
|
| |
|
|
|
|
| |
html5, flash and widevine media support unavailable since vivaldi 2.9
|
| |
|
| |
|
| |
|
|\
| |
| | |
dia apparently wants access to python and crashes without
|
|/
|
|
| |
scripting, even though it is written in C, maybe another fix would be better
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Update QOwnNotes.profile
Fix startup problem in Ubuntu 19.10:
"bus[17]: D-Bus library appears to be incorrectly set up: see the manual page for dbus-uuidgen to correct this issue. (Failed to open "/var/lib/dbus/machine-id": Datei oder Verzeichnis nicht gefunden; Failed to open "/etc/machine-id": Datei oder Verzeichnis nicht gefunden)
D-Bus not built with -rdynamic so unable to print a backtrace"
* Update etc/QOwnNotes.profile
Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com>
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Grant wusc access to perl in spectre-meltdown.profile
* Grant wusc access to perl for exiftool.profile
* Grant wusc access to perl for conplay.profile
* Grant wusc access to perl for clawsker.profile
* Grant wusc access to perl for checkbashisms.profile
|
|
|
| |
Fixes #3015
|
|
|
|
|
|
|
|
| |
* Fix ebook-viewer on manjaro
closes #2996
* Move fix to calibre.profile
|
|
|
| |
closes #3013
|
| |
|
| |
|
|
|
|
|
| |
See
https://github.com/netblue30/firejail/issues/1139#issuecomment-546683127
|