aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Merge branch 'master' of github.com:netblue30/firejailLibravatar rusty-snake2019-06-16
|\
| * chromium-common profile: add nodbus conditionalLibravatar smitsohu2019-06-16
| |
* | many profile cleanup (4)Libravatar rusty-snake2019-06-16
|/ | | | | | | | | containing: - files forgotten in 4beaf8f9 - workarounds for #903 - commented useless private-etc lines removed - remove commented seccomp.keep lines - much more
* Sort comented private-{bin,etc} linesLibravatar rusty-snake2019-06-16
| | | | in addition to 019fa047, c7d34b5e, 0a9beba3, cbdbb0f0.
* add rhythmbox-client.profileLibravatar rusty-snake2019-06-16
|
* Fix protocol lineLibravatar rusty-snake2019-06-16
| | | | only unknown-horizons was affected
* Sort caps.keep and seccomp.drop options (#2780)Libravatar glitsj162019-06-16
| | | | | | | | | | | | * Sort seccomp.drop in unbound.profile * Sort caps.keep in tor.profile * Sort seccomp.drop in qgjs.profile * Sort seccomp.drop in dnscrypt-proxy.profile * Sort caps.keep in chromium-common.profile
* Merge branch 'master' of github.com:netblue30/firejailLibravatar rusty-snake2019-06-15
|\
| * Merge pull request #2774 from Vincent43/Vincent43-chromium-nodbusLibravatar Vincent432019-06-15
| |\ | | | | | | chromium: disable nodbus
| | * chromium: disable nodbusLibravatar Vincent432019-06-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Unfortunately nodbus prevents access to site passwords if they are stored in GNOME Keyring[1]. According to docs chromium can store password in 3 different ways: GNOME Keyring KWallet 4 plain text As KWallet storage may be broken in a same way, using nodbus will force chromium to store passwords in plain text which isn't best option for security and for firejail default. [1] https://wiki.gnome.org/Projects/GnomeKeyring [2] https://chromium.googlesource.com/chromium/src.git/+/master/docs/linux_password_storage.md
* | | some profile fixesLibravatar rusty-snake2019-06-15
|/ /
* | More sorting private-etc (#2779)Libravatar glitsj162019-06-15
| | | | | | | | | | | | | | | | * Sort private-etc This .inc file got missed by https://github.com/netblue30/firejail/pull/2766. * Sort private-etc
* | Sort private-lib (#2778)Libravatar glitsj162019-06-15
|/ | | | | | | | | | | | * Sort private-lib * Sort private-lib * Sort private-lib Don't know why there was a reference to /usr/bin/gedit in private-lib... * Sort private-lib
* Merge pull request #2766 from rusty-snake/fix-all-private-bin_etc-linesLibravatar Vincent432019-06-15
|\ | | | | automatically fixed all private-{bin,etc} lines
| * remove starting comma in kid3.profileLibravatar rusty-snake2019-06-14
| |
| * automatically fixed all private-{bin,etc} linesLibravatar rusty-snake2019-06-13
| |
* | Use private-etc directlyLibravatar glitsj162019-06-15
| | | | | | Thanks to @rusty-snake for pointing this out.
* | Update firefox-common-addons.incLibravatar rusty-snake2019-06-15
| | | | | | remove 'noblacklist ${HOME}/.local/share/tridactyl', it will never blacklisted (see #2746)
* | firefox-common-addons.inc: + tridactyl (#2746)Libravatar Sergey Alirzaev2019-06-15
| |
* | Fix youtube video in totem (#2764)Libravatar StelFux2019-06-15
| | | | | | | | | | | | | | | | * Fix youtube video in totem lua is required for youtube (online?) videos * Fix youtube video in totem with allow-lua.inc
* | Refactoring as whitelist profile (#2773)Libravatar glitsj162019-06-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Refactor artha as whitelist profile * Refactor clipit as whitelist profile * Refactor devilspie as whitelist profile * Refactor devilspie2 as whitelist profile * Refactor exfalso as whitelist profile * Refactor pavucontrol as whitelist profile * Refactor pdftotext as whitelist profile * Refactor redshift as whitelist profile * Refactor soundconverter as whitelist profile
* | Remove private-cache in aria2c profileLibravatar glitsj162019-06-15
| | | | | | Fixes #2772
* | Re-order smplayer profileLibravatar glitsj162019-06-15
| | | | | | Leaving alphabetical ordering of private-bin up to https://github.com/netblue30/firejail/pull/2766.
* | Re-order seahorse profileLibravatar glitsj162019-06-15
| |
* | Re-order mpv profileLibravatar glitsj162019-06-15
| | | | | | Leaving alphabetical ordering of private-bin up to https://github.com/netblue30/firejail/pull/2766.
* | Re-order mpsyt profileLibravatar glitsj162019-06-15
| | | | | | Leaving the alphabetical ordering up to https://github.com/netblue30/firejail/pull/2766.
* | Harden mpDris2 profileLibravatar glitsj162019-06-15
| |
* | Create syscalls file (#2754)Libravatar curiosity-seeker2019-06-14
| | | | | | | | | | | | * Create syscalls file A little script to determine the necessary syscalls for a program.
* | New profiles: newsbeuter, keepassxc-{cli,proxy}Libravatar rusty-snake2019-06-14
| |
* | Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302019-06-13
|\ \
| * | Streamline mdwe comment (#2769)Libravatar glitsj162019-06-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Streamline mdwe comment for authenticator * Streamline mdwe comment for autokey-common * Streamline mdwe comment for baobab * Streamline mwde comment for bitwarden * Streamline mdwe comment for clawsker * Streamline mdwe comment for devhelp * Streamline mdwe comment for d-feet * Streamline mdwe comment for enpass * Streamline mdwe comment for eo-common * Streamline mdwe comment for exfalso * Streamline mdwe comment for font-manager * Streamline mdwe comment for geekbench * Streamline mdwe comment for mpDris2 * Streamline mdwe comment for ocenaudio * Streamline mdwe comment for QMediathekView * Streamline mdwe comment for subdownloader * Streamline mdwe comment for viewnior * Streamline mdwe comment for youtube-dl
* | | tcpdump and tshark profilesLibravatar netblue302019-06-13
|/ /
* | Update godot.profileLibravatar rusty-snake2019-06-13
| |
* | Fix mdwe in qtox.profileLibravatar glitsj162019-06-13
| | | | | | Fixes #2767 - thanks to @grizzlyuser for reporting this.
* | Fix typo's in meld.profileLibravatar glitsj162019-06-13
|/
* Create godot.profileLibravatar rusty-snake2019-06-13
|
* OpenArena profileLibravatar netblue302019-06-13
|
* OpenArena profileLibravatar netblue302019-06-13
|
* hardening & fixingLibravatar rusty-snake2019-06-13
|
* fix youtube-dlLibravatar netblue302019-06-11
|
* Add davfs2 secrets file to blacklist (#2753)Libravatar Jose Riha2019-06-11
| | | | The files holds credentials to WebDAV servers in plaintext hence it's probably a good idea to limit access to them.
* template profile: update private-etc templates (#2745)Libravatar SkewedZeppelin2019-06-11
| | | | This replaces the outdated templates from #1734 with new templates from the program used in #2093
* Mention macros in profile.template (#2759)Libravatar Jose Riha2019-06-11
|
* Merge pull request #2757 from jose1711/cheeseLibravatar SkewedZeppelin2019-06-10
|\ | | | | Make it possible for cheese app to save pictures too
| * Make it possible for cheese app to save pictures tooLibravatar Jose Riha2019-06-10
|/
* Fix whitespaces in atril.profileLibravatar rusty-snake2019-06-07
|
* Add comment to use tor to ssh.profileLibravatar rusty-snake2019-06-06
|
* Add profile for gnome-sound-recorderLibravatar rusty-snake2019-06-06
|
* merges & fixesLibravatar rusty-snake2019-06-06
|
* Merge pull request #2751 from jose1711/profile-templateLibravatar SkewedZeppelin2019-06-05
|\ | | | | Make lua commented in profile template