aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* small fixesLibravatar netblue302020-04-21
|
* resolve conflict between private and allusers options - #3185Libravatar smitsohu2020-04-21
|
* relaxing symlink restrictionsLibravatar smitsohu2020-04-20
| | | | | | | | | | More liberal use of an already existing fall back path in pulseaudio.c removes issues caused by symlinks in ~/.config/pulse (issue #3351 and some others) Don't die, but print warnings during /home directory masking, so that users with a symbolic link in their home directory path can at least make it to a shell prompt (only in combination with pulseaudio fix).
* private-home: create directories as the userLibravatar smitsohu2020-04-20
|
* debug seccomp as the userLibravatar smitsohu2020-04-20
|
* sbox: blacklist umount syscallLibravatar smitsohu2020-04-20
|
* cleanupLibravatar smitsohu2020-04-20
|
* Profile for jitsi-meet-desktop (#3362)Libravatar Kishore96in2020-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Profile for Jitsi Meet desktop app (electron) * Update description. * Correctly include global definitions. * Add jitsi-meet-desktop to firecfg. * blacklist Jitsi-meet config directory in disable-programs.inc * Disable more things. disable-exec.inc not included, as the application shows some error if I include it. * Disable more stuff. * No need to whitelist Downloads directory. I don't think this application has any file sharing / downloading feature. * Use private-bin I needed to allow the bash executable as well for this to work. * Add some whitelist rules. * Use private-cache option * include disable-exec.inc Apparently one needs to allow execution in /tmp for the program to work. * Redirect to electron.profile. * Use private-etc. * Do not whitelist Downloads directory. electron.profile does this, but I do not think this program needs it. * Rearrange whitelisted files to alphabetical order. * Move nonwhitelist to appropriate section. * Newlines as section separators.
* Allow Lua for mpv in dolphin.profileLibravatar glitsj162020-04-18
| | | Fixes #3363.
* Merge pull request #3348 from chrpinedo/profile-nicotineLibravatar rusty-snake2020-04-17
|\ | | | | Add new profile: nicotine
| * Add nicotine to firecfg.configLibravatar Christian Pinedo2020-04-17
| |
| * Add nicotine to disable-programs.incLibravatar Christian Pinedo2020-04-17
| |
| * Create nicotine profileLibravatar Christian Pinedo2020-04-17
| |
* | Revert ↵Libravatar glitsj162020-04-15
| | | | | | | | | | https://github.com/netblue30/firejail/commit/ca6eec7dcf388c3d0bf52f54c56f7c957b8b777b As per discussion in #3333, thanks to @rusty-snake for coming up with an alternative.
* | fix make dependenciesLibravatar netblue302020-04-14
| |
* | add sthortwave (#1139) and remove gjs from firecf…Libravatar rusty-snake2020-04-13
| | | | | | | | …g.config (#3333).
* | misc fixesLibravatar rusty-snake2020-04-13
| | | | | | | | | | | | - Makefile.in: loops are slow - Makefile.in: firecfg.config wasn't installed - allow-gjs.inc: gjs uses libmozjs, forgotten to commit
* | suport mkdir and mkfile for /run/user/<PID> directory (#3346)Libravatar netblue302020-04-13
|/
* Merge pull request #3347 from aerusso/pulls/documentation-globbingLibravatar rusty-snake2020-04-12
|\ | | | | Clarify that file globbing occurs only at start
| * Clarify that file globbing occurs only at startLibravatar Antonio Russo2020-04-11
| | | | | | | | | | | | firejail can blacklist (and now also whitelist) files based on glob pattern. This pattern is evaluated at firejail start, and not updated at run time. This patch documents this behavior.
* | Fix shell in firefox-common.profileLibravatar glitsj162020-04-12
|/ | | This fixes #3333.
* Fix (fatal-warnings) warning by adding bracesLibravatar Topi Miettinen2020-04-11
|
* misc profilesLibravatar rusty-snake2020-04-11
| | | | | | | | | | | - disable-interpreters: blacklist /usr/lib64/libmozjs-* - fdns: - fix .local name - remove server.profile comment (do we need /sbin and /usr/sbin?) - add wusc and wvc (commented because untested) - minimize caps.keep (based on fdns.service) - fix protocol position - add private-etc (based on fdns.service)
* Move autoconfigured lines up in Makefile.inLibravatar Topi Miettinen2020-04-11
| | | | | | | Move autoconfigured lines up in Makefile.in so that they are defined before they are used . Closes #3341 #3344.
* Fix build with --enable-fatal-warningsLibravatar Topi Miettinen2020-04-10
| | | | Delete two unused variables.
* Strip all binariesLibravatar Topi Miettinen2020-04-10
| | | | Closes #3341.
* fix #3343Libravatar glitsj162020-04-10
|
* add description to rambox.profileLibravatar glitsj162020-04-10
|
* Merge pull request #3337 from topimiettinen/build-fixingLibravatar netblue302020-04-09
|\ | | | | Build improvements
| * Build improvementsLibravatar Topi Miettinen2020-04-09
| | | | | | | | | | Sometimes concurrent build could fail if the filter apps were not made before attempting to make the filters.
* | Add /usr/share/games to whitelistLibravatar Fred Barclay2020-04-09
| | | | | | | | | | | | | | | | | | | | Otherwise, fails with error CreateDirectories: failed to mkdir /usr/share/games (mode 448) file_system.cpp(158): Function call failed: return value was -110300 (Insufficient access rights to open file) Function call failed: return value was -110300 (Insufficient access rights to open file) Location: file_system.cpp:158 (CreateDirectories) Observed on Debian 10, 0ad 0.0.23
* | Merge pull request #3339 from matu3ba/docsfixLibravatar Fred Barclay2020-04-09
|\ \ | | | | | | early decision in bug report if using git version
| * | early decision if git masterLibravatar Jan2020-04-09
| | |
* | | Merge pull request #3340 from avilum/patch-1Libravatar rusty-snake2020-04-09
|\ \ \ | |_|/ |/| | Improvements for syscalls.sh contib file
| * | Improvements for syscalls.sh contib fileLibravatar Avi Lumelsky2020-04-09
|/ / | | | | Fixed the identation for copy/past problems and added a console character that returns the console to it's original colour after the SYSCALLS_OUTPUT_FILE param is printed.
* | Merge pull request #3334 from matu3ba/docsLibravatar rusty-snake2020-04-09
|\| | | | | Request behavior change description in bug reports
| * request change of behavior description on disabling firejail for specific ↵Libravatar Jan2020-04-09
|/ | | | program
* fix example in firejail-profile.txtLibravatar glitsj162020-04-08
|
* fix alphabetical ordering in fdns.profile (2)Libravatar glitsj162020-04-08
|
* fix alphabetical ordering in fdns.profileLibravatar glitsj162020-04-08
|
* add example for overriding individiual DBus filter to firejail-profile.txtLibravatar glitsj162020-04-08
| | | See discussion in https://github.com/netblue30/firejail/pull/3326.
* fix typos in dbus-{system,user}.talk [usage.c]Libravatar glitsj162020-04-07
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar netblue302020-04-07
|\
| * fix typo in firejail-profile.txtLibravatar glitsj162020-04-07
| |
* | fdns profileLibravatar netblue302020-04-07
|/
* Update support/EOL informationLibravatar Fred Barclay2020-04-07
|
* Merge pull request #3327 from netblue30/bugreports_templateLibravatar Fred Barclay2020-04-07
|\ | | | | Add bug report template
| * Add bug report templateLibravatar Fred Barclay2020-04-07
| | | | | | (Mostly) auto-generated with GitHub, will need tweaking over time
* | Ignore `caps.drop all` import from transmission-common.profileLibravatar Fred Barclay2020-04-07
|/ | | | caps are already handled by caps.keep ... in this profile
* Replace `nodbus` with dbus-* filtersLibravatar Fred Barclay2020-04-07
| | | | | | | | | | | | | See - 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters - https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183 Except for ocenaudio, access/restrictions on dbus options should be unchanged Ocenaudio profile: dbus filters were sandboxed (initially `nodbus` was enabled) since comments indicated blocking dbus meant preferences were broken
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 14:20:07 +0000