firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	copyright 2017	netblue30	2017-02-11
\|
*	persistent support for all profile files	netblue30	2017-02-09
\|
*	persistent config	netblue30	2017-02-09
\|
*	adding macro for include command in profile files	netblue30	2017-02-09
\|
*	firemon fix	netblue30	2017-02-07
\|
*	--git-install: default disabled in ./configure script	netblue30	2017-02-07
\|
*	disable --git-install at compile time	netblue30	2017-02-05
\|
*	enable strict seccomp filter on overlay options	netblue30	2017-02-05
\|
*	--git-install/--git-uninstall	netblue30	2017-02-05
\|
*	profile merges	netblue30	2017-02-05
\|
*	Merge pull request #1089 from Fred-Barclay/palemoon_private-opt	netblue30	2017-02-05
\|\ \| \| \| \|	Security filters
\| *	added nogroups to qbittorrent profile	Fred Barclay	2017-02-05
\| \|
\| *	Added private-opt to palemoon profile	Fred Barclay	2017-02-05
\|/
*	--git-install	netblue30	2017-02-04
\|
*	--git-install	netblue30	2017-02-04
\|
*	git-install	netblue30	2017-02-04
\|
*	Merge pull request #1053 from Fred-Barclay/update_scripts	netblue30	2017-02-04
\|\ \| \| \| \|	added update scripts
\| *	changes for review upstream	Fred Barclay	2017-01-23
\| \|
\| *	added update scripts	Fred Barclay	2017-01-17
\| \|
* \|	quiet fix	netblue30	2017-02-04
\| \|
* \|	xmms profile fix	netblue30	2017-02-04
\| \|
* \|	fixed README.md	netblue30	2017-02-01
\| \|
* \|	--writable-var-log	netblue30	2017-01-30
\| \|
* \|	--writable-var-log	netblue30	2017-01-30
\| \|
* \|	--quiet fix	netblue30	2017-01-30
\| \|
* \|	documentation	netblue30	2017-01-29
\| \|
* \|	merges	netblue30	2017-01-29
\| \|
* \|	Merge pull request #1079 from ibukanov/copy_to_root_fix	netblue30	2017-01-29
\|\ \ \| \| \| \| \| \|	fixing --hosts-file privelege check
\| * \|	fixing --hosts-file privelege check	Igor Bukanov	2017-01-29
\|/ / \| \| \| \| \| \| \| \| \| \|	Currently the code uses the access() call to check if the user has an access to a file that is copied into the root as /etc/hosts. This inevitably adds a race when the user changes the file to a symbolic link pointing to an arbitrary location on the filsystem after the access check is done but before opening the file to copy it. This potentially allows to read any file on the system. To close this the code adds a utility copy_file_from_user_to_root . It opens the copy destination file as root and then forks/drop privileges. Then as a user the utility opens the source file and do the copy into the destination descriptor that is preserved accross the fork.
* \|	support allow-private-blacklist in profile files	netblue30	2017-01-28
\| \|
* \|	profile fixes	netblue30	2017-01-28
\| \|
* \|	Merge branch 'master' of https://github.com/netblue30/firejail	netblue30	2017-01-25
\|\ \
\| * \	Merge pull request #1068 from Fred-Barclay/uudeview_fix	netblue30	2017-01-25
\| \|\ \ \| \| \| \| \| \| \| \|	Fix for uudeview
\| \| * \|	fixes #1032	Fred Barclay	2017-01-23
\| \|/ /
* / /	profile merges	netblue30	2017-01-25
\|/ /
* \|	fixed access for --hosts-file	netblue30	2017-01-23
\| \|
* \|	bash completion for --hosts-file	netblue30	2017-01-22
\| \|
* \|	profile merges	netblue30	2017-01-22
\| \|
* \|	Merge pull request #1064 from ecat3/master	netblue30	2017-01-22
\|\ \ \| \| \| \| \| \|	Prevent tmux connecting to an existing session
\| * \|	Prevent tmux connecting to an existing session	ecat3	2017-01-22
\| \| \|
* \| \|	--hosts-file option	netblue30	2017-01-22
\|/ /
* \|	merges	netblue30	2017-01-22
\| \|
* \|	Merge pull request #1062 from zackw/join-iproute2-netns	netblue30	2017-01-22
\|\ \ \| \| \| \| \| \|	Add support for joining a persistent, named network namespace.
\| * \|	Add support for joining a persistent, named network namespace.	Zack Weinberg	2017-01-20
\| \| \|
\| * \|	firejail/fs.c: include sys/wait.h for declaration of waitpid	Zack Weinberg	2017-01-20
\| \| \|
* \| \|	Merge pull request #1061 from GSI/uzbl-browser	netblue30	2017-01-22
\|\ \ \ \| \| \| \| \| \| \| \|	uzbl-browser.profile: enabled support for pass password-manager
\| * \| \|	ensured use of clean cache directory to tackle uzbl/uzbl#335	GSI2017	2017-01-20
\| \| \| \|
\| * \| \|	uzbl-browser.profile: enabled support for pass password-manager	GSI2017	2017-01-20
\| \| \| \|
* \| \| \|	tor fix	netblue30	2017-01-22
\| \|/ / \|/\| \|
* \| \|	man page fix	netblue30	2017-01-20
\| \| \|