aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* private-lib fixupLibravatar smitsohu2021-09-25
| | | | | don't try to read /usr/bin/firejail if private-bin removed it from the sandbox filesystem
* private-lib: check firejail libraries as root user (#4576)Libravatar smitsohu2021-09-25
| | | | | | users, and fldd in particular, might have no read permission on the firejail executable, make that ok by running fldd as root
* update READMELibravatar netblue302021-09-24
|
* mergesLibravatar netblue302021-09-24
|
* Merge pull request #4514 from nidamanx/masterLibravatar netblue302021-09-24
|\ | | | | telegram: Enable private-bin
| * Update telegram.profileLibravatar Nicola Davide Mannarelli2021-09-07
| |
* | Merge pull request #4559 from rusty-snake/private-etc_ld.so.preloadLibravatar netblue302021-09-24
|\ \ | | | | | | Add ld.so.preload to all private-etc lines
| * | Add ld.so.preload to all private-etc linesLibravatar rusty-snake2021-09-18
| | | | | | | | | | | | | | | | | | | | | | | | Command: sed -i -E "s/^private-etc /private-etc ld.so.preload,/" \ $(grep -LE "^private-etc .*ld.so.preload" etc/profile-*/*) \ && python3 contrib/sort.py etc/profile-*/*
* | | Merge pull request #4564 from lecso7/masterLibravatar netblue302021-09-24
|\ \ \ | | | | | | | | Create goldendict.profile
| * | | Create goldendict.profileLibravatar lecso72021-09-20
| | | |
* | | | Merge pull request #4572 from a1346054/newline-fixLibravatar netblue302021-09-24
|\ \ \ \ | | | | | | | | | | Add missing final newlines
| * | | | add missing final newlines at end of filesLibravatar a13460542021-09-22
| | | | |
* | | | | Merge pull request #4560 from onny/nolinkcheckLibravatar netblue302021-09-24
|\ \ \ \ \ | | | | | | | | | | | | Remove /etc/hosts is_link check
| * | | | | remove hosts file link checkLibravatar Jonas Heinrich2021-09-19
| | | | | |
| * | | | | remove hosts file link checkLibravatar Jonas Heinrich2021-09-19
| | | | | |
* | | | | | Update SECURITY.mdLibravatar Reiner Herrmann2021-09-22
| | | | | |
* | | | | | fix spelling (#4573)Libravatar a13460542021-09-22
| | | | | |
* | | | | | use license file from gnu.org (#4571)Libravatar a13460542021-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current file is missing the 'How to Apply These Terms to Your New Programs' section, which is an integral part of the GPL. More info here: https://www.gnu.org/licenses/old-licenses/gpl-2.0-faq.html#GPLOmitPreamble File downloaded from: https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
* | | | | | join: add support for rlimit optionsLibravatar smitsohu2021-09-22
| | | | | |
* | | | | | hardcode PATH for internal useLibravatar smitsohu2021-09-22
| |/ / / / |/| | | |
* | | | | Merge pull request #4533 from smitsohu/exitcodeLibravatar smitsohu2021-09-22
|\ \ \ \ \ | | | | | | | | | | | | rework exitcodes
| * | | | | rework exitcodesLibravatar smitsohu2021-09-21
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | * add 128 to exitcode if child receives a fatal signal (this is similar to what bash and other shells do) * unify exitcodes across firejail: treat join'ed processes the same as processes in the primary process tree
* | | | | Merge pull request #4502 from kmk3/revert-allow-deny-manLibravatar Kelvin M. Klann2021-09-21
|\ \ \ \ \ | |_|_|/ / |/| | | | Revert "allow/deny help and man pages"
| * | | | Fix typo of "parent"Libravatar Kelvin M. Klann2021-09-02
| | | | |
| * | | | Revert "allow/deny help and man pages"Libravatar Kelvin M. Klann2021-09-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit a11707ea273e5665047f8a7d9387ba07f08d72f6. The man pages currently direct users to use the aliases instead of the commands, which some users of firejail-git may end up doing. Example: https://github.com/netblue30/firejail/discussions/4496 So revert the man page changes as well to avoid confusion. Note: This is not a full revert. The commit in question also contains some string formatting fixes on src/firejail/usage.c (related to dbus and netmask), which are left intact. Relates to #4410.
* | | | | Let programs outside librewolf sandbox open new tabs in librewolf (#4546)Libravatar crocket2021-09-19
| | | | |
* | | | | Merge pull request #4501 from tredondo/patch-9Libravatar rusty-snake2021-09-19
|\ \ \ \ \ | | | | | | | | | | | | Blacklist Exodus wallet
| * | | | | Blacklist Exodus walletLibravatar Ted Robertson2021-09-02
| |/ / / /
* | | | / Fix #4555 - Allow evince to read .cbz file formatLibravatar lecso72021-09-19
| |_|_|/ |/| | | | | | | | | | | | | | | Enable evince to display archived images (.cbz) file with plugin installed.
* | | | Update SECURITY.mdLibravatar rusty-snake2021-09-17
| | | |
* | | | Merge pull request #4515 from rusty-snake/rework-issue-templateLibravatar rusty-snake2021-09-17
|\ \ \ \ | | | | | | | | | | Rework issue templates
| * | | | bug_report.md: clarify messageLibravatar Kelvin M. Klann2021-09-17
| | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | bug_report.md: improve grammarLibravatar Kelvin M. Klann2021-09-17
| | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | bug_report.md: remove extraneous newlineLibravatar Kelvin M. Klann2021-09-16
| | | | |
| * | | | Rework issue templatesLibravatar rusty-snake2021-09-07
| | | | |
* | | | | Fix #4509 -- Nextcloud profile broken - needs 3D and system tray accessLibravatar rusty-snake2021-09-08
| | | | |
* | | | | Merge pull request #4493 from pirate486743186/fix-duplicate-globalLibravatar rusty-snake2021-09-08
|\ \ \ \ \ | | | | | | | | | | | | fix duplicate globals
| * | | | | fix duplicate globalLibravatar pirate4867431862021-08-30
| | |/ / / | |/| | |
* | | | | Fix #4367 -- gimp 2.10.22-3: gegl:introspect brokenLibravatar rusty-snake2021-09-08
| | | | |
* | | | | Update profile.template to use disable-X11.incLibravatar rusty-snake2021-09-08
| |/ / / |/| | |
* | | | Rework pipewire/waylandLibravatar rusty-snake2021-09-07
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | - closes #4483 -- mpv requires whitelisting /usr/share/pipewire - wruc: whitelist pipewire-?, pipewire is becoming more popular and was developed with isolation (container/sandbox) in mind. - wruc: whitelist wayland-? instead of only -0 and -1 - wusc: whitelist /usr/share/pipewire - remove these wruc/wusc lines from other profiles - firefox-common-addons: Make ignore wruc work again (#4512) - firefox: org.freedesktop.portal.Desktop should be enough
* | | Blacklist ~/.minisign in disable-commonLibravatar rusty-snake2021-09-07
| | |
* | | Profile fixesLibravatar rusty-snake2021-09-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - disable-programs.inc: blacklist ${HOME}/.local/state/pipewire If you did not yet noticed, on 08th May 2021 the XDG Base Directory Specification 0.8 was resleased (the first update since 2010). New are $XDG_STATE_HOME and $HOME/.local/bin. - keepassxc: mkdirs are necessary - gnote: harden - pngquant: harden
* | | Update RELNOTESLibravatar rusty-snake2021-09-04
| | |
* | | Update wrc for Arch Linux (#4507)Libravatar Martynas Janonis2021-09-03
| | | | | | | | | This is a quick fix of #4482 for distributions that link /etc/resolv.conf to /run/systemd/resolve/stub-resolv.conf (Arch Linux is one of them).
* | | Fix #4506 -- Freetube does not startLibravatar rusty-snake2021-09-03
| | | | | | | | | | | | Freetube from AUR uses a wrapper script
* | | sort.py: pylint: consider-using-sys-exitLibravatar rusty-snake2021-09-03
| | |
* | | Update wrcLibravatar rusty-snake2021-09-03
|/ / | | | | | | | | | | - whitelist /run/resolvconf/resolv.conf -- Fixes #4482 - Drop whitelist for /run/systemd/resolve/stub-resolv.conf, /run/systemd/resolve/resolv.conf is the right path AIUI.
* | mergesLibravatar netblue302021-08-30
| |
* | Merge pull request #4487 from kmk3/blame-ignore-add-big-revertLibravatar netblue302021-08-30
|\ \ | | | | | | .git-blame-ignore-revs: add revert of allow/deny move