firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
...
* \| \| \|	Merge pull request #3897 from nidamanx/patch-1	rusty-snake	2021-01-28
\|\ \ \ \ \| \| \| \| \| \| \| \| \| \|	Update telegram.profile
\| * \| \| \|	Profile ordering/sorting as in profile.template	Nicola Davide Mannarelli	2021-01-25
\| \| \| \| \|
\| * \| \| \|	Enhance security	Nicola Davide Mannarelli	2021-01-25
\| \| \| \| \|
\| * \| \| \|	Update telegram.profile	Nicola Davide Mannarelli	2021-01-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Optimized "include whitelist-common.inc"
\| * \| \| \|	Update telegram.profile	Nicola Davide Mannarelli	2021-01-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Allow Telegram ONLY in .TelegramDesktop, .local/share/TelegramDesktop and Downloads
* \| \| \| \|	add extensive comment on sandboxing google-earth-pro (#3923)	glitsj16	2021-01-28
\| \| \| \| \|
* \| \| \| \|	streamline 'Allow xxx' comments (#3922)	glitsj16	2021-01-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* add comment: allow python * add comment: allow python * reorder allow comments * fix perl allow comment * add comment: allow python * add comment: allow lua, perl & python * reorder allow comments * add comment: allow python * add comment: allow python * add comment: allow lua, perl & python * fix allow comments * add comment: allow python * add comment: allow python * fix spacing in comments * add comment: allow python * add comment: allow python * fix comment * add comment: allow perl & python * add comment: allow lua & python * add comment: allow lua, perl & python * fix allow comments * add comment: allow perl & python * streamline allow python comments
* \| \| \| \|	readme.md	netblue30	2021-01-27
\|\ \ \ \ \
\| * \| \| \| \|	revert #3920 (#3921)	glitsj16	2021-01-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* revert #3920 * revert #3920
\| * \| \| \| \|	remove noblacklist without blacklist (#3920)	glitsj16	2021-01-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* remove noblacklist without blacklist in aosp ${HOME}/.bash_history is not blacklisted anywhere. Hence a noblacklist doesn't make sense here. * remove noblacklist without blacklist in gnome-builder ${HOME}/.bash_history is not blacklisted anywhere. Hence a noblacklist doesn't make sense here.
* \| \| \| \| \|	back to 0.9.65; rel 0.9.64.2 moved on a different branch, out in the next ↵	netblue30	2021-01-27
\|/ / / / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	two days
* \| \| \| \|	rel 0.9.64.2 testing - make test-compile	netblue30	2021-01-26
\| \| \| \| \|
* \| \| \| \|	rel 0.9.24.2 testing	netblue30	2021-01-26
\| \| \| \| \|
* \| \| \| \|	release 0.9.64.2 testing	netblue30	2021-01-26
\| \| \| \| \|
* \| \| \| \|	merge/readme update	netblue30	2021-01-25
\| \| \| \| \|
* \| \| \| \|	Merge pull request #3853 from botherder/master	netblue30	2021-01-25
\|\ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \|	New profile for CoyIM
\| * \| \| \| \|	Added additional whitelists	Nex	2021-01-06
\| \| \| \| \| \|
\| * \| \| \| \|	Implementing some of the suggested changes from #3853	Nex	2020-12-29
\| \| \| \| \| \|
\| * \| \| \| \|	Added some more restrictions to coyim profile	Nex	2020-12-29
\| \| \| \| \| \|
\| * \| \| \| \|	Added first profile for coyim	Nex	2020-12-29
\| \| \|_\|/ / \| \|/\| \| \|
* \| \| \| \|	Merge pull request #3899 from rootalc/nolocal6	netblue30	2021-01-25
\|\ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \|	Create nolocal6.net
\| * \| \| \| \|	Create nolocal6.net	rootalc	2021-01-18
\| \| \|/ / / \| \|/\| \| \|
* \| \| \| \|	Merge pull request #3918 from Neo00001/master	netblue30	2021-01-25
\|\ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \|	Add profile for kdiff3
\| * \| \| \| \|	Update kdiff3.profile	Neo00001	2021-01-24
\| \| \| \| \| \|
\| * \| \| \| \|	Create kdiff3.profile	Neo00001	2021-01-24
\| \| \| \| \| \|
\| * \| \| \| \|	Update firecfg.config	Neo00001	2021-01-24
\| \| \| \| \| \|
\| * \| \| \| \|	Update disable-programs.inc	Neo00001	2021-01-24
\| \| \| \| \| \|
* \| \| \| \| \|	fix #3914	netblue30	2021-01-24
\| \| \| \| \| \|
* \| \| \| \| \|	profstats	netblue30	2021-01-24
\|/ / / / /
* \| \| \| \|	Update vmware.profile (#3913)	Neo00001	2021-01-24
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Update vmware.profile `private-etc` can be uncommented. * Update vmware.profile
* \| \| \| \|	misc comment fixes (#3916)	glitsj16	2021-01-24
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* fix comment in blackbox.profile * fix comment in fluxbox.profile * fix comment in i3.profile * fix comment in krunner.profile * fix comment in openbox.profile
* \| \| \| \|	refactor google-earth{-pro} (#3915)	glitsj16	2021-01-23
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* refactor google-earth{-pro} blacklisting * fix google-earth-pro.profile I've included all binaries found in the Arch Linux AUR package to private-bin. But I also added a note on ignoring private-bin because I'm not sure what google-earth is doing on other distro's. * unbreak google-earth.profile Not sure why we need grep, ls and sed in private-bin exactly but keeping them around wouldn't hurt too much I guess.
* \| \| \| \|	Update bibletime.profile, add new whitelist (#3908)	hhzek0014	2021-01-22
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	To solve issue#3907, doc directory of the bibletime has to be whitelisted. Otherwise, it always fails to start. Co-authored-by: hhnb <hhnb@nanenient.cc>
* \| \| \| \|	refactoring	smitsohu	2021-01-20
\| \| \| \| \|
* \| \| \| \|	Merge pull request #3900 from smitsohu/privatelib	smitsohu	2021-01-20
\|\ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \|	Add $PATH expansion to private-lib
\| * \| \| \| \|	private-lib: search executables in $PATH	smitsohu	2021-01-20
\| \| \| \| \| \|
* \| \| \| \| \|	Merge pull request #3903 from smitsohu/privatelib3	smitsohu	2021-01-20
\|\ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \|	private-lib: add new timetrace
\| * \| \| \| \| \|	private-lib: add timetrace for Firejail libraries	smitsohu	2021-01-18
\| \|/ / / / /
* \| \| \| \| \|	misc fcopy fixes	smitsohu	2021-01-20
\| \| \| \| \| \|
* \| \| \| \| \|	private-lib: simplify installation of stdc	smitsohu	2021-01-20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	as modern-day Debian only keeps a single symbolic link in /lib64, going through both directories systematically adds virtually no overhead (as indicated by the timetrace). At the same time it is simpler and more robust in producing a correct representation of the filesystem.
* \| \| \| \| \|	add pkglog to new profiles	glitsj16	2021-01-18
\| \| \| \| \| \|
* \| \| \| \| \|	add pkglog to new profiles	glitsj16	2021-01-18
\| \| \| \| \| \|
* \| \| \| \| \|	add new profile: pkglog (#3902)	glitsj16	2021-01-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* add pkglog to new profiles * Create pkglog.profile * Update README.md * fix ordering in pkglog.profile * drop extra whitespace in pkglog.profile
* \| \| \| \| \|	harden plv.profile (#3901)	glitsj16	2021-01-18
\|/ / / / /
* \| \| \| \|	Add 'seccomp-error-action log' to profile.template	rusty-snake	2021-01-18
\| \| \| \| \|
* \| \| \| \|	Add profile for guvcview	rusty-snake	2021-01-18
\| \| \| \| \|
* \| \| \| \|	harden and fix cheese.profile	rusty-snake	2021-01-18
\|/ / / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	hardening: wusc + wruc fix: settings was immutable
* \| \| \|	Add new allow include allow-bin-sh.inc	rusty-snake	2021-01-16
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	/bin/sh is usually just a symlink to bash. However this is not the case for every distro, debian for example uses dash. bash,dash and sh have a blacklist command in disable-shell.inc. An own allow-*.inc for it enusres usage of all necessary nolacklists. For private-bin sh is enough because it follows symlinks.
* \| \| \|	add realaltffour	glitsj16	2021-01-15
\| \| \| \| \| \| \| \| \| \| \| \|	See #3895.
* \| \| \|	newsboat: add lynx support (#3895)	altf_four	2021-01-15
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* newsboat: add lynx support * newsboat: fix using sort.py * newsboat: remove unneeded perms