aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
...
| * Rename chromium-common-hardened and feh-network …Libravatar rusty-snake2021-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | …again I am still not really happy about the rename from #4028, #4029, #4030 and #4031. I've no problem with moving away .inc but I don't like the result. So here's a proposal to make this better: | NAME | DESCRIPTION | | ------------------------- | ------------------------------------------------------------ | | `*-addons.profile` | (include) Allow external addons | | `*-common.profile` | (include) Common parts across multiple profiles | | `*-hardened.inc.profile` | Further hardening which can not be made default | | `*-network.inc.profile` | Allow optional network access | | `*-whitelist.inc.profile` | Enabled whitelisting (which can not be made default) ¹ | | `*.inc.profile` | Other profile specific includes | | `*.profile` | A profile for a program | | `allow-*.inc` | Multiple `noblacklist`s that should always be used together | | `disable-*.inc` | `blacklist`ing | | `whitelist-*-common.inc` | common `whitelist`s | | `*.inc` | Other generic includes | | `globals.local` | User overrides for all profiles | | `*.local` | Per profile user overrides | ¹ can be used for programs like KeePassXC or editors.
* | Merge pull request #4116 from Neo00001/masterLibravatar netblue302021-03-24
|\ \ | | | | | | Update vmware.profile & dbus-policy for amarok
| * | Update amarok.profileLibravatar Neo000012021-03-21
| | |
| * | Update vmware.profileLibravatar Neo000012021-03-21
| | |
| * | Update vmware.profileLibravatar Neo000012021-03-19
| | |
| * | Update amarok.profileLibravatar Neo000012021-03-19
| | |
* | | Merge pull request #4139 from kmk3/makefiles-rm-cclassLibravatar netblue302021-03-24
|\ \ \ | | | | | | | | makefiles: replace character class with plain char
| * | | makefiles: replace character class with plain charLibravatar Kelvin M. Klann2021-03-24
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using the "wildcard" internal functions. This usage has been present since the first "real" commit in the repository: commit 137985136 ("Baseline firejail 0.9.28"). > H_FILE_LIST = $(sort $(wildcard *.[h])) > C_FILE_LIST = $(sort $(wildcard *.c)) There is only a single character (i.e.: "h") inside the character class, so its usage should make no functional difference. It may stem from a construct that could have originally looked something like this: C_FILE_LIST = $(sort $(wildcard *.[ch])) Which would match both the implementation files and the headers. From Section 4.4, [Using Wildcard Characters in File Names][1] of the GNU make manual: > A single file name can specify many files using wildcard characters. > The wildcard characters in make are ‘*’, ‘?’ and ‘[…]’, the same as in > the Bourne shell. For example, *.c specifies a list of all the files > (in the working directory) whose names end in ‘.c’. See also Section 2.13, [Pattern Matching Notation][2] of POSIX.1-2017. Commands used to search, replace and clean up: $ find . -name .git -prune -o -type f \ \( -name Makefile -o -name Makefile.in \ -o -name '*.mk' -o -name '*.mk.in' \) -print0 | xargs -0 grep -Fl '$(wildcard *.[h])' | tr '\n' '\000' | xargs -0 sed -i.bak -e \ 's/\$(wildcard \*.\[h\])/$(wildcard *.h)/' $ find . -name .git -prune -o -type f \ -name '*.bak' -exec rm '{}' + Note: To make sure that this doesn't actually change anything functionally, I built firejail-git (AUR) on Artix from master and from this commit and diffing the resulting files produced no output (other than showing changes related to the build timestamps). Misc: Reference to the previous makefile-related changes: commit 2465f9248 ("makefiles: make all, clean and distclean PHONY") / https://github.com/netblue30/firejail/pull/4024 [1]: https://www.gnu.org/software/make/manual/html_node/Wildcards.html [2]: https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3_chap02.html
* | / Update k3b.profileLibravatar Neo000012021-03-23
| |/ |/| | | #2989
* | Merge pull request #4125 from glitsj16/gnome-logsLibravatar glitsj162021-03-21
|\ \ | | | | | | fixes for gnome-logs
| * | fixes for gnome-logsLibravatar glitsj162021-03-21
|/ /
* | Merge pull request #4119 from pirate486743186/patch-14Libravatar Reiner Herrmann2021-03-21
|\ \ | | | | | | [minor] .cache/youtube-viewer in disable-programs.inc
| * | forgoten whitelistLibravatar pirate4867431862021-03-20
| | |
| * | .cacheLibravatar pirate4867431862021-03-20
| | |
| * | adding .cache/youtube-viewerLibravatar pirate4867431862021-03-20
| | |
* | | Merge pull request #4121 from glitsj16/clawskerLibravatar glitsj162021-03-20
|\ \ \ | |/ / |/| | fix private-lib in clawsker.profile
| * | fix private-libLibravatar glitsj162021-03-20
|/ /
* | Fix nheko (#4117)Libravatar rusty-snake2021-03-19
| | | | | | closes #4115
* | man.progile: readonly instead of whitelistLibravatar rusty-snake2021-03-19
| |
* | Update README.md & RELONTS; Fix manpage HAVE_NETWORKLibravatar rusty-snake2021-03-19
| |
* | Merge pull request #4069 from rusty-snake/hasher-profilesLibravatar netblue302021-03-19
|\ \ | | | | | | Add profile for checksum tools
| * | Add profile for checksum toolsLibravatar rusty-snake2021-03-14
| | | | | | | | | | | | | | | | | | * Oops! Thanks for catching. * Add quiet
* | | Merge pull request #3984 from nidamanx/patch-1Libravatar netblue302021-03-19
|\ \ \ | | | | | | | | Fix for KeePassXC plugin
| * | | SortingLibravatar Nicola Davide Mannarelli2021-02-14
| | | | | | | | | | | | | | | | Moved in the right place as in template https://github.com/netblue30/firejail/blob/master/etc/templates/profile.template
| * | | Update etc/profile-a-l/firefox.profileLibravatar Nicola Davide Mannarelli2021-02-13
| | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | Fix for KeePassXC pluginLibravatar Nicola Davide Mannarelli2021-02-13
| | | | | | | | | | | | | | | | | | | | KeePassXC changed the socket name. https://github.com/keepassxreboot/keepassxc/commit/a145bf91191f0a4630a7e31654aff8a8dfd09bf0 Keep also old socket name in whitelist for back compatibility
* | | | Merge pull request #4102 from pirate486743186/patch-13Libravatar netblue302021-03-19
|\ \ \ \ | | | | | | | | | | fixing dbus filtering for engrampa
| * | | | fixing dbus filtering for engrampaLibravatar pirate4867431862021-03-15
| | | | |
* | | | | Merge pull request #4101 from pirate486743186/patch-12Libravatar netblue302021-03-19
|\ \ \ \ \ | | | | | | | | | | | | [minor] qcomicbook and pipe-viewer in disable-programs
| * | | | | adding mcomixLibravatar pirate4867431862021-03-18
| | | | | |
| * | | | | qcomicbook and pipe-viewer in disable-programsLibravatar pirate4867431862021-03-15
| | | | | | | | | | | | | | | | | | qcomicbook is the "PawelStolowski" folders
* | | | | | Merge pull request #4100 from tredondo/patch-2Libravatar netblue302021-03-19
|\ \ \ \ \ \ | | | | | | | | | | | | | | Clarify novideo
| * | | | | | Clarify novideoLibravatar Ted Robertson2021-03-14
| |/ / / / /
* | | | | | Merge pull request #4085 from tredondo/tredondo-nodejsLibravatar netblue302021-03-19
|\ \ \ \ \ \ | | | | | | | | | | | | | | Document enabling debugging for Node.js
| * | | | | | Remove comment line advising to look at inline commentsLibravatar Ted Robertson2021-03-11
| | | | | | |
| * | | | | | Document enabling debugging for Node.jsLibravatar Ted Robertson2021-03-11
| | | | | | |
* | | | | | | Merge pull request #4098 from tredondo/masterLibravatar netblue302021-03-19
|\ \ \ \ \ \ \ | |_|_|_|_|_|/ |/| | | | | | Create bcompare.profile
| * | | | | | Uncomment nodvd, reuse "uncomment next" msgLibravatar Ted Robertson2021-03-14
| | | | | | |
| * | | | | | Allow external applications to paly sound filesLibravatar Ted Robertson2021-03-13
| | | | | | |
| * | | | | | No # ipc-namespaceLibravatar Ted Robertson2021-03-13
| | | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | | | noblacklist ${HOME}/.config/bcompareLibravatar Ted Robertson2021-03-13
| | | | | | |
| * | | | | | Follow meld convention for disable-programs.incLibravatar Ted Robertson2021-03-13
| | | | | | |
| * | | | | | Uncomment shell none, tracelog, dbus-*Libravatar Ted Robertson2021-03-13
| | | | | | |
| * | | | | | No useless commentsLibravatar Ted Robertson2021-03-13
| | | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | | | No commented #allusersLibravatar Ted Robertson2021-03-13
| | | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | | | Add bcompare to firecfg.configLibravatar Ted Robertson2021-03-13
| | | | | | |
| * | | | | | Add bcompare to disable-programs.incLibravatar Ted Robertson2021-03-13
| | | | | | |
| * | | | | | No blank line after before # Persistent local customizationsLibravatar Ted Robertson2021-03-13
| | | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | | | No private-lib/optLibravatar Ted Robertson2021-03-13
| | | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | | | noexec ${HOME} is in disable-exec.incLibravatar Ted Robertson2021-03-13
| | | | | | | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-16 17:55:44 +0000