aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Merge pull request #4332 from rusty-snake/bitwarden-electronLibravatar netblue302021-06-28
|\ | | | | Refactor bitwarden as electron redirect
| * Refactor bitwarden as electron redirect (follow-up)Libravatar rusty-snake2021-06-08
| |
| * Refactor bitwarden as electron redirectLibravatar rusty-snake2021-06-08
| |
* | README updateLibravatar netblue302021-06-27
| |
* | README updateLibravatar netblue302021-06-27
| |
* | Merge pull request #4376 from kmk3/gcov-add-nop-functionsLibravatar netblue302021-06-27
|\ \ | | | | | | gcov: use no-op functions if not enabled
| * | gcov: use no-op functions if not enabledLibravatar Kelvin M. Klann2021-06-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of wrapping every gcov function call in an ifdef. Note: The usage of `((void)0)` is based on section 7.2 of the C99 standard (N1256)[1] [2]: > 7.2 Diagnostics <assert.h> > > 1 The header <assert.h> defines the assert macro and refers to another > macro, > > NDEBUG > > which is not defined by <assert.h>. If NDEBUG is defined as a macro > name at the point in the source file where <assert.h> is included, the > assert macro is defined simply as > > #define assert(ignore) ((void)0) See also assert.h(0p) from POSIX.1-2017[3]. Note: This is a continuation of commit b408b20c7 ("gcov: fix build failure with gcc 11.1.0") / PR #4373. [1] http://www.open-std.org/JTC1/SC22/WG14/www/docs/n1256.pdf [2] https://port70.net/~nsz/c/c99/n1256.html#7.2 [3] https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/assert.h.html
| * | gcov: fix indentationLibravatar Kelvin M. Klann2021-06-27
| | |
* | | Merge pull request #4369 from pirate486743186/rtvLibravatar netblue302021-06-27
|\ \ \ | | | | | | | | rtv profile correction
| * | | Update rtv-addons.profileLibravatar pirate4867431862021-06-22
| | | |
| * | | commentsLibravatar pirate4867431862021-06-22
| | | |
| * | | correctionsLibravatar pirate4867431862021-06-22
| | | |
* | | | Merge pull request #4375 from smitsohu/kcmpLibravatar netblue302021-06-27
|\ \ \ \ | | | | | | | | | | remove kcmp from seccomp default drop list
| * | | | remove kcmp from seccomp default drop list (#3219)Libravatar smitsohu2021-06-26
| | | | |
* | | | | Merge pull request #4373 from kmk3/gcov-fix-build-gcc11Libravatar netblue302021-06-27
|\ \ \ \ \ | | |_|/ / | |/| | | gcov: fix build failure with gcc 11.1.0
| * | | | gcov: fix build failure with gcc 11.1.0Libravatar Kelvin M. Klann2021-06-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The build currently fails if gcov support is enabled: $ pacman -Q gcc gcc 11.1.0-1 $ ./configure --prefix=/usr --enable-apparmor --enable-gcov >/dev/null $ make >/dev/null [...] netstats.c: In function ‘netstats’: netstats.c:250:25: warning: implicit declaration of function ‘__gcov_flush’; did you mean ‘__gcov_dump’? [-Wimplicit-function-declaration] 250 | __gcov_flush(); | ^~~~~~~~~~~~ | __gcov_dump [...] /usr/bin/ld: netstats.o: in function `netstats': /tmp/firejail-git/src/firejail-git/src/firemon/netstats.c:250: undefined reference to `__gcov_flush' [...] collect2: error: ld returned 1 exit status make[1]: *** [Makefile:10: firemon] Error 1 make: *** [Makefile:42: src/firemon/firemon] Error 2 [...] This happens because __gcov_flush was removed on gcc 11.1.0[1] [2] [3]. See the following gcc commits: * d39f7dc8d5 ("Do locking for __gcov_dump and __gcov_reset as well.") * c0532db47d ("Use __gcov_dump and __gcov_reset in execv and fork context.") * 811b7636cb ("Remove __gcov_flush.") Its implementation did the following[4]: __gcov_lock (); __gcov_dump_int (); __gcov_reset_int (); __gcov_unlock (); As hinted in the commit messages above, the function is no longer needed because locking is now done inside each of __gcov_dump and __gcov_reset. So add an implementation of __gcov_flush (on a new gcov_wrapper.h file) for gcc >= 11.1.0, which just calls __gcov_dump and then __gcov_reset. Commands used to search and replace: $ git grep -Flz '#include <gcov.h>' -- '*.c' | xargs -0 -I '{}' sh -c \ "printf '%s\n' \"\`sed 's|<gcov\\.h>|\"../include/gcov_wrapper.h\"|' '{}'\`\" >'{}'" Note: This is the continuation of commit 31557e9c7 ("gcov: add missing gcov.h includes") / PR #4360. [1] https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=d39f7dc8d558ca31a661b02d08ff090ce65e6652 [2] https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=c0532db47d092430f8e8f497b2dc53343527bb13 [3] https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=811b7636cb8c10f1a550a76242b5666c7ae36da2 [4] https://gcc.gnu.org/git/?p=gcc.git;a=blob;f=libgcc/libgcov-interface.c;h=855e8612018d1c9caf90396a3271337aaefdb9b3#l86
* | | | | tweaksLibravatar smitsohu2021-06-26
| | | | |
* | | | | Merge pull request #4340 from smitsohu/kcmpLibravatar smitsohu2021-06-26
|\ \ \ \ \ | | |/ / / | |/| | | augment seccomp lists in firejail.config
| * | | | RELNOTESLibravatar smitsohu2021-06-26
| | | | |
| * | | | seccomp man page updateLibravatar smitsohu2021-06-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * move everything related to modification of the default seccomp filter from --seccomp to --seccomp= entry * update errno descriptions
| * | | | augment seccomp lists in firejail.configLibravatar smitsohu2021-06-20
| | | | |
* | | | | Merge pull request #4374 from smitsohu/euidLibravatar smitsohu2021-06-26
|\ \ \ \ \ | | | | | | | | | | | | fs_home.c: run more code with euid of the user
| * | | | | fs_home.c: improve EUID switching, fix selinux relabelingLibravatar smitsohu2021-06-26
| | | | | |
| * | | | | copy_file_as_user function: drop not needed argumentsLibravatar smitsohu2021-06-23
| | |_|/ / | |/| | |
* | | | | firejail.h: fix typo of "either" in license headerLibravatar Kelvin M. Klann2021-06-26
| | | | | | | | | | | | | | | | | | | | Added on commit e770ab6d8 ("appimage: automatically detect profile").
* | | | | Merge pull request #4368 from alxjsn/masterLibravatar rusty-snake2021-06-25
|\ \ \ \ \ | | | | | | | | | | | | Address #3872 with changes in pipewire for Firefox and Chromium
| * | | | | Address #3872 with changes for LibrewolfLibravatar Alex Leahu2021-06-22
| | | | | |
| * | | | | Address #3872 with changes in pipewire for Firefox and ChromiumLibravatar Alex Leahu2021-06-22
| |/ / / /
* | | | | Merge pull request #4370 from glitsj16/fix-wuscLibravatar glitsj162021-06-23
|\ \ \ \ \ | |/ / / / |/| | | | allow access to pkgconfig
| * | | | allow access to pkgconfigLibravatar glitsj162021-06-23
|/ / / /
* | | | README updateLibravatar Reiner Herrmann2021-06-21
| | | |
* | | | Merge branch 'master' into kuesji/masterLibravatar Reiner Herrmann2021-06-21
|\ \ \ \
| * | | | creating alpine.profile (#4350)Libravatar pirate4867431862021-06-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * firecfg.config alpine * Create alpinef.profile * Create alpine.profile * disable-programs.inc alpine * workaround in comment * Update etc/profile-a-l/alpine.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * deactivating whitelists in ${HOME} * comment Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | | testingLibravatar smitsohu2021-06-21
| | | | |
| * | | | tmpfs option enhancementsLibravatar smitsohu2021-06-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * downgrade error to warning, smiliar to read-write option; this simplifies use of tmpfs option in general purpose profiles, for example we don't need to worry about links people put in their homedir * update manpage
| * | | | cleanupLibravatar smitsohu2021-06-20
| | | | |
| * | | | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302021-06-19
| |\ \ \ \
| | * | | | Fix #4363 -- minecraft-launcher not running with firejailLibravatar rusty-snake2021-06-19
| | | | | |
| * | | | | fixing broken buildLibravatar netblue302021-06-19
| |/ / / /
| * | | | jailcheck: networking supportLibravatar netblue302021-06-19
| | | | |
| * | | | Merge pull request #4360 from kmk3/gcov-add-missing-includesLibravatar netblue302021-06-18
| |\ \ \ \ | | | |/ / | | |/| | gcov: add missing gcov.h includes
| | * | | gcov: add missing gcov.h includesLibravatar Kelvin M. Klann2021-06-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the following "implicit declaration" warning (13 occurrences in total) when building with gcov support: $ pacman -Q gcc10 gcc10 1:10.2.0-3 $ CC=gcc-10 && export CC $ ./configure --prefix=/usr --enable-apparmor --enable-gcov >/dev/null $ make >/dev/null appimage.c: In function ‘appimage_set’: appimage.c:140:2: warning: implicit declaration of function ‘__gcov_flush’ [-Wimplicit-function-declaration] 140 | __gcov_flush(); | ^~~~~~~~~~~~ interface.c: In function ‘print_sandbox’: interface.c:149:3: warning: implicit declaration of function ‘__gcov_flush’ [-Wimplicit-function-declaration] 149 | __gcov_flush(); | ^~~~~~~~~~~~ netstats.c: In function ‘netstats’: netstats.c:246:4: warning: implicit declaration of function ‘__gcov_flush’ [-Wimplicit-function-declaration] 246 | __gcov_flush(); | ^~~~~~~~~~~~ [...] Note: The commands above were executed from makepkg, while building firejail-git from the AUR. Note2: gcc-10 was used because the build fails with the current gcc version (11.1.0) on Artix Linux. The failure happens because __gcov_flush was removed on gcc 11.1.0[1]; this will be addressed later. Note3: The following command helped find the affected files: $ git grep -Fl __gcov -- src [1] https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=811b7636cb8c10f1a550a76242b5666c7ae36da2
| * | | | appimage fixLibravatar netblue302021-06-17
| |/ / /
| * | | appimage: automatically detect profileLibravatar netblue302021-06-14
| | | |
| * | | mention new tin profile in readme/relnotesLibravatar Reiner Herrmann2021-06-12
| | | |
| * | | profiles: add profile for tin news reader (#4356)Libravatar Reiner Herrmann2021-06-12
| | | |
| * | | README.md: minor markdown improvementsLibravatar Reiner Herrmann2021-06-11
| | | |
| * | | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2021-06-11
| |\ \ \
| | * | | mcomix profile creation (#4338)Libravatar pirate4867431862021-06-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * mcomix * Create mcomix.profile * tightening * fixes * comment
| * | | | follow-upLibravatar smitsohu2021-06-11
| |/ / / | | | | | | | | | | | | PR #4349