aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* new profile: mocp (#3437)Libravatar glitsj162020-05-27
| | | | | | | | | | | | | * Create mocp.profile * add mocp support to disable-programs.inc * add mocp support in firecfg.config * update RELNOTES for mocp * fix configuration access for mocp Thanks to @rusty-snake for spotting this.
* ${RUNUSER} blacklisting + typoLibravatar rusty-snake2020-05-27
|
* Update dino-im.profile (#3433)Libravatar Karoshi422020-05-24
| | | | | | | | | * Update dino-im.profile comment out the globals.local so it's not included twice * Update dino-im.profile add comment
* CI: update & reenable RH buildsLibravatar Fred Barclay2020-05-22
|
* "apparmor" no longer part of .deb nameLibravatar Fred Barclay2020-05-22
| | | | | See 87e7b313997b1d2be6553cfb22fef71b74c84ea6
* Fix #3403 - missed oneLibravatar Fred Barclay2020-05-22
|
* Fix #3403Libravatar Fred Barclay2020-05-22
|
* Merge pull request #3430 from karoshi42/masterLibravatar rusty-snake2020-05-22
|\ | | | | Add Ubuntu's renamed version of dino
| * Add Ubuntu specific name for dinoLibravatar Karoshi422020-05-22
| | | | | | Ubuntu packages dino as dino-im
| * Add profile for Ubuntu's renamed dino binaryLibravatar Karoshi422020-05-22
|/ | | Ubuntu named the dino instant messenger's binary ``dino-im``, so it needs to be present as profile and added to private-bin.
* cleanup wire-desktop.profileLibravatar glitsj162020-05-20
| | | After https://github.com/netblue30/firejail/commit/76127399a5811a0b5ae3fffbd999bf22fba032e1 the caps workaround is no longer needed.
* Add configure options when building rpm (#3422)Libravatar Haowei Yu2020-05-19
|
* fix seccomp in wire-desktop.profileLibravatar glitsj162020-05-19
| | | Fixes #3423.
* fix firejail-in-firejail testLibravatar netblue302020-05-18
|
* fix make depenciesLibravatar netblue302020-05-18
|
* fixing some of the testsLibravatar netblue302020-05-18
|
* better blacklist orderingLibravatar Reiner Herrmann2020-05-16
|
* Blacklist busybox by defaultLibravatar Reiner Herrmann2020-05-16
| | | | It's a collection of many tools, that might not be allowed individually. When it's needed, it can easily be allowed again.
* add mace015 to contributorsLibravatar glitsj162020-05-16
|
* fix ordering in disable-programs.incLibravatar glitsj162020-05-16
|
* Allow google-chrome access to the custom flags files in ~/.config. (#3418)Libravatar Mace Muilman2020-05-16
| | | | | | | | | * Allow google-chrome access to the custom flags files in ~/.config. * Added noblacklist for the custom flag files for google-chrome-stable. * Allow read access to the custom flag files for both google-chrome-beta and google-chrome-unstable. * Added the custom flag files for google-chrome stable, beta and unstable to the disable-programs.inc list.
* Add quiet to secret-toolLibravatar Tad2020-05-15
|
* fix wusc in yelp.profileLibravatar glitsj162020-05-15
|
* Configure Debian package with AA and SELinux optionsLibravatar Topi Miettinen2020-05-14
| | | | | Configure Debian package with AA and SELinux options if they are enabled.
* add new profile: plv (#3410)Libravatar glitsj162020-05-11
| | | | | | | | | | | Also fixed a typo for new profiles: nicontine --> nicotine * add plv to firecfg * add plv to disable-programs.inc * Create plv.profile * Update plv.profile
* Merge pull request #3409 from corecontingency/masterLibravatar rusty-snake2020-05-10
|\ | | | | Add several games to steam and disable-programs
| * Add several games to steam and disable-programsLibravatar corecontingency2020-05-10
|/ | | | | | | | | | | | Add Faster Than Light, Into the Breach, Paradox Interactive, and mbwarband to disable-programs.inc. Also, add Faster Than Light and Into the Breach into steam.profile. This fixes saved games being lost when steam is closed, and also lets Steam cloud sync work properly. Lastly, remove a duplicate whitelist ${HOME}/.steampid from steam.profile.
* add ommitted scripts from contrib (#3405)Libravatar glitsj162020-05-05
| | | We seem to have forgotten 3 scripts from contrib. Let's add those too.
* Build improvements (#3401)Libravatar Topi Miettinen2020-05-04
| | | | | | Don't build all filters many times over but instead let them be built in parallel. Closes #3393
* Follow-up for #3326 (#3397)Libravatar glitsj162020-05-04
| | | | | | | | | | | * use the new dbus format in chromium-common.profile * use new dbus format in firejail.config Now that #3326 landed I think it might be less confusing to keep using the --nodbus wording. Couldn't come up with a better alternative (yet), so this might need future improvements. * block dbus system bus Blocking the system bus shouldn't affect password functionality etc, as that uses the session bus.
* Merge pull request #3395 from matu3ba/template_bugLibravatar rusty-snake2020-05-04
|\ | | | | bug_template: more specific information
| * bug_template: more specific information like related programs, profile ↵Libravatar Jan2020-05-04
|/ | | | existence, lookup for installed profiles and user investigation on related problems
* fix makefile and dbusLibravatar rusty-snake2020-05-04
| | | | | | - create vim directorys (#3396) - fix #3400 (Eye of GNOME won't open) - fix feedreader, it is broken without org.freedesktop.secrets access
* fix #3399Libravatar rusty-snake2020-05-04
|
* fixup! install vim contib filesLibravatar rusty-snake2020-05-03
|
* Merge pull request #3390 from Liorst4/disable-drm-by-defaultLibravatar rusty-snake2020-05-02
|\ | | | | Disable browser drm by default.
| * Disable browser drm by default.Libravatar Lior Stern2020-05-01
| | | | | | | | Done to match whats stated in etc/firejail/firejail.config
* | install vim contib filesLibravatar rusty-snake2020-05-02
| |
* | dbus filter profiles (1) (#3326)Libravatar rusty-snake2020-05-02
| | | | | | | | | | | | | | * dbus filter (1) * dbus-filter: firefox * drop org.gtk.vfs and com.canonical.AppMenu.Registrar
* | various hardening (#3394)Libravatar rusty-snake2020-05-02
|/
* fixes for zeal.profileLibravatar glitsj162020-04-30
| | | Preliminary fixes tested/confirmed on Arch regarding #3389 (in-progress).
* Print status of SELinux support with --versionLibravatar Topi Miettinen2020-04-29
|
* Increase MAX_ENVS to 256 (#3386)Libravatar Topi Miettinen2020-04-26
| | | | | | Some applications like Byobu, tmux and screen like to use environment and then 100 environment variables may be too few. Closes: #3350
* drop no3d from gnome-contacts.profileLibravatar glitsj162020-04-26
| | | Fix for #3385.
* Merge pull request #3380 from backspac/steam-runtimeLibravatar rusty-snake2020-04-24
|\ | | | | Add steam-runtime alias
| * Add steam-runtime aliasLibravatar backspac2020-04-24
|/
* cleanup private-etc in steam.profileLibravatar glitsj162020-04-22
|
* fix gcc10 static analysis warningLibravatar Reiner Herrmann2020-04-22
|
* fix gcc10 static analysis warningLibravatar Reiner Herrmann2020-04-22
|
* add disable-exec to file-manager-common profileLibravatar smitsohu2020-04-22
|