aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* profanity: reorder alphabeticallyLibravatar Adrian L. Shaw2019-11-24
|
* profanity: allow Python plugins and reorder rulesLibravatar Adrian L. Shaw2019-11-24
|
* Separate the whitelist section of profanity profileLibravatar Adrian L. Shaw2019-11-24
|
* Sort and harden profanity profileLibravatar Adrian L. Shaw2019-11-24
|
* Add profile for the Profanity chat clientLibravatar Adrian L. Shaw2019-11-24
|
* Use seccomp ! syntax in electron-mail.profileLibravatar glitsj162019-11-23
|
* Add new electron-mail profile (#3053)Libravatar glitsj162019-11-23
| | | | | | | | * Create electron-mail.profile * Add electron-mail to disable-programs.inc * Add electron-mail to firecfg.config
* Add lensfun support for gimpLibravatar glitsj162019-11-22
|
* Add babl/gegl support for gimp (#3051)Libravatar glitsj162019-11-22
| | | | | | | | * Add babl/gegl caches for gimp * Add gir-1.0 to wusc * Add babl/gegl support to gimp.profile
* improving remount performanceLibravatar smitsohu2019-11-19
|
* fix previous commitLibravatar netblue302019-11-15
|
* enable apparmor profile from firecfgLibravatar netblue302019-11-15
|
* fixing the fixLibravatar smitsohu2019-11-14
| | | | | get previous commit acbf707889ae241bfd476f5371df4599103b6606 in line with treatment of other directories in /run/firejail/mnt
* blacklist private-home runtime directoryLibravatar smitsohu2019-11-14
| | | | | as far as possible avoid creating locations in the file system that are both writable and executable
* simplify private option ownership checks and make them more consistentLibravatar smitsohu2019-11-14
| | | | | | allowing private and home directory to be owned by different users if the home directory is inside /home was thought to add flexibility, but the scenario is maybe a bit too exotic, and ignoring it paves the way for a simplification
* readme/relnotes updatesLibravatar netblue302019-11-13
|
* Merge pull request #3044 from netblue30/ssh_ncLibravatar netblue302019-11-13
|\ | | | | RFC: profiles: allow nc in ssh profile by default
| * profiles: allow nc in ssh profile by defaultLibravatar Reiner Herrmann2019-11-13
| |
* | Merge pull request #3037 from vutny/fix-3029Libravatar netblue302019-11-13
|\ \ | | | | | | Resolve #3029: drop outdated Skype profile
| * | Resolve #3029: drop outdated Skype profileLibravatar Denys Havrysh2019-11-12
| | |
* | | wine: propose allow-debuggers insteadLibravatar smitsohu2019-11-13
| | |
* | | harden wine profileLibravatar smitsohu2019-11-13
| |/ |/|
* | add signal mediation to apparmor profileLibravatar smitsohu2019-11-13
| | | | | | | | second line of defense, as there is always a pid namespace, too
* | some apparmor profile cleanupLibravatar smitsohu2019-11-12
| | | | | | | | | | | | | | | | writing in /run/firejail/profile has always been restricted to root user, and in addition this folder is blacklisted since recently; @{profile_name} is built-in and adds a bit of flexibility; apparmor cannot be used to restrict directory search permission, so add more rules for sensitive paths
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2019-11-12
|\ \
| * | Fix dig.profile on UbuntuLibravatar glitsj162019-11-11
| | | | | | | | | Fixes #3038.
* | | blacklist .fscrypt directoriesLibravatar smitsohu2019-11-12
| | |
* | | private-options: add homedir ownership checkLibravatar smitsohu2019-11-12
| | |
* | | private-cache warning messages - #2968Libravatar smitsohu2019-11-12
|/ /
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2019-11-11
|\|
| * rework strings.profileLibravatar rusty-snake2019-11-10
| | | | | | | | close #2988
* | tentatively fix k3b profile - #2989Libravatar smitsohu2019-11-11
| |
* | add HAS_NET conditionalLibravatar smitsohu2019-11-11
|/
* add kfind profileLibravatar smitsohu2019-11-09
|
* fix nano support in git profileLibravatar smitsohu2019-11-09
|
* harden balooLibravatar smitsohu2019-11-09
|
* Fix #3024Libravatar rusty-snake2019-11-08
| | | | html5, flash and widevine media support unavailable since vivaldi 2.9
* dia profile: disable interpreters but allow pythonLibravatar netblue302019-11-08
|
* Disabled --overlay for kernels 4.219 and newer until we can bring a fix inLibravatar netblue302019-11-08
|
* READMELibravatar netblue302019-11-08
|
* Merge pull request #3032 from matu3ba/masterLibravatar netblue302019-11-08
|\ | | | | dia apparently wants access to python and crashes without
| * dia apparently wants access to python interpreter and environment for ↵Libravatar Jan2019-11-08
|/ | | | scripting, even though it is written in C, maybe another fix would be better
* Update QOwnNotes.profile (#3028)Libravatar Niklas Goerke2019-11-07
| | | | | | | | | | | | | * Update QOwnNotes.profile Fix startup problem in Ubuntu 19.10: "bus[17]: D-Bus library appears to be incorrectly set up: see the manual page for dbus-uuidgen to correct this issue. (Failed to open "/var/lib/dbus/machine-id": Datei oder Verzeichnis nicht gefunden; Failed to open "/etc/machine-id": Datei oder Verzeichnis nicht gefunden) D-Bus not built with -rdynamic so unable to print a backtrace" * Update etc/QOwnNotes.profile Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com>
* dns fixesLibravatar netblue302019-10-31
|
* testingLibravatar netblue302019-10-31
|
* testingLibravatar netblue302019-10-31
|
* gitignoreLibravatar netblue302019-10-31
|
* cleanup after scan-buildLibravatar netblue302019-10-31
|
* remove scan-build warningLibravatar netblue302019-10-31
|
* Add libdrm to wuscLibravatar glitsj162019-10-30
|