| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
|
| |
* Create ephemeral.profile
* Add ephemeral.profile
* Add ephemeral.profile
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
* Allow user access to /proc/config.gz
* Fix Brave's native sandbox
* Move /proc/config.gz to disable-common.inc
* Move /proc/config.gz to disable-common.inc
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add more brave redirects to firecfg.config
These redirects are found on Debian/Ubuntu when enabling the official Brave repositories cfr. https://brave-browser.readthedocs.io/en/latest/installing-brave.html#linux
* Create brave-browser-beta.profile
* Create brave-browser-dev.profile
* Create brave-browser-nightly.profile
* Create brave-browser-stable.profile
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Create gzexe.profile
* Create uncompress.profile
* Create zcat.profile
* Create zcmp.profile
* Create zdiff.profile
* Create zegrep.profile
* Create zfgrep.profile
* Create zforce.profile
* Create zgrep.profile
* Create zless.profile
* Create zmore.profile
* Create znew.profile
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
| |
Fixes #3068.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
* Add 'quiet' to gpg.profile
* Add 'quiet' to gpg-agent.profile
* Create gpg2.profile
|
| |
|
|
|
|
| |
It is better to comment wusc in ffmpeg?
|
| |
|
|
|
|
| |
release-0.9.62 branch
|
| |
|
|\
| |
| | |
Minor profile tweaks.
|
| |
| |
| |
| | |
thunderbird-wayland profile did not include thunderbird-wayland.local
|
| | |
|
| |
| |
| |
| | |
apparently on x86 and on other platforms like aarch64 a 16 byte aligned stack is expected
todo: replace this with a generic check
|
| | |
|
| | |
|
| | |
|
| | |
|
|/
|
| |
Fix broken libx265 encoding (needs the set_mempolicy syscall).
|
|
|
| |
Thanks to @rusty-snake for requesting this in https://github.com/netblue30/firejail/pull/3061.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Create gist.profile
* Add gist config to disable-programs.inc
* Add gist to firecfg.config
* Update RELNOTES
* Update README.md
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
AppArmor security relies on path based rules and rewriting paths
may allow to bypass them.
Those actions are priveliged so vast majority of apps shouldn't need
them anyway. If some app need those rules then it's better to
consider them as unsuitable for apparmor option rather than weaken
generic profile for all apps.
See related issue reported by apparmor usage in snap:
https://bugs.launchpad.net/snapd/+bug/1791711
|
| |
|
|
|
|
|
|
| |
* Create unf.profile
* Add unf to firecfg.config
|
|
|
|
|
|
|
|
| |
* Create gmpc.profile
* Add gmpc config to disable-programs.inc
* Add gmpc to firecfg.config
|