aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
...
| * | build: fix codespell errors in more filesLibravatar Kelvin M. Klann2023-08-13
| |/ | | | | | | | | | | Found by simply running `codespell .`. Environment: codespell 2.2.5-2 on Artix Linux.
* | build(deps): bump github/codeql-action from 2.21.2 to 2.21.3Libravatar dependabot[bot]2023-08-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.2 to 2.21.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/0ba4244466797eb048eb91a6cd43d5c03ca8bd05...5b6282e01c62d02e720b81eb8a51204f527c3624) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | mpd: allow MPRIS2 (#5951)Libravatar glitsj162023-08-13
|/ | | | | mpDris2 brings MPRIS2 support to MPD: https://github.com/eonpatapon/mpDris2
* build: fix wrong man page pathsLibravatar Kelvin M. Klann2023-08-12
| | | | | | | Change the old .txt paths into the new .in paths. This amends commit 76bd5ad0f ("build: simplify code related to man pages", 2023-07-12) / PR #5898.
* ani-cli.profile: allow mktemp (#5954)Libravatar pirate4867431862023-08-12
|
* build: fix TARNAME/VERSION variables in compile.shLibravatar Kelvin M. Klann2023-08-12
| | | | | | | | | | | | | This fixes the following errors: $ make clean [...] cd test/compile; ./compile.sh --clean; cd ../.. ./compile.sh: line 55: TARNAME: command not found ./compile.sh: line 55: VERSION: command not found This amends commit 200f389ed ("build: use config.sh in more scripts", 2023-07-28) / PR #5927.
* Merge pull request #5953 from varunsh-coder/update-harden-runnerLibravatar Kelvin M. Klann2023-08-12
|\ | | | | build(deps): Update step-security/harden-runner and update allowed endpoints
| * Update allowed endpointsLibravatar Varun Sharma2023-08-12
| | | | | | | | Signed-off-by: Varun Sharma <varunsh@stepsecurity.io>
| * build(deps): bump step-security/harden-runner from 2.5.0 to 2.5.1Libravatar Varun Sharma2023-08-12
|/ | | | Signed-off-by: Varun Sharma <varunsh@stepsecurity.io>
* build: fix codespell errorsLibravatar Kelvin M. Klann2023-08-12
| | | | | | | | | | | | | | | | | | | | | This fixes the following errors: $ make codespell [...] codespell --ignore-regex "UE|creat|doas|shotcut|ether" src test src/firemon/procevent.c:188: duble ==> double src/fnettrace/main.c:30: postive ==> positive src/fnettrace/main.c:30: defiend ==> defined src/fnettrace/main.c:482: isplay ==> display make: *** [Makefile:371: codespell] Error 65 $ codespell --version 2.2.5 Added in the following commits: * bef5d86a1 ("increase socket buffer size for firemon, bug #2700", 2019-09-29) * c4962789f ("nettrace stats", 2023-08-08)
* small nettrace updateLibravatar netblue302023-08-11
|
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-08-11
|\
| * profiles: improvements to profiles using private (#5946)Libravatar glitsj162023-08-11
| | | | | | | | | | | | | | | | | | Changes: * comment `include whitelist-common.inc` when using `private` * drop `private` on profiles that access files in `${HOME}` * use `#` in comments Relates to #903.
| * 0ad.profile: fix libmozjs error on OpenSUSE Tumbleweed (#5944)Libravatar leukimi2023-08-11
| | | | | | | | | | | | | | This fixes 0ad not opening on OpenSUSE Tumbleweed due to a "Permission denied" error when trying to open "libmozjs-78.so.0". See this issue that describes it all: https://github.com/netblue30/firejail/issues/5938#issue-1833607321
| * New profile: clac (#5947)Libravatar glitsj162023-08-10
| | | | | | | | | | * firecfg.config: add support for clac * Create clac.profile
| * New profile: journal-viewer (#5943)Libravatar glitsj162023-08-10
| |
| * Merge pull request #5942 from kmk3/build-firecfg-improvementsLibravatar Kelvin M. Klann2023-08-06
| |\ | | | | | | build: firecfg.config sorting improvements
| | * build: use ASCII sort on firecfg and check for duplicatesLibravatar Kelvin M. Klann2023-08-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently the CI check does not consider certain special characters (such as `-`) when sorting due to `sort -d`. So remove `-d`, sort firecfg using `LC_ALL=C` and enforce that order. Also add `sort -u` to check for duplicates. This also allows the CI check to ignore normal comments (lines starting with `# `) anywhere in the file. Relates to #4643.
| | * build: improve comments in firecfg.configLibravatar Kelvin M. Klann2023-08-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove the space after `#` for commented code and use `#` instead of `-` for comments at the end of the line. Commands used to search and replace: $ f=src/firecfg/firecfg.config; printf '%s\n' "$(sed -E \ -e '3,9999s/^# /#/' \ -e '3,9999s/^#([^ ]+) --? /#\1 # /' \ "$f")" >"$f"
| * | Merge pull request #5941 from kmk3/mpv-add-cacheLibravatar Kelvin M. Klann2023-08-06
| |\ \ | | |/ | |/| mpv.profile: add XDG_CACHE_HOME & missing paths
| | * profiles: add cache/state paths for mpvLibravatar Kelvin M. Klann2023-08-03
| | | | | | | | | | | | | | | | | | On the profiles that allow ~/.config/mpv. Relates to #5936.
| | * mpsyt.profile: stop creating config paths for mpv/youtube-dlLibravatar Kelvin M. Klann2023-08-03
| | | | | | | | | | | | | | | The programs in question do not create these files; they have to be created manually.
| | * mpv.profile: add new XDG_CACHE_HOME pathLibravatar Kelvin M. Klann2023-08-03
| |/ | | | | | | | | | | | | | | | | mpv v0.36.0 uses ~/.cache/mpv[1] [2]: Relates to #2838 #5936. [1] https://github.com/mpv-player/mpv/releases/tag/v0.36.0 [2] https://github.com/mpv-player/mpv/pull/10838
| * mpv.profile: add new XDG_STATE_HOME pathLibravatar CodeWithMa2023-08-03
| | | | | | | | | | | | | | The new version of mpv changed the path of the watch_later folder to ~/.local/state/mpv/watch_later. See https://github.com/mpv-player/mpv/pull/10838
| * New profile: reader (#5934)Libravatar glitsj162023-08-02
| | | | | | | | | | | | | | | | | | | | | | | | * Create reader.profile * firecfg.config: add reader support * reader: integrate review suggestions - blacklist whole ${RUNUSER} - drop x11 none * reader: fix 'x11 none'
| * New profile: daisy (#5935)Libravatar glitsj162023-08-02
| | | | | | | | | | * firecfg.config: add daisy support * Create daisy.profile
| * gramps: bring in new config directory (#5933)Libravatar glitsj162023-07-31
| | | | | | | | | | * disable-programs.inc: add new gramps dir * gramps: add new config dir
| * thunderbird: D-Bus hardening (#5913)Libravatar glitsj162023-07-31
| |
| * build(deps): bump github/codeql-action from 2.21.0 to 2.21.2Libravatar dependabot[bot]2023-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.0 to 2.21.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8...0ba4244466797eb048eb91a6cd43d5c03ca8bd05) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
| * build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0Libravatar dependabot[bot]2023-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.4.1 to 2.5.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/55d479fb1c5bcad5a4f9099a5d9f37c8857b2845...cba0d00b1fc9a034e1e642ea0f1103c282990604) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
| * RELNOTES: add build itemsLibravatar Kelvin M. Klann2023-07-29
| | | | | | | | Relates to #5916 #5927.
| * Merge pull request #5927 from kmk3/build-use-config-shLibravatar Kelvin M. Klann2023-07-30
| |\ | | | | | | build: fix some shellcheck issues & use config.sh in more scripts
| | * build: use config.sh in more scriptsLibravatar Kelvin M. Klann2023-07-28
| | | | | | | | | | | | | | | | | | | | | This removes the need to manually pass variables such as `$(TARNAME)` and `$(VERSION)` to shell scripts in the root Makefile. Relates to #5140.
| | * build: fix shellcheck issues in mkrpm.sh/compile.shLibravatar Kelvin M. Klann2023-07-28
| |/
* / nettrace statsLibravatar netblue302023-08-08
|/
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-07-27
|\
| * Merge pull request #5916 from kmk3/build-improve-distLibravatar Kelvin M. Klann2023-07-27
| |\ | | | | | | build: dist and asc improvements
| | * build: make asc use config.shLibravatar Kelvin M. Klann2023-07-27
| | | | | | | | | | | | | | | | | | Similarly to mkdeb.sh. Relates to #5140.
| | * build: make dist depend on just cleanLibravatar Kelvin M. Klann2023-07-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The clean target is currently enough to remove all generated files other than the ones directly in the root directory, so to simplify the dist target, make it depend on clean instead of distclean. See commit 5f2785290 ("build: remove unnecessary distclean targets", 2023-07-15) / PR #5911. Relates to #5142 #5182.
| | * build: remove remaining svn-related codeLibravatar Kelvin M. Klann2023-07-24
| | | | | | | | | | | | | | | The only other svn-related code seems to have been removed on commit 7e1c057ae ("make testing", 2016-04-23).
| | * build: sort DISTFILES_TESTLibravatar Kelvin M. Klann2023-07-24
| | |
| | * build: format DISTFILES / DISTFILES_TESTLibravatar Kelvin M. Klann2023-07-24
| | |
| * | fnetlock: fix unused bw variable warningLibravatar Kelvin M. Klann2023-07-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is breaking build-clang on CI[1]: make -C src/fnetlock/ make[1]: Entering directory '/home/runner/work/firejail/firejail/src/fnetlock' clang-14 [...] -c main.c -o main.o main.c:97:11: error: variable 'bw' set but not used [-Werror,-Wunused-but-set-variable] unsigned bw = 0; // bandwidth calculations ^ 1 error generated. make[1]: *** [../../src/prog.mk:16: main.o] Error 1 make: *** [Makefile:58: src/fnetlock/fnetlock] Error 2 Added on commit 8e4b847cd ("split nettrace executable ^Cto netrace and netlock", 2023-07-25). [1]: https://github.com/netblue30/firejail/actions/runs/5669072674/job/15361026508 Cc: @netblue30
* | | cleanupLibravatar netblue302023-07-27
|/ /
* | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-07-26
|\ \
| * | spotify: D-Bus hardening (#5923)Libravatar glitsj162023-07-25
| | |
| * | audacious: D-Bus hardening (#5922)Libravatar glitsj162023-07-25
| | | | | | | | | | | | | | | * audacious: D-Bus hardening * audacious: add noprinters
| * | New profile: sniffnet (#5920)Libravatar glitsj162023-07-25
| | | | | | | | | | | | | | | | | | | | | * disable-programs.inc: add sniffnet support * Create sniffnet.profile * firecfg.config: add sniffnet support
| * | profiles: fixes and cleanups for opening links with firefox (#5919)Libravatar glitsj162023-07-25
| | |
| * | profiles: Miscellaneous cleanups (#5918)Libravatar glitsj162023-07-25
| | |