aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Apparmor: add local configurationLibravatar Vladimir Schowalter2017-08-02
|
* get_mempolicy syscall was temporarily removed from the default seccomp list. ↵Libravatar netblue302017-08-02
| | | | | | It seems to break playing youtube videos on Firefox Nightly - #1414
* x11/xpra supportLibravatar netblue302017-08-01
|
* mergesLibravatar netblue302017-08-01
|
* Merge pull request #1423 from VladimirSchowalter20/VladimirSchowalter20-apparmorLibravatar netblue302017-08-01
|\ | | | | Add some /proc dirs to firejail apparmor profile
| * Add some /proc dirs to firejail apparmor profileLibravatar Vladimir Schowalter2017-08-02
|/
* compile cleanupLibravatar netblue302017-08-01
|
* Fix tracing with private-libLibravatar Topi Miettinen2017-08-01
|
* Merge pull request #1421 from SpotComms/fix1420Libravatar Fred Barclay2017-07-31
|\ | | | | Fix #1420
| * Fix #1420Libravatar Tad2017-07-31
|/
* Merge pull request #1415 from chiraag-nataraj/masterLibravatar netblue302017-07-31
|\ | | | | Tentative implementation for #1405
| * Ensure malloc was successfulLibravatar Chiraag Nataraj2017-07-30
| |
| * Remove debugging stuff, free start_child, exit properlyLibravatar Chiraag Nataraj2017-07-30
| |
| * Tentative implementation for #1405Libravatar Chiraag Nataraj2017-07-30
| |
* | Fixes for the private-lib and memory-deny-write-execute featuresLibravatar Topi Miettinen2017-07-30
| |
* | Memory-deny-write-execute featureLibravatar Topi Miettinen2017-07-30
| | | | | | | | Feature to block attempts to create writable and executable memory.
* | Improve loading of seccomp filterLibravatar Topi Miettinen2017-07-30
| | | | | | | | Also fixes a memory leak and double load.
* | Private /lib featureLibravatar Topi Miettinen2017-07-30
| |
* | mergesLibravatar Fred-Barclay2017-07-30
| |
* | mergesLibravatar netblue302017-07-30
| |
* | Merge pull request #1416 from rahiel/telegramLibravatar netblue302017-07-30
|\ \ | |/ |/| telegram is called telegram-desktop in Debian
| * telegram is called telegram-desktop in DebianLibravatar Rahiel Kasim2017-07-30
|/
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar netblue302017-07-29
|\
| * Merge pull request #1411 from SpotComms/armLibravatar Fred Barclay2017-07-29
| |\ | | | | | | Add a profile for arm
| | * Add a profile for armLibravatar Tad2017-07-29
| | |
| * | mergesLibravatar Fred-Barclay2017-07-29
| |/
* / --shell=none fixLibravatar netblue302017-07-29
|/
* mergesLibravatar netblue302017-07-29
|
* mergesLibravatar netblue302017-07-29
|
* Merge pull request #1410 from topimiettinen/seccomp-printLibravatar netblue302017-07-29
|\ | | | | Improve seccomp printing
| * Improve seccomp printingLibravatar Topi Miettinen2017-07-28
| |
* | new profilesLibravatar netblue302017-07-29
| |
* | arp reworkLibravatar netblue302017-07-29
|/
* network testingLibravatar netblue302017-07-27
|
* tentative fix for arp cahce pollution - #1406Libravatar netblue302017-07-27
|
* mergesLibravatar netblue302017-07-27
|
* Merge pull request #1409 from caoliver/masterLibravatar netblue302017-07-27
|\ | | | | Fix typo for fnet moveif invocation on 2nd interface.
| * Fix typo for fnet moveif invocation on 2nd interface.Libravatar Christopher A. Oliver2017-07-27
|/
* Merge pull request #1408 from drzraf/patch-1Libravatar Fred Barclay2017-07-27
|\ | | | | Zoom cache dir
| * Zoom cache dirLibravatar Raphaël Droz2017-07-27
|/ | | | | Zoom seems to use of a QT cache-disk feature which depends upon a ~/.cache/<app>/qmlcache directory. If it can not, Zoom will segfault with mprotect failed in ExecutableAllocator::makeExecutable: Permission denied
* Allow eom and xviewer to write to user's trashLibravatar Fred-Barclay2017-07-27
|
* Updates after mergesLibravatar Fred-Barclay2017-07-27
|
* Merge pull request #1407 from aidalgol/riot-profileLibravatar Fred Barclay2017-07-27
|\ | | | | Add Electron and Riot profiles
| * Add Electron and Riot profilesLibravatar Aidan Gauland2017-07-27
| | | | | | | | | | | | | | * Add a generic profile for Electron applications. * Add a specific profile for Riot based on this new Electron profile. * Addresses vector-im/riot-web#3004 * Fulfils profile request for Riot.im in netblue30/firejail#1139
* | mergesLibravatar netblue302017-07-27
|/
* Improve cross build support by using configured compiler instead of make defaultLibravatar Helmut Grohne2017-07-26
| | | | https://bugs.debian.org/869707
* mergesLibravatar netblue302017-07-25
|
* Merge pull request #1402 from topimiettinen/nosuid-noexec-nodev-proc-sysLibravatar netblue302017-07-25
|\ | | | | /proc/sys can be nosuid,noexec,nodev
| * /proc/sys can be nosuid,noexec,nodevLibravatar Topi Miettinen2017-07-25
| |
* | Merge pull request #1403 from topimiettinen/seccomp-add-syscallsLibravatar netblue302017-07-25
|\ \ | |/ |/| Block some obsolete or unusual syscalls