aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* qutebrowser.profile: Add passwd to private-etc (#5624)Libravatar amano-kenji2023-01-28
| | | | This is necessary if I want to launch a terminal editor from qutebrowser.
* private-etc: corss-distro test for curl, gimp, inkscape, firefox, warzone2100Libravatar netblue302023-01-28
|
* Update SECURITY.mdLibravatar Kelvin M. Klann2023-01-27
|
* private-etc: fixesLibravatar netblue302023-01-25
|
* private-etc: fix man pageLibravatar netblue302023-01-25
|
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-01-25
|\
| * fix qutebrowser not opening tabs (#5618)Libravatar Alexandre Provencio2023-01-25
| | | | | | | | Closes #5601
* | private-etc rework: new man pageLibravatar netblue302023-01-25
|/
* private-etc rework: file groups moved to src/include/etc_groups.h, new ↵Libravatar netblue302023-01-25
| | | | groups added
* mergesLibravatar netblue302023-01-25
|
* fix pingus profileLibravatar netblue302023-01-25
|
* build: remove gtksourceview language-spec on uninstallLibravatar Kelvin M. Klann2023-01-24
| | | | | | | It is currently only used on the "install" target. This amends commit 16afd8c8e ("Add basic gtksourceview language-spec (#5502)", 2022-12-04).
* zoom.profile: whitelist ~/.config/zoom.conf (#5596)Libravatar fkrone2023-01-24
| | | | | | | | | | | | | * zoom.profile: whitelist ~/.config/zoom.conf With Zoom version 5.12.6, Zoom changed how they handle encrypting the local database. This change resulted in the new file zoom.conf being used. As it is not allowed by the current profile, this could lead to users losing their chat history if they cannot be retrieved from the cloud (e.g. when e2e encryption is used). * zoom.profile: noblacklist ~/.config/zoom.conf Additional blacklisting for other programs to the configuration file.
* profanity: fix notifications (#5602)Libravatar Mohammed Anas2023-01-24
|
* build(deps): bump github/codeql-action from 2.1.38 to 2.1.39Libravatar dependabot[bot]2023-01-23
| | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.38 to 2.1.39. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/515828d97454b8354517688ddc5b48402b723750...a34ca99b4610d924e04c68db79e503e1f79f9f02) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* private-etc rework: /etc file groupsLibravatar netblue302023-01-22
|
* Merge pull request #5609 from glitsj16/resolv-fixesLibravatar netblue302023-01-21
|\ | | | | private-etc rework fixes
| * wireshark: fix private-etc commentLibravatar glitsj162023-01-21
| |
| * transgui: fix networkingLibravatar glitsj162023-01-21
| |
| * sqlitebrowser: fix networkingLibravatar glitsj162023-01-21
| |
| * qnapi: fix networkingLibravatar glitsj162023-01-21
| |
| * pavucontrol: fix networkingLibravatar glitsj162023-01-21
| |
| * netactview: fix networkingLibravatar glitsj162023-01-21
| |
| * mpDris2: fix networkingLibravatar glitsj162023-01-21
| |
| * gnome-clocks: fix networkingLibravatar glitsj162023-01-21
| |
| * gmpc: fix networkingLibravatar glitsj162023-01-21
| |
| * arm: fix networkingLibravatar glitsj162023-01-21
| |
| * amarok: fix private-etc commentLibravatar glitsj162023-01-21
|/
* small test fixesLibravatar netblue302023-01-20
|
* compile fixLibravatar netblue302023-01-20
|
* private-etc rework: remove hiding blacklisted files in private-etc directory ↵Libravatar netblue302023-01-20
| | | | feature
* RELNOTES: add modif and docs itemsLibravatar Kelvin M. Klann2023-01-19
| | | | Relates to #5589 #5599 #5600.
* RELNOTES: add new profiles to 0.9.72Libravatar Kelvin M. Klann2023-01-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commands used to find the profiles and print the RELNOTES items: $ git log --reverse --pretty= --name-only --diff-filter=A \ 0.9.70..0.9.72 -- etc/inc etc/net etc/profile-* | cut -f 3 -d / | sed -E -e 's/^([^.]+)\.profile$/\1/' -e 's/$/,/' | tr '\n' ' ' | fold -s -w 61 | sed 's/^/ * new profiles: /'; echo Based on the commands from commit a320957a1 ("RELNOTES: add missing new profiles", 2022-06-09) / PR #5184. Note: 61 is used in fold because it's 79 (the default `textwidth` / `tw` in vim) minus 18 (the length of " * new profiles: "). Note2: ".profile" is only trimmed if it's the only suffix, to make it clear that a new etc/profile-a-l/foo.inc.profile is not a new etc/inc/foo.inc profile. Note3: Keep the commas at the end because removing them could need another `fold` to make the output exactly equivalent to writing/formatting the items manually. Note4: There were no profiles removed in 0.9.72: $ git log --reverse --pretty= --name-only --diff-filter=D \ 0.9.70..0.9.72 -- etc/inc etc/net etc/profile-* $
* Merge pull request #5600 from kmk3/fix-stop-ddash-shLibravatar netblue302023-01-19
|\ | | | | modif: Stop forwarding own double-dash to the shell
| * Stop forwarding own double-dash to the shellLibravatar Kelvin M. Klann2023-01-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, if double-dash ("--") is passed to firejail, it is forwarded to the user shell: $ firejail --debug --noprofile -- echo test 2>&1 | grep -e execvp -e test Building quoted command line: 'echo' 'test' Building quoted command line: 'echo' 'test' Running 'echo' 'test' command through /bin/bash execvp argument 0: /bin/bash execvp argument 1: -c execvp argument 2: -- execvp argument 3: 'echo' 'test' test This causes issues when the user shell does not accept "--" / is not POSIX-compatible: $ /bin/bash -c -- 'echo test' test $ /bin/fish -c -- 'echo test' fish: Unknown command: -- fish: -- ^ Fixes #5599. Relates to #3434. Reported-by: @iltep64 Reported-by: @ferreum
* | cleanupLibravatar netblue302023-01-19
| |
* | cleanupLibravatar netblue302023-01-19
| |
* | cleanupLibravatar netblue302023-01-19
| |
* | more profile fixes/testingLibravatar netblue302023-01-19
| |
* | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-01-18
|\ \
| * | tests: check for sh instead of bash in nice.expLibravatar Reiner Herrmann2023-01-18
| | | | | | | | | | | | (in Debian CI only sh is getting printed)
* | | some profile updatesLibravatar netblue302023-01-18
|/ /
* | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-01-18
|\ \
| * \ Merge pull request #5589 from nya1/fix/apparmor-invalid-command-line-optionLibravatar netblue302023-01-18
| |\ \ | | | | | | | | docs: remove apparmor options in --help when building without apparmor support
| | * | refactor: do not show apparmor CLI options if app armor is not supportedLibravatar nya12023-01-14
| | | |
| | * | chore: update readme with flag to enable apparmor on ./configureLibravatar nya12023-01-14
| | | |
* | | | mergesLibravatar netblue302023-01-18
|/ / /
* | / update README.mdLibravatar netblue302023-01-18
| |/ |/|
* | build(deps): bump github/codeql-action from 2.1.37 to 2.1.38Libravatar dependabot[bot]2023-01-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.37 to 2.1.38. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/959cbb7472c4d4ad70cdfe6f4976053fe48ab394...515828d97454b8354517688ddc5b48402b723750) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | build(deps): bump step-security/harden-runner from 2.0.0 to 2.1.0Libravatar dependabot[bot]2023-01-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.0.0 to 2.1.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5...18bf8ad2ca49c14cbb28b91346d626ccfb00c518) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-05 15:12:53 +0000