aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
...
| * | | firejail.config: explain potential issues with etc-hide-blacklistedLibravatar Kelvin M. Klann2023-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Let users know that enabling this may break /etc/resolv.conf. Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591.
| * | | Reword CFG_ETC_HIDE_BLACKLISTED explanationLibravatar Kelvin M. Klann2023-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | To make it clearer. Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591.
| * | | Rename etc-no-blacklisted to etc-hide-blacklistedLibravatar Kelvin M. Klann2023-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To avoid boolean confusion (`no-foo no` / `no-foo yes`) in firejail.config: etc-no-blacklisted no etc-no-blacklisted yes Commands used to search and replace: git grep -Ilz -i 'etc.no.blacklisted' -- etc src | xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed \ -e 's/etc-no-blacklisted/etc-hide-blacklisted/' \ -e 's/ETC_NO_BLACKLISTED/ETC_HIDE_BLACKLISTED/' \ '{}')\" >'{}'" Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591.
* | | | Merge pull request #5594 from bymoz089/masterLibravatar netblue302023-01-16
|\ \ \ \ | |/ / / |/| | | add timezone access to make libical functional
| * | | add timezone access to make libical functionalLibravatar bymoz0892023-01-16
|/ / / | | | | | | claws-mail vcalendar-plugin uses libical to get current timezone. Libical needs access to file `/etc/timezone` to work properly.
* | | Merge pull request #5591 from smitsohu/private-etc-no-blacklistedLibravatar netblue302023-01-15
|\ \ \ | | | | | | | | opt-in: hide blacklisted files in /etc
| * | | testingLibravatar smitsohu2023-01-15
| | | |
| * | | opt-in: skip blacklisted files in private-etc - #5010, #5230Libravatar smitsohu2023-01-15
| | | |
* | | | Merge pull request #5571 from glitsj16/ec-refactorLibravatar netblue302023-01-15
|\ \ \ \ | | | | | | | | | | email-common refactoring
| * | | | balsa: drop private-binLibravatar glitsj162023-01-07
| | | | | | | | | | | | | | | Supporting 'level 1 hack' to allow opening hyperlinks with firefox needs xdg-open (besides bash,sh). Adding xdg-open to private-bin is not enough, as it pulls in a long list of other commands and that's pretty unmaintainable IMO. So I opted to drop private-bin here.
| * | | | email-common: simplify D-Bus filteringLibravatar glitsj162023-01-06
| | | | | | | | | | | | | | | Suggested in review.
| * | | | balsa: re-add private-bin comment for gpgLibravatar glitsj162023-01-06
| | | | | | | | | | | | | | | Pointed out in review that this comment was removed by mistake.
| * | | | email-common: refactoringLibravatar glitsj162023-01-04
| | | | | | | | | | | | | | | No longer used for claws-mail and sylpheed only.
| * | | | sylpheed: refactoringLibravatar glitsj162023-01-04
| | | | |
| * | | | claws-mail: refactoringLibravatar glitsj162023-01-04
| | | | |
| * | | | balsa: refactor as email-common.profile redirectLibravatar glitsj162023-01-04
| |/ / /
* | | | Merge pull request #5563 from glitsj16/linuxqqLibravatar netblue302023-01-15
|\ \ \ \ | | | | | | | | | | New profiles: linuxqq/qq
| * \ \ \ Merge branch 'netblue30:master' into linuxqqLibravatar glitsj162023-01-04
| |\ \ \ \
| * | | | | linuxqq: drop commentLibravatar glitsj162023-01-04
| | | | | | | | | | | | | | | | | | Now that #5569 is in we can remove the hardening comment.
| * | | | | linuxqq: reorder optionsLibravatar glitsj162023-01-03
| | | | | | | | | | | | | | | | | | As suggested in review.
| * | | | | disable-programs.inc: fix ordering QQ configLibravatar glitsj162023-01-03
| | | | | |
| * | | | | Create qq.profileLibravatar glitsj162023-01-03
| | | | | |
| * | | | | Create linuxqq.profileLibravatar glitsj162023-01-03
| | | | | |
| * | | | | README: add linuxqq/qq contributorsLibravatar glitsj162023-01-03
| | | | | |
| * | | | | README.md: add linuxqq/qq to 'New profiles' sectionLibravatar glitsj162023-01-03
| | | | | |
| * | | | | disable-programs.inc: add QQ configLibravatar glitsj162023-01-03
| | | | | |
| * | | | | firecfg: add linuxqq/qqLibravatar glitsj162023-01-03
| | | | | |
* | | | | | RELNOTES: add related PR to --apparmor= itemLibravatar Kelvin M. Klann2023-01-14
| | | | | | | | | | | | | | | | | | | | | | | | Relates to #5274 #5475.
* | | | | | RELNOTES: move --profile-path in --help item to docsLibravatar Kelvin M. Klann2023-01-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit 7902594e7 ("RELNOTES: add bugfix for --profile-path in --help", 2023-01-14). Relates to #5585 #5586.
* | | | | | fix restrict-namespaces for Debian 10 and olderLibravatar netblue302023-01-14
| | | | | |
* | | | | | bringing back whitelisting /devLibravatar netblue302023-01-14
| |_|_|/ / |/| | | |
* | | | | RELNOTES: add bugfix for --profile-path in --helpLibravatar Kelvin M. Klann2023-01-14
| | | | | | | | | | | | | | | | | | | | Relates to #5585 #5586.
* | | | | Merge pull request #5586 from netblue30/rusty-snake-patch-1Libravatar netblue302023-01-13
|\ \ \ \ \ | | | | | | | | | | | | Remove --profile-path from --help
| * | | | | Remove --profile-path from --helprusty-snake-patch-1Libravatar rusty-snake2023-01-13
|/ / / / / | | | | | | | | | | Fixes #5585
* | | | | bump release dateLibravatar Reiner Herrmann2023-01-12
| | | | |
* | | | | fix make test-filtersLibravatar netblue302023-01-12
| | | | |
* | | | | rel 0.9.72 testing: disable whitelisting /dev directoryLibravatar netblue302023-01-12
| | | | |
* | | | | rel 0.9.72 testing: cleanup make test-private-libLibravatar netblue302023-01-12
| | | | |
* | | | | geary: fix opening hyperlinks via D-Bus (#5565)Libravatar glitsj162023-01-12
| | | | |
* | | | | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-01-12
|\ \ \ \ \
| * | | | | RELNOTES: add build itemLibravatar Kelvin M. Klann2023-01-12
| | | | | | | | | | | | | | | | | | | | | | | | Relates to #5577.
| * | | | | RELNOTES: add --netlock bugfixLibravatar Kelvin M. Klann2023-01-12
| | | | | | | | | | | | | | | | | | | | | | | | Relates to #5312.
* | | | | | rel 0.9.72 testingLibravatar netblue302023-01-12
|/ / / / /
* | | | | Merge pull request #5577 from kmk3/build-vim-sh-portabilityLibravatar netblue302023-01-12
|\ \ \ \ \ | | | | | | | | | | | | build: make shell commands more portable in firejail.vim
| * | | | | firejail.vim: use sed instead of rgLibravatar Kelvin M. Klann2023-01-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To avoid depending on an extra package without need. Commands used to search and replace: $ f=contrib/vim/syntax/firejail.vim; \ printf '%s\n' "$(sed -E \ "s|rg -o '([^']+)' -r '\\\$1'|sed -En 's/.*\\1.*/\\\\1/p'|" "$f")" >"$f" Note: `sed -E` is not in POSIX.1-2017 (Issue 7), but it has been accepted into the upcoming POSIX standard version[1] and is supported by at least GNU, busybox and OpenBSD grep. Added on commit a1cc4a556 ("Add vim syntax and ftdetect files (#2679)", 2019-05-06). [1] https://www.austingroupbugs.net/view.php?id=528
| * | | | | firejail.vim: remove redundant sed -e flagsLibravatar Kelvin M. Klann2023-01-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Only a single script is passed by argument in each invocation. Added on commit a1cc4a556 ("Add vim syntax and ftdetect files (#2679)", 2019-05-06) and on commit d2e10f2f5 ("vim: update list of syscalls", 2021-05-29) / PR #4318.
| * | | | | firejail.vim: remove non-POSIX grep -x flagLibravatar Kelvin M. Klann2023-01-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It seems to be equivalent to just delimiting the beginning and the end of the line with `^foo$`. Also, put the regex mode (-E) first. Commands used to search and replace: $ f=contrib/vim/syntax/firejail.vim; \ printf '%s\n' "$(sed -E \ "s|grep -vEx '([^']+)'|grep -Ev '^\\1\$'|" "$f")" >"$f" Added on commit a1cc4a556 ("Add vim syntax and ftdetect files (#2679)", 2019-05-06).
| * | | | | firejail.vim: remove literal newline escapes in trLibravatar Kelvin M. Klann2023-01-09
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | POSIX tr understands '\n', so use that instead of the less portable $'\n'. Commands used to search and replace: $ f=contrib/vim/syntax/firejail.vim; \ printf '%s\n' "$(sed -E \ "s/tr +\\\$'\\\\n'/tr '\\\\n'/g" "$f")" >"$f" Added on commit a1cc4a556 ("Add vim syntax and ftdetect files (#2679)", 2019-05-06).
* | | | | Merge pull request #5583 from glitsj16/harden-qmLibravatar netblue302023-01-12
|\ \ \ \ \ | | | | | | | | | | | | QMediathekView: hardening
| * | | | | QMediathekView: add mkdir and reorder whitelist optionsLibravatar glitsj162023-01-12
| | | | | | | | | | | | | | | | | | As suggested in review.
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-08-03 15:10:18 +0000