Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | | | ci: drop Travis CI because of their new pricing model | 2020-11-04 | ||
| | | | | | | | | | | | | | | | | | | Meanwhile most tests are also run via GitHub Actions Fixes #3721 | |||
* | | | Allow lua in minetest.profile | 2020-11-03 | ||
| | | | | | | | | | | | | | | | Closes #3723 Introduced in 388826683c3b90926e73c83ddb91d5c84a7fa1fa | |||
* | | | fix ${HOME}/.ssh access in filezilla.profile | 2020-11-03 | ||
| | | | | | | | | | This fixes #3722. | |||
* | | | Add spectacle's profile (#3717) | 2020-11-02 | ||
| | | | | | | | | | | | | | | | | | | | | | * Update firecfg.config * Update disable-programs.inc * Create spectacle.profile | |||
| * | | ci: enable test-fs tests on github-ci | 2020-11-01 | ||
|/ / | ||||
* | | README update | 2020-11-01 | ||
| | | ||||
* | | Merge pull request #3716 from Svaag/ssh-u2f | 2020-11-01 | ||
|\ \ | | | | | | | Remove nou2f in ssh profile | |||
| * | | Remove nou2f in ssh profile | 2020-11-01 | ||
| | | | ||||
* | | | fix #3712 | 2020-11-01 | ||
| | | | ||||
* | | | potential fix for #3690 | 2020-11-01 | ||
|/ / | ||||
* | | Allow webcam access in zoom.profile | 2020-10-31 | ||
| | | | | | | This fixes #3711. | |||
* | | keepassxc dbus, closes #3713 [skip ci] | 2020-10-31 | ||
| | | ||||
* | | firefox d-bus (#2953) & fix xournalpp | 2020-10-29 | ||
| | | ||||
* | | support bluetooth protocol in sort.py | 2020-10-28 | ||
| | | ||||
* | | added bluetooth to the list of protocols allowed by seccomp | 2020-10-28 | ||
| | | ||||
* | | profile fixes | 2020-10-28 | ||
| | | ||||
* | | slightly change changelog date to not have duplicate | 2020-10-28 | ||
| | | ||||
* | | reverted --bind as root - some security problems | 2020-10-27 | ||
| | | ||||
* | | Merge branch 'master' of https://github.com/netblue30/firejail | 2020-10-27 | ||
|\ \ | ||||
| * | | Update okular.profile to support cbr files (#3704) | 2020-10-27 | ||
| | | | | | | | | | | | | | | | | | | | | | * Update okular.profile okular has support for reading cbr (rar-compressed comic book). without unrar or unar in private-bin, okular fails to decompress the files for viewing. * Sorted private-bin | |||
* | | | compile time option to disable --private-cache and --tmpfs for regular user | 2020-10-27 | ||
|/ / | ||||
* | | Remove redundant read-only item (#3703) | 2020-10-27 | ||
| | | | | | | | | | | | | | | | | | | | | | | | | | | * remove read-only item redundancy 'read-only ${HOME}/.config/mimeapps.list' is already part of disable-common.inc * remove read-only item redundancy 'read-only ${HOME}/.config/mimeapps.list' is already part of disable-common.inc, which is included in the redirect profile * remove read-only item redundancy 'read-only ${HOME}/.config/mimeapps.list' is already part of disable-common.inc, which is included in the redirect profile | |||
* | | fix assogiate.profile | 2020-10-27 | ||
| | | | | | | The user mime database needs to be writable. | |||
* | | add missing paths to disable-interpreters.inc | 2020-10-26 | ||
| | | | | | | | | | | | | | | and update allow-xxx.inc Fedora uses /usr/lib64 for arch specifiy files and /usr/lib for arch independent files. php, py2, ruby may have also paths there. | |||
* | | Merge pull request #3700 from rusty-snake/fix-3699 | 2020-10-26 | ||
|\ \ | | | | | | | fix #3699 -- Firefox can't inhibit screensavers/screen blanking | |||
| * | | fix #3699 | 2020-10-26 | ||
| | | | ||||
* | | | Merge pull request #3698 from Neo00001/patch-3 | 2020-10-26 | ||
|\ \ \ | |/ / |/| | | Update celluloid.profile | |||
| * | | Update celluloid.profile | 2020-10-26 | ||
| | | | ||||
| * | | Update celluloid.profile | 2020-10-25 | ||
|/ / | | | | | liblua is needed for celluloid & otherwise at least on arch it's showing this error - "celluloid: error while loading shared libraries: liblua5.2.so.5.2: cannot open shared object file: Permission denied" | |||
* | | typo | 2020-10-25 | ||
| | | ||||
* | | Merge branch 'tests' into master | 2020-10-25 | ||
|\ \ | ||||
| * | | increate timeout in xz.dec | 2020-10-25 | ||
| | | | | | | | | | | | | for reason it seems to timeout sometimes in github CI | |||
| * | | include tests in rpm source tarball | 2020-10-24 | ||
| | | | ||||
| * | | add new Makefile.in to distributed files | 2020-10-24 | ||
| | | | ||||
| * | | let github CI run tests | 2020-10-24 | ||
| | | | ||||
| * | | refactor test targets and let build fail on test errors | 2020-10-24 | ||
| | | | ||||
* | | | merges | 2020-10-25 | ||
| | | | ||||
* | | | Merge pull request #3676 from rusty-snake/tmpfs-inside-home | 2020-10-25 | ||
|\ \ \ | | | | | | | | | Allow --tmpfs and --bind inside $HOME for unprivileged users | |||
| * | | | Likewise allow --bind inside $HOME for users | 2020-10-23 | ||
| | | | | ||||
| * | | | Allow --tmpfs inside $HOME for unprivileged users | 2020-10-23 | ||
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | --tmpfs was added in 0.9.14 and restricted to root only in 0.9.38 due to priv-esc CVE-2016-10117 (e.g. --tmpfs=/etc and modify /etc/sudoers). This commit reintroduce it for normal users, if the realpath of it is inside users-home. | |||
* | | | | Merge pull request #3607 from kortewegdevries/wemail | 2020-10-25 | ||
|\ \ \ \ | | | | | | | | | | | Switch mails to whitelisting | |||
| * | | | | Add note about private-bin | 2020-09-03 | ||
| | | | | | ||||
| * | | | | Add firefox support | 2020-08-29 | ||
| | | | | | ||||
| * | | | | Switch kmail to whitelisting | 2020-08-29 | ||
| | | | | | ||||
| * | | | | GPG default, fixes... | 2020-08-28 | ||
| | | | | | ||||
| * | | | | Switch Evolution to whitelisting | 2020-08-28 | ||
| | | | | | ||||
* | | | | | check that profiles are sorted | 2020-10-24 | ||
| |_|/ / |/| | | | ||||
* | | | | bump version to new development version 0.9.65 | 2020-10-24 | ||
| | | | | ||||
* | | | | harden peek; update README.md; add gnome-sound-… | 2020-10-23 | ||
| | | | | | | | | | | | | | | | | …recorder to firecfg.config | |||
* | | | | Merge pull request #3683 from jmetrius/vlc-aacs-fix | 2020-10-23 | ||
|\ \ \ \ | |_|/ / |/| | | | Fix blu-ray playback with libaacs |