| Commit message (Collapse) | Author | Age |
... | |
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
keep-fd option (#4845)
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Keep vglusers group unless no3d is used (virtualgl)
|
| |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
virtualgl[1] runs `chown root:vglusers` on `/dev/nvidia*` and on devices
usually owned by the "render" group[2]. This makes them unavailable in
the sandbox if `noroot` (which causes groups to be dropped) is used.
Since firejail classifies all of the aforementioned devices as being
`DEV_3D` on fs_dev.c (which means that they are controlled by `no3d`),
treat the "vglusers" group the same as the "render" group (by always
keeping "vglusers" unless `no3d` is used).
See the discussion on #2042 (from this comment[3] onwards).
[1] https://virtualgl.org
[2] https://github.com/VirtualGL/virtualgl/blob/6f0b90be02d13171dfdfffb112485f4091a5904f/server/vglserver_config#L393
[3] https://github.com/netblue30/firejail/issues/2042#issuecomment-1007468715
Reported-by: @JCallicoat
|
| | | | |
| | | | |
| | | | |
| | | | | |
Relates to #4827.
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
wget2 fixes
|
| | | | | | |
|
|/ / / / / |
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
Add wget2 support
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
|/ / / / |
|
| | | | |
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
Noblacklist rxvt in allow-perl.inc
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This is the counterpart of the blacklist of rxvt in commit ed5c259f,
as suggested in the discussion of pull request #4831.
|
| | | | | |
|
| | | | | |
|
|/ / / / |
|
| | | | |
|
| |_|/
|/| | |
|
|\ \ \ |
|
| |\ \ \
| | | | |
| | | | | |
RPCS3 profile
|
| | | | | |
|
| |\ \ \ \
| | | | | |
| | | | | | |
noprinters: add missing items & add to profile.template
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
See commit bd15e763e ("--noprinter option", 2021-10-20) and commit
d9403dcdc ("small fix", 2021-10-20).
Relates to #4607.
|
| | |/ / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
See CONTRIBUTING.md.
The changes are based on what was done on commit 5a612029b ("rename
noautopulse to keep-config-pulse", 2021-05-13) / PR #4278.
This amends commit bd15e763e ("--noprinter option", 2021-10-20) and
commit d9403dcdc ("small fix", 2021-10-20).
Relates to #4607.
|
| |\ \ \ \
| | |_|/ /
| |/| | | |
Blacklist rxvt after the blacklist of Perl.
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
rxvt needs Perl modules, thus does not work. And its blacklist is
needed so that Firefox can run applications with Terminal=true in
their .desktop file (depending on what is installed).
|
|/ / / / |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
|/ / /
| | |
| | |
| | |
| | | |
* Add firefoxdeveloperedition DBus path to profile.
* Re-order rules.
|
|\ \ \
| | | |
| | | | |
profiles: ordering fixes
|