aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
* Create firejail-welcome.sLibravatar rusty-snake2020-12-11
| | | | fix #3797 -- Get ride of all these u2f and drm issues
* fix audio/video play in yelp.profileLibravatar glitsj162020-12-10
|
* re-order private-etc in telegram.profileLibravatar glitsj162020-12-10
|
* fix private-etc in telegram.profileLibravatar glitsj162020-12-10
| | | Fixes #3805.
* minor hardenings and commentsLibravatar glitsj162020-12-10
|
* Update yelp.profile (#3803)Libravatar glitsj162020-12-09
|
* harden sysprof (#3802)Libravatar glitsj162020-12-09
|
* fixesLibravatar rusty-snake2020-12-09
| | | | | | - hopefully fix #3795 finally - fix README.md codeblock - blacklist ${HOME}/.texlive20*
* Update bug_report.mdLibravatar rusty-snake2020-12-08
|
* fix #3795 -- teams chrootLibravatar rusty-snake2020-12-07
|
* check --mac= for multicast addresses (#3784)Libravatar netblue302020-12-07
|
* Merge pull request #3772 from smitsohu/smitsohu-openat2Libravatar netblue302020-12-07
|\ | | | | use openat2 syscall when available
| * use openat2 syscall when availableLibravatar smitsohu2020-11-23
| |
* | profile fixes from issuesLibravatar rusty-snake2020-12-07
| | | | | | | | closes #3786; closes #3776
* | Add profile for authenticator-rs, improve falkon (#3747)Libravatar kortewegdevries2020-12-07
| | | | | | | | | | | | | | | | | | * Add profile for authenticator-rs, improve falkon, balsa * Fix * Add private-tmp to falkon * Revert balsa
* | xfce4-screenshooter: comment mdweLibravatar rusty-snake2020-12-06
| |
* | fix #3782 -- Man pages have #ifdefs in themLibravatar rusty-snake2020-12-01
| |
* | a more portable implementation for time measurementsLibravatar netblue302020-12-01
| |
* | Add a profile for dolphin-emuLibravatar Tad2020-11-29
| | | | | | | | | | Games folder must be whitelisted in a dolphin-emu.local Its private-etc can likely be shortened
* | Small fixesLibravatar Tad2020-11-29
| | | | | | | | | | | | | | | | | | - gimp: allow mbind syscall. no start on Fedora 33 without - minetest: disable private-cache. without persistent cache connecting to servers can take many minutes - supertuxkart: allow bluetooth protocol. stk can directly connect/pair to WiiMote controllers - supertuxkart: comment private-dev to allow controller use - profiles: unify controller support comments - firecfg: comment evolution with a note, and add a note to epiphany #3647 + #2995
* | Update build.yml (#3779)Libravatar rusty-snake2020-11-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update build.yml Currently we run all actions for all commits. This is not resource friendly. Let's tweak this a bit. This commit adds support for "skip ci" tags (i.e. if the head commit contains [s k i p c i] (w/o the extra spaces used to escape here), no jobs are executed. In addition are all commits which modify non-code files (e.g. README) only excluded. Furthermore we should not run cppcheck and scan-build if only profiles are changed and sort.py need only to be execute if profiles are changed. * Create sort.yml * Update build.yml profile-sort is now in sort.yml * Update sort.yml fix syntax * Update codeql-analysis.yml paths-ignore: - CONTRIBUTING.md - README - README.md - RELNOTES - SECURITY.md - 'etc/**' * Create build-extra.yml * Update build.yml * Update build-extra.yml
* | Fix building C# projects in Godot (#3778)Libravatar RandomVoid2020-11-28
| | | | | | | | | | | | | | | | | | Since version 3.0 Godot is supporting C# as a language for writing scripts. The C# solution can be built directly in Godot editor using MSBuild, which requires access to directory /etc/mono. This directory contains configuration of Mono enviroment. If MSBuild don't have access to this directory, it's not able to determine location of DLL files and it's throwing System.DllNotFoundException at beginning of the build process.
* | fix #3777 -- lyx profile seems to be brokenLibravatar rusty-snake2020-11-27
| |
* | fixes; close #3775Libravatar rusty-snake2020-11-26
| |
* | revisit join-or-start hidepid fixLibravatar smitsohu2020-11-25
| | | | | | | | | | | | cf. 9eb9e8d4c1b8995f0e7af4d604f3becd5dc91f62 No need to expect pid's in profile files.
* | make ${HOME}/.local/lib read-onlyLibravatar rusty-snake2020-11-24
| |
* | join-or-start hidepid fixLibravatar smitsohu2020-11-24
| |
* | fix hidepid mount detectionLibravatar smitsohu2020-11-24
| | | | | | | | kernel >= 5.8 now translates mode "1" to "noaccess" and mode "2" to "invisible", which breaks Firejail's hidepid detection
* | disable dbus in QMediathekView (#3771)Libravatar glitsj162020-11-24
| |
* | add gnome-shell search-provider file to firefox.profile (#3768)Libravatar glitsj162020-11-24
| | | | | | | | | | | | | | | | | | * allow access to gnome-shell search-provider in firefox.profile Firefox has gnome-shell search-provider support since version 78: - https://bugzilla.mozilla.org/show_bug.cgi?id=1239694 - https://mastransky.wordpress.com/2020/09/25/firefox-gnome-shell-search-provider/ * add dbus filter for gnome-shell search-provider
* | Add a profile for LutrisLibravatar Tad2020-11-23
| | | | | | | | | | | | | | | | - Lutris isn't added to firecfg just yet, needs more testing - aria2c profile has a comment regarding Lutris/Winetricks, but it shouldn't matter since it can't be nested - Add commented wusc to wine.profile - Add vulkan and zenity to wusc.inc
* | reorder disable-write-mnt.incLibravatar glitsj162020-11-23
| |
* | drop newline after mdwe in gnome-system-log.profileLibravatar glitsj162020-11-23
| |
* | drop newline after mdwe in geekbench.profileLibravatar glitsj162020-11-23
| |
* | drop newline after mdwe in devilspie.profileLibravatar glitsj162020-11-23
| |
* | drop newline after mdwe in devhelp.profileLibravatar glitsj162020-11-23
| |
* | ordering wruc correctly in default.profileLibravatar glitsj162020-11-23
| |
* | Update default.profileLibravatar glitsj162020-11-23
| | | | | | Nitpick wording + added a commented disable-shell.inc
* | drop newline in cower.profileLibravatar glitsj162020-11-23
| |
* | disable mdweLibravatar glitsj162020-11-23
| |
* | harden xfce4-mixer.profileLibravatar glitsj162020-11-23
| |
* | Merge pull request #3766 from kris7t/runuser-fixesLibravatar netblue302020-11-22
|\ \ | | | | | | Miscellaneous whitelist-runuser-common fixes
| * | Whitelist wayland-1 socketLibravatar Kristóf Marussy2020-11-22
| | | | | | | | | | | | | | | | | | If the GDM display manager runs with Wayland support, and it starts a desktop environment other than (?) GNOME, the desktop environment will use the `wayland-1` socket instead of the `wayland-0` socket.
| * | Fix typo in thunderbird.profileLibravatar Kristóf Marussy2020-11-22
| | | | | | | | | | | | | | | We must ignore include `whitelist-runuser-common.profile`, because it breaks Enigmail (TB 68) and GnuPG smartcard (TB 78) support.
* | | Merge pull request #3762 from smitsohu/smitsohu-private-cacheLibravatar netblue302020-11-22
|\ \ \ | | | | | | | | reimplement --private-cache using --tmpfs
| * | | reimplement --private-cache using --tmpfsLibravatar smitsohu2020-11-20
| | | |
* | | | Merge pull request #3752 from smitsohu/smitsohu-get-to-catLibravatar netblue302020-11-22
|\ \ \ \ | | | | | | | | | | reimplement --get using --cat
| * | | | reimplement --get using --catLibravatar smitsohu2020-11-18
| | | | |
* | | | | drop deprecated pathLibravatar glitsj162020-11-22
| |_|/ / |/| | | | | | | Cfr. https://github.com/netblue30/firejail/pull/3517#issuecomment-664715880: element-desktop no longer uses ${HOME}/.config/Element (Riot).
* | | | minetest: Enable rm (#3764)Libravatar Liorst42020-11-21
| | | | | | | | | | | | rm is needed to uninstall mods and delete game saves (worlds).
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-30 22:44:14 +0000