aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAge
...
| * | Add machine-idLibravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | | | Does not break dbus, despite the warning in the template.
| * | Add command suggested by rusty-snakeLibravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Leave the kwallet dbus stuff commented for now.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Remove unnecessary permission.Libravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | | | | | | Signing in and so on works without this, so I'm not sure why it was enabled in the flatpak.
| * | Remove apparently unnecessary dbus permission.Libravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | | | | | | I had copied this from the flatpak listing, but the application works without this.
| * | Remove unnecessary include.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Add cache directory to disable-programs.incLibravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Remove unnecessary noblacklist.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Remove newlines and comments.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Add neochat to enabled programs.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Sort options using sort.pyLibravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Remove comments.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Add neochat files to disable-programs.incLibravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Initial profile for neochatLibravatar Kishore Gopalakrishnan2021-05-02
| | |
* | | Merge pull request #4215 from brisad/masterLibravatar netblue302021-05-04
|\ \ \ | | | | | | | | Add support for subdirs in private-etc
| * | | Add support for subdirs in private-etcLibravatar Michael Hoffmann2021-04-26
| | | |
* | | | Merge pull request #4204 from jsquyres/pr/man-page-correctionsLibravatar rusty-snake2021-05-04
|\ \ \ \ | | | | | | | | | | man: corrections regarding --private-FOO options
| * | | | man: corrections regarding --private-FOO optionsLibravatar Jeff Squyres2021-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commit 0.9.60-1070-g40d3604f updated the man pages with respect to --private-opt, --private-etc, and --private-srv. It was made after testing firejail 0.9.52 (from Ubuntu 18.04). However, it unfortunately did not accurately reflect the the behavior of the current HEAD at the time, because commit 0.9.56-rc1-14-ga9242301 had previously slightly changed the behavior of these three options (after 0.9.52), and was released in 0.9.56. The man pages changes made in commit 40d3604f were therefore not entirely correct. This commit updates the man pages to describe the behavior as implemented in a9242301 (and is still the behavior as of the current HEAD: 0.9.64-737-g937815ba). Signed-off-by: Jeff Squyres <jsquyres@cisco.com>
* | | | | discord-common.profile: allow webcamLibravatar rusty-snake2021-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | closes #4236 [skip ci]
* | | | | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar netblue302021-05-03
|\ \ \ \ \
| * \ \ \ \ Merge pull request #4225 from kmk3/fix-steam-rm-roguelegacyLibravatar Kelvin M. Klann2021-05-03
| |\ \ \ \ \ | | | | | | | | | | | | | | steam.profile: fix rogue legacy paths and syntax
| | * | | | | steam.profile: fix rogue legacy paths and syntaxLibravatar Kelvin M. Klann2021-05-01
| | | |_|/ / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to using globbing on mkdir, the current version causes this: @davidebeatrici commented on 2021-04-23[1]: > ``` > Error: "${HOME}/.local/share/RogueLegacy*" is an invalid filename: rejected character: "*" > ``` Added on commit a603d4d39 ("steam: some more games added") / PR #4170. The wildcard was used because Rogue Legacy apparently looks up multiple different paths for the config and also for the data[1][2][3]: 1. ~/.config/RogueLegacy 2. ~/.config/RogueLegacyStorageContainer 3. ~/.local/share/RogueLegacy 4. ~/.local/share/RogueLegacyStorageContainer The ones containing "RogueLegacyStorageContainer" appear to be legacy paths (i.e.: paths which are only created by older versions of Rogue Legacy)[2]. So replace all globs with the full paths because: * The paths are known a priori (unlike, say, `/var/lib/libpcre*`) * There aren't too many of them And use only the non-legacy paths on mkdir. Besides mirroring what the current version of Rogue Legacy does (and avoiding the creation of unnecessary dirs), this is also done because _if_ the following applies (i.e.: this was not tested): * legacy paths take precedence over non-legacy paths * the first path clobbers the other ones (i.e.: rather than "merge") * save data exists in a non-legacy path (i.e.: path 3 in this case) * firejail creates all 4 paths Then it would make the newly-created and empty path 4 clobber the non-legacy path 3 and thus make it seem like no save files exist. This would persist even if steam is run without firejail afterwards, as the empty directory would still be there. Losing (or appearing to lose) game saves can be very unfortunate, so create just the non-legacy paths to avoid confusion. [1] https://github.com/netblue30/firejail/pull/4170#issuecomment-825405930 [2] https://steamcommunity.com/app/241600/discussions/1/846957366713233279/ [3] https://www.pcgamingwiki.com/wiki/Rogue_Legacy#Game_data
* | / | | | --build fixesLibravatar netblue302021-05-03
|/ / / / /
* | | | | support older gstreamer setups in xfce4-mixer (#4234)Libravatar glitsj162021-05-02
| | | | |
* | | | | harden audio-recorder (#4233)Libravatar glitsj162021-05-02
| | | | |
* | | | | add comment to firefox.profile (#4232)Libravatar glitsj162021-05-02
| | | | |
* | | | | fix regextester (#4231)Libravatar glitsj162021-05-02
|/ / / /
* | | | typo fixLibravatar glitsj162021-05-01
| | | |
* | | | Rework sort_protocol (sort.py) (#4226)Libravatar rusty-snake2021-04-30
| | | | | | | | | | | | Support "+", "-" and "=" prefixes (introduced in cddc4832 + 5ffd9287)
* | | | fixup! Harden some game profilesLibravatar rusty-snake2021-04-30
| | | |
* | | | Harden some game profilesLibravatar rusty-snake2021-04-30
| | | |
* | | | Merge pull request #4219 from Neo00001/masterLibravatar Neo000012021-04-28
|\ \ \ \ | | | | | | | | | | Some minor changes
| * | | | Some minor changesLibravatar Neo000012021-04-26
| | | | |
* | | | | Merge pull request #4217 from kmk3/delete-profiesLibravatar Kelvin M. Klann2021-04-28
|\ \ \ \ \ | |/ / / / |/| | | | Delete *.profie
| * | | | Delete *.profieLibravatar Kelvin M. Klann2021-04-26
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit 41f69f7a7 ("Commons of opengl-game-wrapper.sh") / PR #4071. Each one is a duplicate of a .profile file that was added on the same commit. Commands used to search and replace (which is what causes their deletion): $ git ls-files -z -- '*.profie' | xargs -0 -I '{}' sh -c "git mv -f '{}' \"\`printf '%s\n' '{}' | sed 's/.[^.]*$//'\`.profile\""
* / | | Fix #4218 -- Digikam - unable to customize toolbarsLibravatar rusty-snake2021-04-26
|/ / /
* | | Add some more paths-ignore to build-extra.ymlLibravatar rusty-snake2021-04-24
| | |
* | | Update README.md & RELNOTES: add new profilesLibravatar rusty-snake2021-04-24
| | |
* | | Merge pull request #4071 from rusty-snake/open-game-wrapperLibravatar rusty-snake2021-04-24
|\ \ \ | | | | | | | | Commons of opengl-game-wrapper.sh
| * | | Commons of opengl-game-wrapper.shLibravatar rusty-snake2021-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [skip ci] - Add allow-opengl-game.inc - Add profiles for alienarena-wrapper, ballbuster-wrapper, colorful-wrapper, etr-wrapper, gl-117-wrapper, glaxium-wrapper, neverball-wrapper, neverputt-wrapper, pinball-wrapper, supertuxkart-wrapper - Use allow-opengl-game.inc in xonotic.profile and the profiles above - xonotic.profile: simplify private-bin by using xonotic*
| * | | Add profiles for alienarena, ballbuster, colorful…Libravatar rusty-snake2021-04-24
| | |/ | |/| | | | | | | | | | | | | | | | …, gl-117, glaxium, pinball alienarena is missing in firecfg.config by intention, I didn't tested any online multiplayer.
* | | Merge pull request #4179 from jose1711/gnomeconnectorLibravatar rusty-snake2021-04-24
|\ \ \ | | | | | | | | Add examples how to allow browser access to Gnome extensions connector
| * | | Improve hints for allowing browser access to Gnome extensions connectorLibravatar Jose Riha2021-04-16
| | | | | | | | | | | | | | | | Fixes #4177.
* | | | Add FireDragon profile (#4203)Libravatar Nico2021-04-24
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add firedragon profile * Point private-etc to firefox-common.local Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Add to firecfg.config * Add firedragon to disable-programs.inc * Correct dir * Remove private-etc Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | | file-roller:private-bin: add atool,bsdtar,xzdec,unzstdLibravatar rusty-snake2021-04-21
| |/ |/| | | | | | | | | | | | | | | | | as pointed out by @glitsj16 in 51e67fd4. > FYI, a quick check shows atool,bsdtar,xzdec,unzstd are still missing > from private-bin. Not sure if we actually need to bring those in too. They add virtually no new permissions fr has already a long private-bin with dozens of archivers. Before we break anything I add them.
* | profile fixesLibravatar rusty-snake2021-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | README.md/RELNOTES: - Add new profiles etr.profile: - adding passwd to private-etc makes it work for me file-roller.profile - add netfilter - add zstd to private-bin - add cp,mv,rm to private-bin which seems to be necessary in some cases. #4113 is likely fixed with this but wait for OP.
* | Update Librewolf profile and Add Sway profile (#4164)Libravatar Vladislav Nepogodin2021-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add Sway profile * Fix issue Not working then including firefox-common-addons.profile * Allow sway's fallback config * So I agree with @glitsj16 and @BL4CKH47H4CK3R so.. `No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options` * well.. Revert `include whitelist-usr-share-common.inc` Sync with Firefox profile * πŸ˜„ What just hapened * πŸ”„ Sync with upstream * Merge tested from PR * πŸ”„ Sync with upstream * Merge tested from PR * Revert changes * Add Sway profile * Fix issue Not working then including firefox-common-addons.profile * Allow sway's fallback config * So I agree with @glitsj16 and @BL4CKH47H4CK3R so.. `No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options` * πŸ”„ Rebase * πŸ˜„ What just hapened * Merge tested from PR * πŸ”„ Sync with upstream * Merge tested from PR * Revert changes * Update * Update librewolf.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | unblock tor support in brave (#4200)Libravatar glitsj162021-04-18
| | | | | | | | | | | | | | | | | | | | | | * opt-in for brave's native tor support * fix brave's native tor support * warn about potential tor breakage when using apparmor * update comment for opting in to tor * move brave's tor apparmor fix in brave.profile
* | broaden support for pcre in private-libLibravatar glitsj162021-04-18
| | | | | | Follow-up for https://github.com/netblue30/firejail/commit/692311bcc6fe0744d7831459ad7ec0bc5811b9a9. Thanks to @rusty-snake for tracking this down in #4202.
* | broaden support for pcre in private-libLibravatar glitsj162021-04-17
| | | | | | Fixes #4202 until we have tooling to generate system-specific lists at install time, as suggested by @loveshack.
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-16 17:44:07 +0000