firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	add missing final newlines at end of files	a1346054	2021-09-22
\|
*	Merge pull request #4533 from smitsohu/exitcode	smitsohu	2021-09-22
\|\ \| \| \| \|	rework exitcodes
\| *	rework exitcodes	smitsohu	2021-09-21
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	* add 128 to exitcode if child receives a fatal signal (this is similar to what bash and other shells do) * unify exitcodes across firejail: treat join'ed processes the same as processes in the primary process tree
* \|	Merge pull request #4502 from kmk3/revert-allow-deny-man	Kelvin M. Klann	2021-09-21
\|\ \ \| \| \| \| \| \|	Revert "allow/deny help and man pages"
\| * \|	Fix typo of "parent"	Kelvin M. Klann	2021-09-02
\| \| \|
\| * \|	Revert "allow/deny help and man pages"	Kelvin M. Klann	2021-09-02
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This reverts commit a11707ea273e5665047f8a7d9387ba07f08d72f6. The man pages currently direct users to use the aliases instead of the commands, which some users of firejail-git may end up doing. Example: https://github.com/netblue30/firejail/discussions/4496 So revert the man page changes as well to avoid confusion. Note: This is not a full revert. The commit in question also contains some string formatting fixes on src/firejail/usage.c (related to dbus and netmask), which are left intact. Relates to #4410.
* \| \|	Let programs outside librewolf sandbox open new tabs in librewolf (#4546)	crocket	2021-09-19
\| \| \|
* \| \|	Merge pull request #4501 from tredondo/patch-9	rusty-snake	2021-09-19
\|\ \ \ \| \| \| \| \| \| \| \|	Blacklist Exodus wallet
\| * \| \|	Blacklist Exodus wallet	Ted Robertson	2021-09-02
\| \|/ /
* \| \|	Fix #4555 - Allow evince to read .cbz file format	lecso7	2021-09-19
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Enable evince to display archived images (.cbz) file with plugin installed.
* \| \|	Update SECURITY.md	rusty-snake	2021-09-17
\| \| \|
* \| \|	Merge pull request #4515 from rusty-snake/rework-issue-template	rusty-snake	2021-09-17
\|\ \ \ \| \| \| \| \| \| \| \|	Rework issue templates
\| * \| \|	bug_report.md: clarify message	Kelvin M. Klann	2021-09-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
\| * \| \|	bug_report.md: improve grammar	Kelvin M. Klann	2021-09-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
\| * \| \|	bug_report.md: remove extraneous newline	Kelvin M. Klann	2021-09-16
\| \| \| \|
\| * \| \|	Rework issue templates	rusty-snake	2021-09-07
\| \| \| \|
* \| \| \|	Fix #4509 -- Nextcloud profile broken - needs 3D and system tray access	rusty-snake	2021-09-08
\| \| \| \|
* \| \| \|	Merge pull request #4493 from pirate486743186/fix-duplicate-global	rusty-snake	2021-09-08
\|\ \ \ \ \| \| \| \| \| \| \| \| \| \|	fix duplicate globals
\| * \| \| \|	fix duplicate global	pirate486743186	2021-08-30
\| \| \|/ / \| \|/\| \|
* \| \| \|	Fix #4367 -- gimp 2.10.22-3: gegl:introspect broken	rusty-snake	2021-09-08
\| \| \| \|
* \| \| \|	Update profile.template to use disable-X11.inc	rusty-snake	2021-09-08
\| \|/ / \|/\| \|
* \| \|	Rework pipewire/wayland	rusty-snake	2021-09-07
\| \|/ \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	- closes #4483 -- mpv requires whitelisting /usr/share/pipewire - wruc: whitelist pipewire-?, pipewire is becoming more popular and was developed with isolation (container/sandbox) in mind. - wruc: whitelist wayland-? instead of only -0 and -1 - wusc: whitelist /usr/share/pipewire - remove these wruc/wusc lines from other profiles - firefox-common-addons: Make ignore wruc work again (#4512) - firefox: org.freedesktop.portal.Desktop should be enough
* \|	Blacklist ~/.minisign in disable-common	rusty-snake	2021-09-07
\| \|
* \|	Profile fixes	rusty-snake	2021-09-04
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	- disable-programs.inc: blacklist ${HOME}/.local/state/pipewire If you did not yet noticed, on 08th May 2021 the XDG Base Directory Specification 0.8 was resleased (the first update since 2010). New are $XDG_STATE_HOME and $HOME/.local/bin. - keepassxc: mkdirs are necessary - gnote: harden - pngquant: harden
* \|	Update RELNOTES	rusty-snake	2021-09-04
\| \|
* \|	Update wrc for Arch Linux (#4507)	Martynas Janonis	2021-09-03
\| \| \| \| \| \|	This is a quick fix of #4482 for distributions that link /etc/resolv.conf to /run/systemd/resolve/stub-resolv.conf (Arch Linux is one of them).
* \|	Fix #4506 -- Freetube does not start	rusty-snake	2021-09-03
\| \| \| \| \| \| \| \|	Freetube from AUR uses a wrapper script
* \|	sort.py: pylint: consider-using-sys-exit	rusty-snake	2021-09-03
\| \|
* \|	Update wrc	rusty-snake	2021-09-03
\|/ \| \| \| \| \|	- whitelist /run/resolvconf/resolv.conf -- Fixes #4482 - Drop whitelist for /run/systemd/resolve/stub-resolv.conf, /run/systemd/resolve/resolv.conf is the right path AIUI.
*	merges	netblue30	2021-08-30
\|
*	Merge pull request #4487 from kmk3/blame-ignore-add-big-revert	netblue30	2021-08-30
\|\ \| \| \| \|	.git-blame-ignore-revs: add revert of allow/deny move
\| *	.git-blame-ignore-revs: add revert of allow/deny move	Kelvin M. Klann	2021-08-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Add commit f43382f1e ("Revert "move whitelist/blacklist to allow/deny"") from PR #4410. As mentioned on commit b023b9a6f ("Exclude allow/deny move in profile from git blame") / PR #4390, commit fe0f975f4 ("move whitelist/blacklist to allow/deny") "is just a huge rename", and so is the revert of it. Note that there is a follow-up to f43382f1e: commit 2e4d52ec6 ("Revert allow/deny additional files") (sort of related to #4421). It renames a bit too much, which is later fixed by commit 3836131f3 ("Fix zim and rednotebook"). Since these are small changes and since they involve regressions, neither commit is added.
* \|	Merge pull request #4481 from kmk3/readme-add-artix	netblue30	2021-08-30
\|\ \ \| \| \| \| \| \|	README.md: add artix linux to distro list
\| * \|	README.md: add artix linux to distro list	Kelvin M. Klann	2021-08-25
\| \|/ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Home page: https://artixlinux.org A few months ago, running `pacman -S firejail` would install it from Arch's "community" repository by default. But currently, Artix has its own firejail package, in the "galaxy" repository: * https://gitea.artixlinux.org/packagesF/firejail * https://repology.org/project/firejail/versions See also the following article from 2021-06-09: https://artixlinux.org/news.php#Arch_repositories_made_optional > Arch repositories made optional > > Artix has reached the stage where it can operate without the help of > the Arch repositories, including the preparation of its installation > media. As such, all new weekly ISO images will ship without [extra], > [community] and [multilib] enabled in pacman.conf. Existing setups > will not be affected, but new users may want to enable them and > benefit from the additional packages. Instructions are provided in > our wiki[1]. > > TL;DR: > > # pacman -Syu artix-archlinux-support For reference, the distro list was added on commit ee03888ab ("prioritize installing via OS (#3442)") / PR #3442. [1] https://wiki.artixlinux.org/Main/Repositories#Arch_repositories
* \|	Merge pull request #4479 from kmk3/issue-template-improvements	netblue30	2021-08-30
\|\ \ \| \| \| \| \| \|	Issue template improvements
\| * \|	bug_report.md: add log section	Kelvin M. Klann	2021-08-25
\| \| \| \| \| \| \| \| \| \| \| \|	Currently, the log portion seems to be part of the Checklist section.
\| * \|	bug_report.md: format the details section	Kelvin M. Klann	2021-08-25
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	And put the code block inside of an HTML paragraph, so that it's not just free floating after the `<summary>`.
\| * \|	bug_report.md: trim leading spaces on list items	Kelvin M. Klann	2021-08-25
\| \| \|
\| * \|	bug_report.md: turn section titles into headers	Kelvin M. Klann	2021-08-25
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This properly separates the document into sections and makes the titles stand out more. It is also more consistent with what is generated by GitHub issue forms (YAML). See also the following discussion: https://github.com/netblue30/firejail/discussions/4468
\| * \|	bug_report.md: add missing blank lines	Kelvin M. Klann	2021-08-25
\| \|/ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Isolate each section title and each list from other elements, to make them more visually distinguishable. This should also make it easier to find and edit only the parts that are meant to be edited. See also the following discussion: https://github.com/netblue30/firejail/discussions/4468
* \|	Merge pull request #4477 from bjpbakker/multimc5-lwjgl	netblue30	2021-08-30
\|\ \ \| \| \| \| \| \|	multimc5: fix exec of LWJGL libraries
\| * \|	multimc5: fix exec of LWJGL libraries	Bart Bakker	2021-08-24
\| \|/
* \|	Merge pull request #4475 from davidebeatrici/telegram-desktop-2.6.1-fix	netblue30	2021-08-30
\|\ \ \| \| \| \| \| \|	telegram.profile: whitelist /usr/share/TelegramDesktop
\| * \|	telegram.profile: whitelist /usr/share/TelegramDesktop	Davide Beatrici	2021-08-21
\| \|/ \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Telegram loads packed resources dynamically since 443eef3202ee43c2e820cc550fbcc70a7609f452. In the official Debian package, the relevant file can be found at /usr/share/TelegramDesktop/tresources.rcc. If the file cannot be loaded, the program fails to launch and prints "Packed resources not found".
* \|	Merge pull request #4486 from pirate486743186/yt-dlp-profile	netblue30	2021-08-30
\|\ \ \| \| \| \| \| \|	create yt-dlp.profile
\| * \|	create yt-dlp.profile	pirate486743186	2021-08-27
\| \|/
* \|	Merge pull request #4484 from pirate486743186/gallery-dl	netblue30	2021-08-30
\|\ \ \| \| \| \| \| \|	creating gallery-dl.profile
\| * \|	creating gallery-dl.profile	pirate486743186	2021-08-27
\| \|/
* \|	Merge pull request #4476 from minus7/master	netblue30	2021-08-30
\|\ \ \| \| \| \| \| \|	Fix hanging arp_check
\| * \|	Fix hanging arp_check	minus	2021-08-22
\| \|/ \| \| \| \| \| \| \| \| \| \| \| \|	arp_check relied on select(2) decreasing the timeout. This doesn't seem to be the case on Linux anymore, thus arp_check tends to hang when the interface sees a lot of traffic. Calculating the timeout explicitly solves the problem.