aboutsummaryrefslogtreecommitdiffstats
path: root/RELNOTES
Commit message (Collapse)AuthorAge
* 0.9.64 testing0.9.64Libravatar netblue302020-10-21
|
* 0.9.64 testingLibravatar netblue302020-10-21
|
* set as 0.9.64rc2 for development until we release the real oneLibravatar netblue302020-10-05
|
* testing 0.9.64rc1Libravatar netblue302020-10-04
|
* New profile: equalxLibravatar rusty-snake2020-10-03
|
* chromium-freeworld profile (#3633)Libravatar rusty-snake2020-10-03
|
* splitting up media players whitelists in whitelist-players.inc - relnotesLibravatar netblue302020-10-02
|
* replaced --nowrap with --wrap in firemon (#2992)Libravatar netblue302020-10-01
|
* new profile: xournalppLibravatar rusty-snake2020-09-25
|
* New profiles + fixes + hardeningLibravatar rusty-snake2020-09-14
| | | | | | | | - blacklist ~/.rustup in disable-devel.inc - add note to mpv (See #3628) - harden warsow - update relnotes - new profile qrencode, dbus-send, notify-send
* variousLibravatar rusty-snake2020-09-03
| | | | | | | | | | | | * README.md & RELNOTES * Allow gnome-build do read and write .bash_history, it has a build-in terminal * D-Bus filter for gnome-passwordsafe * wruc for supertuxkart * wruc+wusc for totem * dbus-system none for totem * remove src/man/preproc.c it is replaced by preproc.awk * remove dead-code form preproc.awk
* readme and relnotesLibravatar rusty-snake2020-09-02
|
* update release notesLibravatar Reiner Herrmann2020-08-08
|
* Support to ingore a include foobar.incLibravatar rusty-snake2020-08-04
| | | | closes #1139
* new profile: gnome-calendarLibravatar rusty-snake2020-07-30
|
* add profile for sushi (#3558)Libravatar rusty-snake2020-07-30
|
* add newsflash profileLibravatar rusty-snake2020-07-25
|
* add element-desktop redirect profile (#3517)Libravatar glitsj162020-07-16
| | | | | | | | | * Create element-desktop.profile * add element-desktop dirs to disable-programs.inc * add element-desktop to firecfg.config * Update RELNOTES
* hardening some profiles (#3505)Libravatar rusty-snake2020-07-09
| | | | | | | | | | | | | * hardening some profiles - harden and fix flameshot - wruc: frogatto, ghostwriter - harden gnome-latex - add whitelist opt-in note to keepassxc - add comment to minetest - harden openarena, tremulous, xonotic - add profile for xonotic-sdl-wrapper * followup
* new profile: gapplicationLibravatar rusty-snake2020-07-03
|
* new profilesLibravatar rusty-snake2020-06-25
|
* Add strawberry profile to README{,.md} & RELNOTES (#3467)Libravatar Amin Vakil2020-06-15
|
* New profiles: apostrophe & quadrapasselLibravatar rusty-snake2020-06-11
|
* new profile: mocp (#3437)Libravatar glitsj162020-05-27
| | | | | | | | | | | | | * Create mocp.profile * add mocp support to disable-programs.inc * add mocp support in firecfg.config * update RELNOTES for mocp * fix configuration access for mocp Thanks to @rusty-snake for spotting this.
* add new profile: plv (#3410)Libravatar glitsj162020-05-11
| | | | | | | | | | | Also fixed a typo for new profiles: nicontine --> nicotine * add plv to firecfg * add plv to disable-programs.inc * Create plv.profile * Update plv.profile
* install vim contib filesLibravatar rusty-snake2020-05-02
|
* gitlab pipeline fixesLibravatar netblue302020-04-21
|
* suport mkdir and mkfile for /run/user/<PID> directory (#3346)Libravatar netblue302020-04-13
|
* fdns profileLibravatar netblue302020-04-07
|
* Allow changing error action in seccomp filtersLibravatar Topi Miettinen2020-04-06
| | | | | | | | | | | | | | Let user specify the action when seccomp filters trigger: - errno name like EPERM (default) or ENOSYS: return errno and let the process continue. - 'kill': kill the process as previous versions The default action is EPERM, but killing can still be specified with syscall:kill syntax or globally with seccomp-error-action=kill. The action can be also overridden /etc/firejail/firejail.config file. Not killing the process weakens Firejail slightly when trying to contain intrusion, but it may also allow tighter filters if the only alternative is to allow a system call.
* gnome games: more + fixesLibravatar rusty-snake2020-04-04
| | | | | | | - fix description - add gnome-klotski, five-or-more, swell-foop [skip ci]
* more gamesLibravatar rusty-snake2020-04-04
| | | | | | | | | | | | | | | | | - blobwars - gravity-beams-and-evaporating-stars - hyperrogue - jumpnbump-menu (alias) - jumpnbump - magicor - mindless - mirrormagic - mrrescue - scorched3d-wrapper (alias) - scorchwentbonkers - seahorse-adventures - wordwarvi - xbill
* allow using wruc on any programLibravatar rusty-snake2020-04-03
| | | | @glitsj16 thanks for the pointer that we now have whitelist globbing
* Whitelist runuser common (#3286)Libravatar rusty-snake2020-03-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * introduce whitelist-runuser-common.inc * If an applications does not need a whitelist it can/should be nowhitelisted. Example: nowhitelist ${RUNUSER}/pulse include whitelist-runuser-common.inc * ${RUNUSER}/bus is inaccessible with nodbus regardless of the whitelist. (as it should) * strange wayland setups with an second wayland-compostior need to whitelist ${RUNUSER}/wayland-1, ${RUNUSER}/wayland-2 and so on. * some display-manager store there Xauthority file in ${RUNUSER}. test results with fedora 31: - ssdm: ~/.Xauthority is used - lightdm: /run/lightdm/USER/Xauthority - gdm: /run/user/UID/gdm/Xauthority * IMPORTANT: ATM we can only enable this for non-graphical and GTK3 programs because mutter (GNOMEs window-manger) stores the Xauthority file for Xwayland under /run/user/UID/.mutter-Xwaylandauth.XXXXXX where XXXXXX is random. Until we have whitelist globbing we can't whitelist this file. QT/KDE and other toolkits without full wayland support won't be able to start. * wru update 1 - add wru to more profiles. - blacklist ${RUNUSER} works for the most cli programs too. * add wruc to more profiles * fixes * fixes * wruc: hide pulse pid * update * remove wruc from all the x11 profiles * fixes * fix ordering * read-only * revert read-only * update *
* abiword and more gnome-gamesLibravatar rusty-snake2020-03-29
| | | | | | | | | | | - four-in-a-row - gnome-mahjongg - gnome-robots - gnome-sudoku - gnome-taquin - gnome-tetravex harden gnome-chess
* more game profilesLibravatar rusty-snake2020-03-29
| | | | | | | | | | | - frogatto - gnome_games-common.profile - gnome-2048 (make redirect) - gnome-mines - gnome-nibbles - lightsoff - ts3client_runscript.sh (fix #3279) - warmux (don't get confused with the warmux/wormux thing)
* Add a profile for X2GoClientLibravatar Tad2020-03-23
|
* new profiles: agenda, gnome-pomodoro, gnome-todoLibravatar rusty-snake2020-03-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | rules for xdg-dbus-proxy: dbus-user filter dbus-user.own org.gnome.Pomodoro dbus-user.talk ca.desrt.dconf dbus-user.talk org.gnome.Shell dbus-system none dbus-user filter dbus-user.own org.gnome.Todo dbus-user.talk ca.desrt.dconf dbus-user.talk org.gnome.evolution.dataserver.AddressBook9 dbus-user.talk org.gnome.evolution.dataserver.Calendar8 dbus-user.talk org.gnome.evolution.dataserver.Sources5 dbus-user.talk org.gnome.evolution.dataserver.Subprocess.Backend.* dbus-user.talk org.gnome.OnlineAccounts dbus-user.talk org.gnome.SettingsDaemon.Color dbus-system filter dbus-system.talk org.freedesktop.login1 dbus-user filter dbus.own com.github.dahenson.agenda dbus.talk ca.desrt.dconf dbus-system block
* Merge pull request #3278 from rusty-snake/has-nosound-conditionLibravatar smitsohu2020-03-15
|\ | | | | new condition: HAS_NOSOUND
| * new condition: HAS_NOSOUNDLibravatar rusty-snake2020-03-15
| |
* | add gnome-screenshot.profileLibravatar rusty-snake2020-03-15
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | patch for xdg-dbus-proxy ``` --- a/etc/gnome-screenshot.profile +++ b/etc/gnome-screenshot.profile @@ -45,3 +45,8 @@ private-bin gnome-screenshot private-dev private-etc dconf,fonts,gtk-3.0,localtime,machine-id private-tmp + +dbus-user filter +dbus-user.own org.gnome.Screenshot +dbus-user.talk org.gnome.Shell.Screenshot +dbus-system block ``` patch for whitelist-runuser-common.inc ``` --- a/etc/gnome-screenshot.profile +++ b/etc/gnome-screenshot.profile @@ -17,11 +17,8 @@ include disable-passwdmgr.inc include disable-programs.inc include disable-xdg.inc -whitelist ${RUNUSER}/bus -whitelist ${RUNUSER}/pulse -whitelist ${RUNUSER}/gdm/Xauthority -whitelist ${RUNUSER}/wayland-0 include whitelist-usr-share-common.inc +include whitelist-runuser-common.inc include whitelist-var-common.inc apparmor ```
* add xournal.profileLibravatar Hans-Christoph Steiner2020-02-27
|
* merges & RELNOTESLibravatar rusty-snake2020-02-23
|
* Add a lot of profilesLibravatar rusty-snake2020-02-10
|
* Add gnome-hexgl.profileLibravatar rusty-snake2020-02-03
|
* Add profiles for the WPS-OfficeLibravatar rusty-snake2020-01-29
|
* Update RELNOTESLibravatar glitsj162020-01-29
|
* new profile: gnome-passwordsafeLibravatar rusty-snake2020-01-25
|
* Add a profile for clipgrabLibravatar rusty-snake2020-01-25
| | | | Thanks @DurtyDev for testing (netblue30/firetools#47)
* create rtv.profileLibravatar rusty-snake2020-01-19
|
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-17 19:07:03 +0000