| Commit message (Collapse) | Author | Age |
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
This reverts commit 39654d01661ea9310b9b886a572ee24b1e4c9cfb.
This only manually removes the RELNOTES entry; the other parts were
already partially reverted by commit ac83117d0 ("netlink - fixing the
fix", 2022-01-22) and commit 7df85d5ab ("netlink: revert man pages",
2022-01-22).
|
| |
|
| |
|
| |
|
|
|
|
| |
Relates to #4827.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
As far as I know, to "deprecate" something usually means the following:
* It should not be used anymore
* It still works (even if it may not work 100%)
* It may be removed in a future release
But the features mentioned on RELNOTES were actually removed; see commit
c08414fdb ("deprecated --disable-whitelist at compile time", 2021-07-03)
and commit c32924b82 ("deprecated whitelist=yes/no in
/etc/firejail/firejail.config", 2021-07-04).
So to avoid confusion, just say that they were removed.
|
|
|
|
| |
Relates to #4157 #4288 #4461 #4462.
|
|
|
|
| |
Relates to #4510 #4533 #4599 #4635.
|
|
|
|
|
|
|
| |
As mentioned by @rusty-snake:
https://github.com/netblue30/firejail/discussions/4770#discussioncomment-1784210
Relates to #4607.
|
| |
|
|
|
|
| |
Relates to #4669.
|
|
|
|
|
|
|
|
| |
- Update RELNOTES and README.md
- disable-common.inc
- blacklist ${HOME}/.local/share/ibus-typing-booster
- blacklist /run/timeshift (closes #4660)
- fix audacity.profile (closes #4659)
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
Add ms-edge-beta paths to disable-programs.inc
Support firecfg
Adding to release notes (already added to README.md)
|
| |
|
| |
|
| |
|
|\
| |
| | |
remove kcmp from seccomp default drop list
|
| | |
|
|\|
| |
| | |
augment seccomp lists in firejail.config
|
| | |
|
| | |
|
|/
|
|
| |
[skip ci]
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|\ |
|
| | |
|
|/ |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
README.md/RELNOTES:
- Add new profiles
etr.profile:
- adding passwd to private-etc makes it work for me
file-roller.profile
- add netfilter
- add zstd to private-bin
- add cp,mv,rm to private-bin which seems to be necessary in some
cases.
#4113 is likely fixed with this but wait for OP.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
discord-canary.profile:
fix #4175
flameshot.profile:
- private-tmp break flameshot (wayland only?)
- Screengrabbing (under wayland) is done via dbus, the following names
must be allowed:
- GNOME: org.gnome.Shell
- KDE: org.kde.KWin
- Sway: org.freedesktop.portal.Desktop
- Allow notifications and tray too, because org.gnome.Shell (for
example) is already totaly unsafe.
mumble.profile:
fix #4181
|
| |
|
|
|
|
| |
I can't seem to get it to work with seccomp enabled.
|