| Commit message (Collapse) | Author | Age |
| |
|
| |
|
|
|
|
| |
Relates to #4827.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
As far as I know, to "deprecate" something usually means the following:
* It should not be used anymore
* It still works (even if it may not work 100%)
* It may be removed in a future release
But the features mentioned on RELNOTES were actually removed; see commit
c08414fdb ("deprecated --disable-whitelist at compile time", 2021-07-03)
and commit c32924b82 ("deprecated whitelist=yes/no in
/etc/firejail/firejail.config", 2021-07-04).
So to avoid confusion, just say that they were removed.
|
|
|
|
| |
Relates to #4157 #4288 #4461 #4462.
|
|
|
|
| |
Relates to #4510 #4533 #4599 #4635.
|
|
|
|
|
|
|
| |
As mentioned by @rusty-snake:
https://github.com/netblue30/firejail/discussions/4770#discussioncomment-1784210
Relates to #4607.
|
| |
|
|
|
|
| |
Relates to #4669.
|
|
|
|
|
|
|
|
| |
- Update RELNOTES and README.md
- disable-common.inc
- blacklist ${HOME}/.local/share/ibus-typing-booster
- blacklist /run/timeshift (closes #4660)
- fix audacity.profile (closes #4659)
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
Add ms-edge-beta paths to disable-programs.inc
Support firecfg
Adding to release notes (already added to README.md)
|
| |
|
| |
|
| |
|
|\
| |
| | |
remove kcmp from seccomp default drop list
|
| | |
|
|\|
| |
| | |
augment seccomp lists in firejail.config
|
| | |
|
| | |
|
|/
|
|
| |
[skip ci]
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|\ |
|
| | |
|
|/ |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
README.md/RELNOTES:
- Add new profiles
etr.profile:
- adding passwd to private-etc makes it work for me
file-roller.profile
- add netfilter
- add zstd to private-bin
- add cp,mv,rm to private-bin which seems to be necessary in some
cases.
#4113 is likely fixed with this but wait for OP.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
discord-canary.profile:
fix #4175
flameshot.profile:
- private-tmp break flameshot (wayland only?)
- Screengrabbing (under wayland) is done via dbus, the following names
must be allowed:
- GNOME: org.gnome.Shell
- KDE: org.kde.KWin
- Sway: org.freedesktop.portal.Desktop
- Allow notifications and tray too, because org.gnome.Shell (for
example) is already totaly unsafe.
mumble.profile:
fix #4181
|
| |
|
|
|
|
| |
I can't seem to get it to work with seccomp enabled.
|
|
|
|
|
|
|
|
| |
- Add netlink to pcsxr fixing controller support
- Add openmw and PPSSPPSDL to firecfg
- Update readme for new profiles
Note: file picker in dolphin-emu is being weird (not showing or freezing)
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- RELNOTS: protocol now accumulates
- fix #3978 -- Android Studio: cannot create the directory
Unresolved:
> google-earth.profile has a 'noblacklist ${HOME}/.config/Google' too,
> so we should consider to add additional blacklists for ~/.config/Google/*.
- marker.profile: allow ${DOCUMENTS}
- profile.template: add bluetooth protocol
- profile.template: add DBus portal note
- firejail-profile.txt: revert 17fe4b9e -- fix private=directory in man firejail-profile
see https://github.com/netblue30/firejail/pull/3970#discussion_r574411745
|