Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | merge #1100 from zackw: removed libconnect | netblue30 | 2017-02-14 |
| | |||
* | --git-install: default disabled in ./configure script | netblue30 | 2017-02-07 |
| | |||
* | disable --git-install at compile time | netblue30 | 2017-02-05 |
| | |||
* | fcopy part 1 | netblue30 | 2016-11-16 |
| | |||
* | testing | netblue30 | 2016-11-09 |
| | |||
* | gcov support | netblue30 | 2016-11-07 |
| | |||
* | moving --profile to sbox | netblue30 | 2016-10-28 |
| | |||
* | network code split | netblue30 | 2016-10-27 |
| | |||
* | starting 0.9.45 devel version | netblue30 | 2016-10-23 |
| | |||
* | 0.9.44 testing | netblue30 | 2016-10-21 |
| | |||
* | allow user access to /sys/fs (--noblacklist=/sys/fs) | netblue30 | 2016-10-17 |
| | |||
* | 0.9.44~rc1 testing | netblue30 | 2016-10-13 |
| | |||
* | moved libx11 to libconnect | netblue30 | 2016-10-01 |
| | |||
* | disable x11 abstract socket for --x11=block | netblue30 | 2016-10-01 |
| | |||
* | fixed make deb | netblue30 | 2016-09-23 |
| | |||
* | moved uids.h processing from configure to Makefile.in | netblue30 | 2016-09-19 |
| | |||
* | starting new development | netblue30 | 2016-09-09 |
| | |||
* | 0.9.42 testing | netblue30 | 2016-09-08 |
| | |||
* | bringing back --private-home | netblue30 | 2016-09-04 |
| | |||
* | 0.9.42~rc3 starting | netblue30 | 2016-08-29 |
| | |||
* | compile time config option for overlayfs | netblue30 | 2016-08-20 |
| | |||
* | workaround for systems where common UNIX utilities are symlinks to busybox | Aleksey Manevich | 2016-08-09 |
| | |||
* | apparmor | netblue30 | 2016-08-02 |
| | |||
* | using UID_MIN/GID_MIN values from /etc/login.def | netblue30 | 2016-07-29 |
| | |||
* | 0.9.42~rc2 development | netblue30 | 2016-07-24 |
| | |||
* | 0.9.42~rc1 testing0.9.42-rc1 | netblue30 | 2016-07-21 |
| | |||
* | audit compile and install | netblue30 | 2016-07-01 |
| | |||
* | support to disable enforcing firejail.config | netblue30 | 2016-06-12 |
| | |||
* | whitelist support in /etc/firejail/firejail.config | netblue30 | 2016-06-09 |
| | |||
* | 0.9.41 development starting | netblue30 | 2016-05-31 |
| | |||
* | 0.9.40 testing | netblue30 | 2016-05-17 |
| | |||
* | Moved to ~ | Fred-Barclay | 2016-04-16 |
| | |||
* | moving to 0.9.40-rc2, fixed firecfg.config path | netblue30 | 2016-04-03 |
| | |||
* | testing | netblue30 | 2016-03-31 |
| | |||
* | added firecfg utility | netblue30 | 2016-03-25 |
| | |||
* | added firejail.config | netblue30 | 2016-03-12 |
| | |||
* | compile time support to disable file transfer | netblue30 | 2016-03-12 |
| | |||
* | cleanup | netblue30 | 2016-03-02 |
| | |||
* | 0.9.40-rc1 testing | netblue30 | 2016-02-29 |
| | |||
* | ./configure --enable-network=restricted | netblue30 | 2016-02-24 |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | netblue30 | 2016-02-24 |
|\ | |||
| * | Add compile-time option to restrict --net= to root only | Yuriy M. Kaminskiy | 2016-02-23 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | ./configure --enable-network=restricted allows only --net=none to non-root users. Other variants delegate too much power to non-root users and dangerous (it completely bypasses system-wide firewall and routing, it allows introducing arbitrary-chosen MAC and IP interfaces on LAN [disregarding DHCP policy], etc). Root already had power to twiddle with anything, so no sense to restrain her, and --net=none looks safe enough (and still useful) for ordinary users. | ||
* | | x11 work | netblue30 | 2016-02-23 |
|/ | |||
* | default seccomp filter update | netblue30 | 2016-02-08 |
| | |||
* | 0.9.38 testing | netblue30 | 2016-02-01 |
| | |||
* | 0.9.38-rc1 testing | netblue30 | 2016-01-29 |
| | |||
* | --disable-network --disable-userns compile time options | netblue30 | 2016-01-25 |
| | |||
* | 0.9.38 testing | netblue30 | 2016-01-24 |
| | |||
* | development version 0.9.37 | netblue30 | 2016-01-09 |
| | |||
* | 0.9.36 testing | netblue30 | 2015-12-23 |
| |