Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add new condition ALLOW_TRAY | 2021-09-04 | |
| | |||
* | vim: escape dots in seccomp.32 | 2021-05-29 | |
| | |||
* | vim: use setfiletype command for setting filetype | 2021-05-29 | |
| | | | | | this is a bit nicer, as it does not overwrite the filetype if it already has been set. | ||
* | vim: use type instead of constant for seccomp action | 2021-05-29 | |
| | |||
* | vim: support commands private-cwd, dbus-*, seccomp.32, allow-debuggers | 2021-05-29 | |
| | |||
* | vim: update conditionals | 2021-05-29 | |
| | |||
* | vim: update syscall groups | 2021-05-29 | |
| | |||
* | vim: highlight seccomp-error-action | 2021-05-29 | |
| | |||
* | vim: update list of syscalls | 2021-05-29 | |
| | |||
* | rename noautopulse to keep-config-pulse | 2021-05-14 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | Changes: * add the keep-config-pulse option * make noautopulse an alias for keep-config-pulse * deprecate the noautopulse option * misc: fix indentation of --keep-dev-shm on src/firejail/usage.c Even though noautopulse is not intended for hardening, it looks like it is, because it starts with "no", just like no3d, noroot, etc). In fact, it is the only "no" option that differs in such a way. And it has been accidentally misused as such before; see PR #4269 and commit e4beaeaa8 ("drop noautopulse from agetpkg"). So effectively rename it to keep-config-pulse in order to avoid confusion. This is similar to the keep-var-tmp and keep-dev-shm options, which are used to "leave a path alone", just like noautopulse. Note: The changes on this patch are based on the ones from commit 617ff40c9 ("add --noautopulse arg for complex pulse setups") / PR #1854. See #4269 for the discussion. | ||
* | contrib/vim: add missing noinput command to syn match | 2021-05-07 | |
| | | | | | | | | | Added on commit a90386d77 ("Map /dev/input with "--private-dev", add "--no-input" option to disable it") / PR #4209. See also commit 0cee0ba5a ("Add noinput to all profiles with private-dev") / PR #4239. Misc: I noticed that it was missing due to the lack of syntax highlighting on etc/profile-m-z/webstorm.profile. | ||
* | add support for fsaccessat2 syscall | 2021-02-10 | |
| | |||
* | Add vim syntax and ftdetect files (#2679) | 2019-05-05 | |