firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	Revert "Merge pull request #5315 from ChrysoliteAzalea/landlock"	Kelvin M. Klann	2022-09-05
\| \| \| \| \| \| \| \| \| \| \|	This reverts commit 54cb3e741e972c754e595d56de0bca0792299f83, reversing changes made to 97b1e02d5f4dca4261dc9928f8a5ebf8966682d7. There were many issues and requests for changes raised in the pull request (both code-wise and design-wise) and most of them are still unresolved[1]. [1] https://github.com/netblue30/firejail/pull/5315
*	Proposed fixes.	Азалия Смарагдова	2022-08-16
\|
*	Landlock support has been added.	Азалия Смарагдова	2022-08-15
\|
*	Add support for custom AppArmor profiles (--apparmor=)	Азалия Смарагдова	2022-08-05
\|
*	introduce new option restrict-namespaces	smitsohu	2022-07-23
\|
*	more on removing cgroups (#5200)	netblue30	2022-06-16
\|
*	keep-fd option (#4845)	smitsohu	2022-01-14
\|
*	noprinters: add missing items from new command checklist	Kelvin M. Klann	2022-01-05
\| \| \| \| \| \| \| \| \| \| \| \|	See CONTRIBUTING.md. The changes are based on what was done on commit 5a612029b ("rename noautopulse to keep-config-pulse", 2021-05-13) / PR #4278. This amends commit bd15e763e ("--noprinter option", 2021-10-20) and commit d9403dcdc ("small fix", 2021-10-20). Relates to #4607.
*	deterministic-shutdown option	smitsohu	2021-10-28
\|
*	Add new condition ALLOW_TRAY	rusty-snake	2021-09-04
\|
*	vim: escape dots in seccomp.32	Reiner Herrmann	2021-05-29
\|
*	vim: use setfiletype command for setting filetype	Reiner Herrmann	2021-05-29
\| \| \| \| \|	this is a bit nicer, as it does not overwrite the filetype if it already has been set.
*	vim: use type instead of constant for seccomp action	Reiner Herrmann	2021-05-29
\|
*	vim: support commands private-cwd, dbus-*, seccomp.32, allow-debuggers	Reiner Herrmann	2021-05-29
\|
*	vim: update conditionals	Reiner Herrmann	2021-05-29
\|
*	vim: update syscall groups	Reiner Herrmann	2021-05-29
\|
*	vim: highlight seccomp-error-action	Reiner Herrmann	2021-05-29
\|
*	vim: update list of syscalls	Reiner Herrmann	2021-05-29
\|
*	rename noautopulse to keep-config-pulse	Kelvin M. Klann	2021-05-14
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Changes: * add the keep-config-pulse option * make noautopulse an alias for keep-config-pulse * deprecate the noautopulse option * misc: fix indentation of --keep-dev-shm on src/firejail/usage.c Even though noautopulse is not intended for hardening, it looks like it is, because it starts with "no", just like no3d, noroot, etc). In fact, it is the only "no" option that differs in such a way. And it has been accidentally misused as such before; see PR #4269 and commit e4beaeaa8 ("drop noautopulse from agetpkg"). So effectively rename it to keep-config-pulse in order to avoid confusion. This is similar to the keep-var-tmp and keep-dev-shm options, which are used to "leave a path alone", just like noautopulse. Note: The changes on this patch are based on the ones from commit 617ff40c9 ("add --noautopulse arg for complex pulse setups") / PR #1854. See #4269 for the discussion.
*	contrib/vim: add missing noinput command to syn match	Kelvin M. Klann	2021-05-07
\| \| \| \| \| \| \| \| \|	Added on commit a90386d77 ("Map /dev/input with "--private-dev", add "--no-input" option to disable it") / PR #4209. See also commit 0cee0ba5a ("Add noinput to all profiles with private-dev") / PR #4239. Misc: I noticed that it was missing due to the lack of syntax highlighting on etc/profile-m-z/webstorm.profile.
*	add support for fsaccessat2 syscall	glitsj16	2021-02-10
\|
*	Add vim syntax and ftdetect files (#2679)	Quentin Minster	2019-05-05