aboutsummaryrefslogtreecommitdiffstats
path: root/contrib/vim
Commit message (Collapse)AuthorAge
* build: move syntax files to contrib/syntax/filesLibravatar Kelvin M. Klann2023-01-27
| | | | | | | | | | | | | | | | | | | | | | | | | | Having all of syntax files in the same directory makes it easier to reference all of them at once on a makefile (such as with `contrib/syntax/files/*.in`). Also, this makes the path to the gtksourceview language-spec shorter. Current path/new path: * contrib/gtksourceview-5/language-specs/firejail-profile.lang * contrib/syntax/files/firejail-profile.lang Currently, adding a rule to the root Makefile to generate the language-spec in the same directory as an input file would take at least 95 characters (with only a single dependency): contrib/gtksourceview-5/language-specs/%.lang: contrib/gtksourceview-5/language-specs/%.lang.in With this commit, the above shortened to 59 characters: contrib/syntax/files/%.lang: contrib/syntax/files/%.lang.in Which should make it more readable. Relates to #2679 #5502.
* firejail.vim: use sed instead of rgLibravatar Kelvin M. Klann2023-01-09
| | | | | | | | | | | | | | | | | | | To avoid depending on an extra package without need. Commands used to search and replace: $ f=contrib/vim/syntax/firejail.vim; \ printf '%s\n' "$(sed -E \ "s|rg -o '([^']+)' -r '\\\$1'|sed -En 's/.*\\1.*/\\\\1/p'|" "$f")" >"$f" Note: `sed -E` is not in POSIX.1-2017 (Issue 7), but it has been accepted into the upcoming POSIX standard version[1] and is supported by at least GNU, busybox and OpenBSD grep. Added on commit a1cc4a556 ("Add vim syntax and ftdetect files (#2679)", 2019-05-06). [1] https://www.austingroupbugs.net/view.php?id=528
* firejail.vim: remove redundant sed -e flagsLibravatar Kelvin M. Klann2023-01-09
| | | | | | | | Only a single script is passed by argument in each invocation. Added on commit a1cc4a556 ("Add vim syntax and ftdetect files (#2679)", 2019-05-06) and on commit d2e10f2f5 ("vim: update list of syscalls", 2021-05-29) / PR #4318.
* firejail.vim: remove non-POSIX grep -x flagLibravatar Kelvin M. Klann2023-01-09
| | | | | | | | | | | | | | | | It seems to be equivalent to just delimiting the beginning and the end of the line with `^foo$`. Also, put the regex mode (-E) first. Commands used to search and replace: $ f=contrib/vim/syntax/firejail.vim; \ printf '%s\n' "$(sed -E \ "s|grep -vEx '([^']+)'|grep -Ev '^\\1\$'|" "$f")" >"$f" Added on commit a1cc4a556 ("Add vim syntax and ftdetect files (#2679)", 2019-05-06).
* firejail.vim: remove literal newline escapes in trLibravatar Kelvin M. Klann2023-01-09
| | | | | | | | | | | | | | POSIX tr understands '\n', so use that instead of the less portable $'\n'. Commands used to search and replace: $ f=contrib/vim/syntax/firejail.vim; \ printf '%s\n' "$(sed -E \ "s/tr +\\\$'\\\\n'/tr '\\\\n'/g" "$f")" >"$f" Added on commit a1cc4a556 ("Add vim syntax and ftdetect files (#2679)", 2019-05-06).
* Revert "Merge pull request #5315 from ChrysoliteAzalea/landlock"Libravatar Kelvin M. Klann2022-09-05
| | | | | | | | | | | This reverts commit 54cb3e741e972c754e595d56de0bca0792299f83, reversing changes made to 97b1e02d5f4dca4261dc9928f8a5ebf8966682d7. There were many issues and requests for changes raised in the pull request (both code-wise and design-wise) and most of them are still unresolved[1]. [1] https://github.com/netblue30/firejail/pull/5315
* Proposed fixes.Libravatar Азалия Смарагдова2022-08-16
|
* Landlock support has been added.Libravatar Азалия Смарагдова2022-08-15
|
* Add support for custom AppArmor profiles (--apparmor=)Libravatar Азалия Смарагдова2022-08-05
|
* introduce new option restrict-namespacesLibravatar smitsohu2022-07-23
|
* more on removing cgroups (#5200)Libravatar netblue302022-06-16
|
* keep-fd option (#4845)Libravatar smitsohu2022-01-14
|
* noprinters: add missing items from new command checklistLibravatar Kelvin M. Klann2022-01-05
| | | | | | | | | | | | See CONTRIBUTING.md. The changes are based on what was done on commit 5a612029b ("rename noautopulse to keep-config-pulse", 2021-05-13) / PR #4278. This amends commit bd15e763e ("--noprinter option", 2021-10-20) and commit d9403dcdc ("small fix", 2021-10-20). Relates to #4607.
* deterministic-shutdown optionLibravatar smitsohu2021-10-28
|
* Add new condition ALLOW_TRAYLibravatar rusty-snake2021-09-04
|
* vim: escape dots in seccomp.32Libravatar Reiner Herrmann2021-05-29
|
* vim: use setfiletype command for setting filetypeLibravatar Reiner Herrmann2021-05-29
| | | | | this is a bit nicer, as it does not overwrite the filetype if it already has been set.
* vim: use type instead of constant for seccomp actionLibravatar Reiner Herrmann2021-05-29
|
* vim: support commands private-cwd, dbus-*, seccomp.32, allow-debuggersLibravatar Reiner Herrmann2021-05-29
|
* vim: update conditionalsLibravatar Reiner Herrmann2021-05-29
|
* vim: update syscall groupsLibravatar Reiner Herrmann2021-05-29
|
* vim: highlight seccomp-error-actionLibravatar Reiner Herrmann2021-05-29
|
* vim: update list of syscallsLibravatar Reiner Herrmann2021-05-29
|
* rename noautopulse to keep-config-pulseLibravatar Kelvin M. Klann2021-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | Changes: * add the keep-config-pulse option * make noautopulse an alias for keep-config-pulse * deprecate the noautopulse option * misc: fix indentation of --keep-dev-shm on src/firejail/usage.c Even though noautopulse is not intended for hardening, it looks like it is, because it starts with "no", just like no3d, noroot, etc). In fact, it is the only "no" option that differs in such a way. And it has been accidentally misused as such before; see PR #4269 and commit e4beaeaa8 ("drop noautopulse from agetpkg"). So effectively rename it to keep-config-pulse in order to avoid confusion. This is similar to the keep-var-tmp and keep-dev-shm options, which are used to "leave a path alone", just like noautopulse. Note: The changes on this patch are based on the ones from commit 617ff40c9 ("add --noautopulse arg for complex pulse setups") / PR #1854. See #4269 for the discussion.
* contrib/vim: add missing noinput command to syn matchLibravatar Kelvin M. Klann2021-05-07
| | | | | | | | | Added on commit a90386d77 ("Map /dev/input with "--private-dev", add "--no-input" option to disable it") / PR #4209. See also commit 0cee0ba5a ("Add noinput to all profiles with private-dev") / PR #4239. Misc: I noticed that it was missing due to the lack of syntax highlighting on etc/profile-m-z/webstorm.profile.
* add support for fsaccessat2 syscallLibravatar glitsj162021-02-10
|
* Add vim syntax and ftdetect files (#2679)Libravatar Quentin Minster2019-05-05