Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | porting from main: apparmor capabilities fix | netblue30 | 2021-02-21 |
| | |||
* | added bluetooth to the list of protocols allowed by seccomp | netblue30 | 2020-10-28 |
| | |||
* | Fix AppArmor 3.0 support (closes #3659) | Kristóf Marussy | 2020-10-10 |
| | | | | | | | | | | | | AppArmor introduces the @{run} variable, which is used in <abstractions/dbus-strict> and <abstractions/dbus-session-strict> among other places. Thus, we follow suit of the built-in profiles and #include <tunables/global>, which includes <tunables/run> in AppArmor 3.0, defining the variable. As <tunables/global> exists in previous versions of AppArmor, too, this patch does not introduce a backward-compatibility issue with Apparmor 2.x. | ||
* | renamed /etc/apparmor.d/local/firejail-local to ↵ | netblue30 | 2020-08-22 |
| | | | | /etc/apparmor.d/local/firejail.default - merge form 0.9.62.4 | ||
* | clarify writing to /var/mail and /var/spool/mail in apparmor (#3487) | glitsj16 | 2020-07-04 |
| | | | | | | | * clarify writing to /var/mail and /var/spool/mail in apparmor Thunderbird seems to be our only mail client profile that enables the `apparmor` option. Users need this when they follow instructions on how to allow reading local mail. * fix mail clients rule in firejail-default | ||
* | Avoid dbus-*=filter breakage (#3432) | curiosityseeker | 2020-06-01 |
| | |||
* | reorganize github etc directory | netblue30 | 2020-04-21 |