Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | persistent config | netblue30 | 2017-02-09 |
| | |||
* | profile merges | netblue30 | 2017-01-25 |
| | |||
* | Prevent tmux connecting to an existing session | ecat3 | 2017-01-22 |
| | |||
* | profile merges | netblue30 | 2017-01-20 |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | netblue30 | 2017-01-20 |
|\ | |||
| * | Merge pull request #1044 from KellerFuchs/disable-path-local | netblue30 | 2017-01-20 |
| |\ | | | | | | | Make ~/.local read-only | ||
| | * | disable-common: Make ~/.local read-only | The Fox in the Shell | 2017-01-12 |
| | | | |||
| | * | disable-common: Make directories commonly found in $PATH read-only | The Fox in the Shell | 2017-01-12 |
| | | | |||
* | | | Merge branch 'master' of https://github.com/netblue30/firejail | netblue30 | 2017-01-20 |
|\| | | |||
| * | | Merge pull request #1056 from SYN-cook/master | netblue30 | 2017-01-20 |
| |\ \ | | | | | | | | | blacklist GNOME keyring and Konqueror | ||
| | * | | blacklist GNOME (and other) keyrings | SYN-cook | 2017-01-17 |
| | | | | | | | | | | | | in .local/share | ||
* | | | | profile merges | netblue30 | 2017-01-20 |
|/ / / | |||
* | | | Merge pull request #1034 from KellerFuchs/disable-local | netblue30 | 2017-01-11 |
|\ \ \ | | | | | | | | | etc: Support local customizations in *.inc | ||
| * | | | etc: Support local customizations in *.inc | The Fox in the Shell | 2017-01-09 |
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | This is useful for places, like hashbang.sh, which have site-specific modifications of the *.inc files. With the current setup, the package manager cannot automatically install updated versions of those files, as it would need to somehow merge the site-specific and upstream changes. Having the site-specific changes in separate files solves this. | ||
* | | | Merge pull request #1035 from KellerFuchs/disable-mutt | netblue30 | 2017-01-11 |
|\ \ \ | |_|/ |/| | | disable-common: Make mutt and msmtp's rc files read-only | ||
| * | | disable-common: Make mutt and msmtp's rc files R/O | The Fox in the Shell | 2017-01-10 |
| |/ | | | | | | | Those allow arbitrary command executions through various mechanisms | ||
* / | hands off bash aliases | SYN-cook | 2016-12-27 |
|/ | | | manipulating aliases means manipulating users (to do things they don't want to do) | ||
* | Merge pull request #979 from curiosity-seeker/master | netblue30 | 2016-12-16 |
|\ | | | | | Correct skanlite.profile | ||
| * | Update disable-common.inc | curiosity-seeker | 2016-12-15 |
| | | |||
* | | Add keepassx2 profile | Fred Barclay | 2016-12-14 |
|/ | |||
* | remove konsole from the list of restricted terminals in disable-common.inc | netblue30 | 2016-12-08 |
| | |||
* | Update disable-common.inc | vismir2 | 2016-12-03 |
| | |||
* | Added profile | vismir2 | 2016-12-03 |
| | | | Added truecrypt and zuluCrypt | ||
* | blacklisted various program files | valoq | 2016-12-01 |
| | |||
* | xpra fix | netblue30 | 2016-11-29 |
| | |||
* | ssh fix | netblue30 | 2016-11-24 |
| | |||
* | completed ecryptfs blacklist | vis | 2016-11-07 |
| | |||
* | profiles | netblue30 | 2016-11-07 |
| | |||
* | Blacklist ecryptfs files | Fred-Barclay | 2016-11-06 |
| | |||
* | minor fixes | valoq | 2016-10-26 |
| | |||
* | resolve conflict | valoq | 2016-10-26 |
|\ | |||
| * | removed ping blacklisting | netblue30 | 2016-10-26 |
| | | |||
| * | fixes | netblue30 | 2016-10-25 |
| | | |||
| * | blacklisted kernel files | Fred-Barclay | 2016-10-24 |
| | | |||
* | | removed blacklist duplate | valoq | 2016-10-20 |
| | | |||
* | | blacklisted common suid programms | valoq | 2016-10-19 |
|/ | |||
* | added muttrc to blacklisted secets | vismir2 | 2016-10-02 |
| | | | ~/.muttrc, ~/.mutt/muttrc and ~/.msmtprc contain in most cases login credentials of the users mail accounts | ||
* | fixes | netblue30 | 2016-08-20 |
| | |||
* | New KDE apps and settings path added. | Icaro Perseo | 2016-08-17 |
| | |||
* | for Issue #637 | Fred-Barclay | 2016-07-18 |
| | |||
* | disable-common: Blacklist ~/.config/keybase | Niklas Haas | 2016-07-06 |
| | | | | This is used by keybase.io's client to store secrets. | ||
* | disable-common: Make ~/.dotfiles and ~/dotfiles RO | The Fox in the Shell | 2016-06-18 |
| | | | | | | Having dotfiles in such a directory, under version control, and symlinking the actual dotfiles to there, is a common-enough practice that I believe should be supported. | ||
* | disable-common: Make ~/.reportbugrc read-only | The Fox in the Shell | 2016-06-18 |
| | | | | | reportbug is a standard Debian tool. Its config file may specify a specific command to use as MTA. | ||
* | disable-common: Make ~/.msmtprc read-only | The Fox in the Shell | 2016-06-18 |
| | | | | | msmtp is a MTA that aims for simplicity and security. ~/.msmtprc may specify commands that are run when sending email. | ||
* | disable-common: Make ~/.emacs.d and ~/.nano read-only | The Fox in the Shell | 2016-06-18 |
| | |||
* | disable-common: Blacklist ~/.smbcredentials | The Fox in the Shell | 2016-06-18 |
| | |||
* | disable-common: Protect caff's files | The Fox in the Shell | 2016-06-18 |
| | | | | | Caff (CA fire & forget) is a popular GnuPG helper for keysigning safely. | ||
* | disable-common: Make ~/.profile read-only | The Fox in the Shell | 2016-06-18 |
| | | | | | Several shells, including Bash, fallback to ~/.profile if their specific profile file does not exist. | ||
* | disable-common: Add ZSH-related init files | The Fox in the Shell | 2016-06-18 |
| | | | | Antigen is a popular plugin manager for ZSH | ||
* | kwallet typo | geg2048 | 2016-06-11 |
| | | | kde and kde4 are hidden. At least on my pc |