Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | some profile improvements | 2017-11-19 | |
| | |||
* | streamline disable-common.inc | 2017-11-11 | |
| | |||
* | matching noblacklist in profile files with blacklist in disable-programs.inc | 2017-11-02 | |
| | |||
* | harden kde | 2017-10-31 | |
| | | | | | and whitelist kioslaverc because we don't know if kdeinit will run outside or inside the sandbox. | ||
* | fix and harden various profiles | 2017-10-29 | |
| | |||
* | block kdeinit sockets | 2017-10-13 | |
| | | | | attempts to handle #1599 | ||
* | removed lxterminal support, blacklisting the terminal in disable-common.inc | 2017-10-04 | |
| | |||
* | fix nginx and apache2, possible fix for #1534 | 2017-09-25 | |
| | |||
* | remove some redundancies | 2017-09-20 | |
| | | | | | | | * ~/.bash_history is already included in ~/.*_history, same file * ~/.password-store is already included in disable-passwdmgr.inc (and not whitelisted in browsers) * ~/.local/share/applications is in whitelist-common.inc since recently | ||
* | blacklist clipboard manager in disable-common.inc | 2017-09-18 | |
| | |||
* | fix Arch Linux /etc/resolv.conf symlink to /var/run/systemd/resolve/resolv.conf | 2017-09-14 | |
| | |||
* | permit scripts, local mail | 2017-09-10 | |
| | |||
* | noexec is hardcoded now | 2017-09-05 | |
| | |||
* | Harden /var | 2017-08-22 | |
| | |||
* | Add Jason A. Donenfeld's pass to common blacklist | 2017-08-20 | |
| | | | | | pass is a password manager that keeps files under ~/.password-store by default. See http://www.passwordstore.org/ for more info | ||
* | Fix bad noexec sorting | 2017-08-09 | |
| | |||
* | Sorting | 2017-08-08 | |
| | |||
* | Change KDE4 services folder to read-only | 2017-08-06 | |
| | | | Configurations in this folder are not secret, but need to be protected from manipulation. Let's make it available to all KDE apps for legitimate use. Discussion in #1428 | ||
* | Change ~/.local/share/kservices5 to read-only | 2017-08-03 | |
| | |||
* | Add fish-shell history and config to disable-common.inc | 2017-05-22 | |
| | |||
* | rephrase | 2017-05-11 | |
| | |||
* | layout | 2017-05-11 | |
| | |||
* | add noexec folders (tmp/.X11-unix and .config/pulse) | 2017-05-11 | |
| | |||
* | fix trash functionality for file managers | 2017-05-01 | |
| | |||
* | noexec ~/.local/share | 2017-04-21 | |
| | | | #1238 | ||
* | add .pam_environment, kwin to blacklist | 2017-04-04 | |
| | |||
* | tidy up (#1182) | 2017-03-31 | |
| | | | | | | | | | | | | | | | | * minor reorganization * tidy up * tidy up * tidy up * tidy up * tidy up * tidy up | ||
* | restrict more KDE files (#1181) | 2017-03-31 | |
| | | | | | | | | | | * update noblacklist * blacklist local plasma overrides, plasmoids * add more KDE configuration (kdeglobals, plasmoids) * kdeglobals now in disable-common.inc | ||
* | various profile fixes and enhancements (#1177) | 2017-03-29 | |
| | | | | | | | | | | | | | | | | | | | | * private-dev breaks playing CDs * reenable services * blacklist kservices5 folder * blacklist nautilus scripts * blacklist ~/.kde4 files, k3b config, nautilus/nemo * sort * update noblacklisting * update blacklisting * update blacklisting/whitelisting (okular) | ||
* | blacklist KDE config (konsole, services) | 2017-03-28 | |
| | |||
* | blacklist krunnerrc | 2017-03-27 | |
| | |||
* | blacklist more KDE files (#1163) | 2017-03-27 | |
| | | | | | | | | | | | | | | | | * blacklist more KDE files * undo doubling of ~/.profile * remove ksmserverrc * remove ksmserverrc * blacklist kdeconnect * blacklist KDE device actions * blacklist kglobalaccel | ||
* | Merge pull request #1156 from SYN-cook/master | 2017-03-26 | |
|\ | | | | | profile enhancements | ||
| * | move ~/.pki blacklist to disable-common.inc | 2017-03-24 | |
| | | |||
* | | Merge pull request #1152 from SYN-cook/master | 2017-03-22 | |
|\| | | | | | blacklist X11 startup scripts | ||
| * | don't blacklist ~/.profile | 2017-03-22 | |
| | | | | | | sorry for the mistake... ~./profile is not only sourced by some display managers but also by shells, so we should keep everything as before | ||
| * | more blacklisting (X11 session autostart) | 2017-03-21 | |
| | | | | | | reorganization, added files according to Debian documentation | ||
* | | Merge pull request #1149 from SYN-cook/master | 2017-03-20 | |
|\| | | | | | complete autostart blacklist for KDE | ||
| * | complete autostart blacklist for KDE | 2017-03-19 | |
| | | |||
* | | Handles #1150 | 2017-03-19 | |
|/ | | | | Terminix is being renamed to tilix. This adds ${PATH}/tilix to the blacklisted terminals in disable-common.inc without removing terminix (since there will still be users of terminix). | ||
* | persistent config | 2017-02-09 | |
| | |||
* | profile merges | 2017-01-25 | |
| | |||
* | Prevent tmux connecting to an existing session | 2017-01-22 | |
| | |||
* | profile merges | 2017-01-20 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2017-01-20 | |
|\ | |||
| * | Merge pull request #1044 from KellerFuchs/disable-path-local | 2017-01-20 | |
| |\ | | | | | | | Make ~/.local read-only | ||
| | * | disable-common: Make ~/.local read-only | 2017-01-12 | |
| | | | |||
| | * | disable-common: Make directories commonly found in $PATH read-only | 2017-01-12 | |
| | | | |||
* | | | Merge branch 'master' of https://github.com/netblue30/firejail | 2017-01-20 | |
|\| | | |||
| * | | Merge pull request #1056 from SYN-cook/master | 2017-01-20 | |
| |\ \ | | | | | | | | | blacklist GNOME keyring and Konqueror |