Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | disable-common: Blacklist ~/.config/keybase | 2016-07-06 | |
| | | | | This is used by keybase.io's client to store secrets. | ||
* | disable-common: Make ~/.dotfiles and ~/dotfiles RO | 2016-06-18 | |
| | | | | | | Having dotfiles in such a directory, under version control, and symlinking the actual dotfiles to there, is a common-enough practice that I believe should be supported. | ||
* | disable-common: Make ~/.reportbugrc read-only | 2016-06-18 | |
| | | | | | reportbug is a standard Debian tool. Its config file may specify a specific command to use as MTA. | ||
* | disable-common: Make ~/.msmtprc read-only | 2016-06-18 | |
| | | | | | msmtp is a MTA that aims for simplicity and security. ~/.msmtprc may specify commands that are run when sending email. | ||
* | disable-common: Make ~/.emacs.d and ~/.nano read-only | 2016-06-18 | |
| | |||
* | disable-common: Blacklist ~/.smbcredentials | 2016-06-18 | |
| | |||
* | disable-common: Protect caff's files | 2016-06-18 | |
| | | | | | Caff (CA fire & forget) is a popular GnuPG helper for keysigning safely. | ||
* | disable-common: Make ~/.profile read-only | 2016-06-18 | |
| | | | | | Several shells, including Bash, fallback to ~/.profile if their specific profile file does not exist. | ||
* | disable-common: Add ZSH-related init files | 2016-06-18 | |
| | | | | Antigen is a popular plugin manager for ZSH | ||
* | kwallet typo | 2016-06-11 | |
| | | | kde and kde4 are hidden. At least on my pc | ||
* | Blacklist ~/.cert where Fedora (and probably other distros with SELinux) ↵ | 2016-05-23 | |
| | | | | encourage users to store certificates | ||
* | added urxvtc | 2016-04-23 | |
| | |||
* | blacklisted additional terminals | 2016-04-23 | |
| | |||
* | fix mate-terminal | 2016-04-22 | |
| | |||
* | Fixed path | 2016-04-18 | |
| | |||
* | disabled VeraCrypt access | 2016-04-18 | |
| | |||
* | x11 fixes | 2016-03-29 | |
| | |||
* | openbox fix | 2016-03-27 | |
| | |||
* | consolidated disable-terminals into disable-common | 2016-03-27 | |
| | |||
* | lxterinal profile fix | 2016-03-27 | |
| | |||
* | consolidating disable-mgmt and disable-sercret into disable-common | 2016-03-26 | |
| | |||
* | spilt disable-common.profile into two files | 2016-03-26 | |
| | |||
* | qtox profile | 2016-03-23 | |
| | |||
* | profiles cleanup | 2016-03-05 | |
| | |||
* | split out terminal blacklisting in disable-terminals.inc | 2016-02-12 | |
| | |||
* | Make additional vimrc, .xscreensaver files read only | 2016-01-30 | |
| | | | | Add .gvimrc and _ versions of other files used by vim when no dot-version available. Add .xscreensaver that can be used for arbitrary command execution by setting "textProgram" (instead of default fortune) and screensaver that launches it. | ||
* | 0.9.38-rc1 testing | 2016-01-29 | |
| | |||
* | Add alternative location for muttrc | 2016-01-29 | |
| | | | By default mutt looks for ~/.muttrc or ~/.mutt/muttrc files. | ||
* | disable /dev/kmsg and /proc/kmsg | 2016-01-23 | |
| | |||
* | profile cleanup | 2016-01-22 | |
| | |||
* | fixes | 2015-12-12 | |
| | |||
* | --tracelog | 2015-12-03 | |
| | |||
* | opera profile rework | 2015-12-01 | |
| | |||
* | profile cleanup, addinghexchat profile | 2015-11-28 | |
| | |||
* | Fixed Skype profile: was a copy of Steam profile | 2015-11-11 | |
| | | | | | | | Blacklisted ~/.Skype directory by default, since it contains copyable account credentials. Revoked Skype access to Steam dirs, granted access to Skype dirs. | ||
* | profile work | 2015-10-31 | |
| | |||
* | merged disable-history.inc into disable-common.inc | 2015-10-30 | |
| | |||
* | Protect shell startup files | 2015-10-30 | |
| | |||
* | add a few new items to blacklist | 2015-10-23 | |
| | |||
* | blacklist sockets in /run | 2015-09-27 | |
| | |||
* | disabled Wine and VirtualBox in default profiles | 2015-09-24 | |
| | |||
* | profile work | 2015-09-22 | |
| | |||
* | Default profiles work | 2015-09-16 | |
| | |||
* | A bit more for CVE-2015-4495 | 2015-08-12 | |
| | |||
* | Baseline firejail 0.9.28 | 2015-08-08 | |