Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | layout | 2017-05-11 | ||
| | ||||
* | add noexec folders (tmp/.X11-unix and .config/pulse) | 2017-05-11 | ||
| | ||||
* | fix trash functionality for file managers | 2017-05-01 | ||
| | ||||
* | noexec ~/.local/share | 2017-04-21 | ||
| | | | #1238 | |||
* | add .pam_environment, kwin to blacklist | 2017-04-04 | ||
| | ||||
* | tidy up (#1182) | 2017-03-31 | ||
| | | | | | | | | | | | | | | | | * minor reorganization * tidy up * tidy up * tidy up * tidy up * tidy up * tidy up | |||
* | restrict more KDE files (#1181) | 2017-03-31 | ||
| | | | | | | | | | | * update noblacklist * blacklist local plasma overrides, plasmoids * add more KDE configuration (kdeglobals, plasmoids) * kdeglobals now in disable-common.inc | |||
* | various profile fixes and enhancements (#1177) | 2017-03-29 | ||
| | | | | | | | | | | | | | | | | | | | | * private-dev breaks playing CDs * reenable services * blacklist kservices5 folder * blacklist nautilus scripts * blacklist ~/.kde4 files, k3b config, nautilus/nemo * sort * update noblacklisting * update blacklisting * update blacklisting/whitelisting (okular) | |||
* | blacklist KDE config (konsole, services) | 2017-03-28 | ||
| | ||||
* | blacklist krunnerrc | 2017-03-27 | ||
| | ||||
* | blacklist more KDE files (#1163) | 2017-03-27 | ||
| | | | | | | | | | | | | | | | | * blacklist more KDE files * undo doubling of ~/.profile * remove ksmserverrc * remove ksmserverrc * blacklist kdeconnect * blacklist KDE device actions * blacklist kglobalaccel | |||
* | Merge pull request #1156 from SYN-cook/master | 2017-03-26 | ||
|\ | | | | | profile enhancements | |||
| * | move ~/.pki blacklist to disable-common.inc | 2017-03-24 | ||
| | | ||||
* | | Merge pull request #1152 from SYN-cook/master | 2017-03-22 | ||
|\| | | | | | blacklist X11 startup scripts | |||
| * | don't blacklist ~/.profile | 2017-03-22 | ||
| | | | | | | sorry for the mistake... ~./profile is not only sourced by some display managers but also by shells, so we should keep everything as before | |||
| * | more blacklisting (X11 session autostart) | 2017-03-21 | ||
| | | | | | | reorganization, added files according to Debian documentation | |||
* | | Merge pull request #1149 from SYN-cook/master | 2017-03-20 | ||
|\| | | | | | complete autostart blacklist for KDE | |||
| * | complete autostart blacklist for KDE | 2017-03-19 | ||
| | | ||||
* | | Handles #1150 | 2017-03-19 | ||
|/ | | | | Terminix is being renamed to tilix. This adds ${PATH}/tilix to the blacklisted terminals in disable-common.inc without removing terminix (since there will still be users of terminix). | |||
* | persistent config | 2017-02-09 | ||
| | ||||
* | profile merges | 2017-01-25 | ||
| | ||||
* | Prevent tmux connecting to an existing session | 2017-01-22 | ||
| | ||||
* | profile merges | 2017-01-20 | ||
| | ||||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2017-01-20 | ||
|\ | ||||
| * | Merge pull request #1044 from KellerFuchs/disable-path-local | 2017-01-20 | ||
| |\ | | | | | | | Make ~/.local read-only | |||
| | * | disable-common: Make ~/.local read-only | 2017-01-12 | ||
| | | | ||||
| | * | disable-common: Make directories commonly found in $PATH read-only | 2017-01-12 | ||
| | | | ||||
* | | | Merge branch 'master' of https://github.com/netblue30/firejail | 2017-01-20 | ||
|\| | | ||||
| * | | Merge pull request #1056 from SYN-cook/master | 2017-01-20 | ||
| |\ \ | | | | | | | | | blacklist GNOME keyring and Konqueror | |||
| | * | | blacklist GNOME (and other) keyrings | 2017-01-17 | ||
| | | | | | | | | | | | | in .local/share | |||
* | | | | profile merges | 2017-01-20 | ||
|/ / / | ||||
* | | | Merge pull request #1034 from KellerFuchs/disable-local | 2017-01-11 | ||
|\ \ \ | | | | | | | | | etc: Support local customizations in *.inc | |||
| * | | | etc: Support local customizations in *.inc | 2017-01-09 | ||
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | This is useful for places, like hashbang.sh, which have site-specific modifications of the *.inc files. With the current setup, the package manager cannot automatically install updated versions of those files, as it would need to somehow merge the site-specific and upstream changes. Having the site-specific changes in separate files solves this. | |||
* | | | Merge pull request #1035 from KellerFuchs/disable-mutt | 2017-01-11 | ||
|\ \ \ | |_|/ |/| | | disable-common: Make mutt and msmtp's rc files read-only | |||
| * | | disable-common: Make mutt and msmtp's rc files R/O | 2017-01-10 | ||
| |/ | | | | | | | Those allow arbitrary command executions through various mechanisms | |||
* / | hands off bash aliases | 2016-12-27 | ||
|/ | | | manipulating aliases means manipulating users (to do things they don't want to do) | |||
* | Merge pull request #979 from curiosity-seeker/master | 2016-12-16 | ||
|\ | | | | | Correct skanlite.profile | |||
| * | Update disable-common.inc | 2016-12-15 | ||
| | | ||||
* | | Add keepassx2 profile | 2016-12-14 | ||
|/ | ||||
* | remove konsole from the list of restricted terminals in disable-common.inc | 2016-12-08 | ||
| | ||||
* | Update disable-common.inc | 2016-12-03 | ||
| | ||||
* | Added profile | 2016-12-03 | ||
| | | | Added truecrypt and zuluCrypt | |||
* | blacklisted various program files | 2016-12-01 | ||
| | ||||
* | xpra fix | 2016-11-29 | ||
| | ||||
* | ssh fix | 2016-11-24 | ||
| | ||||
* | completed ecryptfs blacklist | 2016-11-07 | ||
| | ||||
* | profiles | 2016-11-07 | ||
| | ||||
* | Blacklist ecryptfs files | 2016-11-06 | ||
| | ||||
* | minor fixes | 2016-10-26 | ||
| | ||||
* | resolve conflict | 2016-10-26 | ||
|\ |