Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Update disable-programs.inc | 2018-10-11 | |
| | |||
* | Merges | 2018-09-03 | |
| | |||
* | Add Beaker browser | 2018-08-12 | |
| | |||
* | Merges | 2018-07-22 | |
| | |||
* | Consistent home variable -- see eb4b505ac2537c320c044cf5fad595ecef41bbca | 2018-07-21 | |
| | |||
* | Merges + misc fixes | 2018-07-04 | |
| | | | | | | | | - Change some links in README to HTTPS - Fixup some typos in firejail-profile manpage - Cleanup dash from private-etc - Fixup gradio - Synchronize server profile with default profile | ||
* | merged Amend Wire profiles #1998 form @flacks | 2018-06-30 | |
| | |||
* | Add gnome-mpv profile | 2018-06-14 | |
| | |||
* | one more bookmarks leak | 2018-05-27 | |
| | |||
* | Fixup Discord profiles | 2018-05-21 | |
| | | | | Packagers seem to be all using different names | ||
* | merges | 2018-05-09 | |
| | |||
* | Merge pull request #1914 from flacks/profiles/gajim | 2018-04-27 | |
|\ | | | | | Update Gajim profile | ||
| * | Update Gajim profile | 2018-04-27 | |
| | | | | | | | | | | | | - Version 1 ported to Python 3, so remove 2.7-related settings - Plugins get installed in ~/.local/share/gajim/plugins - Enable private-{etc,tmp} | ||
* | | Merges | 2018-04-27 | |
|/ | |||
* | Merges | 2018-04-25 | |
| | |||
* | Merge pull request #1900 from flacks/profiles/webstorm | 2018-04-24 | |
|\ | | | | | Add WebStorm profile | ||
| * | Add WebStorm profile | 2018-04-21 | |
| | | |||
* | | Add a profile for ppsspp and scallion | 2018-04-21 | |
| | | |||
* | | Merge pull request #1898 from flacks/profiles/clion | 2018-04-21 | |
|\ \ | | | | | | | Add CLion profile | ||
| * | | Add CLion profile | 2018-04-20 | |
| |/ | |||
* / | allow python in some profiles | 2018-04-18 | |
|/ | |||
* | fix sqlitebrowser blacklist | 2018-04-09 | |
| | |||
* | fix basilisk and palemoon blacklist | 2018-04-07 | |
| | |||
* | support older config dir | 2018-04-05 | |
| | |||
* | support modern mpd config | 2018-04-04 | |
| | |||
* | fix a0502dc5144185b6d346e92944e3359a833d2378, various enhancements | 2018-04-04 | |
| | |||
* | akonadi blacklist additions | 2018-04-03 | |
| | |||
* | redirect knotes to kmail, some tweaks | 2018-03-30 | |
| | |||
* | various blacklist additions | 2018-03-28 | |
| | |||
* | rework akonadi integration | 2018-03-26 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | the usr.sbin.mysqld-akonadi apparmor profile, enforced by default in ubuntu and debian testing (and probably opensuse), doesn't play well with a number of firejail options. the reason for this is that once the no_new_privs bit is set, apparmor profile transitions are forbidden. enforcing our own apparmor policy instead is also no solution, because these programs don't even start without d-bus. relaxing the kmail profile was necessary so that kmail can fire up akonadi itself, just in case akonadi has not been started earlier already by another program. this is always an issue when kmail is the only installed akonadi client, but there may be more circumstances. for reasons outlined above this doesn't help debian and ubuntu (opensuse?) users though :-/ a brief summary of the seccomp exceptions: chroot is needed for qt webengine, io_prioset for the akonadi indexing agent, io_getevents, io_submit, io_setup are needed for mysqld. when akonadi has an sqlite3 backend, less exceptions to the seccomp filter are necessary, but mysqld is the default. in the future all kontact suite profiles (itm only kmail, knotes) should probably be redirections to akonadi_control, but the issues with apparmor make this somewhat impractical for now (options like 'protocol' couldn't go to akonadi_control.local any more, if current kmail redirected to there). | ||
* | various profile hardening | 2018-03-25 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2018-03-24 | |
|\ | |||
| * | gnome-recipes profile | 2018-03-24 | |
| | | |||
* | | add basic akonadi integration | 2018-03-24 | |
|/ | | | | | as it is now, there is no support for a full akonadi session inside the knotes sandbox, but knotes can connect to akonadi and should work fine | ||
* | asunder profile | 2018-03-17 | |
| | |||
* | Add falkon profile - see #1794 | 2018-03-05 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2018-03-05 | |
|\ | |||
| * | Add VS Code profile - see request in #1139 | 2018-03-03 | |
| | | |||
* | | blacklist smartgit password file - #1796 | 2018-03-05 | |
|/ | |||
* | Add a profile for Vivaldi Snapshot | 2018-02-20 | |
| | |||
* | update more application blacklists | 2018-02-13 | |
| | |||
* | update various application blacklists | 2018-02-11 | |
| | |||
* | Add tilp profile | 2018-02-09 | |
| | |||
* | blacklist klipper | 2018-02-02 | |
| | | | | further to 8aec7694cb4c7c0d07b333b689ab19faacb519f9 | ||
* | KDE related enhancements | 2018-02-01 | |
| | |||
* | kaffeine profile | 2018-01-30 | |
| | |||
* | harden KDE | 2018-01-30 | |
| | |||
* | Add a profile for Red Eclipse | 2018-01-26 | |
| | |||
* | Replace xmr-stak-cpu profile with unified xmr-stak profile | 2018-01-25 | |
| | |||
* | Add a profile for Fritzing, and update README | 2018-01-20 | |
| |