firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	Merge pull request #2172 from glitsj16/min	netblue30	2018-10-11
\|\ \| \| \| \|	New profile min
\| *	Update for min	glitsj16	2018-10-11
\| \|
* \|	Merge pull request #2171 from glitsj16/desktop	netblue30	2018-10-11
\|\ \ \| \| \| \| \| \|	New profile desktop (a.k.a. github-desktop)
\| * \|	Update for desktop (a.k.a. github-desktop)	glitsj16	2018-10-11
\| \|/
* \|	Merge pull request #2170 from glitsj16/easystroke	netblue30	2018-10-11
\|\ \ \| \| \| \| \| \|	New profile easystroke
\| * \|	Update for easystroke	glitsj16	2018-10-11
\| \|/
* \|	Merge pull request #2169 from glitsj16/devilspie-branch	netblue30	2018-10-11
\|\ \ \| \| \| \| \| \|	New profile devilspie
\| * \|	Update for devilspie	glitsj16	2018-10-11
\| \|/
* \|	Merge pull request #2168 from glitsj16/devilspie2	netblue30	2018-10-11
\|\ \ \| \| \| \| \| \|	New profile devilspie2
\| * \|	Update for devilspie2	glitsj16	2018-10-11
\| \|/
* \|	Merge pull request #2165 from glitsj16/authenticator	netblue30	2018-10-11
\|\ \ \| \| \| \| \| \|	Authenticator
\| * \|	Update for authenticator	glitsj16	2018-10-11
\| \|/
* \|	Merge pull request #2164 from glitsj16/aria2c	netblue30	2018-10-11
\|\ \ \| \| \| \| \| \|	New profile aria2c
\| * \|	Add aria2c config	glitsj16	2018-10-11
\| \|/
* /	Update disable-programs.inc	glitsj16	2018-10-11
\|/
*	Merges	Tad	2018-09-03
\|
*	Add Beaker browser	Jean Lucas	2018-08-12
\|
*	Merges	Tad	2018-07-22
\|
*	Consistent home variable -- see eb4b505ac2537c320c044cf5fad595ecef41bbca	Fred-Barclay	2018-07-21
\|
*	Merges + misc fixes	Tad	2018-07-04
\| \| \| \| \| \| \| \|	- Change some links in README to HTTPS - Fixup some typos in firejail-profile manpage - Cleanup dash from private-etc - Fixup gradio - Synchronize server profile with default profile
*	merged Amend Wire profiles #1998 form @flacks	netblue30	2018-06-30
\|
*	Add gnome-mpv profile	Jean Lucas	2018-06-14
\|
*	one more bookmarks leak	smitsohu	2018-05-27
\|
*	Fixup Discord profiles	Tad	2018-05-21
\| \| \| \|	Packagers seem to be all using different names
*	merges	Tad	2018-05-09
\|
*	Merge pull request #1914 from flacks/profiles/gajim	SkewedZeppelin	2018-04-27
\|\ \| \| \| \|	Update Gajim profile
\| *	Update Gajim profile	Jean Lucas	2018-04-27
\| \| \| \| \| \| \| \| \| \| \| \|	- Version 1 ported to Python 3, so remove 2.7-related settings - Plugins get installed in ~/.local/share/gajim/plugins - Enable private-{etc,tmp}
* \|	Merges	Tad	2018-04-27
\|/
*	Merges	Tad	2018-04-25
\|
*	Merge pull request #1900 from flacks/profiles/webstorm	Fred Barclay	2018-04-24
\|\ \| \| \| \|	Add WebStorm profile
\| *	Add WebStorm profile	Jean Lucas	2018-04-21
\| \|
* \|	Add a profile for ppsspp and scallion	Tad	2018-04-21
\| \|
* \|	Merge pull request #1898 from flacks/profiles/clion	Vincent43	2018-04-21
\|\ \ \| \| \| \| \| \|	Add CLion profile
\| * \|	Add CLion profile	Jean Lucas	2018-04-20
\| \|/
* /	allow python in some profiles	smitsohu	2018-04-18
\|/
*	fix sqlitebrowser blacklist	glitsj16	2018-04-09
\|
*	fix basilisk and palemoon blacklist	smitsohu	2018-04-07
\|
*	support older config dir	glitsj16	2018-04-05
\|
*	support modern mpd config	glitsj16	2018-04-04
\|
*	fix a0502dc5144185b6d346e92944e3359a833d2378, various enhancements	smitsohu	2018-04-04
\|
*	akonadi blacklist additions	smitsohu	2018-04-03
\|
*	redirect knotes to kmail, some tweaks	smitsohu	2018-03-30
\|
*	various blacklist additions	smitsohu	2018-03-28
\|
*	rework akonadi integration	smitsohu	2018-03-26
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	the usr.sbin.mysqld-akonadi apparmor profile, enforced by default in ubuntu and debian testing (and probably opensuse), doesn't play well with a number of firejail options. the reason for this is that once the no_new_privs bit is set, apparmor profile transitions are forbidden. enforcing our own apparmor policy instead is also no solution, because these programs don't even start without d-bus. relaxing the kmail profile was necessary so that kmail can fire up akonadi itself, just in case akonadi has not been started earlier already by another program. this is always an issue when kmail is the only installed akonadi client, but there may be more circumstances. for reasons outlined above this doesn't help debian and ubuntu (opensuse?) users though :-/ a brief summary of the seccomp exceptions: chroot is needed for qt webengine, io_prioset for the akonadi indexing agent, io_getevents, io_submit, io_setup are needed for mysqld. when akonadi has an sqlite3 backend, less exceptions to the seccomp filter are necessary, but mysqld is the default. in the future all kontact suite profiles (itm only kmail, knotes) should probably be redirections to akonadi_control, but the issues with apparmor make this somewhat impractical for now (options like 'protocol' couldn't go to akonadi_control.local any more, if current kmail redirected to there).
*	various profile hardening	smitsohu	2018-03-25
\|
*	Merge branch 'master' of https://github.com/netblue30/firejail	smitsohu	2018-03-24
\|\
\| *	gnome-recipes profile	glitsj16	2018-03-24
\| \|
* \|	add basic akonadi integration	smitsohu	2018-03-24
\|/ \| \| \| \|	as it is now, there is no support for a full akonadi session inside the knotes sandbox, but knotes can connect to akonadi and should work fine
*	asunder profile	netblue30	2018-03-17
\|
*	Add falkon profile - see #1794	Fred-Barclay	2018-03-05
\|