firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	Whitelist runuser common (#3286)	rusty-snake	2020-03-31
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* introduce whitelist-runuser-common.inc * If an applications does not need a whitelist it can/should be nowhitelisted. Example: nowhitelist ${RUNUSER}/pulse include whitelist-runuser-common.inc * ${RUNUSER}/bus is inaccessible with nodbus regardless of the whitelist. (as it should) * strange wayland setups with an second wayland-compostior need to whitelist ${RUNUSER}/wayland-1, ${RUNUSER}/wayland-2 and so on. * some display-manager store there Xauthority file in ${RUNUSER}. test results with fedora 31: - ssdm: ~/.Xauthority is used - lightdm: /run/lightdm/USER/Xauthority - gdm: /run/user/UID/gdm/Xauthority * IMPORTANT: ATM we can only enable this for non-graphical and GTK3 programs because mutter (GNOMEs window-manger) stores the Xauthority file for Xwayland under /run/user/UID/.mutter-Xwaylandauth.XXXXXX where XXXXXX is random. Until we have whitelist globbing we can't whitelist this file. QT/KDE and other toolkits without full wayland support won't be able to start. * wru update 1 - add wru to more profiles. - blacklist ${RUNUSER} works for the most cli programs too. * add wruc to more profiles * fixes * fixes * wruc: hide pulse pid * update * remove wruc from all the x11 profiles * fixes * fix ordering * read-only * revert read-only * update *
*	Move wusc into eo-common.profile	glitsj16	2019-10-07
\|
*	many profile fixes (1)	rusty-snake	2019-08-26
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	- add novideo to a lot of profiles (there are still more profiles where novideo can be added) - remove commente mdwe from some gnome applications - add descriptions to some profiles - blacklist ${HOME}/.cargo/credentials - move ${HOME}/.git-credentials and ${HOME}/.git-credential-cache to 'top secret' in disable-common.inc - some ordering in disable-programs.inc - merge tor browser blacklists to ${HOME}/.tor-browser* - qupzilla.profile redirect to falkon.profile - blacklist gnome-builder paths - fix transmission profiles inlude - much more
*	Streamline redirect profiles (#2802)	glitsj16	2019-06-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirct profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profile * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles * Streamline redirect profiles
*	Streamline mdwe comment (#2769)	glitsj16	2019-06-13
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Streamline mdwe comment for authenticator * Streamline mdwe comment for autokey-common * Streamline mdwe comment for baobab * Streamline mwde comment for bitwarden * Streamline mdwe comment for clawsker * Streamline mdwe comment for devhelp * Streamline mdwe comment for d-feet * Streamline mdwe comment for enpass * Streamline mdwe comment for eo-common * Streamline mdwe comment for exfalso * Streamline mdwe comment for font-manager * Streamline mdwe comment for geekbench * Streamline mdwe comment for mpDris2 * Streamline mdwe comment for ocenaudio * Streamline mdwe comment for QMediathekView * Streamline mdwe comment for subdownloader * Streamline mdwe comment for viewnior * Streamline mdwe comment for youtube-dl
*	Refactor eog and eom profiles with common redirect (#2708)	glitsj16	2019-05-18
	* Create eo-common.profile * Refactor eog.profile * Refactor eom.profile * Keep private-bin in eog.profile * Keep private-bin in eom.profile * Place private-bin back in eog/eom profiles