| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
|
|
|
|
|
|
| |
See
- 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters
- https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183
Except for ocenaudio, access/restrictions on dbus options should
be unchanged
Ocenaudio profile: dbus filters were sandboxed (initially `nodbus`
was enabled) since comments indicated blocking dbus meant
preferences were broken
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* harden devilspie
* harden devilspie2
* harden curl
* harden wget
* harden curl
* harden dig
* harden claws-mail
* harden dnscrypt-proxy
* harden dnscrypt-proxy
* harden dnscrypt-proxy
* harden exfalso
* refactor easystroke as whitelist profile
* refactor enchant as whitelist profile
* safeguard ${DOCUMENTS}
Thanks @rusty-snake for the suggestion.
* drop x11-none
Thanks @rusty-snake for catching this.
* drop x11 none
Thanks @rusty-snake for saving the bacon...
* drop x11 none
Thanks @rusty-snake for catching this.
* drop x11 none
Thanks @rusty-snake for preventing breakage!
* drop ipc-namespace
Better safe than sorry...
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add qt/qt4 support to wusc
* Add wusc to more profiles
* Add wusc to more profiles
* Update enchant.profile
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add wusc to more profiles
* Add /usr/share/ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
* Add ca-certs to wusc
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Refactor artha as whitelist profile
* Refactor clipit as whitelist profile
* Refactor devilspie as whitelist profile
* Refactor devilspie2 as whitelist profile
* Refactor exfalso as whitelist profile
* Refactor pavucontrol as whitelist profile
* Refactor pdftotext as whitelist profile
* Refactor redshift as whitelist profile
* Refactor soundconverter as whitelist profile
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Streamline mdwe comment for authenticator
* Streamline mdwe comment for autokey-common
* Streamline mdwe comment for baobab
* Streamline mwde comment for bitwarden
* Streamline mdwe comment for clawsker
* Streamline mdwe comment for devhelp
* Streamline mdwe comment for d-feet
* Streamline mdwe comment for enpass
* Streamline mdwe comment for eo-common
* Streamline mdwe comment for exfalso
* Streamline mdwe comment for font-manager
* Streamline mdwe comment for geekbench
* Streamline mdwe comment for mpDris2
* Streamline mdwe comment for ocenaudio
* Streamline mdwe comment for QMediathekView
* Streamline mdwe comment for subdownloader
* Streamline mdwe comment for viewnior
* Streamline mdwe comment for youtube-dl
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Create allow-INTERPETER.inc
* allow-lua.inc
* allow-perl.inc
* allow-python2.inc
* allow-python3.inc
* Create allow-java.inc
* Update profiles to use new allow-INTERPRETER.inc includes
* Update profiles to use new allow-INTERPRETER.inc includes 2/x
* Fix order of allow-INTERPRETER.inc includes
* Update profiles to use new allow-INTERPRETER.inc includes 3/x
* Fixup comment about allow-java.inc
https://github.com/netblue30/firejail/pull/2736#discussion_r289597997
* Add Arch Linux specific paths to allow-perl.inc
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Fix 'allow python' in xpra
* Fix 'allow python' in xplayer
* Fix 'allow python' in xed
* Fix 'allow python' in uzbl-browser
* Fix 'allow python' in transmission-remote-cli
* Fix 'allow python' in torbrowser-launcher
* fix 'allow python' in subdownloader
* Fix 'allow python' in steam
* Fix 'allow python' in soundconverter
* Fix 'allow python' in sdat2img
* Fix 'allow python' in scribus
* Fix 'allow python' in ranger
* Fix 'allow python' in qutebrowser
* Fix 'allow python' in qbittorrent
* Fix 'allow python' in pybitmessage
* Fix 'allow python' in playonlinux
* Fix 'allow python' in pitivi
* Fix 'allow python' in pithos
* Fix 'allow python' in picard
* Fix 'allow python' in openshot
* Fix 'allow python' in onionshare-gui
* Fix 'allow python' in obs
* Fix 'allow python' in nitroshare
* Fix 'allow python' in nemo
* Fix 'allow python' in nautilus
* Fix 'allow python' in natron
* Fix 'allow python' in ms-office
* Fix 'allow python' in mpDris2
* Fix 'allow python' in mendeleydesktop
* Fix 'allow python' in macrofusion
* Fix 'allow python' in lollypop
* Fix 'allow python' in liferea
* Fix 'allow python' in krita
* Fix 'allow python' in kodi
* Fix 'allow python' in inkscape
* Fix 'allow python' in hexchat
* Fix 'allow python' in gnome-schedule
* Fix 'allow python' in gnome-music
* Fix 'allow python' in gconf
* Fix 'allow python' in gajim
* Fix 'allow python' in font-manager
* Fix 'allow python' in fontforge
* Fix 'allow python' in flowblade
* Fix 'allow python' in filezilla
* Fix 'allow python' in exfalso
* Fix 'allow python' in electrum
* Fix 'allow python' in display
* Fix 'allow python' in d-feet
* Fix 'allow python' in deluge
* Fix 'allow python' in cherrytree
* Fix 'allow python' in catfish
* Fix 'allow python' in caja
* Fix 'allow python' in blender
* Fix 'allow python' in bleachbit
* Fix 'allow python' in authenticator
* Fix 'allow python' in arm
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Revert machine-id comment
* Revert machine-id comment
* Revert machine-id comment
* Revert machine-id comment
* Revert machine-id comment
* Revert machine-id comment
* Revert machine-id comment
* Revert machine-id comment
* Revert machine-id comment
* Revert machine-id comment
|
|
|