aboutsummaryrefslogtreecommitdiffstats
path: root/etc/file-roller.profile
Commit message (Collapse)AuthorAge
* comment apparmor, net where they interfere with dconf - #1843Libravatar smitsohu2018-03-30
|
* comment nodbus where it interferes with dconfLibravatar smitsohu2018-03-29
| | | | pending further discussion
* recalibrate dbus access, deploy nodbus optionLibravatar smitsohu2018-03-28
| | | | | | | see #1822 and #1825. also systematically replaces 'blacklist /run/user/*/bus' with 'nodbus'. with contributions from @Fred-Barclay
* More fixes for /etc/profile and mdweLibravatar Tad2018-03-12
| | | | | - Adds noblacklist /etc/profile.d to many profiles like 2e17082ba4b3399bf5d68bb75587934ea028cc5c and 970f739e2be202a39ab82f589d5773267b903de6 - Disables mdwe to workaround #1803 like 970f739e2be202a39ab82f589d5773267b903de6
* disable non-abstract session bus addressLibravatar smitsohu2017-10-22
| | | | | systematically blacklist /run/user/*/bus in all profiles with 'net none'. targets distros like Fedora
* add whitelist-var-common to some profilesLibravatar smitsohu2017-09-25
|
* various profile fixesLibravatar smitsohu2017-08-22
|
* Fix nodvd placementLibravatar Tad2017-08-13
|
* added nodvd to most profilesLibravatar netblue302017-08-13
|
* Fix notv placementLibravatar Tad2017-08-11
|
* added notv to most profilesLibravatar netblue302017-08-11
|
* Unify all profilesLibravatar Tad2017-08-07
|
* Add back net none/netfilter as neededLibravatar Fred-Barclay2017-08-02
|
* Initial adding of memory-deny-write-execute to profilesLibravatar Tad2017-08-02
| | | | | | | | - mdwe breaks most vm-based languages so python/java/javascript and some mono programs are not compatible - mdwe also breaks most 3d accelerated programs such as 3d games - mdwe is similar to PaX's mprotect meaning PaX flag managers can be used as reference -- See https://github.com/copperhead/paxd-archive/blob/master/paxd.conf -- See https://github.com/nning/linux-pax-flags
* Harden profilesLibravatar Tad2017-08-02
| | | | | | | | - Added 'disable-devel.conf' to many profiles - Added 'disable-mnt' to many profiles - Added 'noexec' to many profiles - Removed 'netfilter' and 'net none' from profiles with 'protocol unix' - Cleaned up profiles using defaults
* Harden 50 profilesLibravatar Tad2017-07-04
| | | | | Hardened many profiles using disable-mnt and novideo Fixed gnome-font-viewer
* commented out ipc-namespace in most profiles - it breaks newer versions of ↵Libravatar netblue302017-05-25
| | | | GDK with the following error: Gdk-ERROR **: The program 'thunderbird' received an X Window System error
* added /etc/firejail/globals.local for global customizationsLibravatar netblue302017-05-23
|
* Harden more profilesLibravatar Tad2017-04-17
|
* Harden 19 more profilesLibravatar Tad2017-04-15
|
* persistent support for all profile filesLibravatar netblue302017-02-09
|
* many new profilesLibravatar valoq2016-11-19
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-07 00:59:43 +0000