Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | add 'blacklist ${RUNUSER}/wayland-*' to all profi… | 2020-01-18 | |
| | | | | …les with 'x11 none' | ||
* | fix file.profile (broken on Debian Buster) | 2019-08-12 | |
| | |||
* | update and harden file.profile | 2019-08-11 | |
| | |||
* | add 'x11 none' to more profiles with 'net none' | 2019-06-20 | |
| | |||
* | automatically fixed all private-{bin,etc} lines | 2019-06-13 | |
| | |||
* | add disable-exec.inc to all profiles with apparmor (#2576) | 2019-03-12 | |
| | | | | | | * add disable-exec.inc to all profiles with apparmor - #2385 #2505 * drop disable-exec.inc from generic electron.profile | ||
* | Harden file.profile (#2458) | 2019-02-24 | |
| | |||
* | Add alternatives to private-etc for profiles in etc/ | 2019-02-17 | |
| | | | | See discussion in #2399 | ||
* | Update file.profile | 2018-11-05 | |
| | | | Add support for bsdtar and libfakeroot support for makepkg on Arch. | ||
* | Merge pull request #2201 from SkewedZeppelin/u2f-ap | 2018-10-17 | |
|\ | | | | | Add nou2f to all profiles | ||
| * | Add nou2f to all profiles | 2018-10-15 | |
| | | | | | | | | - Closes #2194 | ||
* | | Remove "/etc/firejail/" from all include paths, now that profile_read will ↵ | 2018-10-17 | |
|/ | | | | search for the file. | ||
* | profiles: file needs access to libmagic | 2018-10-12 | |
| | |||
* | profiles: drop private-tmp from file, as running on temporary files is ↵ | 2018-10-12 | |
| | | | | common use case | ||
* | Harden file.profile | 2018-10-11 | |
| | |||
* | Fix file.profile | 2018-10-11 | |
| | |||
* | Add descriptions to profiles, pulled from Ubuntu 18.04 | 2018-08-13 | |
| | |||
* | recalibrate dbus access, deploy nodbus option | 2018-03-28 | |
| | | | | | | | see #1822 and #1825. also systematically replaces 'blacklist /run/user/*/bus' with 'nodbus'. with contributions from @Fred-Barclay | ||
* | disable non-abstract session bus address | 2017-10-22 | |
| | | | | | systematically blacklist /run/user/*/bus in all profiles with 'net none'. targets distros like Fedora | ||
* | added private-lib to eog, eom, file, gpicview, less, strings, and tar | 2017-10-16 | |
| | |||
* | improve servers, harden musescore | 2017-08-31 | |
| | |||
* | profile enhancements (mostly novideo) | 2017-08-29 | |
| | |||
* | Fix nodvd placement | 2017-08-13 | |
| | |||
* | added nodvd to most profiles | 2017-08-13 | |
| | |||
* | Fix notv placement | 2017-08-11 | |
| | |||
* | added notv to most profiles | 2017-08-11 | |
| | |||
* | Fix comments in 88 profiles | 2017-08-07 | |
| | | | | There may actually be some other comments that were removed, but the bulk have been restored | ||
* | Unify all profiles | 2017-08-07 | |
| | |||
* | Add back net none/netfilter as needed | 2017-08-02 | |
| | |||
* | Harden profiles | 2017-08-02 | |
| | | | | | | | | - Added 'disable-devel.conf' to many profiles - Added 'disable-mnt' to many profiles - Added 'noexec' to many profiles - Removed 'netfilter' and 'net none' from profiles with 'protocol unix' - Cleaned up profiles using defaults | ||
* | fix quiet in profiles | 2017-06-08 | |
| | |||
* | added /etc/firejail/globals.local for global customizations | 2017-05-23 | |
| | |||
* | persistent support for all profile files | 2017-02-09 | |
| | |||
* | quiet fix | 2016-11-29 | |
| | |||
* | updated default.profile | 2016-11-20 | |
| | |||
* | squash attempt 2 | 2016-10-24 | |
| | |||
* | removed private-tmp from sysutils | 2016-10-03 | |
| | |||
* | profile cleanup | 2016-09-28 | |
| | |||
* | added quiet profile command | 2016-08-01 | |
| | |||
* | cleanup and some new tests | 2016-07-31 | |
| | |||
* | Add file.profile | 2016-07-31 | |