Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | fix spelling (#4573) | 2021-09-22 | |
| | |||
* | deprecated whitelist=yes/no in /etc/firejail/firejail.config | 2021-07-04 | |
| | |||
* | Merge pull request #4340 from smitsohu/kcmp | 2021-06-26 | |
|\ | | | | | augment seccomp lists in firejail.config | ||
| * | augment seccomp lists in firejail.config | 2021-06-20 | |
| | | |||
* | | Merge pull request #4330 from smitsohu/fjconfig | 2021-06-04 | |
|\ \ | |/ |/| | add firejail.config switch for private-{bin,etc,opt,srv} | ||
| * | add firejail.config switch for private-{bin,etc,opt,srv} | 2021-05-22 | |
| | | |||
* | | deprecated follow-symlink-as-user from firejail.config | 2021-05-26 | |
| | | |||
* | | add support for arbitrary whitelist directories | 2021-05-03 | |
|/ | |||
* | seccomp: logging | 2020-08-05 | |
| | | | | | | | Allow `log` as an alternative seccomp error action instead of killing or returning an errno code. Signed-off-by: Topi Miettinen <toiwoton@gmail.com> | ||
* | Follow-up for #3326 (#3397) | 2020-05-04 | |
| | | | | | | | | | | | * use the new dbus format in chromium-common.profile * use new dbus format in firejail.config Now that #3326 landed I think it might be less confusing to keep using the --nodbus wording. Couldn't come up with a better alternative (yet), so this might need future improvements. * block dbus system bus Blocking the system bus shouldn't affect password functionality etc, as that uses the session bus. | ||
* | Alphabetically order firejail.config (#3324) | 2020-04-07 | |
| | |||
* | Allow changing error action in seccomp filters | 2020-04-06 | |
| | | | | | | | | | | | | | | Let user specify the action when seccomp filters trigger: - errno name like EPERM (default) or ENOSYS: return errno and let the process continue. - 'kill': kill the process as previous versions The default action is EPERM, but killing can still be specified with syscall:kill syntax or globally with seccomp-error-action=kill. The action can be also overridden /etc/firejail/firejail.config file. Not killing the process weakens Firejail slightly when trying to contain intrusion, but it may also allow tighter filters if the only alternative is to allow a system call. | ||
* | fix join timeout if sleep interval is not a multiple | 2020-01-17 | |
| | |||
* | make join timeout configurable in firejail.config | 2019-12-23 | |
| | |||
* | rewrite/partial revert of 8bff773d6a7bf70c97b3d5b751df9ec0dd6c8b5d | 2019-08-09 | |
| | | | | | | | the commit in question introduced an early check of Firejail configuration file, which broke "firejail in firejail" for some sandboxes. see issue #2877 | ||
* | fix verbosity for non-authorized user | 2019-07-22 | |
| | | | | | | users not in firejail.users should only see the error, not the symlink warning. Also exposes less code to non- authorized users. | ||
* | add symlink resolution for home directories | 2019-07-09 | |
| | |||
* | fix #2820 - adjustable file copy limit; export FIREJAIL_DEBUG into sbox | 2019-07-04 | |
| | |||
* | thunderbird-beta: use private-opt instead of whitelist | 2019-06-30 | |
| | |||
* | Update firejail.config -- disable-mnt description | 2019-05-21 | |
| | |||
* | Add a conditional to control DRM/noexec exception for browsers | 2019-04-13 | |
| | |||
* | firejail.config fixes | 2019-02-04 | |
| | | | | always print a warning, treat join-or-start like join | ||
* | --name rework | 2019-02-01 | |
| | |||
* | enable/disable cgroup in firejail.config | 2019-01-27 | |
| | |||
* | Add new config option to disable U2F in browsers, enabled by default | 2018-11-05 | |
| | |||
* | firejail.config: clarify disable-mnt behaviour | 2018-10-16 | |
| | |||
* | add switch to disable/enable private-cache | 2018-09-10 | |
| | |||
* | Revert "mounting a tmpfs on ~/.cache directory (private-cache) by default" | 2018-06-14 | |
| | | | | This reverts commit caa7ad8714206a158123773ddcaca6ef219a5501. | ||
* | mounting a tmpfs on ~/.cache directory (private-cache) by default | 2018-06-12 | |
| | |||
* | removed CFG_CHROOT_DESKTOP config option | 2018-06-11 | |
| | |||
* | enable/disable dbus handling in /etc/firejail/firejail.config | 2018-03-30 | |
| | |||
* | added support to disable apparmor globally in /etc/firejail/firejail.config | 2018-02-19 | |
| | |||
* | deprecated follow-symlink-private-bin from /etc/firejail/firejail.config | 2017-11-09 | |
| | |||
* | modif: remount-proc-sys deprecated from firejail.config | 2017-10-27 | |
| | |||
* | private-lib: support for /etc/firejail/firejail.config | 2017-08-04 | |
| | |||
* | x11/xpra support | 2017-08-01 | |
| | |||
* | arp rework | 2017-07-29 | |
| | |||
* | merge #1100 from zackw: support for Xpra extra params in firejail config file | 2017-05-08 | |
| | |||
* | firejail.config cleanup | 2017-03-29 | |
| | |||
* | merge #1100 from zackw: xvfb support in /etc/firejail/firejail.config | 2017-03-23 | |
| | |||
* | enable/disable join support in /etc/firejail/firejail.config | 2017-03-23 | |
| | |||
* | added support to enable/disable tmpfs mounting on top of ~/.cache directory | 2017-03-14 | |
| | |||
* | config support to disable access to /mnt and /media | 2017-03-10 | |
| | |||
* | Following links in private-bin command ported from #1100 created problems ↵ | 2017-03-07 | |
| | | | | for some users. I added a follow-symlink-private-bin entry in /etc/firejail/firejail.config file to enable/disable this functionality - default disabled. | ||
* | merge #1100 from zackw: removed libconnect | 2017-02-14 | |
| | |||
* | follow-symlink-as-user runtime config option in /etc/firejail/firejail.config | 2017-02-12 | |
| | |||
* | config support for firejail prompt in terminals | 2016-12-11 | |
| | |||
* | fixes | 2016-09-18 | |
| | |||
* | bug: add support to remove /usr/local from private-bin list, issue 778 | 2016-09-17 | |
| | |||
* | bringing back --private-home | 2016-09-04 | |
| |