aboutsummaryrefslogtreecommitdiffstats
path: root/etc/inc
Commit message (Collapse)AuthorAge
* Merge pull request #4894 from jmetrius/fix-eglLibravatar netblue302022-02-03
|\ | | | | Allow common access to EGL External platform configuration directory
| * Allow common access to EGL External platform configuration directoryLibravatar Jan Sonntag2022-02-02
| | | | | | | | This commit fixes Issue #4893 by allowing access to the configuration directory for the Wayland EGL external platform library
* | Merge pull request #4864 from antonv6/antonv6-steam-mangohudLibravatar netblue302022-02-03
|\ \ | |/ |/| steam.profile: allow ~/.config/MangoHud
| * disable-programs.inc: sort correctlyLibravatar Anton Shestakov2022-01-17
| |
| * disable-programs.inc: add ~/.config/MangoHudLibravatar Anton Shestakov2022-01-17
| |
* | Merge pull request #4841 from Tus1688/masterLibravatar netblue302022-01-24
|\ \ | | | | | | Add neovim profile
| * | fix: neovim profileLibravatar user2022-01-11
| | |
| * | fix: neovim profileLibravatar user2022-01-10
| | |
* | | mergesLibravatar netblue302022-01-24
| | |
* | | Merge pull request #4829 from CaseOf/seafileLibravatar netblue302022-01-24
|\ \ \ | | | | | | | | Seafile
| * | | Create seafile-applet.profileLibravatar CaseOf2022-01-06
| | | |
* | | | Merge pull request #4863 from antonv6/antonv6-wine-cacheLibravatar netblue302022-01-24
|\ \ \ \ | | | | | | | | | | {lutris,wine}.profile: allow ~/.cache/wine
| * | | | disable-programs.inc: add ~/.cache/wineLibravatar Anton Shestakov2022-01-17
| | |_|/ | |/| |
* | | | Merge pull request #4868 from reedriley/disable-programsLibravatar netblue302022-01-24
|\ \ \ \ | | | | | | | | | | Blacklist rclone, 1Password, Ledger Live and cointop
| * | | | Blacklist rclone, 1Password, Ledger Live and cointopLibravatar Reed Riley2022-01-19
| |/ / /
* | | | Merge pull request #4873 from reedriley/cointopLibravatar netblue302022-01-24
|\ \ \ \ | | | | | | | | | | add a profile for cointop
| * | | | add a profile for cointopLibravatar Reed Riley2022-01-21
| |/ / /
* | | | akonadi: chasing the socketsLibravatar smitsohu2022-01-23
| | | |
* | | | more on pass utilityLibravatar netblue302022-01-21
| | | |
* | | | blacklist password store directory for pass packageLibravatar netblue302022-01-21
|/ / /
* | | profiles: sort pathsLibravatar Reiner Herrmann2022-01-14
| | |
* | | fix warzone2100 (Debian 11)Libravatar netblue302022-01-13
| | |
* | | add wget2rc to disable-programs.incLibravatar glitsj162022-01-13
| | |
* | | Noblacklist rxvt in allow-perl.incLibravatar Vincent Lefevre2022-01-10
| |/ |/| | | | | | | This is the counterpart of the blacklist of rxvt in commit ed5c259f, as suggested in the discussion of pull request #4831.
* | Merge pull request #4826 from adrianlshaw/masterLibravatar netblue302022-01-08
|\ \ | | | | | | RPCS3 profile
| * | Add rpcs3 profileLibravatar Adrian L. Shaw2022-01-06
| |/
* / Blacklist rxvt after the blacklist of Perl.Libravatar Vincent Lefevre2022-01-07
|/ | | | | | rxvt needs Perl modules, thus does not work. And its blacklist is needed so that Firefox can run applications with Terminal=true in their .desktop file (depending on what is installed).
* add notable blacklistsLibravatar glitsj162022-01-05
|
* Merge pull request #4755 from kmk3/mpv-add-yt-dlpLibravatar netblue302021-12-28
|\ | | | | yt-dlp: add missing paths & mpv.profile: whitelist paths for yt-dlp
| * disable-programs.inc: blacklist missing yt-dlp pathsLibravatar Kelvin M. Klann2021-12-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This amends commit d6ca41c19 ("update mpv.profile", 2021-10-24) / PR #4634. These paths were taken from yt-dlp(1). They are used since yt-dlp commit e2e43aea2 ("Portable Configuration file (closes #19)", 2021-01-16)[1]. Environment: yt-dlp 2021.12.01-1 on Artix Linux. Relates to: https://github.com/yt-dlp/yt-dlp/issues/19 [1] https://github.com/yt-dlp/yt-dlp/commit/e2e43aea2159a235e151f56bd14383129a6b4355
* | Fix clipgrab profile (yt-dlp requires python)Libravatar Jose Riha2021-12-28
| |
* | Whitelist ${HOME}/.local/opt/tor-browser to make tor-browser workLibravatar York Zhao2021-12-17
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tor-browser 11.0.2-1 doesn't work without whitelisting this directory. The following was the message I got before whitelisting this directory. Reading profile /etc/firejail/tor-browser.profile Reading profile /etc/firejail/torbrowser-launcher.profile Reading profile /etc/firejail/allow-python2.inc Reading profile /etc/firejail/allow-python3.inc Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-xdg.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Reading profile /etc/firejail/whitelist-runuser-common.inc Reading profile /etc/firejail/whitelist-usr-share-common.inc Warning: Warning: NVIDIA card detected, nogroups command disabled Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Parent pid 12653, child pid 12654 104 programs installed in 153.32 ms Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: skipping asound.conf for private /etc Warning: skipping crypto-policies for private /etc Warning fcopy: skipping /etc/fonts/conf.d/11-lcdfilter-default.conf, cannot find inode Warning: skipping pki for private /etc Private /etc installed in 64.84 ms Private /usr/etc installed in 0.00 ms Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Warning: cleaning all supplementary groups Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Warning: cleaning all supplementary groups Child process initialized in 325.75 ms /usr/bin/tor-browser: [Error] The tor-browser archive could not be extracted to your home directory. Check the permissions of ~/.local/opt/tor-browser/app. The error log can be found in ~/.local/opt/tor-browser/LOG. /usr/bin/tor-browser: line 218: ~/.local/opt/tor-browser/app/Browser/start-tor-browser: No such file or directory
* Add new cachy-browser profileLibravatar Vladislav Nepogodin2021-12-06
|
* additional electron blacklistsLibravatar glitsj162021-11-30
|
* Blacklist ~/.config/monero-projectLibravatar Ted Robertson2021-11-30
|
* fix #4714Libravatar netblue302021-11-29
|
* disable by default several network toolsLibravatar netblue302021-11-24
|
* Profile fixesLibravatar rusty-snake2021-11-14
| | | | | | | | - Update RELNOTES and README.md - disable-common.inc - blacklist ${HOME}/.local/share/ibus-typing-booster - blacklist /run/timeshift (closes #4660) - fix audacity.profile (closes #4659)
* Merge pull request #4681 from jmetrius/openstego-profileLibravatar netblue302021-11-13
|\ | | | | Add OpenStego profile
| * Add OpenStego profileLibravatar Jan Sonntag2021-11-12
| |
* | Merge pull request #4680 from kmk3/dc-fix-slock-pathLibravatar netblue302021-11-13
|\ \ | | | | | | disable-common.inc: fix paths of slock and physlock
| * | disable-common.inc: fix paths of slock and physlockLibravatar Kelvin M. Klann2021-11-11
| |/ | | | | | | | | | | Added on commit f0adf06c3 ("disable-common.inc: more SUID", 2021-11-09). Relates to #4668.
* / telnet and ftpLibravatar netblue302021-11-12
|/
* change Fedora ssh fixLibravatar glitsj162021-11-10
| | | Suggested in https://github.com/netblue30/firejail/pull/4675#discussion_r746510840. Makes sense!
* add Fedora fixLibravatar glitsj162021-11-10
| | | | Added Fedora path as per https://github.com/netblue30/firejail/pull/4675#pullrequestreview-802438767. NOTE: there are several other profiles touching /usr/libexec, so untill someone on Fedora can shed some light on what files are installed under /usr/libexec, I only blacklisted ssh-keysign. I'll pick this up tomorrow, a bit pressed for time in the non-digital worlds...
* add Fedora fixesLibravatar glitsj162021-11-10
| | | Added Fedora path as per https://github.com/netblue30/firejail/pull/4675#pullrequestreview-802438767.
* fixes for sshLibravatar glitsj162021-11-10
| | | Counterpart fix for changes in allow-ssh.inc.
* fixes for sshLibravatar glitsj162021-11-10
| | | After seeing https://github.com/netblue30/firejail/commit/9a81078ddbbb4215d06f7d1861481ece05ebda99 it dawned on me that Arch Linux doesn't have /usr/lib/openssh, but uses /usr/lib/ssh instead. That's a different path than what's referenced in our current {allow-ssh,disable-common}.inc files. Some very superficial checks revealed that OpenSSH seems to be packaged quite differently, at least on Debian/Ubuntu and Arch Linux. And then there's version differences on non-rolling distro's to consider. All in all IMO it makes more sense to (no)blacklist /usr/lib/openssh and /usr/lib/ssh instead of referencing all the possible individual files that live under those paths.
* disable-common.inc: fix sshLibravatar netblue302021-11-09
|
* disable-common.inc: more SUIDLibravatar netblue302021-11-09
|
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-06 08:25:29 +0000