Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | recalibrate dbus access, deploy nodbus option | smitsohu | 2018-03-28 |
| | | | | | | | see #1822 and #1825. also systematically replaces 'blacklist /run/user/*/bus' with 'nodbus'. with contributions from @Fred-Barclay | ||
* | various profile hardening | smitsohu | 2018-03-25 |
| | |||
* | harden konversation and kwrite, minor fixes | smitsohu | 2018-03-18 |
| | |||
* | Move apparmor option to the top of the options list in all profiles | Tad | 2018-03-17 |
| | |||
* | more apparmor deployment | Vincent43 | 2018-03-17 |
| | |||
* | harden kwrite | smitsohu | 2018-03-13 |
| | |||
* | add join-or-start to dolphin, okular and kwrite | smitsohu | 2018-03-01 |
| | | | | fixes registration of d-bus services, closes #1391 | ||
* | Consistent home directory nomenclature | Fred-Barclay | 2017-11-17 |
| | |||
* | matching noblacklist in profile files with blacklist in disable-programs.inc | netblue30 | 2017-11-02 |
| | |||
* | harden kde | smitsohu | 2017-10-31 |
| | | | | | and whitelist kioslaverc because we don't know if kdeinit will run outside or inside the sandbox. | ||
* | whitelist /var | netblue30 | 2017-09-18 |
| | |||
* | Fix nodvd placement | Tad | 2017-08-13 |
| | |||
* | added nodvd to most profiles | netblue30 | 2017-08-13 |
| | |||
* | Fix notv placement | Tad | 2017-08-11 |
| | |||
* | added notv to most profiles | netblue30 | 2017-08-11 |
| | |||
* | more novideo options, enhanced mediathekview (#1451) | smitsohu | 2017-08-10 |
| | | | | | | | | | | | | | | * add disable-mnt * support alternative media players * add novideo * fix comment, add novideo * drop disable-mnt saving to mounted locations is legitimate use | ||
* | Fix comments in 88 profiles | Tad | 2017-08-07 |
| | | | | There may actually be some other comments that were removed, but the bulk have been restored | ||
* | Unify all profiles | Tad | 2017-08-07 |
| | |||
* | Add back net none/netfilter as needed | Fred-Barclay | 2017-08-02 |
| | |||
* | Harden profiles | Tad | 2017-08-02 |
| | | | | | | | | - Added 'disable-devel.conf' to many profiles - Added 'disable-mnt' to many profiles - Added 'noexec' to many profiles - Removed 'netfilter' and 'net none' from profiles with 'protocol unix' - Cleaned up profiles using defaults | ||
* | KWrite profile | startx2017 | 2017-06-29 |