aboutsummaryrefslogtreecommitdiffstats
path: root/etc/less.profile
Commit message (Collapse)AuthorAge
* reorganize github etc directoryLibravatar netblue302020-04-21
|
* Replace `nodbus` with dbus-* filtersLibravatar Fred Barclay2020-04-07
| | | | | | | | | | | | | See - 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters - https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183 Except for ocenaudio, access/restrictions on dbus options should be unchanged Ocenaudio profile: dbus filters were sandboxed (initially `nodbus` was enabled) since comments indicated blocking dbus meant preferences were broken
* Whitelist runuser common (#3286)Libravatar rusty-snake2020-03-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * introduce whitelist-runuser-common.inc * If an applications does not need a whitelist it can/should be nowhitelisted. Example: nowhitelist ${RUNUSER}/pulse include whitelist-runuser-common.inc * ${RUNUSER}/bus is inaccessible with nodbus regardless of the whitelist. (as it should) * strange wayland setups with an second wayland-compostior need to whitelist ${RUNUSER}/wayland-1, ${RUNUSER}/wayland-2 and so on. * some display-manager store there Xauthority file in ${RUNUSER}. test results with fedora 31: - ssdm: ~/.Xauthority is used - lightdm: /run/lightdm/USER/Xauthority - gdm: /run/user/UID/gdm/Xauthority * IMPORTANT: ATM we can only enable this for non-graphical and GTK3 programs because mutter (GNOMEs window-manger) stores the Xauthority file for Xwayland under /run/user/UID/.mutter-Xwaylandauth.XXXXXX where XXXXXX is random. Until we have whitelist globbing we can't whitelist this file. QT/KDE and other toolkits without full wayland support won't be able to start. * wru update 1 - add wru to more profiles. - blacklist ${RUNUSER} works for the most cli programs too. * add wruc to more profiles * fixes * fixes * wruc: hide pulse pid * update * remove wruc from all the x11 profiles * fixes * fix ordering * read-only * revert read-only * update *
* add 'blacklist ${RUNUSER}/wayland-*' to all profi…Libravatar rusty-snake2020-01-18
| | | | …les with 'x11 none'
* many profile fixes (1)Libravatar rusty-snake2019-08-26
| | | | | | | | | | | | | | | | - add novideo to a lot of profiles (there are still more profiles where novideo can be added) - remove commente mdwe from some gnome applications - add descriptions to some profiles - blacklist ${HOME}/.cargo/credentials - move ${HOME}/.git-credentials and ${HOME}/.git-credential-cache to 'top secret' in disable-common.inc - some ordering in disable-programs.inc - merge tor browser blacklists to ${HOME}/.tor-browser* - qupzilla.profile redirect to falkon.profile - blacklist gnome-builder paths - fix transmission profiles inlude - much more
* less.profile: make ${HOME} read-onlyLibravatar Vincent432019-07-10
| | | less is usually used to view various text files including configs so blacklisting many of them in ${HOME} make it less(sic!) usable. We can make them read-only instead.
* use 'x11 none' optionLibravatar smitsohu2019-06-18
| | | | | | | ... instead of just blacklisting the X11 socket. Systematically added to all profiles with 'net none' and 'blacklist /tmp/.X11-unix', and a few more
* three new blacklist in disable-common.incLibravatar rusty-snake2019-06-18
| | | | | | * ~/.viminfo * ~/.lesshst * ~/.python_history
* consequent order of writable-*Libravatar rusty-snake2019-06-16
|
* many profile cleanupsLibravatar rusty-snake2019-06-02
|
* adding disable-exec.inc to the remaining profilesLibravatar netblue302019-04-12
|
* Streamline Include comment for relevant profiles (#2474)Libravatar glitsj162019-02-25
| | | | | | | | | | | | | | | | | | | | * Streamline include comment for 7z.profile * Streamline include comment for gzip.profile * Streamline include comment for less.profile * Streamline include comment for strings.profile * Streamline include comment for tar.profile * Streamline include comment for unrar.profile * Streamline include comment for unzip.profile * Streamline include comment for uudeview.profile * Streamline include comment for xzdec.profile
* Harden less.profile (#2466)Libravatar glitsj162019-02-24
|
* Merge pull request #2201 from SkewedZeppelin/u2f-apLibravatar netblue302018-10-17
|\ | | | | Add nou2f to all profiles
| * Add nou2f to all profilesLibravatar Tad2018-10-15
| | | | | | | | - Closes #2194
* | Remove "/etc/firejail/" from all include paths, now that profile_read will ↵Libravatar Glenn Washburn2018-10-17
|/ | | | search for the file.
* Cleanup descriptionsLibravatar Tad2018-08-13
|
* Add descriptions to profiles, pulled from Ubuntu 18.04Libravatar Tad2018-08-13
|
* don't include globals.local twice (take two) (#2010)Libravatar glitsj162018-06-24
| | | | | | | | | | | | | | | | | | | | * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice
* Add private-cache to many profilesLibravatar Tad2018-06-14
| | | | grep "cache" -L $(grep "redirect" -iL $(grep "whitelist" -RL))
* correct spellingLibravatar glitsj162018-04-16
|
* recalibrate dbus access, deploy nodbus optionLibravatar smitsohu2018-03-28
| | | | | | | see #1822 and #1825. also systematically replaces 'blacklist /run/user/*/bus' with 'nodbus'. with contributions from @Fred-Barclay
* Consistent home directory nomenclatureLibravatar Fred-Barclay2017-11-17
|
* disable non-abstract session bus addressLibravatar smitsohu2017-10-22
| | | | | systematically blacklist /run/user/*/bus in all profiles with 'net none'. targets distros like Fedora
* added private-lib to eog, eom, file, gpicview, less, strings, and tarLibravatar netblue302017-10-16
|
* Fix nodvd placementLibravatar Tad2017-08-13
|
* added nodvd to most profilesLibravatar netblue302017-08-13
|
* Fix notv placementLibravatar Tad2017-08-11
|
* added notv to most profilesLibravatar netblue302017-08-11
|
* fix less for #1450Libravatar netblue302017-08-10
|
* Unify all profilesLibravatar Tad2017-08-07
|
* Initial adding of memory-deny-write-execute to profilesLibravatar Tad2017-08-02
| | | | | | | | - mdwe breaks most vm-based languages so python/java/javascript and some mono programs are not compatible - mdwe also breaks most 3d accelerated programs such as 3d games - mdwe is similar to PaX's mprotect meaning PaX flag managers can be used as reference -- See https://github.com/copperhead/paxd-archive/blob/master/paxd.conf -- See https://github.com/nning/linux-pax-flags
* Harden 50 profilesLibravatar Tad2017-07-04
| | | | | Hardened many profiles using disable-mnt and novideo Fixed gnome-font-viewer
* fix quiet in profilesLibravatar netblue302017-06-08
|
* added /etc/firejail/globals.local for global customizationsLibravatar netblue302017-05-23
|
* persistent support for all profile filesLibravatar netblue302017-02-09
|
* hardened various profilesLibravatar valoq2016-12-21
|
* squash attempt 2Libravatar Fred-Barclay2016-10-24
|
* removed private-tmp from sysutilsLibravatar netblue302016-10-03
|
* added quiet profile commandLibravatar netblue302016-08-01
|
* nosoundLibravatar netblue302016-07-08
|
* sysutilsLibravatar netblue302016-06-28
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-23 07:47:13 +0000