| Commit message (Collapse) | Author | Age |
|---|
| |
|
|
|
|
|
|
| |
Without it, recent okular versions (here 17.12.0-1 on Arch Linux) crash with
mprotect failed in ExecutableAllocator::makeExecutable: Permission denied
due to the noexec constraints in the firejail profile.
|
| | |
|
| | |
|
| | |
|
| |
|
| |
# 1629
|
| |
|
| |
#1629
|
| |
|
|
|
| |
and whitelist kioslaverc because we don't know if kdeinit
will run outside or inside the sandbox.
|
| | |
|
| |
|
|
|
|
|
| |
* okular needs kdeinit4 for open file dialog since recently
* memory-deny-write-execute should be a safe addition for
desktop use of dnscrypt and unbound
* cleanup works
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add novideo
* add novideo
* add novideo
* put noexec last
* blacklist Clementine configuration and database
* blacklist Clementine configuration and database
* add novideo
* add novideo, permit access to ~/.java
* add novideo
* spoof machine-id
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* drop machine-id option
private-etc hides it anyway
|
| | |
|
| | |
|
| |
|
|
| |
See https://github.com/netblue30/firejail/pull/1367#issuecomment-315793729
|
| |
|
|
|
|
|
|
| |
- Added 'disable-devel.conf' to many profiles
- Added 'disable-mnt' to many profiles
- Added 'noexec' to many profiles
- Removed 'netfilter' and 'net none' from profiles with 'protocol unix'
- Cleaned up profiles using defaults
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* okular private-bin update
confirmed that lpr is required for printing, as suggested in #421
* update gwenview private-bin
only for KDE4 builds, patch is not necessary for recent gwenview versions
* blacklist baloo
* update blacklist (okular)
* update noblacklist
* update noblacklist (okular)
* tidy up
* update noblacklist/whitelist (okular)
* update blacklist (k3b)
* uncomment private-bin, shell none
|
| |
|
|
|
|
|
|
|
|
| |
* update noblacklist
* blacklist local plasma overrides, plasmoids
* add more KDE configuration (kdeglobals, plasmoids)
* kdeglobals now in disable-common.inc
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* private-dev breaks playing CDs
* reenable services
* blacklist kservices5 folder
* blacklist nautilus scripts
* blacklist ~/.kde4 files, k3b config, nautilus/nemo
* sort
* update noblacklisting
* update blacklisting
* update blacklisting/whitelisting (okular)
|
| | |
|
| | |
|
| | |
|
| |
|
| |
Gives Okular read-only access to kdeglobals file to fix theme issue
|
| | |
|
| | |
|
| | |
|
| |
|
Flox
netblue30
smitsohu
Fred-Barclay
Tad
SYN-cook
valoq
Pwnage Pineapple
The Fox in the Shell