| Commit message (Collapse) | Author | Age |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
See
- 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters
- https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183
Except for ocenaudio, access/restrictions on dbus options should
be unchanged
Ocenaudio profile: dbus filters were sandboxed (initially `nodbus`
was enabled) since comments indicated blocking dbus meant
preferences were broken
|
|
|
|
|
|
|
|
|
| |
remove netfilter from profiles with net none
allow Viber to use dig, dig is in its private-bin, so I assume that it
need it.
blacklist resolvectl which can also be used for dns lookups
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* beginn fixup
* continue
* continue
* continue
* continue
* continue
* continue
|
| |
|
| |
|
|
|
|
| |
See discussion in #2399
|
|
|
|
| |
search for the file.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Adds machine-id to all profiles with 'private-etc *pulse*'
- This fixes sound under many profiles
- This is related to #2037, except this adds etc machine-id not spoofed machine-id
- Spoofed machine-id seems to break pulseaudio on some systems
- We already do this in profiles like firefox-common (see the note in it)
- pulseaudio's enable-shm set to yes or no doesn't fix this issue on systems where it occurs
- We can revert this in the future if we find a fix
- Command used:
grep -e music -e videos -e audio -e pulse -e asound -il $(grep "machine-id" -iL $(grep "private-etc" . -Rl))
|
| |
|
|
|