Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Merge pull request #5629 from glitsj16/atool-fix | netblue30 | 2023-01-30 |
|\ | | | | | atool: fix private-etc | ||
| * | atool: fix private-etc | glitsj16 | 2023-01-28 |
| | | |||
* | | ci: run sort.py to fix ci | Kelvin M. Klann | 2023-01-29 |
|/ | | | | | | Command used: $ ./ci/check/profiles/sort.py etc/inc/*.inc etc/profile-*/*.profile | ||
* | private-etc: corss-distro test for curl, gimp, inkscape, firefox, warzone2100 | netblue30 | 2023-01-28 |
| | |||
* | gnome-clocks: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | gmpc: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | arm: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | amarok: fix private-etc comment | glitsj16 | 2023-01-21 |
| | |||
* | cleanup | netblue30 | 2023-01-19 |
| | |||
* | cleanup | netblue30 | 2023-01-19 |
| | |||
* | more profile fixes/testing | netblue30 | 2023-01-19 |
| | |||
* | some profile updates | netblue30 | 2023-01-18 |
| | |||
* | add timezone access to make libical functional | bymoz089 | 2023-01-16 |
| | | | claws-mail vcalendar-plugin uses libical to get current timezone. Libical needs access to file `/etc/timezone` to work properly. | ||
* | Merge pull request #5571 from glitsj16/ec-refactor | netblue30 | 2023-01-15 |
|\ | | | | | email-common refactoring | ||
| * | balsa: drop private-bin | glitsj16 | 2023-01-07 |
| | | | | | | Supporting 'level 1 hack' to allow opening hyperlinks with firefox needs xdg-open (besides bash,sh). Adding xdg-open to private-bin is not enough, as it pulls in a long list of other commands and that's pretty unmaintainable IMO. So I opted to drop private-bin here. | ||
| * | email-common: simplify D-Bus filtering | glitsj16 | 2023-01-06 |
| | | | | | | Suggested in review. | ||
| * | balsa: re-add private-bin comment for gpg | glitsj16 | 2023-01-06 |
| | | | | | | Pointed out in review that this comment was removed by mistake. | ||
| * | email-common: refactoring | glitsj16 | 2023-01-04 |
| | | | | | | No longer used for claws-mail and sylpheed only. | ||
| * | claws-mail: refactoring | glitsj16 | 2023-01-04 |
| | | |||
| * | balsa: refactor as email-common.profile redirect | glitsj16 | 2023-01-04 |
| | | |||
* | | Merge pull request #5563 from glitsj16/linuxqq | netblue30 | 2023-01-15 |
|\ \ | | | | | | | New profiles: linuxqq/qq | ||
| * | | Merge branch 'netblue30:master' into linuxqq | glitsj16 | 2023-01-04 |
| |\| | |||
| * | | linuxqq: drop comment | glitsj16 | 2023-01-04 |
| | | | | | | | | | Now that #5569 is in we can remove the hardening comment. | ||
| * | | linuxqq: reorder options | glitsj16 | 2023-01-03 |
| | | | | | | | | | As suggested in review. | ||
| * | | Create linuxqq.profile | glitsj16 | 2023-01-03 |
| | | | |||
* | | | geary: fix opening hyperlinks via D-Bus (#5565) | glitsj16 | 2023-01-12 |
| |/ |/| | |||
* | | Merge pull request #5564 from glitsj16/claws-mail+sylpheed | netblue30 | 2023-01-04 |
|\ \ | | | | | | | claws-mail and sylpheed D-Bus hardening | ||
| * | | claws-mail: harden D-Bus | glitsj16 | 2023-01-03 |
| |/ | | | | | Relates to https://github.com/netblue30/firejail/issues/5477. | ||
* | | Merge pull request #5569 from glitsj16/electron-hardening | netblue30 | 2023-01-04 |
|\ \ | | | | | | | electron hardening fixes | ||
| * | | Create electron-hardened.inc.profile | glitsj16 | 2023-01-04 |
| | | | |||
| * | | electron: change hardening comment | glitsj16 | 2023-01-04 |
| |/ | |||
* | | Merge pull request #5475 from KOLANICH-tools/aa_fix | netblue30 | 2023-01-04 |
|\ \ | | | | | | | A temporary fix to the bug caused by apparmor profiles stacking. | ||
| * | | A temporary fix to the bug caused by apparmor profiles stacking. | KOLANICH | 2022-11-15 |
| | | | |||
* | | | Merge pull request #5556 from Dpeta/chatterino-profile | netblue30 | 2023-01-04 |
|\ \ \ | |_|/ |/| | | Add profile for Chatterino | ||
| * | | Apply code review suggestions to chatterino.profile | Dpeta | 2022-12-25 |
| | | | | | | | | | | | | | | | | | | - Remove waf from private-bin - Move optional commands to the top - Reorder allow lua/python | ||
| * | | Apply suggestions from code review | Dpeta | 2022-12-25 |
| | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com> | ||
| * | | Remove unnecessary mkdir | Dpeta | 2022-12-25 |
| | | | |||
| * | | Fix music/pictures whitelist path in chatterino.profile | Dpeta | 2022-12-25 |
| | | | |||
| * | | Apply the other code review suggestions to chatterino.profile | Dpeta | 2022-12-25 |
| | | | |||
| * | | Apply commitable suggestions from code review | Dpeta | 2022-12-25 |
| | | | | | | | | | | | | | | | I'll try the rest manually soon Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> | ||
| * | | Add Chatterino profile | Dpeta | 2022-12-25 |
| | | | |||
* | | | window manager profiles: fix browser/electron internal sandboxes | smitsohu | 2022-12-25 |
|/ / | |||
* | | gpg: fix private-bin (#5550) | glitsj16 | 2022-12-21 |
| | | |||
* | | gpg-agent: sort private-bin (even though it's commented) (#5549) | glitsj16 | 2022-12-21 |
| | | | | | | | | | | * gpg-agent: sort private-bin (even though it's commented) * gpg-agent: fix private-bin | ||
* | | audacity: networking updates (#5540) | glitsj16 | 2022-12-20 |
| | | | | | | | | | | | | | | | | | | * audacity: networking updates * audacity: fix allowing to run local server * audacity: move comment so it's more visible As suggested [in review](https://github.com/netblue30/firejail/pull/5540#pullrequestreview-1225225897). | ||
* | | audacity: support more config locations (#5538) | glitsj16 | 2022-12-20 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * audacity: support more config locations * disable-programs.inc: add more audacity locations * audacity: cover all XDG supported locations * audacity: cover all XDG supported locations * audacity: fix state dir entree in disable-programs.inc * unbreak disable-programs.inc Oh my, GitHub syntax highlighting support completely threw me off here. Thanks to @kmk3 for [saving the bacon](https://github.com/netblue30/firejail/pull/5538#pullrequestreview-1224604663)! | ||
* | | add restrict-namespaces to (almost) all profiles | smitsohu | 2022-12-20 |
| | | |||
* | | Rename cinelerra-gg to cinelerra-gg.profile | glitsj16 | 2022-12-19 |
| | | |||
* | | Add profile for avidemux3_jobs_qt5 | Hartmut Knaack | 2022-12-13 |
| | | | | | | | | | | | | | | | | Add a profile for the Qt5 GUI to process Avidemux jobs. Use a redirection to the avidemux3_qt5 profile to reuse translation files. The application needs to create a network socket on localhost and fails to run with protocol unix, so that entry in the default avidemux profile needs to be extended. | ||
* | | Add profile for avidemux3_cli | Hartmut Knaack | 2022-12-12 |
| | | | | | | | | | | Add a profile for the command-line interface of Avidemux, which redirects to the existing avidemux profile. |