Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | add a profile for 1password (#4874) | Reed Riley | 2022-01-21 |
| | |||
* | blacklist wget2 in firefox-common.profile | glitsj16 | 2022-01-13 |
| | |||
* | blacklist wget2 in chromium-common.profile | glitsj16 | 2022-01-13 |
| | |||
* | profiles: fix librewolf (#4838) | Reiner Herrmann | 2022-01-07 |
| | |||
* | Add DBus filter rules specific to firefox-developer-edition (#4832) | Ammon Smith | 2022-01-07 |
| | | | | | * Add firefoxdeveloperedition DBus path to profile. * Re-order rules. | ||
* | ordering fixes | glitsj16 | 2022-01-06 |
| | |||
* | profiles: allow extensions directories in chromium-common profile | Reiner Herrmann | 2022-01-06 |
| | |||
* | profiles: allow /usr/share/webext in chromium profile | Reiner Herrmann | 2022-01-06 |
| | | | | Bug-Debian: https://bugs.debian.org/1003234 | ||
* | Fix clipgrab profile (yt-dlp requires python) | Jose Riha | 2021-12-28 |
| | |||
* | disable curl and wget in browsers based on firefox and chromium | netblue30 | 2021-12-18 |
| | |||
* | allow lua | glitsj16 | 2021-12-13 |
| | |||
* | Merge pull request #4752 from kmk3/elinks-fix-liblua-access | netblue30 | 2021-12-08 |
|\ | | | | | elinks.profile: Fix missing access to liblua | ||
| * | elinks.profile: Fix missing access to liblua | Kelvin M. Klann | 2021-12-08 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | By including allow-lua.inc. Error log: $ firejail elinks elinks: error while loading shared libraries: liblua.so.5.4: cannot open shared object file: Permission denied Environment: firejail-git (a82c8e021) and elinks 0.14.3-2 on Artix Linux. Fixes #4707. Reported-by: @jose1711 | ||
* | | Merge pull request #4743 from vnepogodin/master | netblue30 | 2021-12-08 |
|\ \ | |/ |/| | Add CachyBrowser profile | ||
| * | keep in sync with librewolf.profile from master branch | Vladislav Nepogodin | 2021-12-06 |
| | | |||
| * | Add new cachy-browser profile | Vladislav Nepogodin | 2021-12-06 |
| | | |||
* | | dino.profile: netlink protocol is required for audio/video calls. | crocket | 2021-12-07 |
|/ | |||
* | Add a profile for Flatseal | Hugo Osvaldo Barrera | 2021-12-03 |
| | |||
* | etc/profile-a-l/display.profile: additions needed on Gentoo | Hank Leininger | 2021-12-02 |
| | | | | | | | | | | | Various .so's are needed to allow execution, /etc/ImageMagick-7/ is needed for various policy XML files, and /usr/$(libdir)/ImageMagick-x.y.z/ is needed in order to have access to decoders. Tested on Gentoo; I don't know if other distros put the relevant bits in different paths. Signed-off-by: Hank Leininger <hlein@korelogic.com> | ||
* | goldendict: whitelist path to documentation and locales | Jose Riha | 2021-12-01 |
| | |||
* | move whitelists down according to profile.template | glitsj16 | 2021-11-30 |
| | |||
* | add noblacklists too | glitsj16 | 2021-11-30 |
| | | | As suggested in https://github.com/netblue30/firejail/pull/4727#discussion_r759402234. | ||
* | additional whitelist paths | glitsj16 | 2021-11-30 |
| | |||
* | etc: Remove comments about nogroups and noroot on nvidia | Kelvin M. Klann | 2021-11-29 |
| | | | | | | | | | | | | | | | | | | | | | | | | `nogroups` should not have been causing issues with rendering on nvidia since commit 623e68216 ("temporary fix for nvidia/nogroups/noroot issue (#3644, #841)", 2020-10-02) and commit cb460c32c ("more nvidia (#3644)", 2020-10-03), which had made it a no-op on nvidia. And the handling of the "render" and "video" groups are independent to the handling of `nogroups` now; see the previous 3 commits. Commits which introduced the comments on each profile: * kodi.profile: commit ce462b6b1 ("fix #3501", 2020-07-16) * mpsyt.profile: commit e17b48fca ("new profile mpsyt.profile", 2018-11-28) * mpv.profile: commit cc7c48983 ("Document #1945", 2018-07-25) * steam.profile: commit d6f8169dd ("steam fixes; #841, #3267", 2020-03-15) Commands used to find the comments: git grep -i nvidia -- etc/profile-* | grep -v private-etc Relates to #4632. | ||
* | Merge pull request #4438 from caydey/master | netblue30 | 2021-11-23 |
|\ | | | | | Added `quiet` to some CLI profiles | ||
| * | Added "quiet" to profile | caydey | 2021-08-03 |
| | | |||
* | | Profile fixes | rusty-snake | 2021-11-14 |
| | | | | | | | | | | | | | | | | - Update RELNOTES and README.md - disable-common.inc - blacklist ${HOME}/.local/share/ibus-typing-booster - blacklist /run/timeshift (closes #4660) - fix audacity.profile (closes #4659) | ||
* | | Merge pull request #4635 from smitsohu/noorphans | netblue30 | 2021-11-13 |
|\ \ | | | | | | | deterministic-shutdown option | ||
| * | | deterministic-shutdown option | smitsohu | 2021-10-28 |
| | | | |||
* | | | telnet and ftp | netblue30 | 2021-11-12 |
| | | | |||
* | | | disable-common.inc: disable chrome-sandbox | netblue30 | 2021-11-09 |
| | | | |||
* | | | Add alteratives and ld.so.cache to all private-etc lines | rusty-snake | 2021-10-27 |
|/ / | | | | | | | Command is the same as in d8d97acb | ||
* | | Add disable-proc to firefox-common | rusty-snake | 2021-10-23 |
| | | |||
* | | Remove 'none' from private-etc lines | rusty-snake | 2021-10-23 |
| | | |||
* | | add wrc to several profiles | smitsohu | 2021-10-23 |
| | | |||
* | | promote /run/udev/data to wrc | smitsohu | 2021-10-23 |
| | | |||
* | | Merge pull request #4600 from crocket/master | netblue30 | 2021-10-21 |
|\ \ | | | | | | | Add profiles for imv, retroarch, and torbrowser | ||
| * | | Add profiles for imv, retroarch, and torbrowser | crocket | 2021-10-17 |
| | | | | | | | | | | | | | | | imv, retroarch, and torbrowser are also added to firecfg.config | ||
* | | | Merge pull request #4612 from jose1711/blobwars_fix | netblue30 | 2021-10-21 |
|\ \ \ | | | | | | | | | blobwars: add path to game assets compatible with Arch | ||
| * | | | blobwars: add path to game assets compatible with Arch | Jose Riha | 2021-10-17 |
| | | | | |||
* | | | | Merge pull request #4613 from jose1711/joystick_support | netblue30 | 2021-10-21 |
|\ \ \ \ | | | | | | | | | | | Drop noinput for games with joystick/gamepad support | ||
| * | | | | Drop noinput for games with joystick/gamepad support | Jose Riha | 2021-10-17 |
| |/ / / | | | | | | | | | | | | | Fixes #4608 | ||
* / / / | Fix jumpnbump for Arch users | Jose Riha | 2021-10-19 |
|/ / / | | | | | | | | | | Fixes #4611. | ||
* | | | Merge pull request #4599 from rusty-snake/use-allow-tray | netblue30 | 2021-10-10 |
|\ \ \ | | | | | | | | | Use ?ALLOW_TRAY: (#4510) in profiles | ||
| * | | | Use ?ALLOW_TRAY: (#4510) in profiles | rusty-snake | 2021-10-09 |
| |/ / | |||
* / / | moving out of youtube, and some cleanup | netblue30 | 2021-10-09 |
|/ / | |||
* | | Merge pull request #4587 from kmk3/fix-vscodium | netblue30 | 2021-10-09 |
|\ \ | | | | | | | Fix vscodium | ||
| * | | Add codium.profile as a redirect to vscodium.profile | Kelvin M. Klann | 2021-10-04 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both base names are valid: $ grep '^NAME' /etc/os-release NAME="Artix Linux" $ pacman -Q vscodium-bin vscodium-bin 1.60.2-2 $ pacman -Qlq vscodium-bin | grep -v -e '/$' -e /resources/ | grep /bin/ /usr/bin/codium /usr/bin/vscodium /usr/share/vscodium-bin/bin/codium Note: The first two paths are symlinks to the third one. Fixes #3871. | ||
* | | | Merge pull request #4519 from rusty-snake/build-systems | netblue30 | 2021-10-09 |
|\ \ \ | | | | | | | | | Add profiles for build-systems (/package-managers) | ||
| * | | | Drop private-bin from build-systems | rusty-snake | 2021-09-11 |
| | | | |