| Commit message (Collapse) | Author | Age |
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
| |
claws-mail vcalendar-plugin uses libical to get current timezone. Libical needs access to file `/etc/timezone` to work properly.
|
|\
| |
| | |
email-common refactoring
|
| |
| |
| | |
Supporting 'level 1 hack' to allow opening hyperlinks with firefox needs xdg-open (besides bash,sh). Adding xdg-open to private-bin is not enough, as it pulls in a long list of other commands and that's pretty unmaintainable IMO. So I opted to drop private-bin here.
|
| |
| |
| | |
Suggested in review.
|
| |
| |
| | |
Pointed out in review that this comment was removed by mistake.
|
| |
| |
| | |
No longer used for claws-mail and sylpheed only.
|
| | |
|
| | |
|
|\ \
| | |
| | | |
New profiles: linuxqq/qq
|
| |\| |
|
| | |
| | |
| | | |
Now that #5569 is in we can remove the hardening comment.
|
| | |
| | |
| | | |
As suggested in review.
|
| | | |
|
| |/
|/| |
|
|\ \
| | |
| | | |
claws-mail and sylpheed D-Bus hardening
|
| |/
| |
| | |
Relates to https://github.com/netblue30/firejail/issues/5477.
|
|\ \
| | |
| | | |
electron hardening fixes
|
| | | |
|
| |/ |
|
|\ \
| | |
| | | |
A temporary fix to the bug caused by apparmor profiles stacking.
|
| | | |
|
|\ \ \
| |_|/
|/| | |
Add profile for Chatterino
|
| | |
| | |
| | |
| | |
| | |
| | | |
- Remove waf from private-bin
- Move optional commands to the top
- Reorder allow lua/python
|
| | |
| | |
| | | |
Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
|
| | | |
|
| | | |
|
| | | |
|
| | |
| | |
| | |
| | |
| | | |
I'll try the rest manually soon
Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
|
| | | |
|
|/ / |
|
| | |
|
| |
| |
| |
| |
| | |
* gpg-agent: sort private-bin (even though it's commented)
* gpg-agent: fix private-bin
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* audacity: networking updates
* audacity: fix allowing to run local server
* audacity: move comment so it's more visible
As suggested [in review](https://github.com/netblue30/firejail/pull/5540#pullrequestreview-1225225897).
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* audacity: support more config locations
* disable-programs.inc: add more audacity locations
* audacity: cover all XDG supported locations
* audacity: cover all XDG supported locations
* audacity: fix state dir entree in disable-programs.inc
* unbreak disable-programs.inc
Oh my, GitHub syntax highlighting support completely threw me off here. Thanks to @kmk3 for [saving the bacon](https://github.com/netblue30/firejail/pull/5538#pullrequestreview-1224604663)!
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
Add a profile for the Qt5 GUI to process Avidemux jobs.
Use a redirection to the avidemux3_qt5 profile to reuse translation
files. The application needs to create a network socket on localhost and
fails to run with protocol unix, so that entry in the default avidemux
profile needs to be extended.
|
| |
| |
| |
| |
| | |
Add a profile for the command-line interface of Avidemux, which
redirects to the existing avidemux profile.
|
| |
| |
| |
| |
| |
| | |
The Avidemux project stores configuration profile data in ~/.avidemux6,
while the package built by Packman-repositories for openSUSE patches it
to use ~/.avidemux3 at the moment (at least for Avidemux 2.8).
|
| |
| |
| |
| | |
Add a profile for the Qt5-GUI of Avidemux.
|
| |
| |
| |
| | |
Add the information that file contents will be overwritten on updates.
|
| |
| |
| |
| |
| |
| |
| | |
* clipit hardening
* clipit: fix hardening
* clipit: add xdotool lib to private-lib
|