aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
Commit message (Collapse)AuthorAge
* new profile: agetpkg (#3887)Libravatar glitsj162021-01-13
| | | | | * Create agetpkg.profile * new profile: agetpkg
* add new profiles: lsar & unar (ar redirects) (#3886)Libravatar glitsj162021-01-13
| | | | | | | * Create lsar.profile * Create unar.profile * new profiles lsar & unar
* Improvements to balsa,fractal,gajim,trojita (#3791)Libravatar bbhtt2021-01-11
| | | | | | | | | | | | | * Improvements to balsa,fractal,gajim,trojita * sort * Add gpg plugin support to gajim,remove notifications dbus from trojita * Add dbus policy from flatpak per @rusty-snake * Add python* to private-bin; remove some dbus Co-authored-by: kortewegdevries <kortewegdevries@protonmail.ch>
* discord-common.profile: Fix audio support (#3880)Libravatar Nikos Chantziaras2021-01-10
| | | Discord needs PulseAudio. Without it, it's unable to play any audio.
* evince.profile: optionally allow bookmark/metadata accessLibravatar Samtinel2021-01-09
| | | | | | | bookmarks are saved unter $HOME/.local/share/gvfs-metadata since evince is the primary pdf reader, a firejailed evince can't read or write those this commit adds instructions to enable metadata writing and reading
* electron redirect fixes (#3875)Libravatar glitsj162021-01-07
| | | | | * drop doubled netfilter in atom.profile * drop doubled disable-mnt in tutanota-desktop.profile
* harden liferea (#3873)Libravatar glitsj162021-01-06
| | | | | | | * harden liferea * dbus fixes On closer investigation it seems wiser to tighten D-Bus filtering as Liferea implements stuff via plugins that are disabled by default.
* fix preview in apostropheLibravatar rusty-snake2021-01-05
|
* fix #3859 (#3863)Libravatar glitsj162021-01-01
| | | | | | | * fix #3859 * fix #3859 * fix #3859
* Merge pull request #3760 from kmk3/fix-keepassxcLibravatar netblue302020-12-30
|\ | | | | keepassxc.profile: Fix hang due to seccomp
| * keepassxc.profile: Fix hang due to seccompLibravatar Kelvin M. Klann2020-11-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the current profile, keepassxc hangs on startup, before showing the main window: $ uname -r -m 5.9.1-artix1-1 x86_64 $ firejail --version | head -n 1 firejail version 0.9.64 $ firejail --quiet keepassxc --version KeePassXC 2.6.2 $ firejail --quiet keepassxc # (nothing happens) ^C Seccomp debugging as explained on etc/templates/syscalls.txt: $ sudo grep -Eo 'keepassxc.* syscall=[0-9]+' /var/log/messages.log | tail -n 1 keepassxc" exe="/usr/bin/keepassxc" sig=31 arch=c000003e syscall=303 $ firejail --debug-syscalls | grep 303 303 - name_to_handle_at So allow the name_to_handle_at syscall. Relates to #3549.
* | Merge branch 'master' into browsersLibravatar Reiner Herrmann2020-12-29
|\ \
| * \ Merge pull request #3847 from bbhtt/small_fixesLibravatar Reiner Herrmann2020-12-29
| |\ \ | | | | | | | | Small fixes
| | * | Add quietLibravatar bbhtt2020-12-28
| | | |
| | * | Calls each program from /bin to populate listLibravatar bbhtt2020-12-28
| | | |
| | * | Add secret storage dbusLibravatar bbhtt2020-12-28
| | | |
| * | | Update keepassxc.profile dbus commentsLibravatar rusty-snake2020-12-29
| |/ / | | | | | | | | | | | | - split notifications and tray - fix tray policy
* / / Add profiles for MS Edge dev build for Linux and LibrewolfLibravatar bbhtt2020-12-28
|/ /
* | remove trailing whitespacesLibravatar rusty-snake2020-12-21
| |
* | brave: enable wruc and wuscLibravatar rusty-snake2020-12-21
| |
* | move whlist /usr/share/chromium from chomium-comm…Libravatar rusty-snake2020-12-21
| | | | | | | | | | | | | | | | …on to chromium, remove the nowhlist from min and its whlist from riot-web. TODO: remove the 'ignore whitelist /usr/share/chomium' from the most profiles with it.
* | Refactor electron.profile and electron based programs (#3807)Libravatar rusty-snake2020-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Refactor electron.profile and electron based programs (1) * Refactor electron.profile and electron based programs (2) * Refactor electron.profile and electron based programs (3) * Refactor electron.profile and electron based programs (4) * Refactor electron.profile and electron based programs (5) * Refactor electron.profile and electron based programs (6) * Refactor electron.profile and electron based programs (7) * Refactor electron.profile and electron based programs (8)
* | Archiver fixes - drop private-bin (#3832)Libravatar glitsj162020-12-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * drop private-bin * drop private-bin * drop private-bin * drop private-bin * drop private-bin * disable private-lib in tar.profile Removing private-bin caused a test to fail - see discussion in https://github.com/netblue30/firejail/pull/3832. Thanks to @reinerh for explaining why I broke things!
* | New profiles for alacarte,tootle,photoflare (#3816)Libravatar kortewegdevries2020-12-16
| | | | | | | | | | | | | | * New profiles for alacarte,tootle,photoflare * Fix dbus Co-authored-by: kortewegdevries <kortewegdevries@protonmail.ch>
* | archiver fixes (#3830)Libravatar glitsj162020-12-16
| | | | | | | | | | * fix gzip * fix tar
* | Refactor archivers ii (#3827)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * harden 7z.profile * harden atool.profile * harden bsdtar.profile * harden cpio.profile * harden gzip.profile * harden tar.profile * harden unrar.profile * harden unzip.profile * harden xzdec.profile * harden zstd.profile
* | Refactor archivers (#3820)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create archiver-common.inc * add apparmor to archiver-common.inc * refactor 7z.profile * refactor ar.profile * refactor atool.profile * refactor bsdtar.profile * refactor cpio.profile * refactor gzip.profile * refactor tar.profile * refactor unrar.profile * refactor unzip.profile * refactor xzdec.profile * refactor zstd.profile * rewording * blacklist ${RUNUSER} in archiver-common.inc Thanks to @rusty-snake for suggesting this. * drop non-sensical ${RUNUSER}/wayland-* blacklisting in archiver-common.inc See discussion in https://github.com/netblue30/firejail/pull/3820#discussion_r543523343
* | Runuser fixes (#3826)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting
* | rename softmaker-common.inc to softmaker-common.profile (#3825)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Rename etc/inc/softmaker-common.inc to etc/profile-m-z/softmaker-common.profile As per suggestion by @rusty-snake in https://github.com/netblue30/firejail/pull/3819#issuecomment-745244982 * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change
* | rename whitelist-players.inc to whitelist-player-common.inc (#3819)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update and rename whitelist-players.inc to whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc
* | drill profileLibravatar netblue302020-12-12
| |
* | curl HSTS cache support (#3813)Libravatar glitsj162020-12-12
| | | | | | | | | | * add curl HSTS support * add HSTS support
* | Add profile for authenticator-rs, improve falkon (#3747)Libravatar kortewegdevries2020-12-07
| | | | | | | | | | | | | | | | | | * Add profile for authenticator-rs, improve falkon, balsa * Fix * Add private-tmp to falkon * Revert balsa
* | Add a profile for dolphin-emuLibravatar Tad2020-11-29
| | | | | | | | | | Games folder must be whitelisted in a dolphin-emu.local Its private-etc can likely be shortened
* | Small fixesLibravatar Tad2020-11-29
| | | | | | | | | | | | | | | | | | - gimp: allow mbind syscall. no start on Fedora 33 without - minetest: disable private-cache. without persistent cache connecting to servers can take many minutes - supertuxkart: allow bluetooth protocol. stk can directly connect/pair to WiiMote controllers - supertuxkart: comment private-dev to allow controller use - profiles: unify controller support comments - firecfg: comment evolution with a note, and add a note to epiphany #3647 + #2995
* | Fix building C# projects in Godot (#3778)Libravatar RandomVoid2020-11-28
| | | | | | | | | | | | | | | | | | Since version 3.0 Godot is supporting C# as a language for writing scripts. The C# solution can be built directly in Godot editor using MSBuild, which requires access to directory /etc/mono. This directory contains configuration of Mono enviroment. If MSBuild don't have access to this directory, it's not able to determine location of DLL files and it's throwing System.DllNotFoundException at beginning of the build process.
* | fix #3777 -- lyx profile seems to be brokenLibravatar rusty-snake2020-11-27
| |
* | fixes; close #3775Libravatar rusty-snake2020-11-26
| |
* | add gnome-shell search-provider file to firefox.profile (#3768)Libravatar glitsj162020-11-24
| | | | | | | | | | | | | | | | | | * allow access to gnome-shell search-provider in firefox.profile Firefox has gnome-shell search-provider support since version 78: - https://bugzilla.mozilla.org/show_bug.cgi?id=1239694 - https://mastransky.wordpress.com/2020/09/25/firefox-gnome-shell-search-provider/ * add dbus filter for gnome-shell search-provider
* | Add a profile for LutrisLibravatar Tad2020-11-23
| | | | | | | | | | | | | | | | - Lutris isn't added to firecfg just yet, needs more testing - aria2c profile has a comment regarding Lutris/Winetricks, but it shouldn't matter since it can't be nested - Add commented wusc to wine.profile - Add vulkan and zenity to wusc.inc
* | drop newline after mdwe in gnome-system-log.profileLibravatar glitsj162020-11-23
| |
* | drop newline after mdwe in geekbench.profileLibravatar glitsj162020-11-23
| |
* | drop newline after mdwe in devilspie.profileLibravatar glitsj162020-11-23
| |
* | drop newline after mdwe in devhelp.profileLibravatar glitsj162020-11-23
| |
* | ordering wruc correctly in default.profileLibravatar glitsj162020-11-23
| |
* | Update default.profileLibravatar glitsj162020-11-23
| | | | | | Nitpick wording + added a commented disable-shell.inc
* | drop newline in cower.profileLibravatar glitsj162020-11-23
| |
* | drop deprecated pathLibravatar glitsj162020-11-22
| | | | | | Cfr. https://github.com/netblue30/firejail/pull/3517#issuecomment-664715880: element-desktop no longer uses ${HOME}/.config/Element (Riot).
* | Add profile for straw-viewer (#3742)Libravatar kortewegdevries2020-11-18
|/ | | | | * Add profile for straw-viewer * Remove blacklist, fixes
* Merge pull request #3757 from rusty-snake/overrides2upstreamLibravatar rusty-snake2020-11-17
|\ | | | | from my overrides
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-03 17:01:36 +0000