aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
Commit message (Collapse)AuthorAge
* Merge pull request #4016 from pirate486743186/patch-5Libravatar Reiner Herrmann2021-03-02
|\ | | | | Create rtv-addons.inc
| * include rtv-addons.localLibravatar pirate4867431862021-03-02
| |
| * rm empty lineLibravatar pirate4867431862021-03-02
| |
| * Update rtv.profileLibravatar pirate4867431862021-03-02
| |
| * Rename etc/inc/rtv-addons.inc to etc/profile-m-z/rtv-addons.profileLibravatar pirate4867431862021-03-02
| |
| * added commented out rtv-addons.incLibravatar pirate4867431862021-03-01
| |
| * Delete rtv-addons.incLibravatar pirate4867431862021-03-01
| | | | | | moved to firejail/etc/inc
| * Update rtv-addons.incLibravatar pirate4867431862021-03-01
| | | | | | "ignore dbus-system none" not needed
| * Create rtv-addons.incLibravatar pirate4867431862021-02-27
| | | | | | To optionally allow rtv to launch links in external programs.
* | rename archiver-common.incLibravatar glitsj162021-03-02
| |
* | rename archiver-common.incLibravatar glitsj162021-03-02
| |
* | rename archiver-common.incLibravatar glitsj162021-03-02
| |
* | rename archiver-common.incLibravatar glitsj162021-03-02
| |
* | rename archiver-common.incLibravatar glitsj162021-03-02
| |
* | Merge pull request #4019 from glitsj16/protocolLibravatar glitsj162021-03-01
|\ \ | | | | | | fix protocol list
| * | drop useless ignoreLibravatar glitsj162021-03-01
| | |
| * | fix protocol listLibravatar glitsj162021-03-01
| |/ | | | | Now that https://github.com/netblue30/firejail/commit/5d88ee8957dc38a52c36f71b91c786dbec9d4ec9 introduces new protocol list behaviour, we need to add an ignore here due to the redirect to transmission-common.profile. See https://github.com/netblue30/firejail/issues/4017 for clarification.
* / fixesLibravatar rusty-snake2021-03-01
|/ | | | | | | | | | | | | - RELNOTS: protocol now accumulates - fix #3978 -- Android Studio: cannot create the directory Unresolved: > google-earth.profile has a 'noblacklist ${HOME}/.config/Google' too, > so we should consider to add additional blacklists for ~/.config/Google/*. - marker.profile: allow ${DOCUMENTS} - profile.template: add bluetooth protocol - profile.template: add DBus portal note - firejail-profile.txt: revert 17fe4b9e -- fix private=directory in man firejail-profile see https://github.com/netblue30/firejail/pull/3970#discussion_r574411745
* small fixes and updatesLibravatar netblue302021-02-26
|
* Fixup 0e31d020, torbrowser-launcher missing pathLibravatar Tad2021-02-24
|
* Merge pull request #4001 from kmk3/fix-signal-xdg-ignoreLibravatar netblue302021-02-24
|\ | | | | signal-desktop.profile: fix typo of disable-xdg.profile
| * signal-desktop.profile: fix typo of disable-xdg.profileLibravatar Kelvin M. Klann2021-02-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit f4f676745 ("Refactor electron.profile and electron based programs (#3807)"). This appears to be the only instance of that: $ grep -Fnr 'include-xdg' etc etc/profile-m-z/signal-desktop.profile:9:ignore include-xdg.inc Simply fixing the typo would enable xdg dirs for the first time since the aforementioned commit. But, as talked with @rusty-snake[1], since there has been no negative feedback, and since it's a whitelisting profile, just remove the affected line instead. Credits go to syntax highlighting on vim. [1]: https://github.com/netblue30/firejail/pull/4001
* | Merge pull request #4003 from Neo00001/masterLibravatar netblue302021-02-24
|\ \ | | | | | | Minor fixes for vmware
| * | Create vmware-workstation.profileLibravatar Neo000012021-02-23
| | |
| * | Create vmware-player.profileLibravatar Neo000012021-02-23
| | |
* | | update man profileLibravatar netblue302021-02-24
|/ /
* | hardening ssh, torLibravatar netblue302021-02-23
| |
* | Fix patch-util not having access to libdl.so (#4000)Libravatar zupatisc2021-02-22
|/ | | | | | | * Fix patch-util not having access to libdl.so * Update etc/profile-m-z/patch.profile Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
* adapt to apparmor being opt-in for torbrowser-launcherLibravatar glitsj162021-02-15
|
* make apparmor opt-inLibravatar glitsj162021-02-15
|
* Avoid doubled include globals.localLibravatar glitsj162021-02-15
| | | The final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Unless there's some kind of potential race condition that needs to be avoided by changing this 'logic' we should avoid doubled includes.
* Avoid doubled include globals.localLibravatar glitsj162021-02-15
| | | The final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Unless there's some kind of potential race condition that needs to be avoided by changing this 'logic' we should avoid doubled includes.
* fix tor browserLibravatar netblue302021-02-14
|
* add apparmor to torbrowser-launcherLibravatar glitsj162021-02-14
|
* Revert "etc: use ${DOCUMENTS} macro where appropriate"Libravatar Kelvin M. Klann2021-02-09
| | | | | | | | | | | | | | | This reverts commit 5df1f27c638c487dfd664ea3a0f756565e1e57bd. That commit breaks things, as pointed out by @rusty-snake[1]: > @kmk3 @glitsj16 The xdg macros are treated literally if they have sub > components (#2359): > > ``` > Error: "${DOCUMENTS}/KeePassXC" is an invalid filename: rejected character: "{" > ``` [1]: https://github.com/netblue30/firejail/commit/3fa2927c3c1c5cf583864746538ea791c1ba2dc4#commitcomment-46913219
* Merge pull request #3849 from bbhtt/emailLibravatar netblue302021-02-09
|\ | | | | Email part (2)
| * Some minor changesLibravatar bbhtt2021-01-09
| |
| * Add seccomp.block-secondary to email-common,mutt,neomutt; add mdwe to ↵Libravatar bbhtt2021-01-04
| | | | | | | | mutt,neomuut; some sorting
| * Add ipc-namespace, machine-idLibravatar bbhtt2020-12-31
| |
| * Add dbus-system none back to email-common.profileLibravatar bbhtt2020-12-31
| |
| * Some sorting per @kmk3Libravatar bbhtt2020-12-31
| |
| * Rearrange and fixes per commentsLibravatar bbhtt2020-12-31
| |
| * Improve whitelisting and dbus of Sylpheed and Claws-mailLibravatar bbhtt2020-12-31
| |
| * Fix python; add read-only to editors/cli browsers;re-add cache directoryLibravatar bbhtt2020-12-29
| |
| * Add whitelisting to mutt; improve geary, new profile for neomuttLibravatar bbhtt2020-12-28
| |
* | etc: use ${DOCUMENTS} macro where appropriateLibravatar Kelvin M. Klann2021-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, some paths are hard-coded: $ grep -Fnr '${HOME}/Documents' etc etc-fixes etc/profile-m-z/Mathematica.profile:19:mkdir ${HOME}/Documents/Wolfram Mathematica etc/profile-m-z/Mathematica.profile:22:whitelist ${HOME}/Documents/Wolfram Mathematica etc/profile-a-l/keepassxc.profile:34:# If you do so, you MUST store your database under ${HOME}/Documents/KeePassXC/foo.kdbx etc/profile-a-l/keepassxc.profile:35:#mkdir ${HOME}/Documents/KeePassXC etc/profile-a-l/keepassxc.profile:36:#whitelist ${HOME}/Documents/KeePassXC Commands used to search and replace: $ find etc etc-fixes/ -type f -exec \ sed -i.bak -e 's|\${HOME}/Documents|${DOCUMENTS}|' '{}' + Related to that, the (lack of) usage of ${DOWNLOADS} has been recently fixed on commit deae31301 ("use ${DOWNLOADS} in lutris.profile (#3955)"). With the above change, all macros other than ${DOCUMENTS} seem to be already used appropriately: $ grep -Fnr '${HOME}/Desktop' etc etc-fixes $ grep -Fnr '${HOME}/Downloads' etc etc-fixes $ grep -Fnr '${HOME}/Music' etc etc-fixes $ grep -Fnr '${HOME}/Pictures' etc etc-fixes $ grep -Fnr '${HOME}/Videos' etc etc-fixes See src/firejail/macros.c for details.
* | archivers: wrap commentsLibravatar Kelvin M. Klann2021-02-08
| |
* | archivers: move archiver-common.inc include to the bottomLibravatar Kelvin M. Klann2021-02-08
| | | | | | | | | | | | | | And mark it as a redirect profile. This is done so when including other *-common.inc profiles, such as firefox-common.profile.
* | fixup! Add profile for vmware-viewLibravatar rusty-snake2021-02-04
| | | | | | | | damn, forgotten to add
* | Update spectacle.profileLibravatar Neo000012021-02-04
| |