aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
Commit message (Collapse)AuthorAge
* Merge branch 'master' into revert-allow-deny-etcLibravatar netblue302021-07-25
|\
| * new profilesLibravatar rusty-snake2021-07-20
| |
* | Revert "move whitelist/blacklist to allow/deny"Libravatar Kelvin M. Klann2021-07-18
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit fe0f975f447d59977d90c3226cc8c623b31b20b3. Note: This only reverts the changes from etc. The 4 aliases introduced on commit 45f2ba544 are mere, well, aliases. That is, they fail to address the different usability problems discussed on [#3447][3447] and in fact only make things more confusing (as has already been mentioned on [this][4379] and later comments). The main reason is that the aliases do not meaningfully map to the original commands. For example, the commands from each pair below seem like they would do the exact same thing: * `allow` and `nodeny` * `deny` and `noallow` Additionally, if these aliases are not the final commands, but only a test/work-in-progress, then keeping the wide-scale search/replace changes made on commit fe0f975f4 would only serve to cause confusion, as users of firejail-git, contributors and downstream projects might start changing the commands used on their profiles, only to later have to change them again, potentially to completely different commands. The sooner this is undone the better, as (besides the above reasons) the more profile changes there are between the original commit and the revert, the harder it is to e.g.: `git diff` versions of files across the following revision ranges: before the commit, after the commit but before the revert and after the revert. Note: This is still the case even if a commit is [ignored by `git blame`][4390]. So let us revert fe0f975f4 and only reapply similar large-scale changes once we have discussed and settled on better commands. How the revert was applied: Despite using the auto-generated message from `git revert`, to ensure correctness and to avoid conflicts the changes were reverted in different steps: Firstly, revert the files which can be safely reverted directly ("filestorevert"): # Find out which files have been changed on fe0f975f44, but have not # been changed afterwards and list them on "filestorevert" git show --pretty='' --name-only fe0f975f44 -- etc | LC_ALL=C sort >allfiles git diff --name-only fe0f975f44..master -- etc | LC_ALL=C sort >filestoignore comm -2 -3 allfiles filestoignore >filestorevert # Note: There are 3 extra files on filestoignore because they were # added after commit fe0f975f44 wc -l allfiles filestoignore filestorevert | head -n 3 # 797 allfiles # 8 filestoignore # 792 filestorevert # Automatically revert files in "filestorevert" # See https://stackoverflow.com/a/23401018/10095231 tr '\n' '\000' <filestorevert | xargs -0 git show fe0f975f44 -- | git apply --reverse printf 'Total files reverted:\n' git diff --name-only | wc -l # 792 Secondly, do some search/replace on the rest: tr '\n' '\000' <filestoignore | xargs -0 sed -i.bak \ -e 's/allow /whitelist /' -e 's/noallow /nowhitelist /' \ -e 's/deny /blacklist /' -e 's/nodeny /noblacklist /' \ -e 's/deny-nolog /blacklist-nolog /' find etc -name '*.bak' -print0 | xargs -0 rm Thirdly, verify the result. The following command shows the difference between all the changes in etc from before fe0f975f44 and this commit (inclusive): git diff fe0f975f44~1 -- etc From the output, it looks like all alias changes are fully reverted and that the other changes to etc (from after fe0f975f44) remain, so the revert seems to be done correctly. [3447]: https://github.com/netblue30/firejail/issues/3447 [4379]: https://github.com/netblue30/firejail/issues/4379#issuecomment-876460222 [4390]: https://github.com/netblue30/firejail/issues/4390
* Add MS Edge Beta profileLibravatar Fred Barclay2021-07-18
| | | | | | | | | | Profile for Dev channel already exists. Profile for "standard" Edge does as well but is a redirect to Dev profile See b9b65f6ca2d9e078cdc8d5de290193c476711e61 Fixes #4409
* move whitelist/blacklist to allow/denyLibravatar netblue302021-07-05
|
* Fix #4377 -- telegram-desktop 2.8.2 not starting using firejail-gitLibravatar rusty-snake2021-06-28
|
* Update rtv-addons.profileLibravatar pirate4867431862021-06-22
|
* commentsLibravatar pirate4867431862021-06-22
|
* correctionsLibravatar pirate4867431862021-06-22
|
* Fix #4363 -- minecraft-launcher not running with firejailLibravatar rusty-snake2021-06-19
|
* profiles: add profile for tin news reader (#4356)Libravatar Reiner Herrmann2021-06-12
|
* mcomix profile creation (#4338)Libravatar pirate4867431862021-06-10
| | | | | | | | | | | * mcomix * Create mcomix.profile * tightening * fixes * comment
* Merge pull request #4348 from NetSysFire/patch-1Libravatar Reiner Herrmann2021-06-08
|\ | | | | Update weechat.profile
| * Update etc/profile-m-z/weechat.profile Libravatar NetSysFire2021-06-08
| | | | | | | | | | remove whitespace to comply with the profile template Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * Update weechat.profileLibravatar NetSysFire2021-06-08
| | | | | | weechat needs access to `/usr/share/weechat` if you have any global scripts installed. The directory is empty by default, so there is no additional risk here.
* | Merge pull request #4347 from pirate486743186/w3mLibravatar Reiner Herrmann2021-06-08
|\ \ | | | | | | Update w3m.profile
| * | rm disable-write-mnt.incLibravatar pirate4867431862021-06-07
| | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | Update w3m.profileLibravatar pirate4867431862021-06-07
| |/
* / Create qcomicbook.profileLibravatar pirate4867431862021-06-06
|/
* fix tuxguitarLibravatar smitsohu2021-06-06
|
* tightening zathura profile (#4343)Libravatar pirate4867431862021-06-05
| | | | | * tightening zathura profile * sort
* Fix seahorse-adventures + CILibravatar rusty-snake2021-06-04
|
* some profile fixes for Debian 10Libravatar netblue302021-06-03
|
* Fix slack.profile (fixes #4329)Libravatar rusty-snake2021-06-03
|
* Correct typo in telegram-desktop profileLibravatar Ivan Reshetnikov2021-06-03
|
* reorganizing links browsers (#4320)Libravatar pirate4867431862021-05-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create links-common.profile * Update links.profile * Create links2.profile * Update links.profile * Update links2.profile * Update elinks.profile * Update elinks.profile * links2 * Update firecfg.config * Update xlinks.profile * .xlinks * add dbus and whitelist-usr-share-common * .xlinks doesn't exist * revert * Create xlinks2 * xlinks2 * Update xlinks2 * Update xlinks.profile * no wayland * no wayland * doesn't use /tmp/.X11-unix * doesn't use /tmp/.X11-unix * noblacklist /tmp/.X11-unix * noblacklist /tmp/.X11-unix
* Restrict /usr/libexecLibravatar rusty-snake2021-05-29
|
* reorganizing youtube-viewers (#4128)Libravatar pirate4867431862021-05-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create youtube-viewers-common.profile * reorganising youtube viewers * rm globals * reorganise youtube viewers * adding pipe-viewer * adding gtk-pipe-viewer * xterm and youtube-dl cache * sort * Update youtube-viewers-common.profile * quiet * quiet * quiet * Update firecfg.config * rm vlc * rm invalid binary * noinput * rm whitelist-runuser-common.inc * rm whitelist-runuser-common.inc * rm whitelist-runuser-common.inc * whitelist-runuser-common.inc
* readme, etcLibravatar netblue302021-05-18
|
* Follow-up for #4165 (#4271)Libravatar glitsj162021-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * fix noroot comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630981737). * fix dbus-user comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630982527). * fix private-dev comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630980029). * fix private-etc comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630979698). * move writable-var comment cfr. profile.template
* Add noinput to browsers as wellLibravatar rusty-snake2021-05-13
| | | | Profiles with private-dev behind BROWSER_DISABLE_U2F were missed by 0cee0ba5.
* Node.js stack refactoring (#4255)Libravatar glitsj162021-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create node.profile * Create node-gyp.profile * refactor npm as redirect * Create npx.profile * Create nvm.profile * Create semver.profile * refactor yarn as redirect * collect node.js stack configuration in common profile * add ~/.nvm to node section * account for node-gyp python dependency * read-only ~/.nvm for node.js stack * blacklist ~/.nvm for node.js stack * move env var comment cfr. profile.template * Delete node-gyp.profile node-gyp is a shell script with a node shebang. We've got that covered via node.profile. * Delete npx.profile npx is a shell script with a node shebang. We've got that covered via node.profile. * Delete semver.profile semver is a shell script that calls node. We've got that covered via node.profile. * add node and nvm to new profiles section
* revert comment changes from #4257 (#4258)Libravatar glitsj162021-05-07
| | | | | | | | | * revert comment changes from #4257 * revert comment changes from #4257 * revert comment changes from #4257 * revert comment changes from #4257
* read-write fixes (#4257)Libravatar glitsj162021-05-07
| | | | | | | | | * [comment] use 'read-write' instead of 'ignore read-only' * [comment] use 'read-write' instead of 'ignore read-only' * [comment] use 'read-write' instead of 'ignore read-only' * [comment] use 'read-write' instead of 'ignore read-only'
* pluma broken with memory-deny-write-executeLibravatar pirate4867431862021-05-07
|
* some wireshark hardening (#4245)Libravatar glitsj162021-05-05
| | | | | * restrict D-Bus access in wireshark * add private-cache to wireshark
* Merge pull request #4242 from aminvakil/wireshark_seccomp_disableLibravatar Reiner Herrmann2021-05-05
|\ | | | | Disable seccomp in wireshark profile
| * Disable seccomp in wireshark profileLibravatar Amin Vakil2021-05-05
| |
* | Stying fixes (mrrescue.profile, pingus.profile, profile.template)Libravatar rusty-snake2021-05-05
| |
* | steam.profile: Allow input devicesLibravatar rusty-snake2021-05-05
| |
* | Add noinput to all profiles with private-devLibravatar rusty-snake2021-05-05
|/
* Merge pull request #4230 from Kishore96in/neochat_profileLibravatar netblue302021-05-04
|\ | | | | New profile for neochat
| * Add back the kwallet dbus stuff.Libravatar Kishore Gopalakrishnan2021-05-04
| | | | | | | | | | The dev did say it may be required on some platforms. He didn't sound completely sure.
| * Move the 1793 workaround stuff to a separate file.Libravatar Kishore Gopalakrishnan2021-05-04
| |
| * Remove unnecessary command.Libravatar Kishore Gopalakrishnan2021-05-03
| | | | | | | | Seems to detect currently running instance even without that.
| * Remove kwallet dbus permissionLibravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | Confirmed on neochat Matrix group that it is not required.
| * Add machine-idLibravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | Does not break dbus, despite the warning in the template.
| * Add command suggested by rusty-snakeLibravatar Kishore Gopalakrishnan2021-05-02
| |
| * Leave the kwallet dbus stuff commented for now.Libravatar Kishore Gopalakrishnan2021-05-02
| |
| * Remove unnecessary permission.Libravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | Signing in and so on works without this, so I'm not sure why it was enabled in the flatpak.
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-02 14:18:29 +0000