aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
Commit message (Collapse)AuthorAge
* Merge branch 'master' into browsersLibravatar Reiner Herrmann2020-12-29
|\
| * Merge pull request #3847 from bbhtt/small_fixesLibravatar Reiner Herrmann2020-12-29
| |\ | | | | | | Small fixes
| | * Put a comment about dbus rules and comment themLibravatar bbhtt2020-12-29
| | |
| | * Add dbus rulesLibravatar bbhtt2020-12-28
| | |
| | * Add whitelists, remove wrong cache whitelist, add dbus rules, apparmorLibravatar bbhtt2020-12-28
| | |
| * | profiles: add redirect from matrix-mirage to mirage (#3854)Libravatar Reiner Herrmann2020-12-29
| |/
* | On Debian/Ubunbtu microsoft-edge redirects to dev-channel right nowLibravatar bbhtt2020-12-29
| |
* | Add profiles for MS Edge dev build for Linux and LibrewolfLibravatar bbhtt2020-12-28
|/
* remove trailing whitespacesLibravatar rusty-snake2020-12-21
|
* move whlist /usr/share/chromium from chomium-comm…Libravatar rusty-snake2020-12-21
| | | | | | | | …on to chromium, remove the nowhlist from min and its whlist from riot-web. TODO: remove the 'ignore whitelist /usr/share/chomium' from the most profiles with it.
* new profile: servoLibravatar rusty-snake2020-12-21
|
* Refactor electron.profile and electron based programs (#3807)Libravatar rusty-snake2020-12-17
| | | | | | | | | | | | | | | | | * Refactor electron.profile and electron based programs (1) * Refactor electron.profile and electron based programs (2) * Refactor electron.profile and electron based programs (3) * Refactor electron.profile and electron based programs (4) * Refactor electron.profile and electron based programs (5) * Refactor electron.profile and electron based programs (6) * Refactor electron.profile and electron based programs (7) * Refactor electron.profile and electron based programs (8)
* Archiver fixes - drop private-bin (#3832)Libravatar glitsj162020-12-16
| | | | | | | | | | | | | | | * drop private-bin * drop private-bin * drop private-bin * drop private-bin * drop private-bin * disable private-lib in tar.profile Removing private-bin caused a test to fail - see discussion in https://github.com/netblue30/firejail/pull/3832. Thanks to @reinerh for explaining why I broke things!
* New profiles for alacarte,tootle,photoflare (#3816)Libravatar kortewegdevries2020-12-16
| | | | | | | * New profiles for alacarte,tootle,photoflare * Fix dbus Co-authored-by: kortewegdevries <kortewegdevries@protonmail.ch>
* archiver fixes (#3830)Libravatar glitsj162020-12-16
| | | | | * fix gzip * fix tar
* Refactor archivers ii (#3827)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | * harden 7z.profile * harden atool.profile * harden bsdtar.profile * harden cpio.profile * harden gzip.profile * harden tar.profile * harden unrar.profile * harden unzip.profile * harden xzdec.profile * harden zstd.profile
* Refactor archivers (#3820)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create archiver-common.inc * add apparmor to archiver-common.inc * refactor 7z.profile * refactor ar.profile * refactor atool.profile * refactor bsdtar.profile * refactor cpio.profile * refactor gzip.profile * refactor tar.profile * refactor unrar.profile * refactor unzip.profile * refactor xzdec.profile * refactor zstd.profile * rewording * blacklist ${RUNUSER} in archiver-common.inc Thanks to @rusty-snake for suggesting this. * drop non-sensical ${RUNUSER}/wayland-* blacklisting in archiver-common.inc See discussion in https://github.com/netblue30/firejail/pull/3820#discussion_r543523343
* Runuser fixes (#3826)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting
* rename softmaker-common.inc to softmaker-common.profile (#3825)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | * Rename etc/inc/softmaker-common.inc to etc/profile-m-z/softmaker-common.profile As per suggestion by @rusty-snake in https://github.com/netblue30/firejail/pull/3819#issuecomment-745244982 * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change
* re-enable nogroups with a comment in zoom.profile (#3824)Libravatar glitsj162020-12-15
| | | Better fix for #3711, see discussion there.
* rename whitelist-players.inc to whitelist-player-common.inc (#3819)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | * Update and rename whitelist-players.inc to whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc
* Fix sound in games using FMOD (#3821)Libravatar fenuks2020-12-15
| | | Co-authored-by: fenuks <fenuks>
* refactor playonlinux as wine redirect (#3811)Libravatar rusty-snake2020-12-12
|
* integrate relevant options into server.profile (#3808)Libravatar glitsj162020-12-11
| | | | | * integrate relevant options into server.profile * relax mdwe and dbus-system in server.profile
* fix audio/video play in yelp.profileLibravatar glitsj162020-12-10
|
* re-order private-etc in telegram.profileLibravatar glitsj162020-12-10
|
* fix private-etc in telegram.profileLibravatar glitsj162020-12-10
| | | Fixes #3805.
* minor hardenings and commentsLibravatar glitsj162020-12-10
|
* Update yelp.profile (#3803)Libravatar glitsj162020-12-09
|
* harden sysprof (#3802)Libravatar glitsj162020-12-09
|
* fixesLibravatar rusty-snake2020-12-09
| | | | | | - hopefully fix #3795 finally - fix README.md codeblock - blacklist ${HOME}/.texlive20*
* fix #3795 -- teams chrootLibravatar rusty-snake2020-12-07
|
* profile fixes from issuesLibravatar rusty-snake2020-12-07
| | | | closes #3786; closes #3776
* xfce4-screenshooter: comment mdweLibravatar rusty-snake2020-12-06
|
* Small fixesLibravatar Tad2020-11-29
| | | | | | | | | - gimp: allow mbind syscall. no start on Fedora 33 without - minetest: disable private-cache. without persistent cache connecting to servers can take many minutes - supertuxkart: allow bluetooth protocol. stk can directly connect/pair to WiiMote controllers - supertuxkart: comment private-dev to allow controller use - profiles: unify controller support comments - firecfg: comment evolution with a note, and add a note to epiphany #3647 + #2995
* fixes; close #3775Libravatar rusty-snake2020-11-26
|
* make ${HOME}/.local/lib read-onlyLibravatar rusty-snake2020-11-24
|
* disable dbus in QMediathekView (#3771)Libravatar glitsj162020-11-24
|
* Add a profile for LutrisLibravatar Tad2020-11-23
| | | | | | | | - Lutris isn't added to firecfg just yet, needs more testing - aria2c profile has a comment regarding Lutris/Winetricks, but it shouldn't matter since it can't be nested - Add commented wusc to wine.profile - Add vulkan and zenity to wusc.inc
* disable mdweLibravatar glitsj162020-11-23
|
* harden xfce4-mixer.profileLibravatar glitsj162020-11-23
|
* Fix typo in thunderbird.profileLibravatar Kristóf Marussy2020-11-22
| | | | | We must ignore include `whitelist-runuser-common.profile`, because it breaks Enigmail (TB 68) and GnuPG smartcard (TB 78) support.
* minetest: Enable rm (#3764)Libravatar Liorst42020-11-21
| | | rm is needed to uninstall mods and delete game saves (worlds).
* various profilesLibravatar rusty-snake2020-11-20
| | | | | | - disable-common: read-only ${HOME}/.zfunc - fix #3761 -- w3m with w3m-img installed does not display images when on virtual console/framebuffer - yelp can be used to display manpages
* Add profile for straw-viewer (#3742)Libravatar kortewegdevries2020-11-18
| | | | | * Add profile for straw-viewer * Remove blacklist, fixes
* from my overridesLibravatar rusty-snake2020-11-16
| | | | | | | | - add seccomp.block-secondary to a lot profiles - add wruc to firefox-common and ignore it in TB and firefox-common-addons - harden dia, gnome-keyring, libreoffice, megaglest, pngquant, ghostwriter, rhythmbox, sqlitebrowser
* fix dbusLibravatar glitsj162020-11-12
| | | At least on Ubuntu 16.04 LTS we need an additional own.
* minetest.profile: whitelist /usr/share/games/minetest (#3740)Libravatar Davide Beatrici2020-11-11
| | | It's the path to the game's data in the official Debian package.
* add alsa/group to private-etcLibravatar glitsj162020-11-10
| | | fix for #3737.
* fixes, closes, enhances, improvements, and so onLibravatar rusty-snake2020-11-09
| | | | | | | | | | | | | | | | | | | - .github/ISSUE_TEMPLATE/bug_report.md: get ride off spanish, french, ... error messages - etc/inc/firefox-common-addons.inc: support ff2mpv - etc/profile-a-l/gimp.profile: note about xsane - etc/profile-m-z/min.profile: prettify - etc/profile-m-z/mpsyt.profile: fix, add lua - etc/profile-m-z/qbittorrent.profile: add note for tray-icons; this will get a better note once I investigated and audited all the D-Bus tray stuff. - etc/profile-m-z/transmission-daemon.profile: fix, add protocol packet close #3686 - mps-youtube needs lua close #3701 - Firefox native messaging regression in 0.9.62.4 -> 0.9.64rc1 close #3636 - transmission-daemon fills log with error close #3640 - Gimp - add note how to enable scanning (xsane) close #3707 - qBittorrent tray icon missing from notification panel when running it with firejail