Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Update youtube-dl-gui.profile | Neo00001 | 2021-03-11 |
| | |||
* | Create youtube-dl-gui.profile | Neo00001 | 2021-03-11 |
| | |||
* | more jailtest | netblue30 | 2021-03-08 |
| | |||
* | profile fixes | rusty-snake | 2021-03-08 |
| | | | | | | | | | | ghostwriter.profile: 'dbus-user none' freeze ghostwriter when clicking on open file, 'dbus-user filter' works. This is the same as in d0004b84 for openshot looks like a QT problem. marker: allow python | ||
* | Fix "Could not create AF_NETLINK socket" | Nicola Davide Mannarelli | 2021-03-05 |
| | |||
* | Merge pull request #3997 from nidamanx/patch-2 | netblue30 | 2021-03-05 |
|\ | | | | | Create nextcloud-desktop.profile | ||
| * | Update etc/profile-m-z/nextcloud.profile | Nicola Davide Mannarelli | 2021-02-22 |
| | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> | ||
| * | Change as nexcloud.profile alias | Nicola Davide Mannarelli | 2021-02-22 |
| | | |||
| * | Add nextcloud | Nicola Davide Mannarelli | 2021-02-22 |
| | | |||
| * | Add nextcloud-desktop | Nicola Davide Mannarelli | 2021-02-20 |
| | | |||
| * | Fully working profile | Nicola Davide Mannarelli | 2021-02-20 |
| | | | | | | | | This seems the only way to have a fully working profile Are there some security issues? | ||
| * | Deleted three noblacklist and one dbus-user.own | Nicola Davide Mannarelli | 2021-02-19 |
| | | |||
| * | Add more dbus params | Nicola Davide Mannarelli | 2021-02-19 |
| | | |||
| * | Update nextcloud-desktop.profile | Nicola Davide Mannarelli | 2021-02-18 |
| | | | | | | Added apparmor, dbus-system none | ||
| * | Add more parameters and optional ${DOCUMENTS} | Nicola Davide Mannarelli | 2021-02-18 |
| | | |||
| * | Add machine-id | Nicola Davide Mannarelli | 2021-02-18 |
| | | |||
| * | Update nextcloud-desktop.profile | Nicola Davide Mannarelli | 2021-02-18 |
| | | |||
| * | Create nextcloud-desktop.profile | Nicola Davide Mannarelli | 2021-02-18 |
| | | |||
* | | Fix #4044 -- skypeforlinux fails to start… | rusty-snake | 2021-03-04 |
| | | | | | | … on Arch Linux | ||
* | | Merge pull request #4016 from pirate486743186/patch-5 | Reiner Herrmann | 2021-03-02 |
|\ \ | | | | | | | Create rtv-addons.inc | ||
| * | | include rtv-addons.local | pirate486743186 | 2021-03-02 |
| | | | |||
| * | | rm empty line | pirate486743186 | 2021-03-02 |
| | | | |||
| * | | Update rtv.profile | pirate486743186 | 2021-03-02 |
| | | | |||
| * | | Rename etc/inc/rtv-addons.inc to etc/profile-m-z/rtv-addons.profile | pirate486743186 | 2021-03-02 |
| | | | |||
| * | | added commented out rtv-addons.inc | pirate486743186 | 2021-03-01 |
| | | | |||
| * | | Delete rtv-addons.inc | pirate486743186 | 2021-03-01 |
| | | | | | | | | | moved to firejail/etc/inc | ||
| * | | Update rtv-addons.inc | pirate486743186 | 2021-03-01 |
| | | | | | | | | | "ignore dbus-system none" not needed | ||
| * | | Create rtv-addons.inc | pirate486743186 | 2021-02-27 |
| | | | | | | | | | To optionally allow rtv to launch links in external programs. | ||
* | | | rename archiver-common.inc | glitsj16 | 2021-03-02 |
| | | | |||
* | | | rename archiver-common.inc | glitsj16 | 2021-03-02 |
| | | | |||
* | | | rename archiver-common.inc | glitsj16 | 2021-03-02 |
| | | | |||
* | | | rename archiver-common.inc | glitsj16 | 2021-03-02 |
| | | | |||
* | | | rename archiver-common.inc | glitsj16 | 2021-03-02 |
| | | | |||
* | | | Merge pull request #4019 from glitsj16/protocol | glitsj16 | 2021-03-01 |
|\ \ \ | | | | | | | | | fix protocol list | ||
| * | | | drop useless ignore | glitsj16 | 2021-03-01 |
| | | | | |||
| * | | | fix protocol list | glitsj16 | 2021-03-01 |
| |/ / | | | | | | | Now that https://github.com/netblue30/firejail/commit/5d88ee8957dc38a52c36f71b91c786dbec9d4ec9 introduces new protocol list behaviour, we need to add an ignore here due to the redirect to transmission-common.profile. See https://github.com/netblue30/firejail/issues/4017 for clarification. | ||
* / / | fixes | rusty-snake | 2021-03-01 |
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | - RELNOTS: protocol now accumulates - fix #3978 -- Android Studio: cannot create the directory Unresolved: > google-earth.profile has a 'noblacklist ${HOME}/.config/Google' too, > so we should consider to add additional blacklists for ~/.config/Google/*. - marker.profile: allow ${DOCUMENTS} - profile.template: add bluetooth protocol - profile.template: add DBus portal note - firejail-profile.txt: revert 17fe4b9e -- fix private=directory in man firejail-profile see https://github.com/netblue30/firejail/pull/3970#discussion_r574411745 | ||
* | | small fixes and updates | netblue30 | 2021-02-26 |
| | | |||
* | | Fixup 0e31d020, torbrowser-launcher missing path | Tad | 2021-02-24 |
| | | |||
* | | Merge pull request #4001 from kmk3/fix-signal-xdg-ignore | netblue30 | 2021-02-24 |
|\ \ | | | | | | | signal-desktop.profile: fix typo of disable-xdg.profile | ||
| * | | signal-desktop.profile: fix typo of disable-xdg.profile | Kelvin M. Klann | 2021-02-22 |
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit f4f676745 ("Refactor electron.profile and electron based programs (#3807)"). This appears to be the only instance of that: $ grep -Fnr 'include-xdg' etc etc/profile-m-z/signal-desktop.profile:9:ignore include-xdg.inc Simply fixing the typo would enable xdg dirs for the first time since the aforementioned commit. But, as talked with @rusty-snake[1], since there has been no negative feedback, and since it's a whitelisting profile, just remove the affected line instead. Credits go to syntax highlighting on vim. [1]: https://github.com/netblue30/firejail/pull/4001 | ||
* | | Merge pull request #4003 from Neo00001/master | netblue30 | 2021-02-24 |
|\ \ | | | | | | | Minor fixes for vmware | ||
| * | | Create vmware-workstation.profile | Neo00001 | 2021-02-23 |
| | | | |||
| * | | Create vmware-player.profile | Neo00001 | 2021-02-23 |
| | | | |||
* | | | update man profile | netblue30 | 2021-02-24 |
|/ / | |||
* | | hardening ssh, tor | netblue30 | 2021-02-23 |
| | | |||
* | | Fix patch-util not having access to libdl.so (#4000) | zupatisc | 2021-02-22 |
|/ | | | | | | | * Fix patch-util not having access to libdl.so * Update etc/profile-m-z/patch.profile Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com> | ||
* | adapt to apparmor being opt-in for torbrowser-launcher | glitsj16 | 2021-02-15 |
| | |||
* | make apparmor opt-in | glitsj16 | 2021-02-15 |
| | |||
* | Avoid doubled include globals.local | glitsj16 | 2021-02-15 |
| | | | The final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Unless there's some kind of potential race condition that needs to be avoided by changing this 'logic' we should avoid doubled includes. |