| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | skypeforlinux cleanup |  smitsohu | 2022-03-09 |
| | | |||
| * | drop redundant ignore |  glitsj16 | 2022-03-04 |
| | | |||
| * | drop redundant ignore | glitsj16 | 2022-03-04 |
| | | |||
| * | whitelist /usr/share/gnupg2 for consistency (#5007) | glitsj16 | 2022-03-04 |
| | | |||
| * | drop redundant whitelisting (#5005) | glitsj16 | 2022-03-03 |
| | | |||
| * | more fixes for opera-beta (#5002) | glitsj16 | 2022-03-03 |
| | | |||
| * | add opera-developer.profile (#5001) | glitsj16 | 2022-03-03 |
| | | | | | | | | | | | | | | | | * add opera-developer to firecfg * add opera-developer * fix typo * add configs for opera-developer * Create opera-developer.profile * fixes for opera-developer * fix for opera-developer | ||
| * | opera fixes/hardening (#4999) | glitsj16 | 2022-03-03 |
| | | | | | | * harden opera-beta * harden opera | ||
| * | fix mupdf redirect profiles (#4977) | glitsj16 | 2022-02-25 |
| | | |||
| * | update noprofile.profile | smitsohu | 2022-02-24 |
| | | |||
| * | hardening zeal.profile (#4970) | glitsj16 | 2022-02-23 |
| | | |||
| * | Add support for changing appearance of the Qt6 apps with qt6ct (#4966) |  avallach2000 | 2022-02-21 |
| | | | | | | | | * Add support for changing appearance of the Qt6 apps with qt6ct * Remove qt5ct artifact from zeal.profile * Remove qt5ct artifact from bibletime.profile | ||
| * | Merge pull request #4964 from avallach2000/fix-qbittorrent-profile |  netblue30 | 2022-02-20 |
| |\ | | | | | qbittorrent.profile: fix data directory location | ||
| | * | qbittorrent.profile: fix data directory location | Andrew Kotsyuba | 2022-02-20 |
| | | | |||
| * | | wireshark.profile: Add dac_read_search to caps.keep |  crocket | 2022-02-20 |
| |/ | | | | | On gentoo linux, /usr/bin/dumpcap requires dac_read_search instead of dac_override. | ||
| * | drop private-dev from wireshark.profile (#4958) | glitsj16 | 2022-02-18 |
| | | | | | | | | * drop private-dev from wireshark.profile * add comment about private-dev in wireshark.profile Add a comment as suggested in https://github.com/netblue30/firejail/pull/4958#issuecomment-1044732769. | ||
| * | add onionshare redirects (#4957) | glitsj16 | 2022-02-18 |
| | | | | | | | | * Create onionshare.profile * Create onionshare-cli.profile * add onionshare redirects to firecfg.config | ||
| * | man.profile: remove read-only tmp to fix mandoc (#4950) |  Kelvin M. Klann | 2022-02-16 |
| | | | | | | | | | | | | | | | | | | Having `read-only /tmp` yields the following: $ man ls [...] man: /usr/share/man/man1/ls.1.gz: SYSERR: mkstemp: /tmp/man.XXXXxxxxxx: Read-only file system [...] It also causes the pager (e.g.: less(1)) to not be called, which means that the entire man page is just printed all at once on the terminal. Environment: mandoc 1.14.6-1 on Artix Linux. Fixes #4927. Reported-by: @hyder365 | ||
| * | mediainfo.profile: add quiet (#4901) | Kelvin M. Klann | 2022-02-04 |
| | | | | | | | | It's a CLI tool and its output is a key part of the functionality. Fixes #4900. Reported-by: @rieje | ||
| * | shellcheck.profile: remove mdwe | Kelvin M. Klann | 2022-02-04 |
| | | | | | | | | | | It breaks non-binary builds of shellcheck on Arch (e.g.: shellcheck-bin vs shellcheck-git from the AUR). Fixes #4875. Reported-by: @redxef | ||
| * | Merge pull request #4864 from antonv6/antonv6-steam-mangohud | netblue30 | 2022-02-03 |
| |\ | | | | | steam.profile: allow ~/.config/MangoHud | ||
| | * | steam.profile: make ~/.config/MangoHud read-only |  Anton Shestakov | 2022-01-24 |
| | | | |||
| | * | steam.profile: allow ~/.config/MangoHud | Anton Shestakov | 2022-01-17 |
| | | | | | | | MangoHud is a Vulkan and OpenGL overlay for monitoring FPS, temperatures, CPU/GPU load and more, and it can be configured by user in ~/.config/MangoHud/MangoHud.conf. | ||
| * | | Merge pull request #4841 from Tus1688/master | netblue30 | 2022-01-24 |
| |\ \ | | | | | | | Add neovim profile | ||
| | * | | fix: neovim profile |  user | 2022-01-11 |
| | | | | |||
| | * | | fix: neovim profile | user | 2022-01-10 |
| | | | | |||
| | * | | fix: neovim profile | user | 2022-01-10 |
| | | | | |||
| | * | | feat: neovim profile | user | 2022-01-09 |
| | | | | |||
| * | | | Merge pull request #4829 from CaseOf/seafile | netblue30 | 2022-01-24 |
| |\ \ \ | | | | | | | | | Seafile | ||
| | * | | | Create seafile-applet.profile |  CaseOf | 2022-01-06 |
| | | | | | |||
| * | | | | Merge pull request #4840 from Spacewalker2/mediathekview-fix | netblue30 | 2022-01-24 |
| |\ \ \ \ | | | | | | | | | | | Fix MediathekView Profile | ||
| | * | | | | mkdir line added for the whitelist below (.mediathek3) |  Spacewalker2 | 2022-01-10 |
| | | | | | | |||
| | * | | | | Fix MediathekView Profile | Spacewalker2 | 2022-01-08 |
| | | | | | | | | | | | | | | | | Related to issue #4839. | ||
| * | | | | | Merge pull request #4863 from antonv6/antonv6-wine-cache | netblue30 | 2022-01-24 |
| |\ \ \ \ \ | | | | | | | | | | | | | {lutris,wine}.profile: allow ~/.cache/wine | ||
| | * | | | | | wine.profile: allow ~/.cache/wine | Anton Shestakov | 2022-01-17 |
| | | |_|_|/ | |/| | | | | | | | | ~/.cache/wine is a directory where wine stores .msi files for wine-gecko and wine-mono that it may download (with user's permission) and reuse every time a new prefix is created. | ||
| * | | | | | sorting supertuxkart | netblue30 | 2022-01-22 |
| | | | | | | |||
| * | | | | | netlink - fixing the fix | netblue30 | 2022-01-22 |
| | | | | | | |||
| * | | | | | more on pass utility | netblue30 | 2022-01-21 |
| | | | | | | |||
| * | | | | | signal-desktop: Allow Signal to open links in Firefox again (#4872) |  Reed Riley | 2022-01-20 |
| | | | | | | | | | | | | | | | | | | | | | Related to #4670. Firefox now does inter-process communication using dbus. | ||
| * | | | | | profiles: enable deterministic shutdown for ssh (#4870) |  Reiner Herrmann | 2022-01-20 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ssh can start in master mode, which will spawn an additional long running process, which keeps connections to a server open, so that it can be reused by later connection attempts. But the lingering master process will prevent the jail from shutting down, when `firejail ssh` tries to exit. This breaks for example ansible when using a firejailed ssh, as it calls ssh with ControlMaster flags. deterministic-shutdown will kill the other process when the parent exits. | ||
| * | | | | | steam.profile: allow /etc/vulkan (#4862) | Anton Shestakov | 2022-01-19 |
| |/ / / / | | | | | | | | | AMD Open Source Driver For Vulkan (amdvlk) installs ICD files to /etc/vulkan. | ||
| * | | | | profiles: extend raincat's private-etc list | Reiner Herrmann | 2022-01-14 |
| | | | | | |||
| * | | | | profiles: sort and drop trailing commas | Reiner Herrmann | 2022-01-14 |
| | | | | | |||
| * | | | | raincat | netblue30 | 2022-01-14 |
| | | | | | |||
| * | | | | profiles: sort paths | Reiner Herrmann | 2022-01-14 |
| | | | | | |||
| * | | | | profiles: sort private-bin in warzone2100.profile | Reiner Herrmann | 2022-01-14 |
| | | | | | |||
| * | | | | fix warzone2100 (Debian 11) | netblue30 | 2022-01-13 |
| | | | | | |||
| * | | | | seperate wget/wget2 rc files | glitsj16 | 2022-01-13 |
| | | | | | |||
| * | | | | support wget2 in youtube-viewers-common.profile | glitsj16 | 2022-01-13 |
| | | | | | |||
| * | | | | support wget2 in steam.profile | glitsj16 | 2022-01-13 |
| | | | | | |||
 |
index : firejail | |
| Mirror of https://github.com/netblue30/firejail | Firejail Authors |
| aboutsummaryrefslogtreecommitdiffstats |