aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
Commit message (Collapse)AuthorAge
* fix #3914Libravatar netblue302021-01-24
|
* Update vmware.profile (#3913)Libravatar Neo000012021-01-24
| | | | | | | * Update vmware.profile `private-etc` can be uncommented. * Update vmware.profile
* misc comment fixes (#3916)Libravatar glitsj162021-01-24
| | | | | | | | | | | * fix comment in blackbox.profile * fix comment in fluxbox.profile * fix comment in i3.profile * fix comment in krunner.profile * fix comment in openbox.profile
* add new profile: pkglog (#3902)Libravatar glitsj162021-01-18
| | | | | | | | | | | * add pkglog to new profiles * Create pkglog.profile * Update README.md * fix ordering in pkglog.profile * drop extra whitespace in pkglog.profile
* harden plv.profile (#3901)Libravatar glitsj162021-01-18
|
* Add new allow include allow-bin-sh.incLibravatar rusty-snake2021-01-16
| | | | | | | | | /bin/sh is usually just a symlink to bash. However this is not the case for every distro, debian for example uses dash. bash,dash and sh have a blacklist command in disable-shell.inc. An own allow-*.inc for it enusres usage of all necessary nolacklists. For private-bin sh is enough because it follows symlinks.
* newsboat: add lynx support (#3895)Libravatar altf_four2021-01-15
| | | | | | | * newsboat: add lynx support * newsboat: fix using sort.py * newsboat: remove unneeded perms
* fix mdr.profileLibravatar glitsj162021-01-13
| | | Thanks @rusty-snake for [spotting](https://github.com/netblue30/firejail/commit/662ebd214b0a7874072381f5aaf3fbd322f0e460) this!
* new profile: qnapi (#3890)Libravatar glitsj162021-01-13
| | | | | | | | | | | | | * add new profile: qnapi * add new profile: qnapi * Create qnapi.profile * add qnapi configs * Update README.md * Update README.md
* add new profile: shotwell (#3889)Libravatar glitsj162021-01-13
| | | | | | | | | * new profile: shotwell * Create shotwell.profile * new profile: shotwell * add shotwell blacklists
* new profile: mdr (#3888)Libravatar glitsj162021-01-13
| | | | | * add new profile: mdr * Create mdr.profile
* add new profiles: lsar & unar (ar redirects) (#3886)Libravatar glitsj162021-01-13
| | | | | | | * Create lsar.profile * Create unar.profile * new profiles lsar & unar
* refactor nodejs applications (npm & yarn) (#3876)Libravatar glitsj162021-01-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add yarn & reorder * add node-gyp & yarn files * Create nodejs-common.profile * Create yarn.profile * refactor npm.profile * add new profile: yarn * read-only's for npm/yarn Thanks to the [suggestion](https://github.com/netblue30/firejail/pull/3876#pullrequestreview-564682989) from @kmk3. * ignore read-only's for npm As [suggested](https://github.com/netblue30/firejail/pull/3876#pullrequestreview-564682989) by @kmk3. * ignore read-only for yarn As suggested in https://github.com/netblue30/firejail/pull/3876#pullrequestreview-564682989 by @kmk3. * remove quiet from nodejs-common.profile quiet should go into the caller profiles instead * add quiet to npm.profile Thanks @rusty-snake for the review. * re-ordering some options * re-ordering
* fix ordering in ssh.profile (#3882)Libravatar glitsj162021-01-11
|
* Improvements to balsa,fractal,gajim,trojita (#3791)Libravatar bbhtt2021-01-11
| | | | | | | | | | | | | * Improvements to balsa,fractal,gajim,trojita * sort * Add gpg plugin support to gajim,remove notifications dbus from trojita * Add dbus policy from flatpak per @rusty-snake * Add python* to private-bin; remove some dbus Co-authored-by: kortewegdevries <kortewegdevries@protonmail.ch>
* Whitelist Bohemia Interactive config dir for SteamLibravatar Aidan Gauland2021-01-10
| | | | | At least Arma 3 stores its config directory under ~/.local/share/bohemiainteractive
* Add new profile for markerLibravatar rusty-snake2021-01-08
|
* Harden openshot.profileLibravatar rusty-snake2021-01-08
| | | | | 'dbus-user none' freeze openshot when clicking on open project, 'dbus-user filter' works.
* refactor mattermost-desktop as electron redirect (#3806)Libravatar rusty-snake2021-01-08
|
* Add profile for npm (#3866)Libravatar Aidan Gauland2021-01-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add profile for npm * Apply suggestions from code review * Remove redundant blacklisting of Wayland. * Remove unnecessary noblacklist lines for nodejs. * Replace absolute paths to .inc files with filenames. * Remove unneeded dbus whitelisting. Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Remove empty line To keep consistent with other profiles, remove the blank line after the header comment. Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Add npm files to add-common-devel So that our addition of npm paths to disable-programs.inc dose not break IDEs, we need to unblacklist these same paths in allow-common-devel.inc. * Remove extra blank line * Add common whitelist includes to npm profile * Tighten npm profile Include disable-exec.inc, but allowing ${HOME}. * Remove whitelist-common.inc from npm profile whitelist-common breaks npm, and since we don't know where the user's npm projects will be, leave the whitelist-common include in a comment with a note about how to enable it for their setup. * Fix inverted commands Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Fixes for whitelisting * Add login.defs to npm profile's private-etc Co-authored-by: Aidan Gauland <aidalgol+git@fastmail.net> Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* electron redirect fixes (#3875)Libravatar glitsj162021-01-07
| | | | | * drop doubled netfilter in atom.profile * drop doubled disable-mnt in tutanota-desktop.profile
* new profile: tutanota-desktop (#3870)Libravatar glitsj162021-01-05
| | | | | | | | | * new profile: tutanota-desktop * add tutanota-desktop to firecfg * blacklist tutanota-desktop files * Create tutanota-desktop.profile
* drop doubled disable-exec in signal-desktop (#3869)Libravatar glitsj162021-01-05
|
* fix #3859 (#3863)Libravatar glitsj162021-01-01
| | | | | | | * fix #3859 * fix #3859 * fix #3859
* really fix running kernel config check (#3859)Libravatar glitsj162020-12-31
| | | | | | | | | | | | | * really fix running kernel config check archiver-common.inc includes `disable-shell.inc`, breaking $ zcat /proc/config.gz Cannot start application: Permission denied * really fix running kernel config check archiver-common.inc includes `disable-shell.inc`, breaking $ zgrep -c "CONFIG_USER_NS=y" /proc/config.gz Cannot start application: Permission denied
* Merge branch 'master' into browsersLibravatar Reiner Herrmann2020-12-29
|\
| * Merge pull request #3847 from bbhtt/small_fixesLibravatar Reiner Herrmann2020-12-29
| |\ | | | | | | Small fixes
| | * Put a comment about dbus rules and comment themLibravatar bbhtt2020-12-29
| | |
| | * Add dbus rulesLibravatar bbhtt2020-12-28
| | |
| | * Add whitelists, remove wrong cache whitelist, add dbus rules, apparmorLibravatar bbhtt2020-12-28
| | |
| * | profiles: add redirect from matrix-mirage to mirage (#3854)Libravatar Reiner Herrmann2020-12-29
| |/
* | On Debian/Ubunbtu microsoft-edge redirects to dev-channel right nowLibravatar bbhtt2020-12-29
| |
* | Add profiles for MS Edge dev build for Linux and LibrewolfLibravatar bbhtt2020-12-28
|/
* remove trailing whitespacesLibravatar rusty-snake2020-12-21
|
* move whlist /usr/share/chromium from chomium-comm…Libravatar rusty-snake2020-12-21
| | | | | | | | …on to chromium, remove the nowhlist from min and its whlist from riot-web. TODO: remove the 'ignore whitelist /usr/share/chomium' from the most profiles with it.
* new profile: servoLibravatar rusty-snake2020-12-21
|
* Refactor electron.profile and electron based programs (#3807)Libravatar rusty-snake2020-12-17
| | | | | | | | | | | | | | | | | * Refactor electron.profile and electron based programs (1) * Refactor electron.profile and electron based programs (2) * Refactor electron.profile and electron based programs (3) * Refactor electron.profile and electron based programs (4) * Refactor electron.profile and electron based programs (5) * Refactor electron.profile and electron based programs (6) * Refactor electron.profile and electron based programs (7) * Refactor electron.profile and electron based programs (8)
* Archiver fixes - drop private-bin (#3832)Libravatar glitsj162020-12-16
| | | | | | | | | | | | | | | * drop private-bin * drop private-bin * drop private-bin * drop private-bin * drop private-bin * disable private-lib in tar.profile Removing private-bin caused a test to fail - see discussion in https://github.com/netblue30/firejail/pull/3832. Thanks to @reinerh for explaining why I broke things!
* New profiles for alacarte,tootle,photoflare (#3816)Libravatar kortewegdevries2020-12-16
| | | | | | | * New profiles for alacarte,tootle,photoflare * Fix dbus Co-authored-by: kortewegdevries <kortewegdevries@protonmail.ch>
* archiver fixes (#3830)Libravatar glitsj162020-12-16
| | | | | * fix gzip * fix tar
* Refactor archivers ii (#3827)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | * harden 7z.profile * harden atool.profile * harden bsdtar.profile * harden cpio.profile * harden gzip.profile * harden tar.profile * harden unrar.profile * harden unzip.profile * harden xzdec.profile * harden zstd.profile
* Refactor archivers (#3820)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create archiver-common.inc * add apparmor to archiver-common.inc * refactor 7z.profile * refactor ar.profile * refactor atool.profile * refactor bsdtar.profile * refactor cpio.profile * refactor gzip.profile * refactor tar.profile * refactor unrar.profile * refactor unzip.profile * refactor xzdec.profile * refactor zstd.profile * rewording * blacklist ${RUNUSER} in archiver-common.inc Thanks to @rusty-snake for suggesting this. * drop non-sensical ${RUNUSER}/wayland-* blacklisting in archiver-common.inc See discussion in https://github.com/netblue30/firejail/pull/3820#discussion_r543523343
* Runuser fixes (#3826)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting
* rename softmaker-common.inc to softmaker-common.profile (#3825)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | * Rename etc/inc/softmaker-common.inc to etc/profile-m-z/softmaker-common.profile As per suggestion by @rusty-snake in https://github.com/netblue30/firejail/pull/3819#issuecomment-745244982 * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change
* re-enable nogroups with a comment in zoom.profile (#3824)Libravatar glitsj162020-12-15
| | | Better fix for #3711, see discussion there.
* rename whitelist-players.inc to whitelist-player-common.inc (#3819)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | * Update and rename whitelist-players.inc to whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc
* Fix sound in games using FMOD (#3821)Libravatar fenuks2020-12-15
| | | Co-authored-by: fenuks <fenuks>
* refactor playonlinux as wine redirect (#3811)Libravatar rusty-snake2020-12-12
|
* integrate relevant options into server.profile (#3808)Libravatar glitsj162020-12-11
| | | | | * integrate relevant options into server.profile * relax mdwe and dbus-system in server.profile
* fix audio/video play in yelp.profileLibravatar glitsj162020-12-10
|
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-05 10:03:11 +0000