firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
...
* \|	hardening zeal.profile (#4970)	glitsj16	2022-02-23
\| \|
* \|	Add support for changing appearance of the Qt6 apps with qt6ct (#4966)	avallach2000	2022-02-21
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Add support for changing appearance of the Qt6 apps with qt6ct * Remove qt5ct artifact from zeal.profile * Remove qt5ct artifact from bibletime.profile
* \|	Merge pull request #4964 from avallach2000/fix-qbittorrent-profile	netblue30	2022-02-20
\|\ \ \| \| \| \| \| \|	qbittorrent.profile: fix data directory location
\| * \|	qbittorrent.profile: fix data directory location	Andrew Kotsyuba	2022-02-20
\| \| \|
* \| \|	wireshark.profile: Add dac_read_search to caps.keep	crocket	2022-02-20
\|/ / \| \| \| \| \| \| \| \|	On gentoo linux, /usr/bin/dumpcap requires dac_read_search instead of dac_override.
* \|	drop private-dev from wireshark.profile (#4958)	glitsj16	2022-02-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	* drop private-dev from wireshark.profile * add comment about private-dev in wireshark.profile Add a comment as suggested in https://github.com/netblue30/firejail/pull/4958#issuecomment-1044732769.
* \|	add onionshare redirects (#4957)	glitsj16	2022-02-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Create onionshare.profile * Create onionshare-cli.profile * add onionshare redirects to firecfg.config
* \|	man.profile: remove read-only tmp to fix mandoc (#4950)	Kelvin M. Klann	2022-02-16
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Having `read-only /tmp` yields the following: $ man ls [...] man: /usr/share/man/man1/ls.1.gz: SYSERR: mkstemp: /tmp/man.XXXXxxxxxx: Read-only file system [...] It also causes the pager (e.g.: less(1)) to not be called, which means that the entire man page is just printed all at once on the terminal. Environment: mandoc 1.14.6-1 on Artix Linux. Fixes #4927. Reported-by: @hyder365
* \|	mediainfo.profile: add quiet (#4901)	Kelvin M. Klann	2022-02-04
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	It's a CLI tool and its output is a key part of the functionality. Fixes #4900. Reported-by: @rieje
* \|	shellcheck.profile: remove mdwe	Kelvin M. Klann	2022-02-04
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	It breaks non-binary builds of shellcheck on Arch (e.g.: shellcheck-bin vs shellcheck-git from the AUR). Fixes #4875. Reported-by: @redxef
* \|	Merge pull request #4864 from antonv6/antonv6-steam-mangohud	netblue30	2022-02-03
\|\ \ \| \| \| \| \| \|	steam.profile: allow ~/.config/MangoHud
\| * \|	steam.profile: make ~/.config/MangoHud read-only	Anton Shestakov	2022-01-24
\| \| \|
\| * \|	steam.profile: allow ~/.config/MangoHud	Anton Shestakov	2022-01-17
\| \| \| \| \| \| \| \| \|	MangoHud is a Vulkan and OpenGL overlay for monitoring FPS, temperatures, CPU/GPU load and more, and it can be configured by user in ~/.config/MangoHud/MangoHud.conf.
* \| \|	Merge pull request #4841 from Tus1688/master	netblue30	2022-01-24
\|\ \ \ \| \| \| \| \| \| \| \|	Add neovim profile
\| * \| \|	fix: neovim profile	user	2022-01-11
\| \| \| \|
\| * \| \|	fix: neovim profile	user	2022-01-10
\| \| \| \|
\| * \| \|	fix: neovim profile	user	2022-01-10
\| \| \| \|
\| * \| \|	feat: neovim profile	user	2022-01-09
\| \| \| \|
* \| \| \|	Merge pull request #4829 from CaseOf/seafile	netblue30	2022-01-24
\|\ \ \ \ \| \| \| \| \| \| \| \| \| \|	Seafile
\| * \| \| \|	Create seafile-applet.profile	CaseOf	2022-01-06
\| \| \| \| \|
* \| \| \| \|	Merge pull request #4840 from Spacewalker2/mediathekview-fix	netblue30	2022-01-24
\|\ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \|	Fix MediathekView Profile
\| * \| \| \| \|	mkdir line added for the whitelist below (.mediathek3)	Spacewalker2	2022-01-10
\| \| \| \| \| \|
\| * \| \| \| \|	Fix MediathekView Profile	Spacewalker2	2022-01-08
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Related to issue #4839.
* \| \| \| \| \|	Merge pull request #4863 from antonv6/antonv6-wine-cache	netblue30	2022-01-24
\|\ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \|	{lutris,wine}.profile: allow ~/.cache/wine
\| * \| \| \| \| \|	wine.profile: allow ~/.cache/wine	Anton Shestakov	2022-01-17
\| \| \|_\|_\|/ / \| \|/\| \| \| \| \| \| \| \| \| \|	~/.cache/wine is a directory where wine stores .msi files for wine-gecko and wine-mono that it may download (with user's permission) and reuse every time a new prefix is created.
* \| \| \| \| \|	sorting supertuxkart	netblue30	2022-01-22
\| \| \| \| \| \|
* \| \| \| \| \|	netlink - fixing the fix	netblue30	2022-01-22
\| \| \| \| \| \|
* \| \| \| \| \|	more on pass utility	netblue30	2022-01-21
\| \| \| \| \| \|
* \| \| \| \| \|	signal-desktop: Allow Signal to open links in Firefox again (#4872)	Reed Riley	2022-01-20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Related to #4670. Firefox now does inter-process communication using dbus.
* \| \| \| \| \|	profiles: enable deterministic shutdown for ssh (#4870)	Reiner Herrmann	2022-01-20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	ssh can start in master mode, which will spawn an additional long running process, which keeps connections to a server open, so that it can be reused by later connection attempts. But the lingering master process will prevent the jail from shutting down, when `firejail ssh` tries to exit. This breaks for example ansible when using a firejailed ssh, as it calls ssh with ControlMaster flags. deterministic-shutdown will kill the other process when the parent exits.
* \| \| \| \| \|	steam.profile: allow /etc/vulkan (#4862)	Anton Shestakov	2022-01-19
\|/ / / / / \| \| \| \| \| \| \| \| \| \|	AMD Open Source Driver For Vulkan (amdvlk) installs ICD files to /etc/vulkan.
* \| \| \| \|	profiles: extend raincat's private-etc list	Reiner Herrmann	2022-01-14
\| \| \| \| \|
* \| \| \| \|	profiles: sort and drop trailing commas	Reiner Herrmann	2022-01-14
\| \| \| \| \|
* \| \| \| \|	raincat	netblue30	2022-01-14
\| \| \| \| \|
* \| \| \| \|	profiles: sort paths	Reiner Herrmann	2022-01-14
\| \| \| \| \|
* \| \| \| \|	profiles: sort private-bin in warzone2100.profile	Reiner Herrmann	2022-01-14
\| \| \| \| \|
* \| \| \| \|	fix warzone2100 (Debian 11)	netblue30	2022-01-13
\| \| \| \| \|
* \| \| \| \|	seperate wget/wget2 rc files	glitsj16	2022-01-13
\| \| \| \| \|
* \| \| \| \|	support wget2 in youtube-viewers-common.profile	glitsj16	2022-01-13
\| \| \| \| \|
* \| \| \| \|	support wget2 in steam.profile	glitsj16	2022-01-13
\| \| \| \| \|
* \| \| \| \|	Create wget2.profile	glitsj16	2022-01-13
\| \|_\|/ / \|/\| \| \|
* \| \| \|	Merge pull request #4826 from adrianlshaw/master	netblue30	2022-01-08
\|\ \ \ \ \| \|/ / / \|/\| \| \|	RPCS3 profile
\| * \| \|	Add rpcs3 profile	Adrian L. Shaw	2022-01-06
\| \|/ /
* / /	ordering fixes	glitsj16	2022-01-06
\|/ /
* \|	Create notable.profile	glitsj16	2022-01-05
\| \|
* \|	skypeforlinux: Whitelist downloads directory	Hugo Osvaldo Barrera	2021-12-30
\| \| \| \| \| \| \| \|	It's used when saving files send in conversations.
* \|	Merge pull request #4755 from kmk3/mpv-add-yt-dlp	netblue30	2021-12-28
\|\ \ \| \| \| \| \| \|	yt-dlp: add missing paths & mpv.profile: whitelist paths for yt-dlp
\| * \|	mpv.profile: whitelist paths for yt-dlp	Kelvin M. Klann	2021-12-09
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	See etc/profile-m-z/yt-dlp.profile. Relates to commit d6ca41c19 ("update mpv.profile", 2021-10-24) / PR #4634. Fixes #4754.
\| * \|	mpv.profile: sort whitelist	Kelvin M. Klann	2021-12-09
\| \| \|
\| * \|	mpv.profile: stop creating youtube-dl config dir	Kelvin M. Klann	2021-12-09
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	If it does not already exist, mpv is unlikely to need or to create it, so just whitelist it if it exists. This amends commit 5d741795c ("Use whitelisting for video players (#3472)", 2020-08-15).