aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
Commit message (Collapse)AuthorAge
...
* | pidgin: allow netlinkLibravatar Harry Seiler2023-04-03
| | | | | | | | Fixes #5764
* | Create standard-notes.profile (#5761)Libravatar glitsj162023-03-29
|/ | | | | * Create standard-notes.profile * RELNOTES: add standard-notes to 'new profiles'
* Merge pull request #5710 from pirate486743186/mov-cliLibravatar netblue302023-03-23
|\ | | | | add mov-cli.profile
| * add mov-cliLibravatar pirate4867431862023-03-04
| |
* | Add profiles for jami and postman (#5691)Libravatar Kobaxidze2562023-03-15
| |
* | microsoft-edge fixes (#5697)Libravatar glitsj162023-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | * microsoft-edge*: fix spacing * Create microsoft-edge-stable.profile Relates to #5696. * firecfg.config: add support for microsoft-edge-stable redirect * disable-common.inc: blacklist msedge SUID executables * microsoft-edge: add private-opt and allow internal sandbox access
* | profiles: drop hostname option (#5702)Libravatar glitsj162023-03-14
| | | | | | | | | | | | | | | | Now that we have randomized UTS namespaces support[1] by default for every sandbox, there's no longer a need to set hostname to a fixed value. This commit removes such fixed hostname entries from all profiles that have it. [1] https://github.com/netblue30/firejail/discussions/5597#discussioncomment-4996357
* | profiles: streamline seccomp socket comment (#5735)Libravatar glitsj162023-03-14
| | | | | | | | | | No functional changes. Relates to #639.
* | Merge pull request #5325 from pirate486743186/tutanota-desktop.profile-fixLibravatar netblue302023-03-13
|\ \ | | | | | | tutanota-desktop.profile improvements
| * | tutanota-desktop.profile improvementsLibravatar pirate4867431862023-02-26
| | |
* | | Merge pull request #5715 from pirate486743186/yt-dlpLibravatar netblue302023-03-13
|\ \ \ | | | | | | | | refactor yt-dlp
| * | | refactor yt-dlpLibravatar pirate4867431862023-03-09
| | |/ | |/|
* | | mpv: improve and clarify comments (#5711)Libravatar glitsj162023-03-09
| | |
* | | add porn-cli.profileLibravatar pirate4867431862023-03-05
|/ /
* | bulk renaming electron to electron-common (#5700)Libravatar pirate4867431862023-03-01
| | | | | | Co-authored-by: pirate486743186 <>
* | rsync-download_only: fix local override name (#5695)Libravatar glitsj162023-02-28
| |
* | minor clarify userns comments (#5686)Libravatar pirate4867431862023-02-26
|/ | | Co-authored-by: pirate486743186 <>
* parsecd: ordering fixes (#5682)Libravatar glitsj162023-02-25
|
* Merge pull request #5646 from NetSysFire/parsecdLibravatar netblue302023-02-24
|\ | | | | New profile: parsecd
| * parsecd.profile: more white and blacklistingLibravatar NetSysFire2023-02-24
| |
| * New profile: parsecdLibravatar NetSysFire2023-02-18
| |
* | Merge pull request #5674 from kmk3/fix-ws-add-editorconfigLibravatar netblue302023-02-24
|\ \ | | | | | | build: Fix whitespace and add .editorconfig
| * | Trim trailing whitespaceLibravatar Kelvin M. Klann2023-02-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commands used to search and replace: $ git grep -Ilz '[[:blank:]]$' | xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed -E \ 's/[[:blank:]]+$//' '{}')\" >'{}'" This fixes all of the "trailing whitespace" errors raised by git: $ git diff --check 4b825dc642cb6eb9a060e54bf8d69288fbee4904..HEAD | grep '^[^+]' | cut -f 3 -d : | LC_ALL=C sort | uniq -c 72 space before tab in indent. 4 trailing whitespace.
| * | Fix EOL at EOFLibravatar Kelvin M. Klann2023-02-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commands used to search and replace: $ git grep -Ilz '.' | xargs -0 -I '{}' sh -c \ "printf '%s\n' \"\$(cat '{}')\" >'{}'" The above commands ensure that there is exaclty 1 line terminator at EOF (rather than 0 or more than 1) on all non-empty text files. This fixes all of the "new blank line at EOF" errors raised by git: $ git diff --check 4b825dc642cb6eb9a060e54bf8d69288fbee4904..HEAD | grep '^[^+]' | cut -f 3 -d : | LC_ALL=C sort | uniq -c 21 new blank line at EOF. 72 space before tab in indent. 4 trailing whitespace.
* | | more private-etcLibravatar netblue302023-02-24
| | |
* | | New profiles: qpdf and redirects (#5675)Libravatar glitsj162023-02-23
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create qpdf.profile and redirects qpdf (CLI) provides PDF metadata cleaning. See privacy-handbuch.de[1] for details. The site offers pdf-meta-clean.sh[2], which works very well with firejailed qpdf. [1] https://www.privacy-handbuch.de/handbuch_43a.htm [2] https://www.privacy-handbuch.de/download/pdf-meta-clean.sh * RELNOTES: add qpdf and redirects to new profiles section * firecfg.config: add qpdf and redirects * qpdf: use 'seccomp socket' instead of 'protocol unix' See https://github.com/netblue30/firejail/issues/639. Thanks @rusty-snake in code review.
* | merges, testing, private-etcLibravatar netblue302023-02-16
| |
* | qutebrowser: allow userscripts by default (#5649)Libravatar glitsj162023-02-15
| | | | | | | | | | | | | | Fixes #5639. qutebrowser: drop apparmor Suggested in PR review.
* | transmission-cli: allow web clientLibravatar glitsj162023-02-14
| |
* | private-etc: libreoffice, audacity, forzen-bubble, transmission, ↵Libravatar netblue302023-02-08
|/ | | | md5sum/sha512sum, more sysutils testing, fix electron-hardened.inc.profile
* re-fix private-etcLibravatar glitsj162023-02-06
|
* private-etc: pushing vulkan into games groupLibravatar netblue302023-02-06
|
* Merge branch 'master' into private-etc-fixesLibravatar netblue302023-02-06
|\
| * private-etc: java directory fixesLibravatar netblue302023-02-05
| |
| * private-etc: groups modifiedLibravatar netblue302023-02-05
| |
* | xiphos: fix private-etcLibravatar glitsj162023-02-05
| | | | | | There is no `/etc/ssli` AFAIK. Existing typo prior to private-etc rework likely caused this.
* | whois: fix private-etcLibravatar glitsj162023-02-05
| | | | | | There is no `/etc/jwhois.conf` AFAIK. Existing typo prior to private-etc rework likely caused this.
* | marker: fix private-etcLibravatar glitsj162023-02-05
|/ | | `dconfgtk-3.0` was missing a `,` prior to the private-etc rework.
* private-etc: big profile changesLibravatar netblue302023-02-05
|
* Merge pull request #5635 from kmk3/dc-add-ro-editor-browserLibravatar netblue302023-01-31
|\ | | | | disable-common.inc: add more ro editor/browser paths
| * disable-common.inc: make ~/.config/nano read-onlyLibravatar Kelvin M. Klann2023-01-30
| | | | | | | | | | | | Similarly to the existing ~/.nanorc entry. Taken from nano.profile.
| * disable-common.inc: add more ro editor/browser pathsLibravatar Kelvin M. Klann2023-01-30
| | | | | | | | | | | | | | | | | | Move some paths from mutt.profile and neomutt.profile. Added on commit 6b9bfad37 ("Fix python; add read-only to editors/cli browsers;re-add cache directory", 2020-12-29) / PR #3849. Misc: This is a follow-up to #5626.
* | Merge branch 'netblue30:master' into warzone2100Libravatar glitsj162023-01-31
|\|
| * private-etc: moved group names to @group syntax; GUI group renamed as @x11 ↵Libravatar netblue302023-01-30
| | | | | | | | group; added nvidia and X11 directories to @x11 group.
| * Merge pull request #5626 from kmk3/mutt-reduce-mkdirLibravatar netblue302023-01-30
| |\ | | | | | | mutt.profile: add ~/.mutthistory & reduce amount of paths created
| | * mutt.profile: stop creating config files for other programsLibravatar Kelvin M. Klann2023-01-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Let either the respective program or the user create the file. * ~/.bogofilter: Used by the bogofilter program * ~/.msmtprc: Used by the msmtp program Added on commit a8a8e33bc ("Add whitelisting to mutt; improve geary, new profile for neomutt", 2020-12-28) / PR #3849.
| | * mutt.profile: stop creating editor/browser pathsLibravatar Kelvin M. Klann2023-01-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To reduce the amount of spam created in the user home directory. It's unlikely that these paths are going to be both: * Created only after mutt is first opened through firejail and * Created from within mutt Also, no other profile does that: $ git grep -El '(mkdir|mkfile) \$\{HOME\}/\.(emacs|nano|vim)' -- etc etc/profile-m-z/mutt.profile So just whitelist them if they already exist. Added on commit a8a8e33bc ("Add whitelisting to mutt; improve geary, new profile for neomutt", 2020-12-28) / PR #3849.
| | * mutt.profile: add ~/.mutthistoryLibravatar Kelvin M. Klann2023-01-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the manual of mutt 2.2.9: > 3.125. history_file > > Type: path > Default: "~/.mutthistory" > > The file in which Mutt will save its history.
* | | warzone2100: add mkdirLibravatar glitsj162023-01-29
| | | | | | | | | As suggested in review.
* | | warzone2100: additional paths for Arch LinuxLibravatar glitsj162023-01-29
|/ /