firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	Merge pull request #5626 from kmk3/mutt-reduce-mkdir	netblue30	2023-01-30
\|\ \| \| \| \|	mutt.profile: add ~/.mutthistory & reduce amount of paths created
\| *	mutt.profile: stop creating config files for other programs	Kelvin M. Klann	2023-01-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Let either the respective program or the user create the file. * ~/.bogofilter: Used by the bogofilter program * ~/.msmtprc: Used by the msmtp program Added on commit a8a8e33bc ("Add whitelisting to mutt; improve geary, new profile for neomutt", 2020-12-28) / PR #3849.
\| *	mutt.profile: stop creating editor/browser paths	Kelvin M. Klann	2023-01-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	To reduce the amount of spam created in the user home directory. It's unlikely that these paths are going to be both: * Created only after mutt is first opened through firejail and * Created from within mutt Also, no other profile does that: $ git grep -El '(mkdir\|mkfile) \$\{HOME\}/\.(emacs\|nano\|vim)' -- etc etc/profile-m-z/mutt.profile So just whitelist them if they already exist. Added on commit a8a8e33bc ("Add whitelisting to mutt; improve geary, new profile for neomutt", 2020-12-28) / PR #3849.
\| *	mutt.profile: add ~/.mutthistory	Kelvin M. Klann	2023-01-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	From the manual of mutt 2.2.9: > 3.125. history_file > > Type: path > Default: "~/.mutthistory" > > The file in which Mutt will save its history.
* \|	ci: run sort.py to fix ci	Kelvin M. Klann	2023-01-29
\| \| \| \| \| \| \| \| \| \| \| \|	Command used: $ ./ci/check/profiles/sort.py etc/inc/.inc etc/profile-/*.profile
* \|	qutebrowser.profile: Add passwd to private-etc (#5624)	amano-kenji	2023-01-28
\| \| \| \| \| \| \| \|	This is necessary if I want to launch a terminal editor from qutebrowser.
* \|	private-etc: corss-distro test for curl, gimp, inkscape, firefox, warzone2100	netblue30	2023-01-28
\|/
*	fix qutebrowser not opening tabs (#5618)	Alexandre Provencio	2023-01-25
\| \| \| \|	Closes #5601
*	fix pingus profile	netblue30	2023-01-25
\|
*	zoom.profile: whitelist ~/.config/zoom.conf (#5596)	fkrone	2023-01-24
\| \| \| \| \| \| \| \| \| \| \| \| \|	* zoom.profile: whitelist ~/.config/zoom.conf With Zoom version 5.12.6, Zoom changed how they handle encrypting the local database. This change resulted in the new file zoom.conf being used. As it is not allowed by the current profile, this could lead to users losing their chat history if they cannot be retrieved from the cloud (e.g. when e2e encryption is used). * zoom.profile: noblacklist ~/.config/zoom.conf Additional blacklisting for other programs to the configuration file.
*	profanity: fix notifications (#5602)	Mohammed Anas	2023-01-24
\|
*	wireshark: fix private-etc comment	glitsj16	2023-01-21
\|
*	transgui: fix networking	glitsj16	2023-01-21
\|
*	sqlitebrowser: fix networking	glitsj16	2023-01-21
\|
*	qnapi: fix networking	glitsj16	2023-01-21
\|
*	pavucontrol: fix networking	glitsj16	2023-01-21
\|
*	netactview: fix networking	glitsj16	2023-01-21
\|
*	mpDris2: fix networking	glitsj16	2023-01-21
\|
*	cleanup	netblue30	2023-01-19
\|
*	cleanup	netblue30	2023-01-19
\|
*	cleanup	netblue30	2023-01-19
\|
*	more profile fixes/testing	netblue30	2023-01-19
\|
*	some profile updates	netblue30	2023-01-18
\|
*	Merge pull request #5571 from glitsj16/ec-refactor	netblue30	2023-01-15
\|\ \| \| \| \|	email-common refactoring
\| *	sylpheed: refactoring	glitsj16	2023-01-04
\| \|
* \|	Merge pull request #5563 from glitsj16/linuxqq	netblue30	2023-01-15
\|\ \ \| \| \| \| \| \|	New profiles: linuxqq/qq
\| * \|	Merge branch 'netblue30:master' into linuxqq	glitsj16	2023-01-04
\| \|\\|
\| * \|	Create qq.profile	glitsj16	2023-01-03
\| \| \|
* \| \|	QMediathekView: add mkdir and reorder whitelist options	glitsj16	2023-01-12
\| \| \| \| \| \| \| \| \|	As suggested in review.
* \| \|	QMediathekView: hardening	glitsj16	2023-01-11
\| \|/ \|/\|
* \|	Merge pull request #5564 from glitsj16/claws-mail+sylpheed	netblue30	2023-01-04
\|\ \ \| \| \| \| \| \|	claws-mail and sylpheed D-Bus hardening
\| * \|	sylpheed: allow opening hyperlinks via D-Bus	glitsj16	2023-01-03
\| \|/
* /	ytmdesktop: fix typo (#5567)	glitsj16	2023-01-04
\|/
*	window manager profiles: fix browser/electron internal sandboxes	smitsohu	2022-12-25
\|
*	New profile: ssmtp (#5544)	glitsj16	2022-12-21
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* disable-programs.inc: add ssmtp support * Create ssmtp.profile * ssmtp: support Debian/Ubuntu * README.md: add ssmtp to 'New profiles' section * disable-common.inc: move ssmtp support to keep CI happy * ssmtp: improve dead.letter comment Suggested in [review](https://github.com/netblue30/firejail/pull/5544#pullrequestreview-1225322546).
*	spectre-meltdown-checker: fixes (#5546)	glitsj16	2022-12-21
\|
*	seahorse refactoring (#5543)	glitsj16	2022-12-21
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* seahorse: fixes and hardening * seahorse-daemon: hardening * seahorse-tool: move private-etc items to seahorse * seahorse: unbreak nautilus file encryption As suggested [in review](https://github.com/netblue30/firejail/pull/5543#pullrequestreview-1225250520). * seahorse-tool: move private-tmp to seahorse * seahorse: add private-tmp * seahorse: fix access to ssh-agent socket
*	Rename xlinks2 to xlinks2.profile	rusty-snake	2022-12-20
\|
*	add restrict-namespaces to (almost) all profiles	smitsohu	2022-12-20
\|
*	Add support for Qt6 (#5527)	glitsj16	2022-12-14
\| \| \| \| \|	* qbittorrent: add support for Qt6 * wusc: add support for Qt6
*	Fix whitelisting for wusc (#5526)	glitsj16	2022-12-14
\| \| \|	Overlooked [this comment](https://github.com/netblue30/firejail/pull/5389#discussion_r992471940) that pointed out a mistake I made.
*	private-etc: always reference 'alternatives' (#5517)	glitsj16	2022-12-09
\| \| \| \| \| \| \| \| \|	* private-etc: always include 'alternatives' * private-etc: always include 'alternatives' * private-etc: always include 'alternatives' * private-etc: always include 'alternatives'
*	New profile: tesseract (#5516)	glitsj16	2022-12-09
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Add firecfg support for tesseract * Add tesseract to 'New profiles' section in README.md * Create tesseract.profile * tesseract: fix private-etc * tesseract: fix XDG black/whitelisting * tesseract: use 'seccomp socket' instead of 'protocol unix' As kindly suggested by @rusty-snake. * tesseract: add 'restrict-namespaces' As kindly suggested by @rusty-snake. * tesseract: use full seccomp filtering The tesseract application works fine without 'protocol' or 'seccomp socket'.
*	spotify.profile: allow spotify-adblock paths	Kelvin M. Klann	2022-12-02
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	As suggested by @glitsj16[1]. Project homepage: https://github.com/abba23/spotify-adblock Configuration paths: * /etc/spotify-adblock/config.toml * ~/.config/spotify-adblock/config.toml Fixes #5494. [1] https://github.com/netblue30/firejail/discussions/5494#discussioncomment-4280887 Reported-by: @Rewig95
*	Merge pull request #5476 from k4leg/fix_pycharm	netblue30	2022-11-25
\|\ \| \| \| \|	fix: PyCharm profiles
\| *	fix: PyCharm profiles	Bogdan Ruslanovich Drozd	2022-11-23
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Do not use `private-cache`, because PyCharm places in cache directories stuff like spelling dictionary (i. e. if you download spelling dictionary with `private-cache`, on restart PyCharm you need to download spelling dictionary again).
* \|	Merge pull request #5442 from rusty-snake/fixes	Kelvin M. Klann	2022-11-23
\|\ \ \| \| \| \| \| \|	Profile fixes
\| * \|	Fix #5311 -- Whalebird-4.6.2 does not work with the default whalebird.profile	rusty-snake	2022-10-30
\| \|/
* \|	fix opening links in firefox youtube-viewers-common.profile (#5352)	pirate486743186	2022-11-23
\| \| \| \| \| \|	Co-authored-by: pirate486743186 <>
* \|	Add python3 support/fixes to nicotine (#5459)	glitsj16	2022-11-22
\|/ \| \| \| \| \| \|	* Add python3 support to nicotine * Revert private-bin changes Adding shell and python3 support to private-bin kept breaking nicotine for the user who reported it on IRC. Let's revert it as suggested by @rusty-snake.