Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add alternatives to private-etc for profiles in etc/ | Fred-Barclay | 2019-02-17 |
| | | | | See discussion in #2399 | ||
* | Merge pull request #2201 from SkewedZeppelin/u2f-ap | netblue30 | 2018-10-17 |
|\ | | | | | Add nou2f to all profiles | ||
| * | Add nou2f to all profiles | Tad | 2018-10-15 |
| | | | | | | | | - Closes #2194 | ||
* | | Remove "/etc/firejail/" from all include paths, now that profile_read will ↵ | Glenn Washburn | 2018-10-17 |
|/ | | | | search for the file. | ||
* | Harden strings.profile | glitsj16 | 2018-10-11 |
| | |||
* | don't include globals.local twice (take two) (#2010) | glitsj16 | 2018-06-24 |
| | | | | | | | | | | | | | | | | | | | | * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice | ||
* | recalibrate dbus access, deploy nodbus option | smitsohu | 2018-03-28 |
| | | | | | | | see #1822 and #1825. also systematically replaces 'blacklist /run/user/*/bus' with 'nodbus'. with contributions from @Fred-Barclay | ||
* | disable non-abstract session bus address | smitsohu | 2017-10-22 |
| | | | | | systematically blacklist /run/user/*/bus in all profiles with 'net none'. targets distros like Fedora | ||
* | added private-lib to eog, eom, file, gpicview, less, strings, and tar | netblue30 | 2017-10-16 |
| | |||
* | make deb; fixed strings profile | netblue30 | 2017-08-23 |
| | |||
* | Merge pull request #1466 from SpotComms/fixnd | Fred Barclay | 2017-08-13 |
|\ | | | | | Fix nodvd placement | ||
| * | Fix nodvd placement | Tad | 2017-08-13 |
| | | |||
* | | Harden 17 profiles using private-bin | Tad | 2017-08-13 |
|/ | |||
* | added nodvd to most profiles | netblue30 | 2017-08-13 |
| | |||
* | Fix notv placement | Tad | 2017-08-11 |
| | |||
* | added notv to most profiles | netblue30 | 2017-08-11 |
| | |||
* | Unify all profiles | Tad | 2017-08-07 |
| | |||
* | Initial adding of memory-deny-write-execute to profiles | Tad | 2017-08-02 |
| | | | | | | | | - mdwe breaks most vm-based languages so python/java/javascript and some mono programs are not compatible - mdwe also breaks most 3d accelerated programs such as 3d games - mdwe is similar to PaX's mprotect meaning PaX flag managers can be used as reference -- See https://github.com/copperhead/paxd-archive/blob/master/paxd.conf -- See https://github.com/nning/linux-pax-flags | ||
* | Harden 50 profiles | Tad | 2017-07-04 |
| | | | | | Hardened many profiles using disable-mnt and novideo Fixed gnome-font-viewer | ||
* | fix quiet in profiles | netblue30 | 2017-06-08 |
| | |||
* | added /etc/firejail/globals.local for global customizations | netblue30 | 2017-05-23 |
| | |||
* | persistent support for all profile files | netblue30 | 2017-02-09 |
| | |||
* | hardened various profiles | valoq | 2016-12-21 |
| | |||
* | quiet fix | netblue30 | 2016-11-29 |
| | |||
* | squash attempt 2 | Fred-Barclay | 2016-10-24 |
| | |||
* | removed private-tmp from sysutils | netblue30 | 2016-10-03 |
| | |||
* | added back strings profile | netblue30 | 2016-08-25 |
| | |||
* | removed strings profile | netblue30 | 2016-08-11 |
| | |||
* | added quiet profile command | netblue30 | 2016-08-01 |
| | |||
* | nosound | netblue30 | 2016-07-08 |
| | |||
* | sysutils | netblue30 | 2016-06-28 |
| | |||
* | cpio, gzip, strings, xzdec | netblue30 | 2016-06-27 |
| | |||
* | strings, cpio, gzip, xz profiles | netblue30 | 2016-06-26 |