Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add alternatives to private-etc for profiles in etc/ | 2019-02-17 | |
| | | | | See discussion in #2399 | ||
* | Merge pull request #2201 from SkewedZeppelin/u2f-ap | 2018-10-17 | |
|\ | | | | | Add nou2f to all profiles | ||
| * | Add nou2f to all profiles | 2018-10-15 | |
| | | | | | | | | - Closes #2194 | ||
* | | Remove "/etc/firejail/" from all include paths, now that profile_read will ↵ | 2018-10-17 | |
|/ | | | | search for the file. | ||
* | Harden strings.profile | 2018-10-11 | |
| | |||
* | don't include globals.local twice (take two) (#2010) | 2018-06-24 | |
| | | | | | | | | | | | | | | | | | | | | * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice * avoid including globals.local twice | ||
* | recalibrate dbus access, deploy nodbus option | 2018-03-28 | |
| | | | | | | | see #1822 and #1825. also systematically replaces 'blacklist /run/user/*/bus' with 'nodbus'. with contributions from @Fred-Barclay | ||
* | disable non-abstract session bus address | 2017-10-22 | |
| | | | | | systematically blacklist /run/user/*/bus in all profiles with 'net none'. targets distros like Fedora | ||
* | added private-lib to eog, eom, file, gpicview, less, strings, and tar | 2017-10-16 | |
| | |||
* | make deb; fixed strings profile | 2017-08-23 | |
| | |||
* | Merge pull request #1466 from SpotComms/fixnd | 2017-08-13 | |
|\ | | | | | Fix nodvd placement | ||
| * | Fix nodvd placement | 2017-08-13 | |
| | | |||
* | | Harden 17 profiles using private-bin | 2017-08-13 | |
|/ | |||
* | added nodvd to most profiles | 2017-08-13 | |
| | |||
* | Fix notv placement | 2017-08-11 | |
| | |||
* | added notv to most profiles | 2017-08-11 | |
| | |||
* | Unify all profiles | 2017-08-07 | |
| | |||
* | Initial adding of memory-deny-write-execute to profiles | 2017-08-02 | |
| | | | | | | | | - mdwe breaks most vm-based languages so python/java/javascript and some mono programs are not compatible - mdwe also breaks most 3d accelerated programs such as 3d games - mdwe is similar to PaX's mprotect meaning PaX flag managers can be used as reference -- See https://github.com/copperhead/paxd-archive/blob/master/paxd.conf -- See https://github.com/nning/linux-pax-flags | ||
* | Harden 50 profiles | 2017-07-04 | |
| | | | | | Hardened many profiles using disable-mnt and novideo Fixed gnome-font-viewer | ||
* | fix quiet in profiles | 2017-06-08 | |
| | |||
* | added /etc/firejail/globals.local for global customizations | 2017-05-23 | |
| | |||
* | persistent support for all profile files | 2017-02-09 | |
| | |||
* | hardened various profiles | 2016-12-21 | |
| | |||
* | quiet fix | 2016-11-29 | |
| | |||
* | squash attempt 2 | 2016-10-24 | |
| | |||
* | removed private-tmp from sysutils | 2016-10-03 | |
| | |||
* | added back strings profile | 2016-08-25 | |
| | |||
* | removed strings profile | 2016-08-11 | |
| | |||
* | added quiet profile command | 2016-08-01 | |
| | |||
* | nosound | 2016-07-08 | |
| | |||
* | sysutils | 2016-06-28 | |
| | |||
* | cpio, gzip, strings, xzdec | 2016-06-27 | |
| | |||
* | strings, cpio, gzip, xz profiles | 2016-06-26 | |