| Commit message (Collapse) | Author | Age |
|
|
|
|
|
| |
* blacklist gjs in disable-interpreters
* Update
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Work on whitelist-usr-share-common
* sorting; add Modules + QT/KDE stuff
* add wusc.inc to more profiles [needs testing]
* update
* gitg, firefox, evince
* /usr/share/{p11-kit,pixmaps,pki,qt5,tcl8.6,terminfo}
* more profiles
* remove wusc.inc from feedreader
Even with 'whitelist /usr/share/*', feedreader trys to dereference a
NULL pointer.
* more profiles
* whitelist /usr/share breaks wget
even with whitelist /usr/share/*
* extend wusc.inc
* update
* Add alsa,crypto-policies and zoneinfo
* readd wusc.inc to wget and feedreader
* update
* testing results: Debian Buster with KDE
* more KDE stuff
* fix tb
|
| |
|
| |
|
|\
| |
| | |
Introduce allow-common-devel.inc
|
| | |
|
|/ |
|
|
|
|
|
|
| |
* remove mincore
* add @default without chroot
* add @default-nodebuggers without chroot
|
|
|
|
|
|
|
|
| |
* Change wording in redirect_alias-profile.template
* Change wording in profile.template
* Update wording in redirect_alias-profile.template
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* uncomment .local includes
* add options
* ##ignore noexec /tmp
* ##caps.keep CAPS
* ##hostname NAME
* ##writable-etc
* ##writable-run-user
* ##writable-var
* ##writable-var-log
* add disable x11
* x11 none
* blacklist /tmp/.X11-unix
* comment when which of the both option should be used
* sort private-etc template Common
* add comments
* machine-id: breaks sound and sometime dbus related functions
* private-bin: python should be added by 'python*'
* protocol: auxiliary comment for protocol line
* add 'packet' to protocol list
* Sections structure: OPTIONS: now has seccomp* instead of seccomp
|
| |
|
|
|
|
| |
This replaces the outdated templates from #1734
with new templates from the program used in #2093
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
| |
Everything in Notes is now in profile.template (#2735)
|
| |
|
| |
|
|
Create etc/templates
* profile.template
* redirect_alias-profile.template
* syscalls.txt
* Notes
|