Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | fix unbound (ip-transparent option) - #1731 | smitsohu | 2018-03-13 |
| | |||
* | unbound fix (part 2) - whitelist /var/run | smitsohu | 2018-02-01 |
| | |||
* | unbound fix (writable-var) - #1731 | smitsohu | 2018-01-31 |
| | |||
* | some profile enhancements | smitsohu | 2017-10-08 |
| | |||
* | various profile enhancements | smitsohu | 2017-09-25 |
| | | | | | | | * okular needs kdeinit4 for open file dialog since recently * memory-deny-write-execute should be a safe addition for desktop use of dnscrypt and unbound * cleanup works | ||
* | tighten capability sets | smitsohu | 2017-09-03 |
| | |||
* | Merge pull request #1511 from smitsohu/servers | netblue30 | 2017-09-02 |
|\ | | | | | improve servers, harden musescore | ||
| * | add caps.keep to unbound,dnscrypt | smitsohu | 2017-09-02 |
| | | |||
| * | slightly rephrase | smitsohu | 2017-09-02 |
| | | |||
| * | fix mdwe | smitsohu | 2017-09-02 |
| | | |||
| * | add back disable-mnt | smitsohu | 2017-09-02 |
| | | |||
| * | drop disable-mnt | smitsohu | 2017-09-01 |
| | | |||
| * | improve servers, harden musescore | smitsohu | 2017-08-31 |
| | | |||
* | | Fix logging for servers | Tad | 2017-08-31 |
|/ | |||
* | profile enhancements (mostly novideo) | smitsohu | 2017-08-29 |
| | |||
* | Fix nodvd placement | Tad | 2017-08-13 |
| | |||
* | added nodvd to most profiles | netblue30 | 2017-08-13 |
| | |||
* | Fix notv placement | Tad | 2017-08-11 |
| | |||
* | added notv to most profiles | netblue30 | 2017-08-11 |
| | |||
* | Unify all profiles | Tad | 2017-08-07 |
| | |||
* | remove trailing whitespace from etc/ | Fred Barclay | 2017-05-24 |
| | |||
* | added /etc/firejail/globals.local for global customizations | netblue30 | 2017-05-23 |
| | |||
* | Update unbound profile to block 3D acceleration. | Austin S. Hemmelgarn | 2017-02-15 |
| | | | There is no legitimate reason for a caching DNS resolver to need 3D acceleration. Unbound adheres to this already, so any attempts to access GPU hardware from it are by definition either bugs or the result of an exploit, so let's just block access to the GPU. | ||
* | persistent support for all profile files | netblue30 | 2017-02-09 |
| | |||
* | nosound | netblue30 | 2016-07-08 |
| | |||
* | introducing disable-passwdmgr.inc | netblue30 | 2016-03-28 |
| | |||
* | consolidated disable-terminals into disable-common | netblue30 | 2016-03-27 |
| | |||
* | consolidating disable-mgmt and disable-sercret into disable-common | netblue30 | 2016-03-26 |
| | |||
* | profile work | netblue30 | 2016-03-26 |
| | |||
* | split out terminal blacklisting in disable-terminals.inc | netblue30 | 2016-02-12 |
| | |||
* | tightening unbound and dnscrypt-proxy profiles | netblue30 | 2016-01-23 |
| | |||
* | tightening unbound and dnscrypt-proxy profiles | netblue30 | 2016-01-23 |
| | |||
* | added dnscrypt-proxy and unbound profiles | netblue30 | 2015-11-10 |