Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | | Merge pull request #1831 from glitsj16/eog | 2018-03-25 | ||
|\ \ | | | | | | | private-lib fix | |||
| * | | more restrictive private-lib | 2018-03-24 | ||
| |/ | | | | | Using Arch Linux (Gnome Shell 3.26.2, Mutter WM, as in [#1711](https://github.com/netblue30/firejail/issues/1711)). After playing with several Gnome apps and `private-lib` conditions, it looks like there's progress to report. I made a few PR's today on the same topic, usually leaving things commented as to leave room for more eyes to double-check. In this case I took the liberty to throw in an uncommented one for eog. Please respond or rectify if this was uncalled for. | |||
* | | Revert a2aaf6fb3829a2407ea4cb1329819c8c5e5d12ca | 2018-03-25 | ||
| | | ||||
* | | Merge branch 'master' into master | 2018-03-25 | ||
|\ \ | ||||
| * | | various profile hardening | 2018-03-25 | ||
| | | | ||||
| * | | Merge pull request #1829 from glitsj16/evince | 2018-03-25 | ||
| |\ \ | | | | | | | | | evince fixes | |||
| | * | | Revert "add whitelist-common.inc" | 2018-03-24 | ||
| | | | | | | | | | | | | | | | | This reverts commit 94468d6a3bea5ad6a6e0c2e92036e195c68d57d1. | |||
| | * | | Create evince-thumbnailer.profile | 2018-03-24 | ||
| | | | | | | | | | | | | On Arch Linux evince comes with 3 executables (evince, evince-previewer and evince-thumbnailer), of which only /usr/bin/evince is currently covered by firejail. Adding both others as redirects. | |||
| | * | | Create evince-previewer.profile | 2018-03-24 | ||
| | | | | | | | | | | | | On Arch Linux evince comes with 3 executables (evince, evince-previewer and evince-thumbnailer), of which only /usr/bin/evince is currently covered by firejail. Adding both others as redirects. | |||
| | * | | add whitelist-common.inc | 2018-03-24 | ||
| | |/ | ||||
* | | | Fixup blender-2.8 and thunderbird-beta | 2018-03-25 | ||
| | | | ||||
* | | | fix | 2018-03-24 | ||
|/ / | ||||
* | | fix akonadi_control, enable it in firecfg for a better default | 2018-03-24 | ||
| | | ||||
* | | cleanup | 2018-03-24 | ||
| | | ||||
* | | Merge branch 'master' of https://github.com/netblue30/firejail | 2018-03-24 | ||
|\ \ | ||||
| * | | Fixup gnome-recipes and add it to firecfg | 2018-03-24 | ||
| | | | ||||
| * | | gnome-recipes profile | 2018-03-24 | ||
| | | | ||||
| * | | Create gnome-recipes.profile | 2018-03-24 | ||
| |/ | | | | | This needs an additional change in `disable-programs.inc` to blacklist ${HOME}/.local/share/gnome-recipes. Note: `private-lib` seems to be a WIP, especially for GNOMA apps. Hence I left it out here, although it works for me. Will come back to that issue later. | |||
| * | added java support for libreoffice | 2018-03-23 | ||
| | | ||||
* | | add basic akonadi integration | 2018-03-24 | ||
| | | | | | | | | | | as it is now, there is no support for a full akonadi session inside the knotes sandbox, but knotes can connect to akonadi and should work fine | |||
* | | harden openbox profile | 2018-03-24 | ||
|/ | ||||
* | fix ping hostname | 2018-03-22 | ||
| | ||||
* | Misc profile hardening and fixes | 2018-03-18 | ||
| | ||||
* | typo | 2018-03-18 | ||
| | ||||
* | Spotify on Arch requires /etc/group | 2018-03-18 | ||
| | ||||
* | harden konversation and kwrite, minor fixes | 2018-03-18 | ||
| | ||||
* | asunder profile | 2018-03-17 | ||
| | ||||
* | asunder profile | 2018-03-17 | ||
| | ||||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2018-03-17 | ||
|\ | ||||
| * | Move apparmor option to the top of the options list in all profiles | 2018-03-17 | ||
| | | ||||
* | | asunder profile | 2018-03-17 | ||
|/ | ||||
* | more apparmor deployment | 2018-03-17 | ||
| | ||||
* | apparmor deployment | 2018-03-16 | ||
| | ||||
* | Add a LibreOffice profile alias for Base | 2018-03-15 | ||
| | ||||
* | removing private-lib from evince, issue #1711 | 2018-03-14 | ||
| | ||||
* | fix private-etc in spotify profile - #1768 | 2018-03-13 | ||
| | ||||
* | fix qupzilla, falkon (seccomp, tracelog, private-tmp) - #1794, #1736 | 2018-03-13 | ||
| | ||||
* | fix unbound (ip-transparent option) - #1731 | 2018-03-13 | ||
| | ||||
* | harden kwrite | 2018-03-13 | ||
| | ||||
* | noblacklist /etc/profile.d cleanup | 2018-03-13 | ||
| | ||||
* | fix PROMPT_COMMAND for bash - this was the problem on CentOS that we needed ↵ | 2018-03-13 | ||
| | | | | to unblacklist /etc/profile.d; I'll do some cleanup in the next commit | |||
* | (Temporarily?) fix private-lib for evince. See #1711"e | 2018-03-12 | ||
| | ||||
* | Even more fixes for /etc/profile | 2018-03-12 | ||
| | ||||
* | More fixes for /etc/profile and mdwe | 2018-03-12 | ||
| | | | | | - Adds noblacklist /etc/profile.d to many profiles like 2e17082ba4b3399bf5d68bb75587934ea028cc5c and 970f739e2be202a39ab82f589d5773267b903de6 - Disables mdwe to workaround #1803 like 970f739e2be202a39ab82f589d5773267b903de6 | |||
* | Merge branch 'master' of http://github.com/netblue30/firejail | 2018-03-12 | ||
|\ | ||||
| * | Add a profile for gnome-builder | 2018-03-12 | ||
| | | ||||
| * | Remove mdwe from viewnior - fix #1808 | 2018-03-12 | ||
| | | ||||
* | | bringing back private-lib in evince, and some fixes for Arch Linux | 2018-03-12 | ||
|/ | ||||
* | fix bash on CentOS 7 | 2018-03-12 | ||
| | ||||
* | fix speller support in gedit profile | 2018-03-12 | ||
| |