summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
...
* | Merge pull request #1831 from glitsj16/eogLibravatar Fred Barclay2018-03-25
|\ \ | | | | | | private-lib fix
| * | more restrictive private-libLibravatar glitsj162018-03-24
| |/ | | | | Using Arch Linux (Gnome Shell 3.26.2, Mutter WM, as in [#1711](https://github.com/netblue30/firejail/issues/1711)). After playing with several Gnome apps and `private-lib` conditions, it looks like there's progress to report. I made a few PR's today on the same topic, usually leaving things commented as to leave room for more eyes to double-check. In this case I took the liberty to throw in an uncommented one for eog. Please respond or rectify if this was uncalled for.
* | Revert a2aaf6fb3829a2407ea4cb1329819c8c5e5d12caLibravatar Fred-Barclay2018-03-25
| |
* | Merge branch 'master' into masterLibravatar SkewedZeppelin2018-03-25
|\ \
| * | various profile hardeningLibravatar smitsohu2018-03-25
| | |
| * | Merge pull request #1829 from glitsj16/evinceLibravatar netblue302018-03-25
| |\ \ | | | | | | | | evince fixes
| | * | Revert "add whitelist-common.inc"Libravatar glitsj162018-03-24
| | | | | | | | | | | | | | | | This reverts commit 94468d6a3bea5ad6a6e0c2e92036e195c68d57d1.
| | * | Create evince-thumbnailer.profileLibravatar glitsj162018-03-24
| | | | | | | | | | | | On Arch Linux evince comes with 3 executables (evince, evince-previewer and evince-thumbnailer), of which only /usr/bin/evince is currently covered by firejail. Adding both others as redirects.
| | * | Create evince-previewer.profileLibravatar glitsj162018-03-24
| | | | | | | | | | | | On Arch Linux evince comes with 3 executables (evince, evince-previewer and evince-thumbnailer), of which only /usr/bin/evince is currently covered by firejail. Adding both others as redirects.
| | * | add whitelist-common.incLibravatar glitsj162018-03-24
| | |/
* | | Fixup blender-2.8 and thunderbird-betaLibravatar Tad2018-03-25
| | |
* | | fixLibravatar Your Name2018-03-24
|/ /
* | fix akonadi_control, enable it in firecfg for a better defaultLibravatar smitsohu2018-03-24
| |
* | cleanupLibravatar smitsohu2018-03-24
| |
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-03-24
|\ \
| * | Fixup gnome-recipes and add it to firecfgLibravatar Tad2018-03-24
| | |
| * | gnome-recipes profileLibravatar glitsj162018-03-24
| | |
| * | Create gnome-recipes.profileLibravatar glitsj162018-03-24
| |/ | | | | This needs an additional change in `disable-programs.inc` to blacklist ${HOME}/.local/share/gnome-recipes. Note: `private-lib` seems to be a WIP, especially for GNOMA apps. Hence I left it out here, although it works for me. Will come back to that issue later.
| * added java support for libreofficeLibravatar netblue302018-03-23
| |
* | add basic akonadi integrationLibravatar smitsohu2018-03-24
| | | | | | | | | | as it is now, there is no support for a full akonadi session inside the knotes sandbox, but knotes can connect to akonadi and should work fine
* | harden openbox profileLibravatar smitsohu2018-03-24
|/
* fix ping hostnameLibravatar netblue302018-03-22
|
* Misc profile hardening and fixesLibravatar Tad2018-03-18
|
* typoLibravatar Fred-Barclay2018-03-18
|
* Spotify on Arch requires /etc/groupLibravatar Fred-Barclay2018-03-18
|
* harden konversation and kwrite, minor fixesLibravatar smitsohu2018-03-18
|
* asunder profileLibravatar netblue302018-03-17
|
* asunder profileLibravatar netblue302018-03-17
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar netblue302018-03-17
|\
| * Move apparmor option to the top of the options list in all profilesLibravatar Tad2018-03-17
| |
* | asunder profileLibravatar netblue302018-03-17
|/
* more apparmor deploymentLibravatar Vincent432018-03-17
|
* apparmor deploymentLibravatar netblue302018-03-16
|
* Add a LibreOffice profile alias for BaseLibravatar Tad2018-03-15
|
* removing private-lib from evince, issue #1711Libravatar netblue302018-03-14
|
* fix private-etc in spotify profile - #1768Libravatar smitsohu2018-03-13
|
* fix qupzilla, falkon (seccomp, tracelog, private-tmp) - #1794, #1736Libravatar smitsohu2018-03-13
|
* fix unbound (ip-transparent option) - #1731Libravatar smitsohu2018-03-13
|
* harden kwriteLibravatar smitsohu2018-03-13
|
* noblacklist /etc/profile.d cleanupLibravatar netblue302018-03-13
|
* fix PROMPT_COMMAND for bash - this was the problem on CentOS that we needed ↵Libravatar netblue302018-03-13
| | | | to unblacklist /etc/profile.d; I'll do some cleanup in the next commit
* (Temporarily?) fix private-lib for evince. See #1711"eLibravatar Fred-Barclay2018-03-12
|
* Even more fixes for /etc/profileLibravatar Fred-Barclay2018-03-12
|
* More fixes for /etc/profile and mdweLibravatar Tad2018-03-12
| | | | | - Adds noblacklist /etc/profile.d to many profiles like 2e17082ba4b3399bf5d68bb75587934ea028cc5c and 970f739e2be202a39ab82f589d5773267b903de6 - Disables mdwe to workaround #1803 like 970f739e2be202a39ab82f589d5773267b903de6
* Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302018-03-12
|\
| * Add a profile for gnome-builderLibravatar Tad2018-03-12
| |
| * Remove mdwe from viewnior - fix #1808Libravatar Fred-Barclay2018-03-12
| |
* | bringing back private-lib in evince, and some fixes for Arch LinuxLibravatar netblue302018-03-12
|/
* fix bash on CentOS 7Libravatar startx20172018-03-12
|
* fix speller support in gedit profileLibravatar startx20172018-03-12
|