aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* housekeeping: strip unneeded whitespaceLibravatar Fred Barclay2020-02-01
|
* profiles: whitelist /usr/share/doc in some profilesLibravatar Reiner Herrmann2020-01-31
|
* Add a profile alias for multimc5Libravatar Tad2020-01-30
|
* add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | Thanks to @rusty-snake for his comment in #3198.
* add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | Thanks to @rusty-snake for suggesting to move /usr/share/file to wusc in #3198.
* fix wusc in nano.profileLibravatar glitsj162020-01-30
| | | This fixes #3198.
* fix spelling in disable-common.incLibravatar glitsj162020-01-29
|
* Add profiles for the WPS-OfficeLibravatar rusty-snake2020-01-29
|
* fix private-lib for Gentoo in unf.profileLibravatar glitsj162020-01-29
| | | Thanks to @s-hamman for reporting this in the comments of #3193.
* fix private-lib for Gentoo in geekbench.profileLibravatar glitsj162020-01-29
| | | Thanks to @s-hamman for reporting this in the comments of #3193.
* fix private-lib for Gentoo in zathura.profileLibravatar glitsj162020-01-29
|
* noblacklist user cacheLibravatar glitsj162020-01-29
| | | Thanks to @rusty-snake's comment in https://github.com/netblue30/firejail/pull/3159.
* fix ordering in ${HOME}/.cache section and add gummi entree there tooLibravatar glitsj162020-01-29
|
* gedit: comment private-libLibravatar rusty-snake2020-01-29
|
* fix missing global include documentation (#3195)Libravatar Florian Begusch2020-01-29
|
* Add profiles for common (la)tex commands and a latex editor (#3159)Libravatar Florian Begusch2020-01-29
|
* disable private-lib in zathura.profileLibravatar glitsj162020-01-29
| | | Thanks to https://github.com/s-hamann for helping to harden the zathura profile.
* updates for zathura.profile (#3193)Libravatar glitsj162020-01-29
| | | | | | | | * move mkdir in zathura.profile * harden zathura.profile * fix private-lib in zathura.profile
* Update zathura.profileLibravatar rusty-snake2020-01-28
|
* clarify dropping python2 support in meld.profile (#3167)Libravatar glitsj162020-01-27
| | | | | | * clarify dropping python2 support in meld.profile * properly comment the python2 situation in meld
* Update whois.profile (#3154)Libravatar Amin Vakil2020-01-27
| | | | | | | | | | | | | | * Update whois.profile More details in https://github.com/netblue30/firejail/issues/3153 * Update etc/whois.profile private-etc Alphabetic order Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com> Co-authored-by: rusty-snake <print_hello_world+GitHub@protonmail.com>
* Merge pull request #3149 from GovanifY/masterLibravatar netblue302020-01-27
|\ | | | | Blacklisting openrc paths by defaults
| * tighten info gathering for openrcLibravatar Gauvain "GovanifY" Roussel-Tarbouriech2020-01-15
| |
* | fixup! refactor some profiles as electron redirects (#3188)Libravatar rusty-snake2020-01-27
| | | | | | | | | | | | - move ignores to top - add remove netlink protocol from whalebird - ignore caps.drop all in wire-desktop
* | refactor some profiles as electron redirects (#3188)Libravatar glitsj162020-01-26
| | | | | | | | | | | | | | | | * refactor as electron redirect * refactor as electron redirect * refactor as electron redirect
* | fix beaker.profileLibravatar glitsj162020-01-26
| | | | | | whitelist ${DOWNLOADS} is already in the included electron.profile.
* | Create allow-php.incLibravatar glitsj162020-01-25
| | | | | | We have PHP items blacklisted in disable-interpreters.inc that never get noblacklisted. This PR fixes that.
* | local customizations for allow-gjs.incLibravatar glitsj162020-01-25
| |
* | allow-*.local customizations (#3187)Libravatar glitsj162020-01-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * local customizations for allow-common-devel.inc * local customizations for allow-java.inc * local customizations for allow-lua.inc * local customizations for allow-perl.inc * local customizations for allow-python2.inc * local customizations for allow-python3.inc * local customizations for allow-ruby.inc
* | blacklist gjs in disable-interpreters (#3186)Libravatar rusty-snake2020-01-25
| | | | | | | | | | | | * blacklist gjs in disable-interpreters * Update
* | new profile: gnome-passwordsafeLibravatar rusty-snake2020-01-25
| |
* | Allow request_key syscall for udiskie (#3177)Libravatar Carlo Abelli2020-01-25
| | | | | | Fixes #3175.
* | Allow mbind syscall for GIMP (#3178)Libravatar Carlo Abelli2020-01-25
| | | | | | Fixes #2681.
* | Add a profile for clipgrabLibravatar rusty-snake2020-01-25
| | | | | | | | Thanks @DurtyDev for testing (netblue30/firetools#47)
* | disable-interpreters: blacklist /usr/lib64/python3*Libravatar rusty-snake2020-01-25
| |
* | Rework thunderbird.profile (#3091)Libravatar rusty-snake2020-01-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Rework thunderbird.profile (1) * Rework thunderbird.profile (2) * Rework thunderbird.profile (3) * Rework thunderbird.profile (4) * Rework thunderbird.profile (5) * Rework thunderbird.profile (6)
* | Browsers: private-dev conditional with BROWSER_DISABLE_U2FLibravatar rusty-snake2020-01-21
| | | | | | | | see also #3170
* | Add comment for python-based plugins in claws-mail.profileLibravatar glitsj162020-01-20
| |
* | Fix firefox (#3171)Libravatar Antz2020-01-20
| |
* | harden celluloid.profileLibravatar rusty-snake2020-01-19
| |
* | create rtv.profileLibravatar rusty-snake2020-01-19
| |
* | fixes for 'blacklist ${RUNUSER}/wayland-*' (#3166)Libravatar glitsj162020-01-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * unbreak audio-recorder Support both X11 and Wayland by default. Users can add 'blacklist ${RUNUSER}/wayland-*' or 'x11 none' in their audio-recorder.local. * unbreak ddgtk Support both X11 and Wayland by default. Users can add 'blacklist ${RUNUSER}/wayland-*' or 'x11 none' in their ddgtk.local. * unbreak and harden gconf-editor Support both X11 and Wayland by default. Also whitelist /usr/share/gconf-editor for wusc. * unbreak seahorse Support both X11 and Wayland by default. * add blacklist ${RUNUSER}/wayland-* to dnscrypt-proxy
* | add tvbrowser.profileLibravatar rusty-snake2020-01-18
| | | | | | | | Thanks @Micha-Btz for all the testing.
* | make devilspie2 redircet to devilspie (#3163)Libravatar rusty-snake2020-01-18
| |
* | die python2 die !! #3164 (meld)Libravatar rusty-snake2020-01-18
| | | | | | | | https://github.com/netblue30/firejail/issues/3164#issuecomment-575892401
* | harden baoba and transmission-commonLibravatar rusty-snake2020-01-18
| |
* | refactor claws-mail and sylpheed as whitelist profiles (#3162)Libravatar glitsj162020-01-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * refactor claws-mail as whitelist profile * refactor sylpheed as whitelist profile * Create email-common.profile * safeguard ${DOCUMENTS} * Add disable-xdg to email-common.profile Thanks @rusty-snake for the review.
* | add RUNUSER and Disable Wayland to the templateLibravatar rusty-snake2020-01-18
| |
* | add 'blacklist ${RUNUSER}/wayland-*' to all profi…Libravatar rusty-snake2020-01-18
| | | | | | | | …les with 'x11 none'
* | add 'blacklist ${RUNUSER}/wayland-*' to all profi…Libravatar rusty-snake2020-01-18
| | | | | | | | …les with 'blacklist /tmp/.X11-unix'