Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | firefox profile | 2015-11-13 | |
| | |||
* | added .cache/mozilla/firefox to Firefox whitelist | 2015-11-12 | |
| | |||
* | whitelist support for /tmp | 2015-11-12 | |
| | |||
* | added whitelist-common.inc | 2015-11-11 | |
| | |||
* | Merge pull request #130 from al42and/skype | 2015-11-11 | |
|\ | | | | | Fixed Skype profile: was a copy of Steam profile | ||
| * | Fixed Skype profile: was a copy of Steam profile | 2015-11-11 | |
| | | | | | | | | | | | | | | Blacklisted ~/.Skype directory by default, since it contains copyable account credentials. Revoked Skype access to Steam dirs, granted access to Skype dirs. | ||
* | | Allow firefox theming with non-global themes | 2015-11-10 | |
|/ | |||
* | added --noblacklist option | 2015-11-10 | |
| | |||
* | added dnscrypt-proxy and unbound profiles | 2015-11-10 | |
| | |||
* | whitelist ~/.config/gtk-3.0 in firefox profile | 2015-11-09 | |
| | |||
* | whitelisting Загрузки (Downloads) directory in firefox and chromium ↵ | 2015-11-09 | |
| | | | | profiles | ||
* | allow access to ~/.gnupg in thunderbird.profile | 2015-11-09 | |
| | |||
* | google chrome profile | 2015-11-06 | |
| | |||
* | Chromium profile | 2015-11-04 | |
| | |||
* | whitelisting ~/.fonts | 2015-11-02 | |
| | |||
* | Added profile for Conkeror Browser | 2015-11-01 | |
| | |||
* | added disable-devel.inc | 2015-11-01 | |
| | |||
* | profile work | 2015-10-31 | |
| | |||
* | merged disable-history.inc into disable-common.inc | 2015-10-30 | |
| | |||
* | Protect shell startup files | 2015-10-30 | |
| | |||
* | enable --protocol by default in profiles | 2015-10-28 | |
| | |||
* | profile work | 2015-10-28 | |
| | |||
* | cleanup | 2015-10-28 | |
| | |||
* | vimperator, seccomp | 2015-10-28 | |
| | |||
* | added skype profile, enabled seccomp in steam profile, added .gtkrc-2.0 in ↵ | 2015-10-27 | |
| | | | | firefox profile | ||
* | Steam profile | 2015-10-26 | |
| | |||
* | removed shell=none from all profiles | 2015-10-26 | |
| | |||
* | default Firefox whitelisting | 2015-10-25 | |
| | |||
* | Merge pull request #89 from g4jc/master | 2015-10-24 | |
|\ | | | | | add a few new items to blacklist | ||
| * | add a few new items to blacklist | 2015-10-23 | |
| | | |||
* | | Update pidgin.profile | 2015-10-23 | |
|/ | | | Pidgin's data directory is blacklisted in disable-common.inc, so it couldn't access it. | ||
* | fixed join/shutdown problem, moving browsers and mail clients to a ↵ | 2015-10-19 | |
| | | | | --shell=none default in profile files | ||
* | --private-bin | 2015-10-11 | |
| | |||
* | added shell none in firefox profile | 2015-10-10 | |
| | |||
* | fixed transmission-qt.profile | 2015-10-08 | |
| | |||
* | fixed transmission-qt profile | 2015-10-08 | |
| | |||
* | Add a profile for Spotify | 2015-10-07 | |
| | |||
* | blacklist sockets in /run | 2015-09-27 | |
| | |||
* | disabled Wine and VirtualBox in default profiles | 2015-09-24 | |
| | |||
* | fixes | 2015-09-24 | |
| | |||
* | security profile work | 2015-09-24 | |
| | |||
* | profile work | 2015-09-22 | |
| | |||
* | Default profiles work | 2015-09-16 | |
| | |||
* | cleanup and small fixes | 2015-09-05 | |
| | |||
* | testing, admin work | 2015-09-01 | |
| | |||
* | Merge pull request #53 from sarneaud/noblacklist | 2015-09-01 | |
|\ | | | | | Noblacklist | ||
| * | Update profiles to use the new noblacklist command. | 2015-09-01 | |
| | | |||
* | | cleanup | 2015-09-01 | |
|/ | |||
* | using /etc/firejail/server.profile as default profile if the sandbox is ↵ | 2015-08-31 | |
| | | | | started by root | ||
* | Rewrite globbing code to fix various minor issues | 2015-08-29 | |
| | | | | | | | | | | | | | * Plug a memory leak. * Remove the short-circuit. (This breaks when someone uses [] or ? patterns without using *. I figure it's best to use the principle of least surprise and just let the system glob() implementation do what it does.) * Stop sorting results. I've also replaced a lot of disable-history.inc with a glob pattern. Now it catches files like .sqlite_history and whatever the user runs under rlwrap. |