aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* wusc whitelists /usr/share/perl{,5} nowLibravatar rusty-snake2020-08-25
| | | | | | | This commit removes it from profile which have it. /usr/share/perl* is still inaccessible for profiles with wusc and disable-interpreters.inc w/o allow-perl.inc.
* add whitelist items for uim (#3587)Libravatar Anton Shestakov2020-08-24
| | | | | | | | | * add ~/.uim.d directory to whitelist-common.inc uim is a multilingual input method framework (similar to ibus, which has its own entry in this file). * add /var/lib/uim to whitelist-var-common.inc When user installs an uim module (for example, an input method like anthy or mozc), it gets registered in a file in this directory.
* renamed /etc/apparmor.d/local/firejail-local to ↵Libravatar netblue302020-08-22
| | | | /etc/apparmor.d/local/firejail.default - merge form 0.9.62.4
* Allow video for Signal profile.Libravatar Ondřej Nový2020-08-17
| | | | | Signal is adding support for video calls on desktop, see https://signal.org/blog/desktop-calling-beta/
* Fix missing mkfile in 5d741795c3bb2060730e282a8f512b999418e098Libravatar Fred Barclay2020-08-16
|
* Use whitelisting for video players (#3472)Libravatar Fred Barclay2020-08-15
| | | | | | | | | | | | | | | * Use whitelisting for video players See https://github.com/netblue30/firejail/pull/3469 * Update media player whitelists See reviews at https://github.com/netblue30/firejail/pull/3472 Block $DOCUMENTS Make $DESKTOP read-only * Review fixes: include read-only Desktop in whitelist
* Merge pull request #3583 from kortewegdevries/fixnomacsLibravatar Fred Barclay2020-08-13
|\ | | | | Fix nomacs
| * Fix nomacsLibravatar kortewegdevries2020-08-11
| | | | | | | | | | | | | | | | | | | | ``` Aug 11 16:32:32 korte audit[29004]: SECCOMP auid=1000 uid=1000 gid=1000 ses=2 subj==firejail-default (enforce) pid=29004 comm="nomacs" exe="/usr/bin/nomacs" sig=31 arch=c000003e syscall=9 compat=0 ip=0x7fa2a1cc98c6 code=0x0 ```
* | Merge pull request #3569 from topimiettinen/seccomp-logLibravatar startx20172020-08-12
|\ \ | | | | | | seccomp: logging
| * | seccomp: loggingLibravatar Topi Miettinen2020-08-05
| |/ | | | | | | | | | | | | Allow `log` as an alternative seccomp error action instead of killing or returning an errno code. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
* / Added youtube-viewer profile with Gtk frontends (#3542)Libravatar kortewegdevries2020-08-11
|/ | | | | Initial,amend: wrong dir,delete gtk-*,added new files Co-authored-by: kortewegdevries <k0rtic_dv@aol.com>
* Add profile for otter-browser (#3564)Libravatar kortewegdevries2020-08-04
| | | | | | | * Add profile for otter-browser Initial * private-bin,sorting
* fix ordering in vmware.profileLibravatar glitsj162020-07-31
|
* Added git-cola profile (#3560)Libravatar kortewegdevries2020-07-30
| | | | | | | | | | | * Added git-cola profile Initial * Edit private-etc Add alternatives,pki * Add disable-xdg
* Add vmware profile #3526Libravatar Neo000012020-07-30
|
* new profile: gnome-calendarLibravatar rusty-snake2020-07-30
|
* add profile for sushi (#3558)Libravatar rusty-snake2020-07-30
|
* Added lyx profile (#3556)Libravatar kortewegdevries2020-07-30
| | | | | | | | | * Added lyx profile Initial * Rmoved whitelists Make home directory more accessible
* Added minitube profile (#3555)Libravatar kortewegdevries2020-07-30
| | | | | | | | | * Added minitube profile Initial * Second Removed no3d,added novideo
* Added Nuclear profile (#3553)Libravatar kortewegdevries2020-07-30
| | | Initial
* Added mtpaint profile (#3550)Libravatar kortewegdevries2020-07-30
| | | | | | | | | * Added mtpaint profile Initial * Second Remove IPC-namespace,netfilter
* fix Lua in mpv.profileLibravatar glitsj162020-07-28
| | | Fixes for #3554.
* Added minecraft-launcher profile (#3538)Libravatar kortewegdevries2020-07-27
| | | | | | | | | | | | | | | * Added minecraft-launcher-profile Initial * Changed minecraft-launcher profile Added space,tracelog,nodvd * Third Fixed private-etc,added notes about path,java * Sorting
* fix ordering in xfce4-screenshooter.profileLibravatar glitsj162020-07-26
|
* Merge pull request #3547 from kortewegdevries/mtpaintLibravatar rusty-snake2020-07-26
|\ | | | | Added xfce4-screenshooter profile
| * Added xfce4-screenshooter profileLibravatar kortewegdevries2020-07-25
| | | | | | | | Initial,removed common blaclist,add netfilter,private-etc
* | fix #3551Libravatar rusty-snake2020-07-26
| |
* | fix typo in multicast CIDRLibravatar Emil Gedda2020-07-25
|/
* add newsflash profileLibravatar rusty-snake2020-07-25
|
* Update virtualbox.profile (#3537)Libravatar Neo000012020-07-24
| | | | | | | | | | | | | * Update virtualbox.profile * Update virtualbox.profile * Update virtualbox.profile * Update virtualbox.profile * Update virtualbox.profile * Update virtualbox.profile
* Filter seccompLibravatar kortewegdevries2020-07-24
| | | | Add chroot
* fix ordering in freetube.profileLibravatar glitsj162020-07-23
|
* fix ordering in cawbird.profileLibravatar glitsj162020-07-23
|
* Added freetube profile (#3535)Libravatar kortewegdevries2020-07-23
| | | | | | | | | | | * Added freetube profile Initial * Added freetube profile Second:drop ignore seccomp,add disable-shell See https://github.com/netblue30/firejail/pull/3535
* Added cawbird profile (#3533)Libravatar kortewegdevries2020-07-23
| | | | | | * Added cawbird profile See https://github.com/netblue30/firejail/pull/3533 Squash commits for merging
* Merge pull request #3518 from onovy/zoom-profileLibravatar rusty-snake2020-07-21
|\ | | | | Hardend Zoom profile
| * Hardend Zoom profileLibravatar Ondřej Nový2020-07-20
| |
* | Merge pull request #3520 from onovy/mattermost-profileLibravatar rusty-snake2020-07-21
|\ \ | | | | | | Add Mattermost desktop profile
| * | Add Mattermost desktop profileLibravatar Ondřej Nový2020-07-20
| |/
* | Update telegram.profile (#3529)Libravatar Neo000012020-07-21
| | | | | | | | | | | | | | * Update telegram.profile * Update telegram.profile * Update telegram.profile
* | New profile for homebank (#3525)Libravatar kortewegdevries2020-07-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add files via upload New profile for homebank * Update etc/profile-a-l/homebank.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Update etc/profile-a-l/homebank.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Update homebank.profile * Update firecfg.config homebank added * Update disable-programs.inc Added blacklist. * Update homebank.profile Added disable-shell,removed whitelisted docs * Update disable-programs.inc Changed sorting * Update homebank.profile Changed sorting * Added cawbird profile Initial * Revert "Added cawbird profile" This reverts commit 6b045976adf62a91882236600c55926af34b6a52. Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | fix #3404 (#3511)Libravatar rusty-snake2020-07-20
| | | | | | | | | | * fix #3404 * Update teams.profile
* | Update discord-common.profileLibravatar rusty-snake2020-07-20
| | | | | | | | | | fixes #3528 Are there any reasons why discord has no shell none?
* | fixupsLibravatar rusty-snake2020-07-19
| |
* | Fix gnome-pomodoroLibravatar rusty-snake2020-07-19
| |
* | Harden gnome-calculatorLibravatar rusty-snake2020-07-19
| |
* | Hardend Signal desktop profileLibravatar Ondřej Nový2020-07-17
|/
* add element-desktop redirect profile (#3517)Libravatar glitsj162020-07-16
| | | | | | | | | * Create element-desktop.profile * add element-desktop dirs to disable-programs.inc * add element-desktop to firecfg.config * Update RELNOTES
* fix #3501Libravatar rusty-snake2020-07-16
|
* Blacklist .local/share/kxmlgui5 and allow access only for applications which ↵Libravatar Kishore96in2020-07-16
| | | | | | | | | | | | | | | | | | | | use it. (#3493) * blacklist .local/share/kxmlgui5 KDE programs use this to store their toolbar config. * noblacklist .local/share/kxmlgui5 in the relevant KDE applications. * Whitelist kxmlgui file for okular. * Use a glob to blacklist subfolders instead of the parent folder. noblacklisting individual subdirectories works only if we do it this way (tested by launching bash in the kate profile). * Make directory, not file. * noblacklist relevant subdirs for more KDE applications
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-11 10:59:40 +0000