firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	Fix #1724, Tor browser not working on Ubuntu and Fedora	Tad	2018-01-14
\|
*	Update firecfg.config and add a profile alias for idea.sh	Tad	2018-01-14
\|
*	Add a profile for OnionShare	Tad	2018-01-14
\|
*	Add a profile for Pitivi	Tad	2018-01-12
\|
*	disable qml disk cache globally	smitsohu	2018-01-08
\|
*	Fixup b9846aed427487f5acc764eb21369b0c9cb2b41a	Tad	2018-01-04
\|
*	Add a Firefox profile alias for Firefox Developer Edition	Tad	2018-01-04
\|
*	improve theming support (kvantum, qt5ct) - #1540	smitsohu	2018-01-02
\|
*	Merge pull request #1701 from bn0785ac/master	netblue30	2018-01-02
\|\ \| \| \| \|	tor flavours
\| *	TBB pt-br fixup	Tad	2018-01-01
\| \|
\| *	Simplfy locale specific Tor Browser profiles	Tad	2018-01-01
\| \|
\| *	tor flavours	Your Name	2017-12-30
\| \|
* \|	Merge pull request #1710 from bitfreak25/master	SpotComms	2018-01-01
\|\ \ \| \| \| \| \| \|	Add profile for "playonlinux"
\| * \|	Add profile for "playonlinux"	bitfreak25	2018-01-01
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This profile have been successfully tested by starting a windows application through it. "wine.profile" has been used as template for this. Only "noblacklist ${PATH}/nc" has been added because playonlinux needs it to run. Please note that this is currently not tested due to security aspects, so it may need a rework later on. Because opening a unknown windows application through it could possibly be a security risk.
* \| \|	Merge pull request #1708 from bitfreak25/master	SpotComms	2018-01-01
\|\\| \| \| \| \| \| \| \|	Fix #1702 - Couldn't start 'minetest' in Debian Testing
\| * \|	Fixup fix for #1702	Tad	2018-01-01
\| \| \|
\| * \|	Fix #1702 - Couldn't start 'minetest' in Debian Testing	bitfreak25	2018-01-01
\| \|/ \| \| \| \|	This removes the "private-etc" line from the "minetest"-profile for a successfully start of the game.
* \|	Blacklist the Dash wallet directory	Danil Semelenov	2017-12-31
\| \|
* \|	Add "sylpheed" to profiles	bitfreak25	2017-12-30
\|/ \| \|	This profile have been successfully tested by sending and receiving an Email. "claws-mail.profile" has been used as template for this.
*	inox edgy flavours	Your Name	2017-12-30
\|
*	Fix #1690 - qbittorrent doesn't launch on some Arch and Mint 17.3 systems	Fred Barclay	2017-12-28
\|
*	Add netlink and noblacklist openssl to teamspeak3 profile - potential fix ↵	Fred-Barclay	2017-12-27
\| \| \| \|	for #1695
*	adding basilisk profile - #1693	netblue30	2017-12-27
\|
*	Merge pull request #1697 from sgtpep/patch-4	netblue30	2017-12-27
\|\ \| \| \| \|	Blacklist the monero wallets directory
\| *	Blacklist the monero wallets directory	Danil Semelenov	2017-12-27
\| \| \| \| \| \|	~/Monero/wallets is the default path suggested by the official wallet application, but it can be changed by user.
* \|	Blacklist ~/.ethereum	Danil Semelenov	2017-12-27
\|/
*	Fix #1686: comment out icedove dirs and don't attempt to mkdir ~/.icedove to ↵	Fred Barclay	2017-12-24
\| \| \| \|	avoid clash with Thunderbird on Debian systems.
*	Merge pull request #1691 from DiGitHubCap/master	Fred Barclay	2017-12-22
\|\ \| \| \| \|	Fix Deluge
\| *	Fix Deluge	DiGitHubCap	2017-12-22
\| \| \| \| \| \| \| \| \| \|	Deluge needs access to more than the deluge binary if it runs as a daemon (or if you want to access it via the web or command line)
* \|	kwin_x11 fixes	smitsohu	2017-12-22
\| \|
* \|	Merge pull request #1687 from floxo/master	smitsohu	2017-12-22
\|\ \ \| \| \| \| \| \|	Added environment variable QML_DISABLE_DISK_CACHE=1 to okular.profile.
\| * \|	Added environment variable QML_DISABLE_DISK_CACHE=1 to okular.profile.	Flox	2017-12-21
\| \|/ \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Without it, recent okular versions (here 17.12.0-1 on Arch Linux) crash with mprotect failed in ExecutableAllocator::makeExecutable: Permission denied due to the noexec constraints in the firejail profile.
* \|	Add iana-etc's services to private-etc in steam.profile, fixes #1688	Tad	2017-12-22
\| \|
* \|	disable-common.inc: read-only access to ~/.ssh/authorized_keys	Alexander GQ Gerasiov	2017-12-22
\|/ \| \| \| \| \| \| \| \| \| \| \| \| \| \|	disable-common.inc blacklists whole .ssh, but some profiles (e.g. idea.sh) unblacklists it to allow git over ssh with public key auth. But this creates security hole, since firejailed app could modify ~/.ssh/authorized_keys and allow arbitrary code execution on the host with sshd installed (e.g. ssh localhost and run any program) or even open backdoor for remote attacker. This commits disallows write access to ~/.ssh/authorized_keys even if .ssh was unblacklisted. Signed-off-by: Alexander GQ Gerasiov <gq@cs.msu.su>
*	Add Figaro's Password Manager 2 to disable-passwdmgr.inc	netblue30	2017-12-18
\|
*	Fix #1674	Tad	2017-12-17
\| \| \| \|	look into why this is breaking
*	Profile fixes	Tad	2017-12-17
\|
*	Add new path for TelegramDesktop files.	Alexander GQ Gerasiov	2017-12-17
\| \| \| \| \|	Latest versions of TelegramDesktop supports both old (~/.TelegramDesktop) and new (~/.local/share/TelegramDesktop) location of sensitive data files.
*	disable-common.inc: Blacklist .homesick	Alexander GQ Gerasiov	2017-12-17
\| \| \| \| \|	homesick is dotfiles manager. It keeps dotfiles (e.g. .bashrc) in repository under ~/.homesick and puts symlinks into home directory.
*	Fix #1680, same as #1437	Tad	2017-12-16
\|
*	Merge branch 'master' of https://github.com/netblue30/firejail	smitsohu	2017-12-11
\|\
\| *	fix trash blacklist in caja profile	smitsohu	2017-12-10
\| \|
* \|	fix qutebrowser	smitsohu	2017-12-11
\|/
*	fix (and harden) kmail - #1541	smitsohu	2017-12-10
\|
*	remove mutt blacklist redundancies	smitsohu	2017-12-09
\|
*	improve fetchmail profile - #1661	smitsohu	2017-12-09
\|
*	typo fix	smitsohu	2017-12-08
\|
*	sort whitelist-common.inc	smitsohu	2017-12-08
\|
*	pedantic comment fix	smitsohu	2017-12-08
\|
*	fix sound in firefox started from thunderbird	smitsohu	2017-12-08
\| \| \| \| \|	and move disable-mnt from thunderbird to firefox profile, in alignment with recent commit from @Fred-Barclay