aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* added ffmpeg.profile, removed ssh-agent from firecfgLibravatar netblue302017-09-21
|
* Fixup 17a2edf9be3d1144db1a262c5358bf190c9b272bLibravatar Tad2017-09-21
|
* Restore smtube.profile, accidentally clobbered in ↵Libravatar Tad2017-09-20
| | | | cbbc90381b41156c16bcb30934a10c843c8298c0
* remove some redundanciesLibravatar smitsohu2017-09-20
| | | | | | | * ~/.bash_history is already included in ~/.*_history, same file * ~/.password-store is already included in disable-passwdmgr.inc (and not whitelisted in browsers) * ~/.local/share/applications is in whitelist-common.inc since recently
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar Fred-Barclay2017-09-19
|\
| * add nogroupsLibravatar smitsohu2017-09-20
| |
| * Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302017-09-19
| |\
| | * Add a profile for ConkyLibravatar Irvine2017-09-19
| | |
| * | add private-bin support to profile builderLibravatar netblue302017-09-19
| |/
| * update KDE whitelistLibravatar smitsohu2017-09-19
| |
| * Misc fixesLibravatar Tad2017-09-18
| | | | | | | | Thanks to @Fred-Barclay, @smitsohu and @reinerh for a bunch of these
| * Update disable-programs.incLibravatar Tad2017-09-18
| |
| * Add an alias for NatronLibravatar juan2017-09-18
| |
| * Harden 10 profilesLibravatar Chiraag Nataraj2017-09-18
| |
| * Fixup 12 profilesLibravatar Tad2017-09-18
| |
| * Harden 25 profilesLibravatar Tad2017-09-18
| |
| * Fixup 36 profilesLibravatar Tad2017-09-18
| |
| * Add 5 profilesLibravatar juan2017-09-18
| |
| * Add 31 profilesLibravatar Chiraag Nataraj2017-09-18
| |
| * Add a profile for TeamSpeak3Libravatar Melvin Vermeeren2017-09-18
| |
| * Add a profile for xmr-stak-cpuLibravatar Tad2017-09-18
| | | | | | | | | | | | - Add list of new profiles to README.md - Update firecfg - Further restrict silentarmy
| * Add a profile for clamdscan, clamdtop, and freshclamLibravatar Tad2017-09-18
| |
| * Add a profile for ClamAV's clamscanLibravatar Tad2017-09-18
| |
| * whitelist /varLibravatar netblue302017-09-18
| |
| * Add a profile for Rocket.ChatLibravatar Tad2017-09-18
| |
| * Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302017-09-18
| |\
| | * profiles: add profile for surf browserLibravatar Reiner Herrmann2017-09-18
| | |
| * | whitelist /varLibravatar netblue302017-09-18
| |/
| * electron profile whitelistingLibravatar netblue302017-09-18
| |
| * blacklist clipboard manager in disable-common.incLibravatar netblue302017-09-18
| |
| * Merge pull request #1561 from soredake/steamfixLibravatar netblue302017-09-18
| |\ | | | | | | fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profile
| | * fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profileLibravatar soredake2017-09-18
| | | | | | | | | | | | | | | | | | steam.sh executes `/sbin/ldconfig -XNv 2> /dev/null` when STEAM_RUNTIME_PREFER_HOST_LIBRARIES is not zero and fails in some cases (see https://github.com/ValveSoftware/steam-for-linux/issues/4768) because of blacklisted /sbin and missing ld.so.conf{,.d} https://steamcommunity.com/groups/SteamClientBeta/announcements/detail/586991182161672256
| * | Merge pull request #1558 from jelford/ssh-agent-noshellLibravatar netblue302017-09-18
| |\ \ | | |/ | |/| Set `shell none` for ssh-agent configuration
| | * Set `shell none` for ssh-agent configurationLibravatar James Elford2017-09-17
| | | | | | | | | | | | | | | | | | It's common to invoke ssh-agent in shell login config, so if firejail launches it through a shell, that can lead to an infinite loop
| * | whitelist /var - Xubuntu fixesLibravatar netblue302017-09-17
| | |
| * | whitelist /var: temporary fix for XubuntuLibravatar netblue302017-09-17
| | |
| * | whitelisting /varLibravatar netblue302017-09-17
| |/
| * --buildLibravatar netblue302017-09-16
| |
| * Add a profile for TerasologyLibravatar Tad2017-09-15
| |
* | Fix private-bit filter for firefox on ArchLibravatar Fred-Barclay2017-09-15
|/
* little KDE app enhancementsLibravatar smitsohu2017-09-15
|
* update whitelist-common.incLibravatar netblue302017-09-15
|
* update seccomp filterLibravatar smitsohu2017-09-14
|
* update seccomp filter, add no3dLibravatar smitsohu2017-09-14
|
* goobox enhancements (permit metadata retrieval)Libravatar smitsohu2017-09-14
| | | 1) We should permit internet access, as Goobox retrieves metadata via cddb-slave2 2) We can safely enable private-dev after the introduction of nodvd
* --writable-run-user, solving ssh/gnupg authentication problems for smarcardsLibravatar netblue302017-09-14
|
* fix Arch Linux /etc/resolv.conf symlink to /var/run/systemd/resolve/resolv.confLibravatar netblue302017-09-14
|
* ssh fix: #1543Libravatar netblue302017-09-14
|
* Merge pull request #1544 from smitsohu/muttLibravatar netblue302017-09-13
|\ | | | | localhost mail fix for mutt
| * (temporarily) undo commenting disable-devel.incLibravatar smitsohu2017-09-12
| | | | | | pending further discussion