aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* Merge pull request #5389 from glitsj16/qutebrowser-fixesLibravatar netblue302022-10-11
|\ | | | | Harden qutebrowser profile
| * Harden qutebrowserLibravatar glitsj162022-10-03
| |
| * Fix D-Bus mpris supportLibravatar glitsj162022-10-02
| |
| * unbreak D-Bus mpris supportLibravatar glitsj162022-10-02
| |
| * Harden qutebrowser profileLibravatar glitsj162022-10-01
| |
* | Merge pull request #5298 from pirate486743186/patch-1Libravatar netblue302022-10-11
|\ \ | | | | | | electron-mail.profile refactoring
| * | electron-mail.profile: refactor and redirect to electron.profileLibravatar pirate4867431862022-10-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: - redirect to electron.profile - fix program name - update program description - allow /bin/sh - allow opening links in Firefox - remove no3d, nonewprivs, noroot, protocol, seccomp - add machine-id, nosound - remove private-bin, disable-mnt - harden private-etc - allow D-Bus notifications, secrets
* | | disable-common.inc: blacklist doas binaryLibravatar Kelvin M. Klann2022-10-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OpenDoas is an alternative to sudo. It is an unofficial port of OpenBSD's doas. Details: $ LC_ALL=C pacman -Si galaxy/opendoas | grep -e '^Version' -e '^Description' -e '^URL' Version : 6.8.2-1 Description : Run commands as super user or another user URL : https://github.com/Duncaen/OpenDoas Environment: Artix Linux. Also, add /etc/doas.conf to etc/ids.config.
* | | Revert "mpv: whitelist mpv-mpris (#5386)"Libravatar Kelvin M. Klann2022-10-04
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 393c5beff2686d7732221dadb6730917f24835a0. Which broke mpv: $ mpv --version Cannot start application: No such file or directory Probably because mpv itself uses many libraries and it has plugins that may depend on files in /usr/lib as well: $ pacman -Qlq mpv | grep /lib/ | grep -v '/$' /usr/lib/libmpv.so /usr/lib/libmpv.so.1 /usr/lib/libmpv.so.1.109.0 /usr/lib/pkgconfig/mpv.pc $ strings /usr/bin/mpv | grep '^lib.*\.so' | sort -u | wc -l 53 $ pacman -Qlq yt-dlp | grep /lib/ | grep -v '/$' | cut -f -4 -d / | sort -u /usr/lib/python3.10 $ pacman -Q mpv yt-dlp mpv 1:0.34.1-5 yt-dlp 2022.09.01-1 Environment: Artix Linux. Also, private-lib is disabled by default in firejail.config (see #5190) and mpv.profile does not use private-lib, so there should be no need to whitelist anything in /usr/lib in the default profile.
* | mpv: whitelist mpv-mpris (#5386)Libravatar Hugo2022-10-01
| | | | | | | | | | This is an mpv plugin for MPRIS integration. See: https://github.com/hoyon/mpv-mpris
* | Merge pull request #5360 from glitsj16/ff-dbusLibravatar netblue302022-09-26
|\ \ | | | | | | Streamline Firefoxes D-Bus filtering
| * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| * | De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | | | | | | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
| * | Add CamelCase D-Bus filter for backward-compatibilityLibravatar glitsj162022-09-05
| | |
| * | Add CamelCase D-Bus filter for backward-compatibilityLibravatar glitsj162022-09-05
| | |
| * | Re-add CamelCase D-Bus filter for backward-compatibilityLibravatar glitsj162022-09-05
| | |
| * | Add CamelCase D-Bus filter for backward-compatibilityLibravatar glitsj162022-09-05
| | |
| * | Add CamelCase D-Bus name for backward-compatibilityLibravatar glitsj162022-09-05
| | |
| * | fix D-Bus filter in firefoxLibravatar glitsj162022-09-05
| | |
| * | add specific D-Bus filter in firefox-nightlyLibravatar glitsj162022-09-05
| | |
| * | add specific D-Bus filter in firefox-esrLibravatar glitsj162022-09-05
| | |
| * | fix specific D-Bus filter in firefox-developerLibravatar glitsj162022-09-05
| | |
| * | add specific D-Bus filter to firefox-betaLibravatar glitsj162022-09-05
| | |
* | | Merge pull request #5371 from kmk3/profiles-allow-exiftoolLibravatar netblue302022-09-26
|\ \ \ | | | | | | | | profiles: allow perl/exiftool on the relevant profiles
| * | | profiles: allow perl/exiftool on the relevant profilesLibravatar Kelvin M. Klann2022-09-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Programs that seem to support exiftool: $ LC_ALL=C pacman -Sii perl-image-exiftool | grep -e '^Version' -e '^Required' -e '^Optional For' | head -n 3 Version : 12.42-1 Required By : digikam geotag gitlab-workhorse mat2 rapid-photo-downloader Optional For : darktable geeqie gpsprune hugin jpeg-archive ranger recoll shutter Environment: Artix Linux. Note for hugin.profile: Does not currently work with private-bin on Arch/Artix; see the private-bin comment on etc/profile-a-l/exiftool.profile. Relates to #5365.
* | | | arduino.profile: allow devel pathsLibravatar Kelvin M. Klann2022-09-17
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As mentioned in its description, this profile is intended for an IDE, so allow paths used for development and stop including the following profiles: * disable-devel.inc * disable-exec.inc * disable-interpreters.inc Fixes #5292.
* | | discord: fix issues with command-line usage (#5368)Libravatar glitsj162022-09-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * use both capitalized and regular discord commands to private-bin * use both capitalized and regular discord commands to private-bin * add awk and which to private-bin for better xdg-open support * use both capitalized and regular discord commands to private-bin * use both capitalized and regular discord commands to private-bin * refactor CamelCased discord profiles * refactor CamelCased discord profiles * fix private-{bin,opt} sorting * fix private-{bin,opt} sorting * unfuck private-{bin,opt} sorting * unfuck private-{bin,opt} sorting * fix sorting once more for CI * fix sorting once again for CI
* | | Fix Firefox 'Profile not found' for psd (v6.45) (#5348)Libravatar godbless2022-09-08
|/ / | | | | | | | | | | | | | | | | | | | | * Fix Firefox 'Profile not found' for psd (v6.45) code change: `whitelist ${RUNUSER}/psd/*firefox*` fixes: #4568 * Whitelist ${RUNUSER}/psd/*firefox* * Fix workflow for github
* | Add profile for chafa (#5355)Libravatar alkim02022-09-04
| | | | | | Co-authored-by: Albert Kim <alkim@alkim.org>
* | Make /etc/ssh/ssh_config.d visible for ssh (#5353)Libravatar slowpeek2022-09-02
| |
* | tracelog disabled by default in /etc/firejail/firejail.config fileLibravatar netblue302022-08-29
| |
* | merges, fixed lbry-viewer as suggestedLibravatar netblue302022-08-29
| |
* | Merge pull request #5331 from pirate486743186/lbry-viewer.profile-createLibravatar netblue302022-08-29
|\ \ | | | | | | lbry-viewer.profile create
| * | lbry-viewer.profile createLibravatar pirate4867431862022-08-21
| |/
* | tuir.profile creation (#5330)Libravatar pirate4867431862022-08-28
| | | | | | Co-authored-by: pirate486743186 <>
* | steam.profile: fix Proton-GE version in commentLibravatar Kelvin M. Klann2022-08-26
| | | | | | | | | | This amends commit e2631b40d ("steam.profile: fix breakage with newer Proton-GE (process_vm_readv)", 2022-08-20).
* | steam.profile: fix breakage with newer Proton-GE (process_vm_readv)Libravatar Kelvin M. Klann2022-08-26
| | | | | | | | | | | | | | | | | | | | | | | | | | As reported by @rsramkis on #5185, upgrading from Proton-7.2-GE-2[1] (released on 2022-02-14) to GE-Proton7-18[2] (released on 2022-05-19) breaks logging in on World of Tanks Blitz unless the `process_vm_ready` 32-bit syscall is allowed[3], so allow it. Fixes #5185. [1] https://github.com/GloriousEggroll/proton-ge-custom/releases/tag/7.2-GE-2 [2] https://github.com/GloriousEggroll/proton-ge-custom/releases/tag/GE-Proton7-18 [3] https://github.com/netblue30/firejail/issues/5185#issuecomment-1152350336
* | man.profile needs additional private-etc items on arch (#5322)Libravatar glitsj162022-08-18
| |
* | Fixed an AppArmor profile denial issue with ptrace and signals (#5317)Libravatar Азалия Смарагдова2022-08-18
| |
* | Merge pull request #5302 from pirate486743186/makedeb-profile-creationLibravatar netblue302022-08-14
|\ \ | | | | | | makedeb profile creation
| * | makedeb profile creationLibravatar pirate4867431862022-08-10
| |/
* | Merge pull request #5309 from qretornaz-adapei42/masterLibravatar netblue302022-08-14
|\ \ | | | | | | microsoft-edge.profile rewritten for stable channel and moved microsoft-edge{,-beta,-dev} from private-opt to whitelist
| * | microsoft-edge-{dev,beta}: replaced private-opt by whitelist #5307Libravatar Quentin RETORNAZ2022-08-11
| | |
| * | microsoft-edge.profile: rewrite profile for stable channelLibravatar Quentin RETORNAZ2022-08-11
| | | | | | | | | | | | | | | | | | * replaced private-opt by whitelist #5307 * added stable channel config dirs to disable-programs.inc
* | | Merge pull request #5285 from ra1nb0w/vmware-snapshotLibravatar netblue302022-08-14
|\ \ \ | | | | | | | | vmware.profile: snapshot requires /etc/mtab
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-03 03:52:03 +0000