Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | disable-common.inc: blacklist ssh | netblue30 | 2021-11-09 |
| | |||
* | adding more SUID executables to disable-common.inc | netblue30 | 2021-11-04 |
| | |||
* | apparmor base drop-in: remove chroot/overlay paths | smitsohu | 2021-11-01 |
| | | | | | | As the upstream AppArmor base abstraction does not contain references to paths in /run/firejail/mnt/oroot there is not much point to have them in our drop-in | ||
* | ids: add some more paths | smitsohu | 2021-10-31 |
| | |||
* | adding noprofile.profile from rusty-snake | netblue30 | 2021-10-30 |
| | |||
* | Merge pull request #4643 from rusty-snake/profile-checks | Kelvin M. Klann | 2021-10-29 |
|\ | | | | | Profile Checks | ||
| * | Sort disaple-programs.inc | rusty-snake | 2021-10-27 |
| | | |||
| * | Add alteratives and ld.so.cache to all private-etc lines | rusty-snake | 2021-10-27 |
| | | | | | | | | Command is the same as in d8d97acb | ||
* | | update mpv.profile | pirate486743186 | 2021-10-24 |
|/ | | | add yt-dlp in private-bin | ||
* | Add disable-proc to firefox-common | rusty-snake | 2021-10-23 |
| | |||
* | Remove 'none' from private-etc lines | rusty-snake | 2021-10-23 |
| | |||
* | wrc: whitelist journal sockets | smitsohu | 2021-10-23 |
| | | | | fixes --tracelog among other things | ||
* | add wrc to several profiles | smitsohu | 2021-10-23 |
| | |||
* | promote /run/udev/data to wrc | smitsohu | 2021-10-23 |
| | |||
* | disable-exec: add /run/shm | smitsohu | 2021-10-23 |
| | |||
* | Merge pull request #4628 from smitsohu/aa | netblue30 | 2021-10-21 |
|\ | | | | | add basic Firejail support to AppArmor base abstraction (#3226) | ||
| * | add basic Firejail support to AppArmor base abstraction (#3226) | smitsohu | 2021-10-21 |
| | | |||
* | | Merge pull request #4600 from crocket/master | netblue30 | 2021-10-21 |
|\ \ | | | | | | | Add profiles for imv, retroarch, and torbrowser | ||
| * | | Add profiles for imv, retroarch, and torbrowser | crocket | 2021-10-17 |
| | | | | | | | | | | | | | | | imv, retroarch, and torbrowser are also added to firecfg.config | ||
* | | | Merge pull request #4612 from jose1711/blobwars_fix | netblue30 | 2021-10-21 |
|\ \ \ | | | | | | | | | blobwars: add path to game assets compatible with Arch | ||
| * | | | blobwars: add path to game assets compatible with Arch | Jose Riha | 2021-10-17 |
| | | | | |||
* | | | | Merge pull request #4613 from jose1711/joystick_support | netblue30 | 2021-10-21 |
|\ \ \ \ | | | | | | | | | | | Drop noinput for games with joystick/gamepad support | ||
| * | | | | Drop noinput for games with joystick/gamepad support | Jose Riha | 2021-10-17 |
| |/ / / | | | | | | | | | | | | | Fixes #4608 | ||
* | | | | Merge pull request #4621 from jose1711/tremulous_archfix | netblue30 | 2021-10-21 |
|\ \ \ \ | | | | | | | | | | | Fix tremulous profile for Arch users | ||
| * | | | | Update etc/profile-m-z/tremulous.profile | Jose Riha | 2021-10-19 |
| | | | | | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com> | ||
| * | | | | Update etc/profile-m-z/tremulous.profile | Jose Riha | 2021-10-19 |
| | | | | | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com> | ||
| * | | | | Update etc/profile-m-z/tremulous.profile | Jose Riha | 2021-10-19 |
| | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> | ||
| * | | | | Fix tremulous profile for Arch users | Jose Riha | 2021-10-18 |
| |/ / / | |||
* | | | | Merge pull request #4622 from jose1711/jumnbump_fix | netblue30 | 2021-10-21 |
|\ \ \ \ | | | | | | | | | | | Fix jumpnbump for Arch users | ||
| * | | | | Fix jumpnbump for Arch users | Jose Riha | 2021-10-19 |
| |/ / / | | | | | | | | | | | | | Fixes #4611. | ||
* | | | | Merge pull request #4624 from jose1711/warsow_archfix | netblue30 | 2021-10-21 |
|\ \ \ \ | | | | | | | | | | | Fix warsow profile for Arch users | ||
| * | | | | Update etc/profile-m-z/warsow.profile | Jose Riha | 2021-10-19 |
| | | | | | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com> | ||
| * | | | | Update etc/profile-m-z/warsow.profile | Jose Riha | 2021-10-19 |
| | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> | ||
| * | | | | Update etc/profile-m-z/warsow.profile | Jose Riha | 2021-10-19 |
| | | | | | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> | ||
| * | | | | Fix warsow profile for Arch users | Jose Riha | 2021-10-19 |
| |/ / / | | | | | | | | | | | | | | | | | | | | | Warsow uses a shell wrapper hence requires some modifications. Netlink was added to protocols as the game was segfaulting after changing resolution and saving the setting. | ||
* | | | | Merge pull request #4521 from rusty-snake/disable-proc.inc | smitsohu | 2021-10-20 |
|\ \ \ \ | |/ / / |/| | | | Create disable-proc.inc | ||
| * | | | Update disable-proc.inc | rusty-snake | 2021-10-09 |
| | | | | |||
| * | | | Update disable-proc.inc | rusty-snake | 2021-09-10 |
| | | | | |||
| * | | | Create disable-proc.inc | rusty-snake | 2021-09-09 |
| | | | | |||
* | | | | add /run/shm to wrc | smitsohu | 2021-10-16 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | found in Debian Bullseye. /run/shm is a symbolic link to /dev/shm, and whitelisting it will just recreate the symbolic link. | ||
* | | | | Merge pull request #4599 from rusty-snake/use-allow-tray | netblue30 | 2021-10-10 |
|\ \ \ \ | | | | | | | | | | | Use ?ALLOW_TRAY: (#4510) in profiles | ||
| * | | | | Use ?ALLOW_TRAY: (#4510) in profiles | rusty-snake | 2021-10-09 |
| | |/ / | |/| | | |||
* / | | | moving out of youtube, and some cleanup | netblue30 | 2021-10-09 |
|/ / / | |||
* | | | Merge pull request #4587 from kmk3/fix-vscodium | netblue30 | 2021-10-09 |
|\ \ \ | | | | | | | | | Fix vscodium | ||
| * | | | Add codium.profile as a redirect to vscodium.profile | Kelvin M. Klann | 2021-10-04 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both base names are valid: $ grep '^NAME' /etc/os-release NAME="Artix Linux" $ pacman -Q vscodium-bin vscodium-bin 1.60.2-2 $ pacman -Qlq vscodium-bin | grep -v -e '/$' -e /resources/ | grep /bin/ /usr/bin/codium /usr/bin/vscodium /usr/share/vscodium-bin/bin/codium Note: The first two paths are symlinks to the third one. Fixes #3871. | ||
| * | | | vscodium.profile: add missing paths | Kelvin M. Klann | 2021-10-04 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It creates the following directories on startup: * ~/.config/VSCodium * ~/.vscode-oss Environment: $ grep '^NAME' /etc/os-release NAME="Artix Linux" $ pacman -Q vscodium-bin vscodium-bin 1.60.2-2 Note: The following entry is already on disable-programs.inc: noblacklist ${HOME}/.vscode-oss It was added on commit de90834a8 ("Update disable-programs.inc", 2019-03-02). Relates to #3871. | ||
| * | | | vscodium.profile: fix wrong program name in the comments | Kelvin M. Klann | 2021-10-04 |
| | |/ | |/| | | | | | | | Added on commit 4bb7dee49 ("small changes", 2019-02-07). | ||
* | | | Merge pull request #4510 from rusty-snake/allow-tray-condition | netblue30 | 2021-10-09 |
|\ \ \ | | | | | | | | | Add new condition ALLOW_TRAY | ||
| * | | | Add new condition ALLOW_TRAY | rusty-snake | 2021-09-04 |
| | | | | |||
* | | | | Merge pull request #4519 from rusty-snake/build-systems | netblue30 | 2021-10-09 |
|\ \ \ \ | | | | | | | | | | | Add profiles for build-systems (/package-managers) |