Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Update disable-proc.inc | rusty-snake | 2021-10-09 |
| | |||
* | Update disable-proc.inc | rusty-snake | 2021-09-10 |
| | |||
* | Create disable-proc.inc | rusty-snake | 2021-09-09 |
| | |||
* | Fix #4509 -- Nextcloud profile broken - needs 3D and system tray access | rusty-snake | 2021-09-08 |
| | |||
* | Merge pull request #4493 from pirate486743186/fix-duplicate-global | rusty-snake | 2021-09-08 |
|\ | | | | | fix duplicate globals | ||
| * | fix duplicate global | pirate486743186 | 2021-08-30 |
| | | |||
* | | Fix #4367 -- gimp 2.10.22-3: gegl:introspect broken | rusty-snake | 2021-09-08 |
| | | |||
* | | Update profile.template to use disable-X11.inc | rusty-snake | 2021-09-08 |
| | | |||
* | | Rework pipewire/wayland | rusty-snake | 2021-09-07 |
| | | | | | | | | | | | | | | | | | | | | | | - closes #4483 -- mpv requires whitelisting /usr/share/pipewire - wruc: whitelist pipewire-?, pipewire is becoming more popular and was developed with isolation (container/sandbox) in mind. - wruc: whitelist wayland-? instead of only -0 and -1 - wusc: whitelist /usr/share/pipewire - remove these wruc/wusc lines from other profiles - firefox-common-addons: Make ignore wruc work again (#4512) - firefox: org.freedesktop.portal.Desktop should be enough | ||
* | | Blacklist ~/.minisign in disable-common | rusty-snake | 2021-09-07 |
| | | |||
* | | Profile fixes | rusty-snake | 2021-09-04 |
| | | | | | | | | | | | | | | | | | | | | - disable-programs.inc: blacklist ${HOME}/.local/state/pipewire If you did not yet noticed, on 08th May 2021 the XDG Base Directory Specification 0.8 was resleased (the first update since 2010). New are $XDG_STATE_HOME and $HOME/.local/bin. - keepassxc: mkdirs are necessary - gnote: harden - pngquant: harden | ||
* | | Update wrc for Arch Linux (#4507) | Martynas Janonis | 2021-09-03 |
| | | | | | | This is a quick fix of #4482 for distributions that link /etc/resolv.conf to /run/systemd/resolve/stub-resolv.conf (Arch Linux is one of them). | ||
* | | Fix #4506 -- Freetube does not start | rusty-snake | 2021-09-03 |
| | | | | | | | | Freetube from AUR uses a wrapper script | ||
* | | Update wrc | rusty-snake | 2021-09-03 |
|/ | | | | | | - whitelist /run/resolvconf/resolv.conf -- Fixes #4482 - Drop whitelist for /run/systemd/resolve/stub-resolv.conf, /run/systemd/resolve/resolv.conf is the right path AIUI. | ||
* | Merge pull request #4477 from bjpbakker/multimc5-lwjgl | netblue30 | 2021-08-30 |
|\ | | | | | multimc5: fix exec of LWJGL libraries | ||
| * | multimc5: fix exec of LWJGL libraries | Bart Bakker | 2021-08-24 |
| | | |||
* | | Merge pull request #4475 from davidebeatrici/telegram-desktop-2.6.1-fix | netblue30 | 2021-08-30 |
|\ \ | | | | | | | telegram.profile: whitelist /usr/share/TelegramDesktop | ||
| * | | telegram.profile: whitelist /usr/share/TelegramDesktop | Davide Beatrici | 2021-08-21 |
| |/ | | | | | | | | | | | | | | | Telegram loads packed resources dynamically since 443eef3202ee43c2e820cc550fbcc70a7609f452. In the official Debian package, the relevant file can be found at /usr/share/TelegramDesktop/tresources.rcc. If the file cannot be loaded, the program fails to launch and prints "Packed resources not found". | ||
* | | Merge pull request #4486 from pirate486743186/yt-dlp-profile | netblue30 | 2021-08-30 |
|\ \ | | | | | | | create yt-dlp.profile | ||
| * | | create yt-dlp.profile | pirate486743186 | 2021-08-27 |
| |/ | |||
* | | Merge pull request #4484 from pirate486743186/gallery-dl | netblue30 | 2021-08-30 |
|\ \ | | | | | | | creating gallery-dl.profile | ||
| * | | creating gallery-dl.profile | pirate486743186 | 2021-08-27 |
| |/ | |||
* / | updating youtube-viewers-common.profile (#4485) | pirate486743186 | 2021-08-29 |
|/ | |||
* | Update celluloid.profile | rusty-snake | 2021-08-16 |
| | | | | Fix #4469 | ||
* | add disable-X11.inc to profile template | Reiner Herrmann | 2021-08-14 |
| | |||
* | Move disable-passwordmgr.inc into disable-common.inc/disable-programs.inc ↵ | rusty-snake | 2021-08-12 |
| | | | | follow up | ||
* | Move disable-passwordmgr.inc into disable-common.inc/disable-programs.inc ↵ | rusty-snake | 2021-08-12 |
| | | | | | (#4461) See #4454 | ||
* | Create disable-X11.inc (#4462) | rusty-snake | 2021-08-11 |
| | |||
* | Update keepassxc.profile | rusty-snake | 2021-08-09 |
| | | | | | | | - Add whitelist-run-common.inc - Drop netlink (there are no error or borken feature for me (including auto-type)) - Second update for the dbus-policy | ||
* | Add /run/media to whitelist-run-common.inc | rusty-snake | 2021-08-09 |
| | |||
* | Add rmenv RESTIC_* to disable-passwdmgr.inc | rusty-snake | 2021-08-09 |
| | |||
* | Fix zim and rednotebook | rusty-snake | 2021-08-09 |
| | | | | Introduced in 2e4d52ec | ||
* | Correct directory for sway.profile and io.github.lainsce.Notejot.profile | rusty-snake | 2021-08-09 |
| | |||
* | remove cargo registry token for crates.io from environment | Reiner Herrmann | 2021-08-06 |
| | |||
* | Revice keepassxc's dbus policy | rusty-snake | 2021-08-05 |
| | |||
* | Add wru to firefox-common, chromium-common and profile.template | rusty-snake | 2021-08-04 |
| | | | | | | | Still unresolved: > If someone who use systemd-resolved can say more which resolv.conf is necessary on such system. > whitelist /run/systemd/resolve/resolv.conf > whitelist /run/systemd/resolve/stub-resolv.conf | ||
* | Profile fixes | rusty-snake | 2021-08-04 |
| | | | | | | | | | | - Fix #4157 -- [Feature] Should rmenv GitHub auth tokens There are still more token variables from other program that should be added. - Fix #4093 -- darktable needs read access to liblua* - Fix #4383 -- move noblacklist ${HOME}/.bogofilter to email-common.profile for claws-mail (and other mailers) - Fix xournalpp.profile - syscalls.txt: ausyscall i386 -> firejail --debug-syscalls32 | ||
* | Added ~/Private blacklist (#4434) | caydey | 2021-08-03 |
| | |||
* | Add electron[0-9]{0,2} to all electron redirect … | rusty-snake | 2021-08-01 |
| | | | | …profiles with private-bin | ||
* | Fixup: Fix Firefox 'Profile not found' - whitelist /run/user/xxx/firefox | rusty-snake | 2021-07-28 |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | Fred Barclay | 2021-07-28 |
|\ | |||
| * | Merge pull request #4420 from glitsj16/dci | netblue30 | 2021-07-28 |
| |\ | | | | | | | ordering and additions | ||
| | * | drop trailing slashes from openrc items | glitsj16 | 2021-07-26 |
| | | | | | | | | | As suggested in https://github.com/netblue30/firejail/pull/4420#discussion_r676929867. | ||
| | * | ordering and additions | glitsj16 | 2021-07-26 |
| | | | |||
| * | | Merge branch 'master' into master | netblue30 | 2021-07-28 |
| |\ \ | |||
| * | | | moved rules from firefox-common.profile to firefox.profile | 0x6a | 2021-07-20 |
| | | | | |||
| * | | | Blacklist /*firefox* except for firefox itself | 0x6a | 2021-07-20 |
| | | | | |||
| * | | | Fix Firefox 'Profile not found' - whitelist /run/user/xxx/firefox | 0x6a | 2021-07-17 |
| | | | | |||
* | | | | Revert allow/deny additional files | Fred Barclay | 2021-07-28 |
| |/ / |/| | | | | | | | | | | | See #4410 8b50039a1fad123b90172fadc85bc232e97eb6d1 | ||
* | | | Merge pull request #4412 from netblue30/Neo00001-patch-1 | netblue30 | 2021-07-28 |
|\ \ \ | | | | | | | | | Update telegram.profile |