Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | wireshark: fix private-etc comment | glitsj16 | 2023-01-21 |
| | |||
* | transgui: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | sqlitebrowser: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | qnapi: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | pavucontrol: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | netactview: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | mpDris2: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | gnome-clocks: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | gmpc: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | arm: fix networking | glitsj16 | 2023-01-21 |
| | |||
* | amarok: fix private-etc comment | glitsj16 | 2023-01-21 |
| | |||
* | private-etc rework: remove hiding blacklisted files in private-etc directory ↵ | netblue30 | 2023-01-20 |
| | | | | feature | ||
* | cleanup | netblue30 | 2023-01-19 |
| | |||
* | cleanup | netblue30 | 2023-01-19 |
| | |||
* | cleanup | netblue30 | 2023-01-19 |
| | |||
* | more profile fixes/testing | netblue30 | 2023-01-19 |
| | |||
* | some profile updates | netblue30 | 2023-01-18 |
| | |||
* | Merge pull request #5595 from kmk3/rename-etc-no-blacklisted | netblue30 | 2023-01-16 |
|\ | | | | | Rename etc-no-blacklisted to etc-hide-blacklisted | ||
| * | firejail.config: explain potential issues with etc-hide-blacklisted | Kelvin M. Klann | 2023-01-16 |
| | | | | | | | | | | | | | | Let users know that enabling this may break /etc/resolv.conf. Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591. | ||
| * | Rename etc-no-blacklisted to etc-hide-blacklisted | Kelvin M. Klann | 2023-01-16 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To avoid boolean confusion (`no-foo no` / `no-foo yes`) in firejail.config: etc-no-blacklisted no etc-no-blacklisted yes Commands used to search and replace: git grep -Ilz -i 'etc.no.blacklisted' -- etc src | xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed \ -e 's/etc-no-blacklisted/etc-hide-blacklisted/' \ -e 's/ETC_NO_BLACKLISTED/ETC_HIDE_BLACKLISTED/' \ '{}')\" >'{}'" Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591. | ||
* | | add timezone access to make libical functional | bymoz089 | 2023-01-16 |
|/ | | | claws-mail vcalendar-plugin uses libical to get current timezone. Libical needs access to file `/etc/timezone` to work properly. | ||
* | Merge pull request #5591 from smitsohu/private-etc-no-blacklisted | netblue30 | 2023-01-15 |
|\ | | | | | opt-in: hide blacklisted files in /etc | ||
| * | opt-in: skip blacklisted files in private-etc - #5010, #5230 | smitsohu | 2023-01-15 |
| | | |||
* | | Merge pull request #5571 from glitsj16/ec-refactor | netblue30 | 2023-01-15 |
|\ \ | | | | | | | email-common refactoring | ||
| * | | balsa: drop private-bin | glitsj16 | 2023-01-07 |
| | | | | | | | | | Supporting 'level 1 hack' to allow opening hyperlinks with firefox needs xdg-open (besides bash,sh). Adding xdg-open to private-bin is not enough, as it pulls in a long list of other commands and that's pretty unmaintainable IMO. So I opted to drop private-bin here. | ||
| * | | email-common: simplify D-Bus filtering | glitsj16 | 2023-01-06 |
| | | | | | | | | | Suggested in review. | ||
| * | | balsa: re-add private-bin comment for gpg | glitsj16 | 2023-01-06 |
| | | | | | | | | | Pointed out in review that this comment was removed by mistake. | ||
| * | | email-common: refactoring | glitsj16 | 2023-01-04 |
| | | | | | | | | | No longer used for claws-mail and sylpheed only. | ||
| * | | sylpheed: refactoring | glitsj16 | 2023-01-04 |
| | | | |||
| * | | claws-mail: refactoring | glitsj16 | 2023-01-04 |
| | | | |||
| * | | balsa: refactor as email-common.profile redirect | glitsj16 | 2023-01-04 |
| |/ | |||
* | | Merge pull request #5563 from glitsj16/linuxqq | netblue30 | 2023-01-15 |
|\ \ | | | | | | | New profiles: linuxqq/qq | ||
| * | | Merge branch 'netblue30:master' into linuxqq | glitsj16 | 2023-01-04 |
| |\| | |||
| * | | linuxqq: drop comment | glitsj16 | 2023-01-04 |
| | | | | | | | | | Now that #5569 is in we can remove the hardening comment. | ||
| * | | linuxqq: reorder options | glitsj16 | 2023-01-03 |
| | | | | | | | | | As suggested in review. | ||
| * | | disable-programs.inc: fix ordering QQ config | glitsj16 | 2023-01-03 |
| | | | |||
| * | | Create qq.profile | glitsj16 | 2023-01-03 |
| | | | |||
| * | | Create linuxqq.profile | glitsj16 | 2023-01-03 |
| | | | |||
| * | | disable-programs.inc: add QQ config | glitsj16 | 2023-01-03 |
| | | | |||
* | | | geary: fix opening hyperlinks via D-Bus (#5565) | glitsj16 | 2023-01-12 |
| | | | |||
* | | | QMediathekView: add mkdir and reorder whitelist options | glitsj16 | 2023-01-12 |
| | | | | | | | | | As suggested in review. | ||
* | | | QMediathekView: hardening | glitsj16 | 2023-01-11 |
| |/ |/| | |||
* | | Merge pull request #5564 from glitsj16/claws-mail+sylpheed | netblue30 | 2023-01-04 |
|\ \ | | | | | | | claws-mail and sylpheed D-Bus hardening | ||
| * | | sylpheed: allow opening hyperlinks via D-Bus | glitsj16 | 2023-01-03 |
| | | | |||
| * | | claws-mail: harden D-Bus | glitsj16 | 2023-01-03 |
| |/ | | | | | Relates to https://github.com/netblue30/firejail/issues/5477. | ||
* | | Merge pull request #5569 from glitsj16/electron-hardening | netblue30 | 2023-01-04 |
|\ \ | | | | | | | electron hardening fixes | ||
| * | | Create electron-hardened.inc.profile | glitsj16 | 2023-01-04 |
| | | | |||
| * | | electron: change hardening comment | glitsj16 | 2023-01-04 |
| |/ | |||
* | | Merge pull request #5475 from KOLANICH-tools/aa_fix | netblue30 | 2023-01-04 |
|\ \ | | | | | | | A temporary fix to the bug caused by apparmor profiles stacking. | ||
| * | | A temporary fix to the bug caused by apparmor profiles stacking. | KOLANICH | 2022-11-15 |
| | | |