aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* fix ghostwriterLibravatar rusty-snake2019-07-28
|
* Remove private-cache from unzipLibravatar glitsj162019-07-26
| | | The `private-cache` option breaks electron related builds (see [this](https://github.com/minbrowser/min/issues/793) for an example).
* fix file-roller.profileLibravatar rusty-snake2019-07-25
|
* update private-bin for tbbLibravatar rusty-snake2019-07-25
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2019-07-25
|\
| * Update syscalls.txtLibravatar rusty-snake2019-07-22
| | | | | | | | | | | | * remove mincore * add @default without chroot * add @default-nodebuggers without chroot
* | fix verbosity for non-authorized userLibravatar smitsohu2019-07-22
|/ | | | | | users not in firejail.users should only see the error, not the symlink warning. Also exposes less code to non- authorized users.
* fix gucharmap & add gnome-characters, gnome-character-mapLibravatar rusty-snake2019-07-18
|
* use allow-debuggers in spectre-meltdown-checkerLibravatar rusty-snake2019-07-18
|
* Harden gnome-scheduleLibravatar glitsj162019-07-18
| | | Let's disable using a terminal for cron job testing by default and make this a whitelist profile.
* apparmor: minor improvementsLibravatar Vincent432019-07-16
| | | | | | | Use @{PID} consistently. Remove 'deny /proc/** w,' suggestion as it will break all whitelisted entries.
* apparmor: allow writing to /proc/@{PID}/commLibravatar Vincent432019-07-14
| | | | | | This is needed by various electron apps, see: https://github.com/netblue30/firejail/issues/2538 https://github.com/netblue30/firejail/issues/2854
* issues with electron-based apps. see issue #2854Libravatar veloute2019-07-13
|
* Merge pull request #2855 from veloute/galc-fixLibravatar rusty-snake2019-07-12
|\ | | | | ipc-namespace breaks galculator on archlinux
| * ipc-namespace breaks galculator on archlinuxLibravatar veloute2019-07-12
| |
* | Support media on other drives in youtube-dl.profileLibravatar glitsj162019-07-11
| | | | | | Thanks to @SkewedZeppelin for catching this, see comments in https://github.com/netblue30/firejail/pull/2584.
* | less.profile: make ${HOME} read-onlyLibravatar Vincent432019-07-10
| | | | | | less is usually used to view various text files including configs so blacklisting many of them in ${HOME} make it less(sic!) usable. We can make them read-only instead.
* | Sort private-bin in obs.profile (#2848)Libravatar glitsj162019-07-09
| |
* | Add redirects for mpg123 (#2847)Libravatar glitsj162019-07-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create conplay.profile * Create mpg123.bin.profile * Create mpg123-alsa.profile * Create mpg123-id3dump.profile * Create mpg123-jack.profile * Create mpg123-nas.profile * Create mpg123-openal.profile * Create mpg123-oss.profile * Create mpg123-portaudio.profile * Create mpg123-pulse.profile * Create mpg123-strip.profile * Create out123.profile * Add mpg123 redirects to fireconfig
* | Merge pull request #2845 from smitsohu/homedir2Libravatar netblue302019-07-09
|\ \ | | | | | | improve support for home directories outside /home
| * | add symlink resolution for home directoriesLibravatar smitsohu2019-07-09
| | |
* | | Fix #2726Libravatar Fred Barclay2019-07-08
| | | | | | | | | | | | private-bin was too restrictive and didn't allow desktop recording
* | | keep dconf database read-onlyLibravatar smitsohu2019-07-08
|/ /
* | Fix #2840Libravatar rusty-snake2019-07-08
| |
* | Add to comment on pip install in youtube-dl.profileLibravatar glitsj162019-07-07
| | | | | | Try to help users more explicitly when they have youtube installed under ${HOME}, see #2833.
* | Fix slow OSD in mpv.profileLibravatar glitsj162019-07-07
| | | | | | Fixes #2838.
* | Harden qpdfview.profile with `nodbus` (#2837)Libravatar Eduard Tolosa2019-07-07
| |
* | Fix #2834 (#2835)Libravatar Eduard Tolosa2019-07-07
| |
* | Add electron4 to allow it to launch on Arch Linux (#2832)Libravatar Nick Fox2019-07-06
| |
* | Add youtube-dl config handling (#2836)Libravatar glitsj162019-07-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add youtube-dl config to disable-programs.inc * Add config handling to youtube-dl * Add youtube-dl config handling to celluloid.profile * Add youtube-dl config handling to mpv.profile * Add youtube-dl config handling to smplayer.profile * Add youtube-dl config handling to mpsyt.profile
* | mpg123Libravatar startx20172019-07-06
| |
* | Fix seccomp sorting in riot-desktopLibravatar glitsj162019-07-04
| |
* | fix #2820 - adjustable file copy limit; export FIREJAIL_DEBUG into sboxLibravatar netblue302019-07-04
| |
* | Merge pull request #2825 from Bandie/masterLibravatar rusty-snake2019-07-04
|\ \ | | | | | | Fixes #2821, riot-desktop
| * | Fixes #2821, riot-desktopLibravatar Bandie2019-07-03
| |/
* | Add note to 'include disable-xdg.inc' instead of removing itLibravatar Eduard Tolosa2019-07-03
| |
* | Fix #2826Libravatar Eduard Tolosa2019-07-03
|/ | | Reverting https://github.com/netblue30/firejail/commit/75cd6d2f393752acd2db674c34c25bcd9a206f3b fix the issue.
* Improve the comment explanation about the 4 linesLibravatar mirabellette2019-07-03
|
* Run firefox with your profile when clicking a linkLibravatar mirabellette2019-07-03
| | | | | When clicking a link in an email in Thunderbird, Firefox profile is not loaded. This fix add the commented parameters required to load the Firefox profile when the user clicked in an email.
* Remove mdwe from sqlitebrowser (#2823)Libravatar glitsj162019-07-02
|
* Unbreak gconf-editor (#2822)Libravatar glitsj162019-07-02
|
* Add alias for pavucontrol (Qt version) (#2819)Libravatar glitsj162019-07-02
| | | | | | | | | | * Prep for Qt alias in pavucontrol * Add Qt alias for pavucontrol * Add Qt alias for pavucontrol * Add Qt alias for pavucontrol
* Put 'blacklist /tmp/.X11-unix' in seahorse.profileLibravatar glitsj162019-07-01
|
* Put 'blacklist /tmp/.X11-unix' in seahorse.profileLibravatar glitsj162019-07-01
|
* Comments cleaning for ocenaudioLibravatar glitsj162019-07-01
|
* Revert #2816 (except gconf-editor) (#2817)Libravatar glitsj162019-07-01
| | | | | | | | | | | | | | * Revert #2816 * Revert #2816 * Revert #2816 * Revert #2816 * Revert #2816 * Revert #2816
* blacklist kcmshell cacheLibravatar smitsohu2019-07-01
|
* Fixes (#2816)Libravatar glitsj162019-07-01
| | | | | | | | | | | | | | | | | | * Unbreak gconf-editor * Add x11 none to curl.profile * Add x11 none to wget.profile * Add x11 none to dnscrypt-proxy.profile * Add tracelog to ssh-agent.profile * Add x11 none to aria2c.profile * Add x11 none to arch-audit.profile * Add x11 none to archaudit-report.profile
* Update wording in templates (#2815)Libravatar glitsj162019-06-30
| | | | | | | | * Change wording in redirect_alias-profile.template * Change wording in profile.template * Update wording in redirect_alias-profile.template
* Change include/redirect logic in autokey profiles (#2814)Libravatar glitsj162019-06-30
| | | | | | | | | | | | * Change redirect logic * Change redirect logic * Change redirect logic * Change redirect logic * Change redirect logic