aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* Merge pull request #5563 from glitsj16/linuxqqLibravatar netblue302023-01-15
|\ | | | | New profiles: linuxqq/qq
| * Merge branch 'netblue30:master' into linuxqqLibravatar glitsj162023-01-04
| |\
| * | linuxqq: drop commentLibravatar glitsj162023-01-04
| | | | | | | | | Now that #5569 is in we can remove the hardening comment.
| * | linuxqq: reorder optionsLibravatar glitsj162023-01-03
| | | | | | | | | As suggested in review.
| * | disable-programs.inc: fix ordering QQ configLibravatar glitsj162023-01-03
| | |
| * | Create qq.profileLibravatar glitsj162023-01-03
| | |
| * | Create linuxqq.profileLibravatar glitsj162023-01-03
| | |
| * | disable-programs.inc: add QQ configLibravatar glitsj162023-01-03
| | |
* | | geary: fix opening hyperlinks via D-Bus (#5565)Libravatar glitsj162023-01-12
| | |
* | | QMediathekView: add mkdir and reorder whitelist optionsLibravatar glitsj162023-01-12
| | | | | | | | | As suggested in review.
* | | QMediathekView: hardeningLibravatar glitsj162023-01-11
| |/ |/|
* | Merge pull request #5564 from glitsj16/claws-mail+sylpheedLibravatar netblue302023-01-04
|\ \ | | | | | | claws-mail and sylpheed D-Bus hardening
| * | sylpheed: allow opening hyperlinks via D-BusLibravatar glitsj162023-01-03
| | |
| * | claws-mail: harden D-BusLibravatar glitsj162023-01-03
| |/ | | | | Relates to https://github.com/netblue30/firejail/issues/5477.
* | Merge pull request #5569 from glitsj16/electron-hardeningLibravatar netblue302023-01-04
|\ \ | | | | | | electron hardening fixes
| * | Create electron-hardened.inc.profileLibravatar glitsj162023-01-04
| | |
| * | electron: change hardening commentLibravatar glitsj162023-01-04
| |/
* | Merge pull request #5475 from KOLANICH-tools/aa_fixLibravatar netblue302023-01-04
|\ \ | | | | | | A temporary fix to the bug caused by apparmor profiles stacking.
| * | A temporary fix to the bug caused by apparmor profiles stacking.Libravatar KOLANICH2022-11-15
| | |
* | | Merge pull request #5556 from Dpeta/chatterino-profileLibravatar netblue302023-01-04
|\ \ \ | | | | | | | | Add profile for Chatterino
| * | | Apply code review suggestions to chatterino.profileLibravatar Dpeta2022-12-25
| | | | | | | | | | | | | | | | | | | | | | | | - Remove waf from private-bin - Move optional commands to the top - Reorder allow lua/python
| * | | Apply suggestions from code reviewLibravatar Dpeta2022-12-25
| | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
| * | | Remove unnecessary mkdirLibravatar Dpeta2022-12-25
| | | |
| * | | Fix music/pictures whitelist path in chatterino.profileLibravatar Dpeta2022-12-25
| | | |
| * | | Apply the other code review suggestions to chatterino.profileLibravatar Dpeta2022-12-25
| | | |
| * | | Apply commitable suggestions from code review Libravatar Dpeta2022-12-25
| | | | | | | | | | | | | | | | | | | | I'll try the rest manually soon Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | Add Chatterino profileLibravatar Dpeta2022-12-25
| | | |
* | | | Merge pull request #5553 from slowpeek/masterLibravatar netblue302023-01-04
|\ \ \ \ | | | | | | | | | | Blacklist google-drive-ocamlfuse config
| * | | | Blacklist XDG cache and data dirs for google-drive-ocamlfuseLibravatar slowpeek2022-12-23
| | | | |
| * | | | Blacklist google-drive-ocamlfuse configLibravatar slowpeek2022-12-23
| |/ / /
* | | / ytmdesktop: fix typo (#5567)Libravatar glitsj162023-01-04
| |_|/ |/| |
* | | Merge pull request #5554 from Dpeta/dbus-wiki-link-fixLibravatar smitsohu2022-12-27
|\ \ \ | | | | | | | | Update DBus wiki link
| * | | Update DBus wiki linkLibravatar Dpeta2022-12-23
| |/ /
* / / window manager profiles: fix browser/electron internal sandboxesLibravatar smitsohu2022-12-25
|/ /
* | gpg: fix private-bin (#5550)Libravatar glitsj162022-12-21
| |
* | gpg-agent: sort private-bin (even though it's commented) (#5549)Libravatar glitsj162022-12-21
| | | | | | | | | | * gpg-agent: sort private-bin (even though it's commented) * gpg-agent: fix private-bin
* | clarify that duplicated blacklisting of /proc/config.gz is intentional (#5548)Libravatar glitsj162022-12-21
| | | | | | | | | | | | | | * add comment on intentional duplication of blacklisted kernel configuration * disable-proc.inc: update the duplication comment * disable-common.inc: add duplication notice for kernel configuration
* | New profile: ssmtp (#5544)Libravatar glitsj162022-12-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * disable-programs.inc: add ssmtp support * Create ssmtp.profile * ssmtp: support Debian/Ubuntu * README.md: add ssmtp to 'New profiles' section * disable-common.inc: move ssmtp support to keep CI happy * ssmtp: improve dead.letter comment Suggested in [review](https://github.com/netblue30/firejail/pull/5544#pullrequestreview-1225322546).
* | spectre-meltdown-checker: fixes (#5546)Libravatar glitsj162022-12-21
| |
* | seahorse refactoring (#5543)Libravatar glitsj162022-12-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * seahorse: fixes and hardening * seahorse-daemon: hardening * seahorse-tool: move private-etc items to seahorse * seahorse: unbreak nautilus file encryption As suggested [in review](https://github.com/netblue30/firejail/pull/5543#pullrequestreview-1225250520). * seahorse-tool: move private-tmp to seahorse * seahorse: add private-tmp * seahorse: fix access to ssh-agent socket
* | Fix mDNS name resolution with wrc (#5541)Libravatar rusty-snake2022-12-21
| |
* | audacity: networking updates (#5540)Libravatar glitsj162022-12-20
| | | | | | | | | | | | | | | | | | * audacity: networking updates * audacity: fix allowing to run local server * audacity: move comment so it's more visible As suggested [in review](https://github.com/netblue30/firejail/pull/5540#pullrequestreview-1225225897).
* | disable-common.inc: add gnome-console to disabled terminals (#5542)Libravatar glitsj162022-12-20
| |
* | Rename xlinks2 to xlinks2.profileLibravatar rusty-snake2022-12-20
| |
* | audacity: support more config locations (#5538)Libravatar glitsj162022-12-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * audacity: support more config locations * disable-programs.inc: add more audacity locations * audacity: cover all XDG supported locations * audacity: cover all XDG supported locations * audacity: fix state dir entree in disable-programs.inc * unbreak disable-programs.inc Oh my, GitHub syntax highlighting support completely threw me off here. Thanks to @kmk3 for [saving the bacon](https://github.com/netblue30/firejail/pull/5538#pullrequestreview-1224604663)!
* | add restrict-namespaces to (almost) all profilesLibravatar smitsohu2022-12-20
| |
* | Rename cinelerra-gg to cinelerra-gg.profileLibravatar glitsj162022-12-19
| |
* | Merge pull request #5522 from hknaack/avidemux-fixes-for-opensuseLibravatar netblue302022-12-14
|\ \ | | | | | | Avidemux tools support
| * | Add profile for avidemux3_jobs_qt5Libravatar Hartmut Knaack2022-12-13
| | | | | | | | | | | | | | | | | | | | | | | | Add a profile for the Qt5 GUI to process Avidemux jobs. Use a redirection to the avidemux3_qt5 profile to reuse translation files. The application needs to create a network socket on localhost and fails to run with protocol unix, so that entry in the default avidemux profile needs to be extended.
| * | Add profile for avidemux3_cliLibravatar Hartmut Knaack2022-12-12
| | | | | | | | | | | | | | | Add a profile for the command-line interface of Avidemux, which redirects to the existing avidemux profile.