Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Merge pull request #4477 from bjpbakker/multimc5-lwjgl | netblue30 | 2021-08-30 |
|\ | | | | | multimc5: fix exec of LWJGL libraries | ||
| * | multimc5: fix exec of LWJGL libraries | Bart Bakker | 2021-08-24 |
| | | |||
* | | Merge pull request #4475 from davidebeatrici/telegram-desktop-2.6.1-fix | netblue30 | 2021-08-30 |
|\ \ | | | | | | | telegram.profile: whitelist /usr/share/TelegramDesktop | ||
| * | | telegram.profile: whitelist /usr/share/TelegramDesktop | Davide Beatrici | 2021-08-21 |
| |/ | | | | | | | | | | | | | | | Telegram loads packed resources dynamically since 443eef3202ee43c2e820cc550fbcc70a7609f452. In the official Debian package, the relevant file can be found at /usr/share/TelegramDesktop/tresources.rcc. If the file cannot be loaded, the program fails to launch and prints "Packed resources not found". | ||
* | | Merge pull request #4486 from pirate486743186/yt-dlp-profile | netblue30 | 2021-08-30 |
|\ \ | | | | | | | create yt-dlp.profile | ||
| * | | create yt-dlp.profile | pirate486743186 | 2021-08-27 |
| |/ | |||
* | | Merge pull request #4484 from pirate486743186/gallery-dl | netblue30 | 2021-08-30 |
|\ \ | | | | | | | creating gallery-dl.profile | ||
| * | | creating gallery-dl.profile | pirate486743186 | 2021-08-27 |
| |/ | |||
* / | updating youtube-viewers-common.profile (#4485) | pirate486743186 | 2021-08-29 |
|/ | |||
* | Update celluloid.profile | rusty-snake | 2021-08-16 |
| | | | | Fix #4469 | ||
* | add disable-X11.inc to profile template | Reiner Herrmann | 2021-08-14 |
| | |||
* | Move disable-passwordmgr.inc into disable-common.inc/disable-programs.inc ↵ | rusty-snake | 2021-08-12 |
| | | | | follow up | ||
* | Move disable-passwordmgr.inc into disable-common.inc/disable-programs.inc ↵ | rusty-snake | 2021-08-12 |
| | | | | | (#4461) See #4454 | ||
* | Create disable-X11.inc (#4462) | rusty-snake | 2021-08-11 |
| | |||
* | Update keepassxc.profile | rusty-snake | 2021-08-09 |
| | | | | | | | - Add whitelist-run-common.inc - Drop netlink (there are no error or borken feature for me (including auto-type)) - Second update for the dbus-policy | ||
* | Add /run/media to whitelist-run-common.inc | rusty-snake | 2021-08-09 |
| | |||
* | Add rmenv RESTIC_* to disable-passwdmgr.inc | rusty-snake | 2021-08-09 |
| | |||
* | Fix zim and rednotebook | rusty-snake | 2021-08-09 |
| | | | | Introduced in 2e4d52ec | ||
* | Correct directory for sway.profile and io.github.lainsce.Notejot.profile | rusty-snake | 2021-08-09 |
| | |||
* | remove cargo registry token for crates.io from environment | Reiner Herrmann | 2021-08-06 |
| | |||
* | Revice keepassxc's dbus policy | rusty-snake | 2021-08-05 |
| | |||
* | Add wru to firefox-common, chromium-common and profile.template | rusty-snake | 2021-08-04 |
| | | | | | | | Still unresolved: > If someone who use systemd-resolved can say more which resolv.conf is necessary on such system. > whitelist /run/systemd/resolve/resolv.conf > whitelist /run/systemd/resolve/stub-resolv.conf | ||
* | Profile fixes | rusty-snake | 2021-08-04 |
| | | | | | | | | | | - Fix #4157 -- [Feature] Should rmenv GitHub auth tokens There are still more token variables from other program that should be added. - Fix #4093 -- darktable needs read access to liblua* - Fix #4383 -- move noblacklist ${HOME}/.bogofilter to email-common.profile for claws-mail (and other mailers) - Fix xournalpp.profile - syscalls.txt: ausyscall i386 -> firejail --debug-syscalls32 | ||
* | Added ~/Private blacklist (#4434) | caydey | 2021-08-03 |
| | |||
* | Add electron[0-9]{0,2} to all electron redirect … | rusty-snake | 2021-08-01 |
| | | | | …profiles with private-bin | ||
* | Fixup: Fix Firefox 'Profile not found' - whitelist /run/user/xxx/firefox | rusty-snake | 2021-07-28 |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | Fred Barclay | 2021-07-28 |
|\ | |||
| * | Merge pull request #4420 from glitsj16/dci | netblue30 | 2021-07-28 |
| |\ | | | | | | | ordering and additions | ||
| | * | drop trailing slashes from openrc items | glitsj16 | 2021-07-26 |
| | | | | | | | | | As suggested in https://github.com/netblue30/firejail/pull/4420#discussion_r676929867. | ||
| | * | ordering and additions | glitsj16 | 2021-07-26 |
| | | | |||
| * | | Merge branch 'master' into master | netblue30 | 2021-07-28 |
| |\ \ | |||
| * | | | moved rules from firefox-common.profile to firefox.profile | 0x6a | 2021-07-20 |
| | | | | |||
| * | | | Blacklist /*firefox* except for firefox itself | 0x6a | 2021-07-20 |
| | | | | |||
| * | | | Fix Firefox 'Profile not found' - whitelist /run/user/xxx/firefox | 0x6a | 2021-07-17 |
| | | | | |||
* | | | | Revert allow/deny additional files | Fred Barclay | 2021-07-28 |
| |/ / |/| | | | | | | | | | | | See #4410 8b50039a1fad123b90172fadc85bc232e97eb6d1 | ||
* | | | Merge pull request #4412 from netblue30/Neo00001-patch-1 | netblue30 | 2021-07-28 |
|\ \ \ | | | | | | | | | Update telegram.profile | ||
| * | | | Update telegram.profileNeo00001-patch-1 | Neo00001 | 2021-07-20 |
| | | | | | | | | | | | | | | | | | | | | | | | | Recently I have noticed these two- - org.telegram.desktop.BaseGtkIntegration-0fe332cb424bfc37f394ccb976afec41 - org.telegram.desktop.GtkIntegration-0fe332cb424bfc37f394ccb976afec41 & without dbus rule for these two, telegram isn't quiting. | ||
* | | | | Merge pull request #4419 from glitsj16/ncdu2 | netblue30 | 2021-07-28 |
|\ \ \ \ | | | | | | | | | | | add ncdu2 redirect profile | ||
| * | | | | Create ncdu2.profile | glitsj16 | 2021-07-26 |
| | |_|/ | |/| | | |||
* | | | | improved reordening for ids.config | glitsj16 | 2021-07-28 |
| | | | | |||
* | | | | reordering and fix for ids.config | glitsj16 | 2021-07-28 |
| | | | | |||
* | | | | Merge branch 'master' of ssh://github.com/netblue30/firejail | netblue30 | 2021-07-28 |
|\ \ \ \ | |||
| * | | | | kodi.profile: Add Lutris Kodi Addon note | rusty-snake | 2021-07-28 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closes #3785 -- Allowing calling specific apps outside the sandbox or with a different firejail profile The idea isn't worng but should be reweiten in a seperate issue without all the kodi/lutris clutter. | ||
| * | | | | Update etc/templates/syscalls.txt | rusty-snake | 2021-07-28 |
| | | | | | | | | | | | | | | | | | | | | Rework + suggest --seccomp-error-action=log | ||
| * | | | | Refactor code.profile as electron redirect | rusty-snake | 2021-07-28 |
| | | | | | | | | | | | | | | | | | | | | closes #4408 | ||
| * | | | | kcmp is allowed by default, no need to add seccomp exceptions for it anylonger | rusty-snake | 2021-07-28 |
| |/ / / | |||
* / / / | intrusion detection system | netblue30 | 2021-07-28 |
|/ / / | |||
* | | | Merge branch 'master' into revert-allow-deny-etc | netblue30 | 2021-07-25 |
|\ \ \ | |||
| * | | | Complete 42a03511d0877690276da83bf548635d7e8ca693 | Fred Barclay | 2021-07-23 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add ms-edge-beta paths to disable-programs.inc Support firecfg Adding to release notes (already added to README.md) | ||
| * | | | new profiles | rusty-snake | 2021-07-20 |
| | | | |