Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Fix #1724, Tor browser not working on Ubuntu and Fedora | Tad | 2018-01-14 |
| | |||
* | Update firecfg.config and add a profile alias for idea.sh | Tad | 2018-01-14 |
| | |||
* | Add a profile for OnionShare | Tad | 2018-01-14 |
| | |||
* | Add a profile for Pitivi | Tad | 2018-01-12 |
| | |||
* | disable qml disk cache globally | smitsohu | 2018-01-08 |
| | |||
* | Fixup b9846aed427487f5acc764eb21369b0c9cb2b41a | Tad | 2018-01-04 |
| | |||
* | Add a Firefox profile alias for Firefox Developer Edition | Tad | 2018-01-04 |
| | |||
* | improve theming support (kvantum, qt5ct) - #1540 | smitsohu | 2018-01-02 |
| | |||
* | Merge pull request #1701 from bn0785ac/master | netblue30 | 2018-01-02 |
|\ | | | | | tor flavours | ||
| * | TBB pt-br fixup | Tad | 2018-01-01 |
| | | |||
| * | Simplfy locale specific Tor Browser profiles | Tad | 2018-01-01 |
| | | |||
| * | tor flavours | Your Name | 2017-12-30 |
| | | |||
* | | Merge pull request #1710 from bitfreak25/master | SpotComms | 2018-01-01 |
|\ \ | | | | | | | Add profile for "playonlinux" | ||
| * | | Add profile for "playonlinux" | bitfreak25 | 2018-01-01 |
| | | | | | | | | | | | | | | | | | | | | | This profile have been successfully tested by starting a windows application through it. "wine.profile" has been used as template for this. Only "noblacklist ${PATH}/nc" has been added because playonlinux needs it to run. Please note that this is currently not tested due to security aspects, so it may need a rework later on. Because opening a unknown windows application through it could possibly be a security risk. | ||
* | | | Merge pull request #1708 from bitfreak25/master | SpotComms | 2018-01-01 |
|\| | | | | | | | | Fix #1702 - Couldn't start 'minetest' in Debian Testing | ||
| * | | Fixup fix for #1702 | Tad | 2018-01-01 |
| | | | |||
| * | | Fix #1702 - Couldn't start 'minetest' in Debian Testing | bitfreak25 | 2018-01-01 |
| |/ | | | | | This removes the "private-etc" line from the "minetest"-profile for a successfully start of the game. | ||
* | | Blacklist the Dash wallet directory | Danil Semelenov | 2017-12-31 |
| | | |||
* | | Add "sylpheed" to profiles | bitfreak25 | 2017-12-30 |
|/ | | | This profile have been successfully tested by sending and receiving an Email. "claws-mail.profile" has been used as template for this. | ||
* | inox edgy flavours | Your Name | 2017-12-30 |
| | |||
* | Fix #1690 - qbittorrent doesn't launch on some Arch and Mint 17.3 systems | Fred Barclay | 2017-12-28 |
| | |||
* | Add netlink and noblacklist openssl to teamspeak3 profile - potential fix ↵ | Fred-Barclay | 2017-12-27 |
| | | | | for #1695 | ||
* | adding basilisk profile - #1693 | netblue30 | 2017-12-27 |
| | |||
* | Merge pull request #1697 from sgtpep/patch-4 | netblue30 | 2017-12-27 |
|\ | | | | | Blacklist the monero wallets directory | ||
| * | Blacklist the monero wallets directory | Danil Semelenov | 2017-12-27 |
| | | | | | | ~/Monero/wallets is the default path suggested by the official wallet application, but it can be changed by user. | ||
* | | Blacklist ~/.ethereum | Danil Semelenov | 2017-12-27 |
|/ | |||
* | Fix #1686: comment out icedove dirs and don't attempt to mkdir ~/.icedove to ↵ | Fred Barclay | 2017-12-24 |
| | | | | avoid clash with Thunderbird on Debian systems. | ||
* | Merge pull request #1691 from DiGitHubCap/master | Fred Barclay | 2017-12-22 |
|\ | | | | | Fix Deluge | ||
| * | Fix Deluge | DiGitHubCap | 2017-12-22 |
| | | | | | | | | | | Deluge needs access to more than the deluge binary if it runs as a daemon (or if you want to access it via the web or command line) | ||
* | | kwin_x11 fixes | smitsohu | 2017-12-22 |
| | | |||
* | | Merge pull request #1687 from floxo/master | smitsohu | 2017-12-22 |
|\ \ | | | | | | | Added environment variable QML_DISABLE_DISK_CACHE=1 to okular.profile. | ||
| * | | Added environment variable QML_DISABLE_DISK_CACHE=1 to okular.profile. | Flox | 2017-12-21 |
| |/ | | | | | | | | | | | | | | | Without it, recent okular versions (here 17.12.0-1 on Arch Linux) crash with mprotect failed in ExecutableAllocator::makeExecutable: Permission denied due to the noexec constraints in the firejail profile. | ||
* | | Add iana-etc's services to private-etc in steam.profile, fixes #1688 | Tad | 2017-12-22 |
| | | |||
* | | disable-common.inc: read-only access to ~/.ssh/authorized_keys | Alexander GQ Gerasiov | 2017-12-22 |
|/ | | | | | | | | | | | | | | | disable-common.inc blacklists whole .ssh, but some profiles (e.g. idea.sh) unblacklists it to allow git over ssh with public key auth. But this creates security hole, since firejailed app could modify ~/.ssh/authorized_keys and allow arbitrary code execution on the host with sshd installed (e.g. ssh localhost and run any program) or even open backdoor for remote attacker. This commits disallows write access to ~/.ssh/authorized_keys even if .ssh was unblacklisted. Signed-off-by: Alexander GQ Gerasiov <gq@cs.msu.su> | ||
* | Add Figaro's Password Manager 2 to disable-passwdmgr.inc | netblue30 | 2017-12-18 |
| | |||
* | Fix #1674 | Tad | 2017-12-17 |
| | | | | look into why this is breaking | ||
* | Profile fixes | Tad | 2017-12-17 |
| | |||
* | Add new path for TelegramDesktop files. | Alexander GQ Gerasiov | 2017-12-17 |
| | | | | | Latest versions of TelegramDesktop supports both old (~/.TelegramDesktop) and new (~/.local/share/TelegramDesktop) location of sensitive data files. | ||
* | disable-common.inc: Blacklist .homesick | Alexander GQ Gerasiov | 2017-12-17 |
| | | | | | homesick is dotfiles manager. It keeps dotfiles (e.g. .bashrc) in repository under ~/.homesick and puts symlinks into home directory. | ||
* | Fix #1680, same as #1437 | Tad | 2017-12-16 |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | smitsohu | 2017-12-11 |
|\ | |||
| * | fix trash blacklist in caja profile | smitsohu | 2017-12-10 |
| | | |||
* | | fix qutebrowser | smitsohu | 2017-12-11 |
|/ | |||
* | fix (and harden) kmail - #1541 | smitsohu | 2017-12-10 |
| | |||
* | remove mutt blacklist redundancies | smitsohu | 2017-12-09 |
| | |||
* | improve fetchmail profile - #1661 | smitsohu | 2017-12-09 |
| | |||
* | typo fix | smitsohu | 2017-12-08 |
| | |||
* | sort whitelist-common.inc | smitsohu | 2017-12-08 |
| | |||
* | pedantic comment fix | smitsohu | 2017-12-08 |
| | |||
* | fix sound in firefox started from thunderbird | smitsohu | 2017-12-08 |
| | | | | | and move disable-mnt from thunderbird to firefox profile, in alignment with recent commit from @Fred-Barclay |