aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* whitelist /varLibravatar netblue302017-09-18
|
* electron profile whitelistingLibravatar netblue302017-09-18
|
* blacklist clipboard manager in disable-common.incLibravatar netblue302017-09-18
|
* Merge pull request #1561 from soredake/steamfixLibravatar netblue302017-09-18
|\ | | | | fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profile
| * fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profileLibravatar soredake2017-09-18
| | | | | | | | | | | | steam.sh executes `/sbin/ldconfig -XNv 2> /dev/null` when STEAM_RUNTIME_PREFER_HOST_LIBRARIES is not zero and fails in some cases (see https://github.com/ValveSoftware/steam-for-linux/issues/4768) because of blacklisted /sbin and missing ld.so.conf{,.d} https://steamcommunity.com/groups/SteamClientBeta/announcements/detail/586991182161672256
* | Merge pull request #1558 from jelford/ssh-agent-noshellLibravatar netblue302017-09-18
|\ \ | |/ |/| Set `shell none` for ssh-agent configuration
| * Set `shell none` for ssh-agent configurationLibravatar James Elford2017-09-17
| | | | | | | | | | | | It's common to invoke ssh-agent in shell login config, so if firejail launches it through a shell, that can lead to an infinite loop
* | whitelist /var - Xubuntu fixesLibravatar netblue302017-09-17
| |
* | whitelist /var: temporary fix for XubuntuLibravatar netblue302017-09-17
| |
* | whitelisting /varLibravatar netblue302017-09-17
|/
* --buildLibravatar netblue302017-09-16
|
* Add a profile for TerasologyLibravatar Tad2017-09-15
|
* little KDE app enhancementsLibravatar smitsohu2017-09-15
|
* update whitelist-common.incLibravatar netblue302017-09-15
|
* update seccomp filterLibravatar smitsohu2017-09-14
|
* update seccomp filter, add no3dLibravatar smitsohu2017-09-14
|
* goobox enhancements (permit metadata retrieval)Libravatar smitsohu2017-09-14
| | | 1) We should permit internet access, as Goobox retrieves metadata via cddb-slave2 2) We can safely enable private-dev after the introduction of nodvd
* --writable-run-user, solving ssh/gnupg authentication problems for smarcardsLibravatar netblue302017-09-14
|
* fix Arch Linux /etc/resolv.conf symlink to /var/run/systemd/resolve/resolv.confLibravatar netblue302017-09-14
|
* ssh fix: #1543Libravatar netblue302017-09-14
|
* Merge pull request #1544 from smitsohu/muttLibravatar netblue302017-09-13
|\ | | | | localhost mail fix for mutt
| * (temporarily) undo commenting disable-devel.incLibravatar smitsohu2017-09-12
| | | | | | pending further discussion
| * permit scripts, local mailLibravatar smitsohu2017-09-10
| |
* | fix whitelist-common.incLibravatar netblue302017-09-13
| |
* | Update waterfox.profileLibravatar hawkeye1164772017-09-08
|/
* Fix gitg diff not showingLibravatar Tad2017-09-07
|
* Add a profile for MinetestLibravatar Tad2017-09-06
|
* Merge pull request #1533 from smitsohu/pulseLibravatar netblue302017-09-05
|\ | | | | remount ~/.config/pulse with noexec
| * noexec is hardcoded nowLibravatar smitsohu2017-09-05
| |
* | Merge pull request #1532 from SpotComms/slack-audio-fixLibravatar Fred Barclay2017-09-05
|\ \ | |/ |/| Fix broken audio in Slack
| * Fix broken audio in SlackLibravatar Tad2017-09-04
| |
* | Merge pull request #1526 from smitsohu/capsLibravatar startx20172017-09-05
|\ \ | | | | | | tighten some capability sets further
| * | wireshark needs cap_dac_overrideLibravatar smitsohu2017-09-04
| | |
| * | cap_dac_override not available to rootLibravatar smitsohu2017-09-04
| | |
| * | caps.keep for dnsmasqLibravatar smitsohu2017-09-03
| | |
| * | tighten capability setsLibravatar smitsohu2017-09-03
| |/
* / cleanup snap profileLibravatar smitsohu2017-09-05
|/
* add smtube (add-on for smplayer) to private-binLibravatar PizzaDude2017-09-03
|
* Merge pull request #1501 from SpotComms/iioLibravatar netblue302017-09-02
|\ | | | | Tweak itch.io profile
| * Tweak itch.io profileLibravatar Tad2017-08-30
| |
* | Merge pull request #1515 from SpotComms/sfLibravatar netblue302017-09-02
|\ \ | | | | | | Fix Spotify #1513
| * | Fix Spotify #1513Libravatar Tad2017-09-01
| | |
* | | Merge pull request #1511 from smitsohu/serversLibravatar netblue302017-09-02
|\ \ \ | | | | | | | | improve servers, harden musescore
| * | | add caps.keep to unbound,dnscryptLibravatar smitsohu2017-09-02
| | | |
| * | | slightly rephraseLibravatar smitsohu2017-09-02
| | | |
| * | | fix mdweLibravatar smitsohu2017-09-02
| | | |
| * | | add back disable-mntLibravatar smitsohu2017-09-02
| | | |
| * | | drop disable-mntLibravatar smitsohu2017-09-01
| | | |
| * | | improve servers, harden musescoreLibravatar smitsohu2017-08-31
| | | |
* | | | Add a profile for Yandex browserLibravatar Tad2017-09-02
| |/ / |/| | | | | | | | Thanks to @larkvirtual for the paths and testing