aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* various profile enhancementsLibravatar smitsohu2017-09-25
| | | | | | | * okular needs kdeinit4 for open file dialog since recently * memory-deny-write-execute should be a safe addition for desktop use of dnscrypt and unbound * cleanup works
* fix nginx and apache2, possible fix for #1534Libravatar netblue302017-09-25
|
* Remove whitelist from pintaLibravatar Tad2017-09-24
|
* Harden mate-* profilesLibravatar Fred-Barclay2017-09-24
|
* tighten mate-calc profileLibravatar Fred-Barclay2017-09-24
|
* Fix gnome-calculator missing themeLibravatar Tad2017-09-24
|
* Gitter on Arch requires env,bash in private-bin.Libravatar Fred-Barclay2017-09-22
| | | | | /usr/bin/gitter redirects to /opt/Gitter/ so a private-opt filter has been added as well.
* merge #1565Libravatar netblue302017-09-22
|
* Further fixup #1565 and add a profile for uefitoolLibravatar Tad2017-09-22
|
* Fixup merge of #1565Libravatar Tad2017-09-22
|
* Merge pull request #1565 from nyancat18/masterLibravatar netblue302017-09-22
|\ | | | | Some profiles
| * fixLibravatar Your Name2017-09-19
| |
| * readyLibravatar Your Name2017-09-19
| |
| * 1 LISTLibravatar Your Name2017-09-19
| |
* | Update quiterss.profileLibravatar PharmaceuticalCobweb2017-09-22
| |
* | harden corebirdLibravatar smitsohu2017-09-21
| |
* | added ffmpeg.profile, removed ssh-agent from firecfgLibravatar netblue302017-09-21
| |
* | Fixup 17a2edf9be3d1144db1a262c5358bf190c9b272bLibravatar Tad2017-09-21
| |
* | Restore smtube.profile, accidentally clobbered in ↵Libravatar Tad2017-09-20
| | | | | | | | cbbc90381b41156c16bcb30934a10c843c8298c0
* | remove some redundanciesLibravatar smitsohu2017-09-20
| | | | | | | | | | | | | | * ~/.bash_history is already included in ~/.*_history, same file * ~/.password-store is already included in disable-passwdmgr.inc (and not whitelisted in browsers) * ~/.local/share/applications is in whitelist-common.inc since recently
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar Fred-Barclay2017-09-19
|\ \
| * | add nogroupsLibravatar smitsohu2017-09-20
| | |
| * | Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302017-09-19
| |\ \
| | * | Add a profile for ConkyLibravatar Irvine2017-09-19
| | | |
| * | | add private-bin support to profile builderLibravatar netblue302017-09-19
| |/ /
| * / update KDE whitelistLibravatar smitsohu2017-09-19
| |/
| * Misc fixesLibravatar Tad2017-09-18
| | | | | | | | Thanks to @Fred-Barclay, @smitsohu and @reinerh for a bunch of these
| * Update disable-programs.incLibravatar Tad2017-09-18
| |
| * Add an alias for NatronLibravatar juan2017-09-18
| |
| * Harden 10 profilesLibravatar Chiraag Nataraj2017-09-18
| |
| * Fixup 12 profilesLibravatar Tad2017-09-18
| |
| * Harden 25 profilesLibravatar Tad2017-09-18
| |
| * Fixup 36 profilesLibravatar Tad2017-09-18
| |
| * Add 5 profilesLibravatar juan2017-09-18
| |
| * Add 31 profilesLibravatar Chiraag Nataraj2017-09-18
| |
| * Add a profile for TeamSpeak3Libravatar Melvin Vermeeren2017-09-18
| |
| * Add a profile for xmr-stak-cpuLibravatar Tad2017-09-18
| | | | | | | | | | | | - Add list of new profiles to README.md - Update firecfg - Further restrict silentarmy
| * Add a profile for clamdscan, clamdtop, and freshclamLibravatar Tad2017-09-18
| |
| * Add a profile for ClamAV's clamscanLibravatar Tad2017-09-18
| |
| * whitelist /varLibravatar netblue302017-09-18
| |
| * Add a profile for Rocket.ChatLibravatar Tad2017-09-18
| |
| * Merge branch 'master' of http://github.com/netblue30/firejailLibravatar netblue302017-09-18
| |\
| | * profiles: add profile for surf browserLibravatar Reiner Herrmann2017-09-18
| | |
| * | whitelist /varLibravatar netblue302017-09-18
| |/
| * electron profile whitelistingLibravatar netblue302017-09-18
| |
| * blacklist clipboard manager in disable-common.incLibravatar netblue302017-09-18
| |
| * Merge pull request #1561 from soredake/steamfixLibravatar netblue302017-09-18
| |\ | | | | | | fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profile
| | * fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profileLibravatar soredake2017-09-18
| | | | | | | | | | | | | | | | | | steam.sh executes `/sbin/ldconfig -XNv 2> /dev/null` when STEAM_RUNTIME_PREFER_HOST_LIBRARIES is not zero and fails in some cases (see https://github.com/ValveSoftware/steam-for-linux/issues/4768) because of blacklisted /sbin and missing ld.so.conf{,.d} https://steamcommunity.com/groups/SteamClientBeta/announcements/detail/586991182161672256
| * | Merge pull request #1558 from jelford/ssh-agent-noshellLibravatar netblue302017-09-18
| |\ \ | | |/ | |/| Set `shell none` for ssh-agent configuration
| | * Set `shell none` for ssh-agent configurationLibravatar James Elford2017-09-17
| | | | | | | | | | | | | | | | | | It's common to invoke ssh-agent in shell login config, so if firejail launches it through a shell, that can lead to an infinite loop