Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | cleanup | 2018-03-24 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2018-03-24 | |
|\ | |||
| * | Fixup gnome-recipes and add it to firecfg | 2018-03-24 | |
| | | |||
| * | gnome-recipes profile | 2018-03-24 | |
| | | |||
| * | Create gnome-recipes.profile | 2018-03-24 | |
| | | | | | | This needs an additional change in `disable-programs.inc` to blacklist ${HOME}/.local/share/gnome-recipes. Note: `private-lib` seems to be a WIP, especially for GNOMA apps. Hence I left it out here, although it works for me. Will come back to that issue later. | ||
| * | added java support for libreoffice | 2018-03-23 | |
| | | |||
* | | add basic akonadi integration | 2018-03-24 | |
| | | | | | | | | | | as it is now, there is no support for a full akonadi session inside the knotes sandbox, but knotes can connect to akonadi and should work fine | ||
* | | harden openbox profile | 2018-03-24 | |
|/ | |||
* | fix ping hostname | 2018-03-22 | |
| | |||
* | Misc profile hardening and fixes | 2018-03-18 | |
| | |||
* | typo | 2018-03-18 | |
| | |||
* | Spotify on Arch requires /etc/group | 2018-03-18 | |
| | |||
* | harden konversation and kwrite, minor fixes | 2018-03-18 | |
| | |||
* | asunder profile | 2018-03-17 | |
| | |||
* | asunder profile | 2018-03-17 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2018-03-17 | |
|\ | |||
| * | Move apparmor option to the top of the options list in all profiles | 2018-03-17 | |
| | | |||
* | | asunder profile | 2018-03-17 | |
|/ | |||
* | more apparmor deployment | 2018-03-17 | |
| | |||
* | apparmor deployment | 2018-03-16 | |
| | |||
* | Add a LibreOffice profile alias for Base | 2018-03-15 | |
| | |||
* | removing private-lib from evince, issue #1711 | 2018-03-14 | |
| | |||
* | fix private-etc in spotify profile - #1768 | 2018-03-13 | |
| | |||
* | fix qupzilla, falkon (seccomp, tracelog, private-tmp) - #1794, #1736 | 2018-03-13 | |
| | |||
* | fix unbound (ip-transparent option) - #1731 | 2018-03-13 | |
| | |||
* | harden kwrite | 2018-03-13 | |
| | |||
* | noblacklist /etc/profile.d cleanup | 2018-03-13 | |
| | |||
* | fix PROMPT_COMMAND for bash - this was the problem on CentOS that we needed ↵ | 2018-03-13 | |
| | | | | to unblacklist /etc/profile.d; I'll do some cleanup in the next commit | ||
* | (Temporarily?) fix private-lib for evince. See #1711"e | 2018-03-12 | |
| | |||
* | Even more fixes for /etc/profile | 2018-03-12 | |
| | |||
* | More fixes for /etc/profile and mdwe | 2018-03-12 | |
| | | | | | - Adds noblacklist /etc/profile.d to many profiles like 2e17082ba4b3399bf5d68bb75587934ea028cc5c and 970f739e2be202a39ab82f589d5773267b903de6 - Disables mdwe to workaround #1803 like 970f739e2be202a39ab82f589d5773267b903de6 | ||
* | Merge branch 'master' of http://github.com/netblue30/firejail | 2018-03-12 | |
|\ | |||
| * | Add a profile for gnome-builder | 2018-03-12 | |
| | | |||
| * | Remove mdwe from viewnior - fix #1808 | 2018-03-12 | |
| | | |||
* | | bringing back private-lib in evince, and some fixes for Arch Linux | 2018-03-12 | |
|/ | |||
* | fix bash on CentOS 7 | 2018-03-12 | |
| | |||
* | fix speller support in gedit profile | 2018-03-12 | |
| | |||
* | Add a steam profile alias for steam-native | 2018-03-10 | |
| | |||
* | Disable memory-deny-write-execute in evince profile | 2018-03-07 | |
| | | | It started breaking application in Archlinux, see https://github.com/netblue30/firejail/issues/1803 | ||
* | Add falkon profile - see #1794 | 2018-03-05 | |
| | |||
* | Fix #1797 - Brave doesn't open with noexec /tmp | 2018-03-05 | |
| | |||
* | fix kioexec/krun for KDE authentication | 2018-03-05 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2018-03-05 | |
|\ | |||
| * | Add VS Code profile - see request in #1139 | 2018-03-03 | |
| | | |||
| * | Add netlink to protocol list and drop chroot from seccomp filter - should ↵ | 2018-03-02 | |
| | | | | | | | | | | | | | | | | fix #1792. Brackets no longer opens without netlink in the protocol list, or with chroot blacklisted by the seccomp filter (which this commit changes from 'seccomp' to 'seccomp.keep'). | ||
* | | blacklist smartgit password file - #1796 | 2018-03-05 | |
|/ | |||
* | let konsole access its settings - #1789 | 2018-03-02 | |
| | |||
* | cleanup: remove empty private-bin and private-etc lines | 2018-03-01 | |
| | |||
* | add join-or-start to dolphin, okular and kwrite | 2018-03-01 | |
| | | | | fixes registration of d-bus services, closes #1391 | ||
* | Fixup private-bin in start-tor-browser.profile after ↵ | 2018-02-27 | |
| | | | | 63d455fbe6cfde2f97137f51b779d44f22cb4675 |