| Commit message (Collapse) | Author | Age |
|
|
| |
As discussed in https://github.com/netblue30/firejail/issues/1917#issuecomment-386002234 leave blacklisting dbus access to firejail userspace with 'nodbus' option. Fine grained blacklisting of particular dbus services can be added here in the future.
|
|
|
| |
qmmp requires these unzipping programs in order to install skins, so i've added them to private-bin
|
| |
|
|
|
|
|
|
|
| |
firefox-wayland is a new wrapper script included with Firefox on Fedora 28
it has firefox hardcoded as /usr/bin/firefox
+ some minor fixes in other profiles
|
|
|
| |
See https://github.com/netblue30/firejail/issues/1965
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Packagers seem to be all using different names
|
| |
|
|
|
|
| |
See https://github.com/netblue30/firejail/commit/14e95834c7d2a9b1b7920b97cb48682b5ad63942#commitcomment-29051315
|
|
|
|
| |
See https://github.com/netblue30/firejail/commit/b4e484e50f22894683c6974bc01e171dd2b19e3d#commitcomment-29051254
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|\
| |
| | |
Fixes to make Blender with AMD GPU work under firejail (#1931)
|
| | |
|
| | |
|
|\ \
| | |
| | | |
disable tracelog in firefox-common.profile
|
| | | |
|
| |/
| |
| | |
tracelog breaks firefox 60+ catastrophically in my testing
|
| | |
|
|\ \
| | |
| | | |
profile for qmmp
|
| |/ |
|
|/ |
|
|\
| |
| | |
add note for 'volatile' storage support
|
| | |
|
| | |
|
|/
|
|
|
|
|
| |
private-bin was generated manually while looking at ark source code, it should be complete. Obviously build-in previewer should be used with those.
private-etc was generated by firejail --build, it's commented out for now.
Both tested on Archlinux and KDE Plasma 5.12
|
|
|
|
|
|
|
|
| |
* add disable-interpreters.inc to gnome-logs
Besides adding `include /etc/firejail/disable-interpreters.inc`, enabling both `private-etc` and `private-lib` (tested with systemd default storage and volatile journal).
* Add localtime to private-etc
|
| |
|
|
|
|
| |
cin profile: 'protocol unix' implies nonewprivs
|
| |
|
|
|
|
|
|
|
|
|
| |
cin keeps seccomp (but i've recovered multithreading its mandatory for video editing)
libreoffice its fixed (linux-kde)
natron works (multithread )
|
|\
| |
| | |
Add nvm to list of disabled interpreters
|
| | |
|
|\ \
| | |
| | | |
Amend WebStorm profile
|
| |/
| |
| |
| |
| |
| | |
- Add Android development-related paths
- Don't blacklist node/nvm for e.g. Node.js-related development
- Remove noexec from /tmp for e.g. same Node.js case
|
| | |
|
| | |
|
| | |
|
|/
|
|
|
| |
See #1917 and #1703
Tested on Ubuntu 18.04
|
|\
| |
| | |
Update Gajim profile
|
| | |
|
| |
| |
| |
| |
| |
| | |
- Version 1 ported to Python 3, so remove 2.7-related settings
- Plugins get installed in ~/.local/share/gajim/plugins
- Enable private-{etc,tmp}
|