Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | remove noexec home from chromium-based browsers | 2019-02-02 | |
| | |||
* | Temporary fix for noexec ${HOME} breakage | 2019-02-02 | |
| | |||
* | Add a missing path to vivaldi profile, partial fix for #2383 | 2019-02-01 | |
| | |||
* | Merge pull request #2384 from carloabelli/mpris | 2019-02-01 | |
|\ | | | | | remove nodbus from MPRIS client profiles | ||
| * | remove nodbus from MPRIS client profiles | 2019-02-01 | |
| | | | | | | | | | | | | | | MPRIS is a D-Bus interface for controlling media players. The nodbus option prevents these players from being controlled through MPRIS. It seems that most of the other media players did not have the nodbus option or it was already commented out. | ||
* | | --name rework | 2019-02-01 | |
|/ | |||
* | Merge pull request #2372 from rusty-snake/additional-blacklisting | 2019-01-30 | |
|\ | | | | | additional blacklisting | ||
| * | Update some IDE profiles | 2019-01-29 | |
| | | |||
| * | Update wget.profile | 2019-01-27 | |
| | | |||
| * | additional blacklisting | 2019-01-27 | |
| | | |||
* | | pybitmessage.profile: remove memory-deny-write-execute | 2019-01-30 | |
| | | | | | | On some systems it causes app to crash on startup, see https://github.com/netblue30/firejail/issues/2379 | ||
* | | alphabetize | 2019-01-30 | |
| | | |||
* | | misc profile hardening (xdg blacklist, private-cache, netfilter) | 2019-01-30 | |
| | | |||
* | | Fixup qtox profile, closes #2374 | 2019-01-28 | |
| | | |||
* | | Fixup cliqz profile, closes #2377 | 2019-01-28 | |
| | | |||
* | | enable/disable cgroup in firejail.config | 2019-01-27 | |
| | | |||
* | | Merge pull request #2373 from rusty-snake/fix_gnome-maps | 2019-01-27 | |
|\ \ | | | | | | | Fix gnome-maps | ||
| * | | Fix gnome-maps | 2019-01-27 | |
| |/ | |||
* / | Allow processes confined with AppArmor to obtain some process information | 2019-01-27 | |
|/ | | | | | | | | 'firejail --apparmor chromium' logged a huge amount of apparmor denials, because it wants to use read/readby permissions. Allow those accesses, but keep full tracing disabled by default. See also: https://bugs.debian.org/912587 and apparmor.d(5) | ||
* | kodi.profile: switch back to default seccomp filter | 2019-01-24 | |
| | | | As mincore syscall was dropped from default list we can use it again. | ||
* | fix skypeforlinux | 2019-01-23 | |
| | |||
* | removed mincore syscall from default seccomp filter | 2019-01-23 | |
| | |||
* | improve gwenview and dolphin profiles - #2306 #2348 | 2019-01-22 | |
| | |||
* | Fix github-desktop for appimage usage | 2019-01-22 | |
| | |||
* | Redo github-desktop.profile as blacklist profile | 2019-01-22 | |
| | | | Following suggestion in https://github.com/netblue30/firejail/pull/2362 to turn this into a blacklist profile. | ||
* | Refactor github-desktop.profile | 2019-01-22 | |
| | |||
* | kodi profile - removed mincore from seccomp filter | 2019-01-21 | |
| | |||
* | Add warning to thunderbird profile -- fix #2357 | 2019-01-20 | |
| | |||
* | Merge pull request #2356 from glitsj16/gnome-calculator | 2019-01-20 | |
|\ | | | | | Unbreak currency conversion for gnome-calculator | ||
| * | Unbreak currency conversion for gnome-calculator | 2019-01-20 | |
| | | |||
* | | Merge pull request #2354 from glitsj16/gcalccmd | 2019-01-20 | |
|\ \ | | | | | | | Create gcalccmd.profile | ||
| * | | Create gcalccmd.profile | 2019-01-20 | |
| | | | |||
* | | | Merge pull request #2353 from glitsj16/gnome-calculator | 2019-01-20 | |
|\ \ \ | | |/ | |/| | Harden gnome-calculator profile | ||
| * | | Harden gnome-calculator profile | 2019-01-20 | |
| |/ | |||
* / | Harden eog profile | 2019-01-20 | |
|/ | |||
* | Create clawsker.profile | 2019-01-20 | |
| | |||
* | Merge pull request #2347 from Lockdis/master | 2019-01-20 | |
|\ | | | | | add google earth pro, update google earth profile | ||
| * | Update google-earth-pro.profile | 2019-01-18 | |
| | | |||
| * | Update google-earth.profile | 2019-01-18 | |
| | | |||
| * | Create google-earth-pro.profile | 2019-01-18 | |
| | | |||
* | | Update libreoffice.profile | 2019-01-19 | |
|/ | | | comment `machine-id` | ||
* | flameshot.profile: remove memory-deny-write-execute | 2019-01-18 | |
| | | | memory-deny-write-execute may break app, see https://github.com/netblue30/firejail/issues/1139#issuecomment-455420202 | ||
* | konversation.profile: add netlink protocol | 2019-01-17 | |
| | | | This suppresses errors seen in https://github.com/netblue30/firejail/issues/1139#issuecomment-454780721 | ||
* | Update gajim.profile | 2019-01-16 | |
| | | | Fix plugin-update and install. | ||
* | adding mincore syscall to the default seccomp filter and some independent ↵ | 2019-01-14 | |
| | | | | profiles | ||
* | Fix ocenaudio profile | 2019-01-04 | |
| | |||
* | Add a profile for ghostwriter (#2319) | 2018-12-30 | |
| | | | | | * Add a profile for ghostwriter | ||
* | Merge pull request #2313 from rusty-snake/patch-1 | 2018-12-27 | |
|\ | | | | | Fix gajim.profile | ||
| * | Update gajim.profile | 2018-12-27 | |
| | | |||
| * | Some additional hardening for gajim | 2018-12-27 | |
| | |