Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | added ffmpeg.profile, removed ssh-agent from firecfg | netblue30 | 2017-09-21 |
| | |||
* | Fixup 17a2edf9be3d1144db1a262c5358bf190c9b272b | Tad | 2017-09-21 |
| | |||
* | Restore smtube.profile, accidentally clobbered in ↵ | Tad | 2017-09-20 |
| | | | | cbbc90381b41156c16bcb30934a10c843c8298c0 | ||
* | remove some redundancies | smitsohu | 2017-09-20 |
| | | | | | | | * ~/.bash_history is already included in ~/.*_history, same file * ~/.password-store is already included in disable-passwdmgr.inc (and not whitelisted in browsers) * ~/.local/share/applications is in whitelist-common.inc since recently | ||
* | Merge branch 'master' of https://github.com/netblue30/firejail | Fred-Barclay | 2017-09-19 |
|\ | |||
| * | add nogroups | smitsohu | 2017-09-20 |
| | | |||
| * | Merge branch 'master' of http://github.com/netblue30/firejail | netblue30 | 2017-09-19 |
| |\ | |||
| | * | Add a profile for Conky | Irvine | 2017-09-19 |
| | | | |||
| * | | add private-bin support to profile builder | netblue30 | 2017-09-19 |
| |/ | |||
| * | update KDE whitelist | smitsohu | 2017-09-19 |
| | | |||
| * | Misc fixes | Tad | 2017-09-18 |
| | | | | | | | | Thanks to @Fred-Barclay, @smitsohu and @reinerh for a bunch of these | ||
| * | Update disable-programs.inc | Tad | 2017-09-18 |
| | | |||
| * | Add an alias for Natron | juan | 2017-09-18 |
| | | |||
| * | Harden 10 profiles | Chiraag Nataraj | 2017-09-18 |
| | | |||
| * | Fixup 12 profiles | Tad | 2017-09-18 |
| | | |||
| * | Harden 25 profiles | Tad | 2017-09-18 |
| | | |||
| * | Fixup 36 profiles | Tad | 2017-09-18 |
| | | |||
| * | Add 5 profiles | juan | 2017-09-18 |
| | | |||
| * | Add 31 profiles | Chiraag Nataraj | 2017-09-18 |
| | | |||
| * | Add a profile for TeamSpeak3 | Melvin Vermeeren | 2017-09-18 |
| | | |||
| * | Add a profile for xmr-stak-cpu | Tad | 2017-09-18 |
| | | | | | | | | | | | | - Add list of new profiles to README.md - Update firecfg - Further restrict silentarmy | ||
| * | Add a profile for clamdscan, clamdtop, and freshclam | Tad | 2017-09-18 |
| | | |||
| * | Add a profile for ClamAV's clamscan | Tad | 2017-09-18 |
| | | |||
| * | whitelist /var | netblue30 | 2017-09-18 |
| | | |||
| * | Add a profile for Rocket.Chat | Tad | 2017-09-18 |
| | | |||
| * | Merge branch 'master' of http://github.com/netblue30/firejail | netblue30 | 2017-09-18 |
| |\ | |||
| | * | profiles: add profile for surf browser | Reiner Herrmann | 2017-09-18 |
| | | | |||
| * | | whitelist /var | netblue30 | 2017-09-18 |
| |/ | |||
| * | electron profile whitelisting | netblue30 | 2017-09-18 |
| | | |||
| * | blacklist clipboard manager in disable-common.inc | netblue30 | 2017-09-18 |
| | | |||
| * | Merge pull request #1561 from soredake/steamfix | netblue30 | 2017-09-18 |
| |\ | | | | | | | fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profile | ||
| | * | fix usage of STEAM_RUNTIME_PREFER_HOST_LIBRARIES=1 in steam.profile | soredake | 2017-09-18 |
| | | | | | | | | | | | | | | | | | | steam.sh executes `/sbin/ldconfig -XNv 2> /dev/null` when STEAM_RUNTIME_PREFER_HOST_LIBRARIES is not zero and fails in some cases (see https://github.com/ValveSoftware/steam-for-linux/issues/4768) because of blacklisted /sbin and missing ld.so.conf{,.d} https://steamcommunity.com/groups/SteamClientBeta/announcements/detail/586991182161672256 | ||
| * | | Merge pull request #1558 from jelford/ssh-agent-noshell | netblue30 | 2017-09-18 |
| |\ \ | | |/ | |/| | Set `shell none` for ssh-agent configuration | ||
| | * | Set `shell none` for ssh-agent configuration | James Elford | 2017-09-17 |
| | | | | | | | | | | | | | | | | | | It's common to invoke ssh-agent in shell login config, so if firejail launches it through a shell, that can lead to an infinite loop | ||
| * | | whitelist /var - Xubuntu fixes | netblue30 | 2017-09-17 |
| | | | |||
| * | | whitelist /var: temporary fix for Xubuntu | netblue30 | 2017-09-17 |
| | | | |||
| * | | whitelisting /var | netblue30 | 2017-09-17 |
| |/ | |||
| * | --build | netblue30 | 2017-09-16 |
| | | |||
| * | Add a profile for Terasology | Tad | 2017-09-15 |
| | | |||
* | | Fix private-bit filter for firefox on Arch | Fred-Barclay | 2017-09-15 |
|/ | |||
* | little KDE app enhancements | smitsohu | 2017-09-15 |
| | |||
* | update whitelist-common.inc | netblue30 | 2017-09-15 |
| | |||
* | update seccomp filter | smitsohu | 2017-09-14 |
| | |||
* | update seccomp filter, add no3d | smitsohu | 2017-09-14 |
| | |||
* | goobox enhancements (permit metadata retrieval) | smitsohu | 2017-09-14 |
| | | | 1) We should permit internet access, as Goobox retrieves metadata via cddb-slave2 2) We can safely enable private-dev after the introduction of nodvd | ||
* | --writable-run-user, solving ssh/gnupg authentication problems for smarcards | netblue30 | 2017-09-14 |
| | |||
* | fix Arch Linux /etc/resolv.conf symlink to /var/run/systemd/resolve/resolv.conf | netblue30 | 2017-09-14 |
| | |||
* | ssh fix: #1543 | netblue30 | 2017-09-14 |
| | |||
* | Merge pull request #1544 from smitsohu/mutt | netblue30 | 2017-09-13 |
|\ | | | | | localhost mail fix for mutt | ||
| * | (temporarily) undo commenting disable-devel.inc | smitsohu | 2017-09-12 |
| | | | | | | pending further discussion |