aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* Add barrier profile (#3115)Libravatar Adrian L. Shaw2020-01-04
| | | | | | | | | | | | | | | | | | | | * Add barrier.profile * Add newline before special options * Modify description * Add disable mount to barrier.profile * Address feedback from rusty-snake * Remove stray carriage return * Add noexec for /home/user and /tmp * Don't blacklist openssl * Remove redundant rules
* Gentoo fixes (#3120)Libravatar glitsj162020-01-04
| | | | | | | | * fix private-etc on gentoo * Fix private-etc on gentoo * Fix evince on gentoo
* update pavucontrolLibravatar rusty-snake2020-01-03
| | | | see #3112
* ${HOME} whitelisting breaks settings in arthaLibravatar glitsj162020-01-03
| | | More background info in #3112.
* typo (wget) & fix (baobab) [skip ci]Libravatar rusty-snake2020-01-03
|
* fix #3110Libravatar rusty-snake2020-01-03
|
* Get rid of #2302 (#3111)Libravatar rusty-snake2020-01-03
|
* fixup! Extra hardening for wgetLibravatar rusty-snake2020-01-03
|
* Fix wusc in mpv (#3108)Libravatar Daniel M. Capella2020-01-03
| | | Partly fixes #3107.
* Fix wusc in exiftoolLibravatar glitsj162020-01-03
| | | Arch puts files under /usr/share/perl-image-exiftool, whitelist that path for wusc.
* Fix wusc in weechatLibravatar glitsj162020-01-03
| | | Partly fixes #3107 (the weechat part).
* Add artha log to disable-programs.incLibravatar glitsj162020-01-02
|
* Fix arthaLibravatar glitsj162020-01-02
| | | I intentionally wanted to have this as a 'whitelist' profile. The only snag is that artha seems to generate ${HOME}/.config/artha.config.XXXXXX that I cannot whitelist upfront. Added notes to highlight this behaviour.
* Extra hardening for wgetLibravatar glitsj162020-01-02
|
* Additional hardening for whoisLibravatar glitsj162020-01-02
|
* Harden artha.profileLibravatar glitsj162020-01-02
|
* Harden aria2c.profileLibravatar glitsj162020-01-02
|
* Future-proof private-lib in gedit.profileLibravatar glitsj162020-01-02
| | | Better fix for #3104 .
* Fix #3105 -- add allow-ruby.incLibravatar rusty-snake2020-01-02
|
* fix gnome-mapsLibravatar rusty-snake2020-01-02
|
* fix celluloidLibravatar rusty-snake2020-01-02
|
* harden whois.profileLibravatar rusty-snake2020-01-02
|
* Harden openshotLibravatar rusty-snake2020-01-02
|
* gnome-builder: fix build cacheLibravatar rusty-snake2020-01-02
|
* Harden wget.profileLibravatar rusty-snake2020-01-02
|
* Fix private-lib in gedit.profileLibravatar glitsj162020-01-01
| | | Fixes #3104.
* Make ${HOME}/.config/environment.d read-onlyLibravatar rusty-snake2019-12-30
|
* Harden file-rollerLibravatar rusty-snake2019-12-29
|
* disable-devel: blacklist source-codeLibravatar rusty-snake2019-12-29
|
* Add appimage fix to electrum.profileLibravatar glitsj162019-12-29
|
* Update private-bin in tar.profileLibravatar glitsj162019-12-26
|
* Add login.defs to private-etcLibravatar glitsj162019-12-26
|
* Merge pull request #3093 from smitsohu/joinLibravatar smitsohu2019-12-25
|\ | | | | add join timeout and make it configurable
| * make join timeout configurable in firejail.configLibravatar smitsohu2019-12-23
| |
* | Fix private-lib in gconf.profileLibravatar glitsj162019-12-25
| |
* | Update description in p7zip.profileLibravatar glitsj162019-12-24
| |
* | Add decription in 7zr.profileLibravatar glitsj162019-12-24
| |
* | Add description in 7za.profileLibravatar glitsj162019-12-24
| |
* | Add description in 7z.profileLibravatar glitsj162019-12-24
| |
* | Add ephemeral profile (#3094)Libravatar glitsj162019-12-23
| | | | | | | | | | | | | | | | * Create ephemeral.profile * Add ephemeral.profile * Add ephemeral.profile
* | Fix comments in thunderbird.profileLibravatar glitsj162019-12-21
| |
* | Add gfeeds.profileLibravatar rusty-snake2019-12-20
| |
* | add publicsuffix to wuscLibravatar rusty-snake2019-12-20
| |
* | Fix Brave's native sandbox (#3087)Libravatar glitsj162019-12-19
| | | | | | | | | | | | | | | | | | | | * Allow user access to /proc/config.gz * Fix Brave's native sandbox * Move /proc/config.gz to disable-common.inc * Move /proc/config.gz to disable-common.inc
* | Fix private-etc ordering in seahorse-toolLibravatar glitsj162019-12-19
| |
* | Create gtk-update-icon-cache.profileLibravatar rusty-snake2019-12-19
| |
* | fix seahorse-toolLibravatar rusty-snake2019-12-19
| |
* | Update baobab.profileLibravatar rusty-snake2019-12-19
| |
* | Update disable-programs.incLibravatar glitsj162019-12-19
| |
* | Update brave.profileLibravatar glitsj162019-12-19
| |