Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | removed mincore syscall from default seccomp filter | 2019-01-23 | |
| | |||
* | improve gwenview and dolphin profiles - #2306 #2348 | 2019-01-22 | |
| | |||
* | Fix github-desktop for appimage usage | 2019-01-22 | |
| | |||
* | Redo github-desktop.profile as blacklist profile | 2019-01-22 | |
| | | | Following suggestion in https://github.com/netblue30/firejail/pull/2362 to turn this into a blacklist profile. | ||
* | Refactor github-desktop.profile | 2019-01-22 | |
| | |||
* | kodi profile - removed mincore from seccomp filter | 2019-01-21 | |
| | |||
* | Add warning to thunderbird profile -- fix #2357 | 2019-01-20 | |
| | |||
* | Merge pull request #2356 from glitsj16/gnome-calculator | 2019-01-20 | |
|\ | | | | | Unbreak currency conversion for gnome-calculator | ||
| * | Unbreak currency conversion for gnome-calculator | 2019-01-20 | |
| | | |||
* | | Merge pull request #2354 from glitsj16/gcalccmd | 2019-01-20 | |
|\ \ | | | | | | | Create gcalccmd.profile | ||
| * | | Create gcalccmd.profile | 2019-01-20 | |
| | | | |||
* | | | Merge pull request #2353 from glitsj16/gnome-calculator | 2019-01-20 | |
|\ \ \ | | |/ | |/| | Harden gnome-calculator profile | ||
| * | | Harden gnome-calculator profile | 2019-01-20 | |
| |/ | |||
* / | Harden eog profile | 2019-01-20 | |
|/ | |||
* | Create clawsker.profile | 2019-01-20 | |
| | |||
* | Merge pull request #2347 from Lockdis/master | 2019-01-20 | |
|\ | | | | | add google earth pro, update google earth profile | ||
| * | Update google-earth-pro.profile | 2019-01-18 | |
| | | |||
| * | Update google-earth.profile | 2019-01-18 | |
| | | |||
| * | Create google-earth-pro.profile | 2019-01-18 | |
| | | |||
* | | Update libreoffice.profile | 2019-01-19 | |
|/ | | | comment `machine-id` | ||
* | flameshot.profile: remove memory-deny-write-execute | 2019-01-18 | |
| | | | memory-deny-write-execute may break app, see https://github.com/netblue30/firejail/issues/1139#issuecomment-455420202 | ||
* | konversation.profile: add netlink protocol | 2019-01-17 | |
| | | | This suppresses errors seen in https://github.com/netblue30/firejail/issues/1139#issuecomment-454780721 | ||
* | Update gajim.profile | 2019-01-16 | |
| | | | Fix plugin-update and install. | ||
* | adding mincore syscall to the default seccomp filter and some independent ↵ | 2019-01-14 | |
| | | | | profiles | ||
* | Fix ocenaudio profile | 2019-01-04 | |
| | |||
* | Add a profile for ghostwriter (#2319) | 2018-12-30 | |
| | | | | | * Add a profile for ghostwriter | ||
* | Merge pull request #2313 from rusty-snake/patch-1 | 2018-12-27 | |
|\ | | | | | Fix gajim.profile | ||
| * | Update gajim.profile | 2018-12-27 | |
| | | |||
| * | Some additional hardening for gajim | 2018-12-27 | |
| | | |||
| * | Add profile alias for gajim-history-manager | 2018-12-27 | |
| | | |||
| * | Fix Gajim.profile | 2018-12-26 | |
| | | |||
| * | Fix gajim.profile | 2018-12-23 | |
| | | |||
* | | Remove network access from cherrytree.profile | 2018-12-25 | |
|/ | |||
* | Merges | 2018-12-22 | |
| | |||
* | updates for ~/.cargo | 2018-12-21 | |
| | |||
* | adaptations in bibletime.profile and rhythmbox.profile | 2018-12-20 | |
| | |||
* | Update disable-common.inc, disable-programs.inc | 2018-12-20 | |
| | |||
* | New profile for supertuxkart. (#2298) | 2018-12-16 | |
| | | | | | | * New profile supertuxkart * review fixes | ||
* | Fix bibletime.profile (#2295) | 2018-12-15 | |
| | | | | | | | | * Fix bibletime.profile Fix: bibletime don't starts on Fedora and Arch Use `seccomp.drop` from firefox. | ||
* | Merge pull request #2293 from smitsohu/smitsohu-patch-libreoffice | 2018-12-13 | |
|\ | | | | | enable apparmor in libreoffice profile | ||
| * | enable apparmor in libreoffice profile | 2018-12-09 | |
| | | | | | | | | depends on aa37fe19fed6be8e44db461691149237ee71da94 | ||
* | | profile enhancements: blacklist kdesu daemon socket, rework ↵ | 2018-12-11 | |
| | | | | | | | | c083a7b737050c532977b46fac6400f1dbc24ff6 | ||
* | | Add a profile for thunderbird-wayland | 2018-12-10 | |
| | | |||
* | | Fixes #1951 | 2018-12-09 | |
| | | |||
* | | update dolphin profile | 2018-12-07 | |
| | | | | | | services previously started by kdeinit now run inside the sandbox due to KDE_FORK_SLAVES being set | ||
* | | improve sandboxing of KDE apps: set KDE_FORK_SLAVES, blacklist slave-sockets | 2018-12-07 | |
|/ | | | | | | | | | | setting the KDE_FORK_SLAVES environment variable removes all inconsistencies that arise from slaves running outside the sandbox or in a different sandbox; it also makes it slightly more difficult to abuse KIO in general and helps to mitigate security problems due to thumbnailing, which now always happens inside the same sandbox. The trade-off is more concurrently running slave processes. closes #2285 | ||
* | merges | 2018-11-29 | |
| | |||
* | restricting more, HOME and tmp in mpsyt.profile | 2018-11-28 | |
| | |||
* | Merge pull request #2280 from pirate486743186/patch-2 | 2018-11-27 | |
|\ | | | | | new profile mpsyt.profile | ||
| * | new profile mpsyt.profile | 2018-11-28 | |
| | |