aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* Add a lot of profilesLibravatar rusty-snake2020-02-10
|
* improve baloo hardening suggestionLibravatar smitsohu2020-02-09
|
* harden wineLibravatar smitsohu2020-02-09
|
* simplescreenrecorder.profileLibravatar rusty-snake2020-02-09
| | | | | - mdwe broken - ${HOME}/.ssr
* include wvc to more profiles (#3209)Libravatar glitsj162020-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * include wvc in aria2c.profile * include wvc in clawsker.profile * include wvc in conky.profile * include wvc in dconf.profile * include wvc in dconf-editor.profile * include wvc in exiftool.profile * include wvc in font-manager.profile * include wvc in gconf.profile * include wvc in git.profile * include wvc in gjs.profile * include wvc in gpg.profile * include wvc in img2txt.profile * include wvc in mediainfo.profile * include wvc in mpd.profile * include wvc in nitroshare.profile * include wvc in ocenaudio.profile * include wvc to ping.profile * include wvc in simple-scan.profile * include wvc in simplescreenrecorder.profile * include wvc in sysprof.profile * include wvc in tshark.profile * include wvc in uget-gtk.profile * include wvc in viewnior.profile * include wvc in weechat.profile
* harden makepkg.profileLibravatar glitsj162020-02-08
|
* fix video play in liferea.profileLibravatar glitsj162020-02-08
|
* fix includes in mencoder.profileLibravatar glitsj162020-02-08
|
* harden mencoder.profileLibravatar glitsj162020-02-08
|
* harden gpg-agent.profileLibravatar glitsj162020-02-08
|
* refactor gnome-keyring.profile as whitelistLibravatar glitsj162020-02-07
|
* refactor geekbench.profile as whitelistLibravatar glitsj162020-02-07
|
* fix preview functionality in subdownloader.profileLibravatar glitsj162020-02-07
|
* Fixing the bug in 189772034b211578aca59540d7277f45da4f45d2 breaking meldLibravatar KOLANICH2020-02-07
|
* revert #3178Libravatar glitsj162020-02-03
| | | It is still undecided what causes #2681 for the OP. Let's not change the seccomp filter for everyone until we have reproducible issues.
* Add gnome-hexgl.profileLibravatar rusty-snake2020-02-03
|
* fix gnome-passwordsafe -- no whitelist globing yetLibravatar rusty-snake2020-02-03
|
* housekeeping: strip unneeded whitespaceLibravatar Fred Barclay2020-02-01
|
* profiles: whitelist /usr/share/doc in some profilesLibravatar Reiner Herrmann2020-01-31
|
* Add a profile alias for multimc5Libravatar Tad2020-01-30
|
* add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | Thanks to @rusty-snake for his comment in #3198.
* add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | Thanks to @rusty-snake for suggesting to move /usr/share/file to wusc in #3198.
* fix wusc in nano.profileLibravatar glitsj162020-01-30
| | | This fixes #3198.
* fix spelling in disable-common.incLibravatar glitsj162020-01-29
|
* Add profiles for the WPS-OfficeLibravatar rusty-snake2020-01-29
|
* fix private-lib for Gentoo in unf.profileLibravatar glitsj162020-01-29
| | | Thanks to @s-hamman for reporting this in the comments of #3193.
* fix private-lib for Gentoo in geekbench.profileLibravatar glitsj162020-01-29
| | | Thanks to @s-hamman for reporting this in the comments of #3193.
* fix private-lib for Gentoo in zathura.profileLibravatar glitsj162020-01-29
|
* noblacklist user cacheLibravatar glitsj162020-01-29
| | | Thanks to @rusty-snake's comment in https://github.com/netblue30/firejail/pull/3159.
* fix ordering in ${HOME}/.cache section and add gummi entree there tooLibravatar glitsj162020-01-29
|
* gedit: comment private-libLibravatar rusty-snake2020-01-29
|
* fix missing global include documentation (#3195)Libravatar Florian Begusch2020-01-29
|
* Add profiles for common (la)tex commands and a latex editor (#3159)Libravatar Florian Begusch2020-01-29
|
* disable private-lib in zathura.profileLibravatar glitsj162020-01-29
| | | Thanks to https://github.com/s-hamann for helping to harden the zathura profile.
* updates for zathura.profile (#3193)Libravatar glitsj162020-01-29
| | | | | | | | * move mkdir in zathura.profile * harden zathura.profile * fix private-lib in zathura.profile
* Update zathura.profileLibravatar rusty-snake2020-01-28
|
* clarify dropping python2 support in meld.profile (#3167)Libravatar glitsj162020-01-27
| | | | | | * clarify dropping python2 support in meld.profile * properly comment the python2 situation in meld
* Update whois.profile (#3154)Libravatar Amin Vakil2020-01-27
| | | | | | | | | | | | | | * Update whois.profile More details in https://github.com/netblue30/firejail/issues/3153 * Update etc/whois.profile private-etc Alphabetic order Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com> Co-authored-by: rusty-snake <print_hello_world+GitHub@protonmail.com>
* Merge pull request #3149 from GovanifY/masterLibravatar netblue302020-01-27
|\ | | | | Blacklisting openrc paths by defaults
| * tighten info gathering for openrcLibravatar Gauvain "GovanifY" Roussel-Tarbouriech2020-01-15
| |
* | fixup! refactor some profiles as electron redirects (#3188)Libravatar rusty-snake2020-01-27
| | | | | | | | | | | | - move ignores to top - add remove netlink protocol from whalebird - ignore caps.drop all in wire-desktop
* | refactor some profiles as electron redirects (#3188)Libravatar glitsj162020-01-26
| | | | | | | | | | | | | | | | * refactor as electron redirect * refactor as electron redirect * refactor as electron redirect
* | fix beaker.profileLibravatar glitsj162020-01-26
| | | | | | whitelist ${DOWNLOADS} is already in the included electron.profile.
* | Create allow-php.incLibravatar glitsj162020-01-25
| | | | | | We have PHP items blacklisted in disable-interpreters.inc that never get noblacklisted. This PR fixes that.
* | local customizations for allow-gjs.incLibravatar glitsj162020-01-25
| |
* | allow-*.local customizations (#3187)Libravatar glitsj162020-01-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * local customizations for allow-common-devel.inc * local customizations for allow-java.inc * local customizations for allow-lua.inc * local customizations for allow-perl.inc * local customizations for allow-python2.inc * local customizations for allow-python3.inc * local customizations for allow-ruby.inc
* | blacklist gjs in disable-interpreters (#3186)Libravatar rusty-snake2020-01-25
| | | | | | | | | | | | * blacklist gjs in disable-interpreters * Update
* | new profile: gnome-passwordsafeLibravatar rusty-snake2020-01-25
| |
* | Allow request_key syscall for udiskie (#3177)Libravatar Carlo Abelli2020-01-25
| | | | | | Fixes #3175.
* | Allow mbind syscall for GIMP (#3178)Libravatar Carlo Abelli2020-01-25
| | | | | | Fixes #2681.