aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* make deb; fixed strings profileLibravatar netblue302017-08-23
|
* Merge pull request #1485 from jelford/pass-blacklistLibravatar Reiner Herrmann2017-08-20
|\ | | | | Add pass to common blacklist
| * Add Jason A. Donenfeld's pass to common blacklistLibravatar James Elford2017-08-20
| | | | | | | | | | pass is a password manager that keeps files under ~/.password-store by default. See http://www.passwordstore.org/ for more info
* | Support for gnome-shell integration addon in FirefoxLibravatar Martin Dosch2017-08-20
|/ | | | Bug-Debian: https://bugs.debian.org/872720
* Merge pull request #1483 from smitsohu/patch-3Libravatar Fred Barclay2017-08-19
|\ | | | | fix simple-scan
| * fix simple-scan (seccomp, netlink)Libravatar smitsohu2017-08-19
| | | | | | fix for broken device discovery.
* | Fix Gnome 2048 under waylandLibravatar Tad2017-08-19
|/
* Update waterfox.profileLibravatar hawkeye1164772017-08-19
| | | | Waterfox 55 has new profile location
* Merge pull request #1475 from smitsohu/patch-2Libravatar Fred Barclay2017-08-18
|\ | | | | some fixes and enhancements
| * bring back netfilterLibravatar smitsohu2017-08-18
| |
| * comment private-binLibravatar smitsohu2017-08-18
| |
| * add netfilterLibravatar smitsohu2017-08-18
| |
| * enhance konversation profileLibravatar smitsohu2017-08-18
| |
| * fix cvlc (remove notv, nodvd)Libravatar smitsohu2017-08-18
| |
| * add novideoLibravatar smitsohu2017-08-18
| |
| * bring back optionsLibravatar smitsohu2017-08-18
| |
* | new MuseScore profile (#1477)Libravatar smitsohu2017-08-18
|/ | | | | | | | | | | | | | * add musescore profile * blacklist musescore * add musescore * add musescore * add tuxguitar, musescore * add tuxguitar, musescore
* memory-deny-write-executeLibravatar netblue302017-08-17
|
* unbreak k3b (-nodvd)Libravatar smitsohu2017-08-16
|
* fix #1467Libravatar netblue302017-08-15
|
* Fix mpv running with youtube-dl on Debian systemsLibravatar Reiner Herrmann2017-08-15
| | | | | | | youtube-dl uses python3 as shebang, which symlinks to python3.5. -> both need to be added to private-bin. Reported by Martin Dosch on https://bugs.debian.org/872287
* Add novideo and noexec /tmp to tor browsersLibravatar Tad2017-08-14
|
* TypoLibravatar Fred-Barclay2017-08-14
|
* Merge pull request #1468 from pizzadude/patch-2Libravatar Fred Barclay2017-08-14
|\ | | | | firejail profile for torbrowser-launcher
| * firejail profile for torbrowser-launcherLibravatar PizzaDude2017-08-14
| |
* | Fixes for GitterLibravatar Fred-Barclay2017-08-14
|/
* Merge pull request #1466 from SpotComms/fixndLibravatar Fred Barclay2017-08-13
|\ | | | | Fix nodvd placement
| * Fix nodvd placementLibravatar Tad2017-08-13
| |
* | Chrom* on Arch Linux no longer uses a perl scriptLibravatar Tad2017-08-13
| |
* | Harden 17 profiles using private-binLibravatar Tad2017-08-13
|/
* Merge pull request #1465 from pizzadude/patch-1Libravatar netblue302017-08-13
|\ | | | | fix smplayer for mpv
| * fix smplayer for mpvLibravatar PizzaDude2017-08-12
| | | | | | this fixes smplayer if you use the mpv backend
* | added nodvd to most profilesLibravatar netblue302017-08-13
|/
* Fix notv placementLibravatar Tad2017-08-11
|
* fix xpra profileLibravatar netblue302017-08-11
|
* added notv to most profilesLibravatar netblue302017-08-11
|
* fix commentsLibravatar smitsohu2017-08-11
|
* Add TuxGuitar profile (#1453)Libravatar smitsohu2017-08-10
| | | | | | | | | | | | | | | | | | | | * add tuxguitar profile tested for versions < 1.3 * blacklist tuxguitar * add tuxguitar * add tuxguitar * add support for tuxguitar > 1.2 higher versions fail to launch without protocol=inet,inet6 and with noexec=~. Yet, net=none seems to be still tolerated, which comes handy to block talk with internet and dbus. * unbreak tuxguitar Internet access versions >= 1.3 actually run fine with net=none enabled, if the built-in internet dependent feature is not used
* fix mate-calculator profileLibravatar netblue302017-08-10
|
* marking redirected profile filesLibravatar netblue302017-08-10
|
* fix less for #1450Libravatar netblue302017-08-10
|
* more novideo options, enhanced mediathekview (#1451)Libravatar smitsohu2017-08-10
| | | | | | | | | | | | | | * add disable-mnt * support alternative media players * add novideo * fix comment, add novideo * drop disable-mnt saving to mounted locations is legitimate use
* Add a profile alias for Firefox NightlyLibravatar Tad2017-08-10
|
* Fix bad noexec sortingLibravatar Fred Barclay2017-08-09
|
* SortingLibravatar Fred-Barclay2017-08-08
|
* various little profile fixes and enhancements (#1442)Libravatar smitsohu2017-08-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add novideo * add novideo * add novideo * put noexec last * blacklist Clementine configuration and database * blacklist Clementine configuration and database * add novideo * add novideo, permit access to ~/.java * add novideo * spoof machine-id * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * drop machine-id option private-etc hides it anyway
* Unify last 8 profilesLibravatar Tad2017-08-07
|
* Fix comments in 88 profilesLibravatar Tad2017-08-07
| | | | There may actually be some other comments that were removed, but the bulk have been restored
* Unify all profilesLibravatar Tad2017-08-07
|
* various profile fixes (#1433)Libravatar Vladimir Schowalter2017-08-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * calibre: add netlink protocol (FB note: removed before merge) calibre started without netlink protocol throws following error in console: Exception in thread Thread-8: Traceback (most recent call last): File "/usr/lib/python2.7/threading.py", line 801, in __bootstrap_inner self.run() File "/usr/lib/calibre/calibre/utils/mdns.py", line 43, in run _all_ip_addresses = self.get_all_ips() File "/usr/lib/calibre/calibre/utils/mdns.py", line 27, in get_all_ips for x in netifaces.interfaces(): OSError: [Errno 95] Operation not supported * mpv: add nogroups, tracelog, ipc-namespace, private-dev I used testes all above options and didn't noticed any breakage. * qbittorrent: add netlink protocol, private-etc Netlink protocol is needed if user select to bind specific network interface in config. Otherwise it throws an error in qbittorent log: The network interface defined is invalid: tun0 Example private-etc is added but commented out by default. It's tested but as there are many different system configurations users should enable it manually. * vlc: disable memory-deny-write-execute With memory-deny-write-execute vlc freezes after loading video file. According to https://github.com/VladimirSchowalter20/firejail/commit/b18f42ab0236de7eed5888f43ba36cdaf990cbca memory-deny-write-execute is similar to PAX mprotect feature and linked github project explicitly disables that feature for vlc binary, see https://github.com/copperhead/paxd-archive/commit/deb39e0b91996e2e9c7917b3543030880cd476f4 * Update vlc.profile * wine: add nogroups Nogroups should be safe addition for wine * wireshark: allow users to run wireshark as non-root Wireshark can be run unprivileged when user is part of wireshark group. Unfortunately enabling nogroups,nonewprivs and seccomp will break it with permissions errors. Also added example private-etc option which is commented out by default for now. * cosmetic fix * mpv: comment out ipc-namespace for now As requested in review https://github.com/netblue30/firejail/pull/1433#discussion_r131550515 * calibre: disable netlink protocol It throws an error but actual breakage isn't observed for now.
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-20 08:49:30 +0000