Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | cleanup | netblue30 | 2023-01-19 | |
| | ||||
* | cleanup | netblue30 | 2023-01-19 | |
| | ||||
* | more profile fixes/testing | netblue30 | 2023-01-19 | |
| | ||||
* | some profile updates | netblue30 | 2023-01-18 | |
| | ||||
* | Merge pull request #5595 from kmk3/rename-etc-no-blacklisted | netblue30 | 2023-01-16 | |
|\ | | | | | Rename etc-no-blacklisted to etc-hide-blacklisted | |||
| * | firejail.config: explain potential issues with etc-hide-blacklisted | Kelvin M. Klann | 2023-01-16 | |
| | | | | | | | | | | | | | | Let users know that enabling this may break /etc/resolv.conf. Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591. | |||
| * | Rename etc-no-blacklisted to etc-hide-blacklisted | Kelvin M. Klann | 2023-01-16 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To avoid boolean confusion (`no-foo no` / `no-foo yes`) in firejail.config: etc-no-blacklisted no etc-no-blacklisted yes Commands used to search and replace: git grep -Ilz -i 'etc.no.blacklisted' -- etc src | xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed \ -e 's/etc-no-blacklisted/etc-hide-blacklisted/' \ -e 's/ETC_NO_BLACKLISTED/ETC_HIDE_BLACKLISTED/' \ '{}')\" >'{}'" Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591. | |||
* | | add timezone access to make libical functional | bymoz089 | 2023-01-16 | |
|/ | | | claws-mail vcalendar-plugin uses libical to get current timezone. Libical needs access to file `/etc/timezone` to work properly. | |||
* | Merge pull request #5591 from smitsohu/private-etc-no-blacklisted | netblue30 | 2023-01-15 | |
|\ | | | | | opt-in: hide blacklisted files in /etc | |||
| * | opt-in: skip blacklisted files in private-etc - #5010, #5230 | smitsohu | 2023-01-15 | |
| | | ||||
* | | Merge pull request #5571 from glitsj16/ec-refactor | netblue30 | 2023-01-15 | |
|\ \ | | | | | | | email-common refactoring | |||
| * | | balsa: drop private-bin | glitsj16 | 2023-01-07 | |
| | | | | | | | | | Supporting 'level 1 hack' to allow opening hyperlinks with firefox needs xdg-open (besides bash,sh). Adding xdg-open to private-bin is not enough, as it pulls in a long list of other commands and that's pretty unmaintainable IMO. So I opted to drop private-bin here. | |||
| * | | email-common: simplify D-Bus filtering | glitsj16 | 2023-01-06 | |
| | | | | | | | | | Suggested in review. | |||
| * | | balsa: re-add private-bin comment for gpg | glitsj16 | 2023-01-06 | |
| | | | | | | | | | Pointed out in review that this comment was removed by mistake. | |||
| * | | email-common: refactoring | glitsj16 | 2023-01-04 | |
| | | | | | | | | | No longer used for claws-mail and sylpheed only. | |||
| * | | sylpheed: refactoring | glitsj16 | 2023-01-04 | |
| | | | ||||
| * | | claws-mail: refactoring | glitsj16 | 2023-01-04 | |
| | | | ||||
| * | | balsa: refactor as email-common.profile redirect | glitsj16 | 2023-01-04 | |
| |/ | ||||
* | | Merge pull request #5563 from glitsj16/linuxqq | netblue30 | 2023-01-15 | |
|\ \ | | | | | | | New profiles: linuxqq/qq | |||
| * | | Merge branch 'netblue30:master' into linuxqq | glitsj16 | 2023-01-04 | |
| |\| | ||||
| * | | linuxqq: drop comment | glitsj16 | 2023-01-04 | |
| | | | | | | | | | Now that #5569 is in we can remove the hardening comment. | |||
| * | | linuxqq: reorder options | glitsj16 | 2023-01-03 | |
| | | | | | | | | | As suggested in review. | |||
| * | | disable-programs.inc: fix ordering QQ config | glitsj16 | 2023-01-03 | |
| | | | ||||
| * | | Create qq.profile | glitsj16 | 2023-01-03 | |
| | | | ||||
| * | | Create linuxqq.profile | glitsj16 | 2023-01-03 | |
| | | | ||||
| * | | disable-programs.inc: add QQ config | glitsj16 | 2023-01-03 | |
| | | | ||||
* | | | geary: fix opening hyperlinks via D-Bus (#5565) | glitsj16 | 2023-01-12 | |
| | | | ||||
* | | | QMediathekView: add mkdir and reorder whitelist options | glitsj16 | 2023-01-12 | |
| | | | | | | | | | As suggested in review. | |||
* | | | QMediathekView: hardening | glitsj16 | 2023-01-11 | |
| |/ |/| | ||||
* | | Merge pull request #5564 from glitsj16/claws-mail+sylpheed | netblue30 | 2023-01-04 | |
|\ \ | | | | | | | claws-mail and sylpheed D-Bus hardening | |||
| * | | sylpheed: allow opening hyperlinks via D-Bus | glitsj16 | 2023-01-03 | |
| | | | ||||
| * | | claws-mail: harden D-Bus | glitsj16 | 2023-01-03 | |
| |/ | | | | | Relates to https://github.com/netblue30/firejail/issues/5477. | |||
* | | Merge pull request #5569 from glitsj16/electron-hardening | netblue30 | 2023-01-04 | |
|\ \ | | | | | | | electron hardening fixes | |||
| * | | Create electron-hardened.inc.profile | glitsj16 | 2023-01-04 | |
| | | | ||||
| * | | electron: change hardening comment | glitsj16 | 2023-01-04 | |
| |/ | ||||
* | | Merge pull request #5475 from KOLANICH-tools/aa_fix | netblue30 | 2023-01-04 | |
|\ \ | | | | | | | A temporary fix to the bug caused by apparmor profiles stacking. | |||
| * | | A temporary fix to the bug caused by apparmor profiles stacking. | KOLANICH | 2022-11-15 | |
| | | | ||||
* | | | Merge pull request #5556 from Dpeta/chatterino-profile | netblue30 | 2023-01-04 | |
|\ \ \ | | | | | | | | | Add profile for Chatterino | |||
| * | | | Apply code review suggestions to chatterino.profile | Dpeta | 2022-12-25 | |
| | | | | | | | | | | | | | | | | | | | | | | | | - Remove waf from private-bin - Move optional commands to the top - Reorder allow lua/python | |||
| * | | | Apply suggestions from code review | Dpeta | 2022-12-25 | |
| | | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com> | |||
| * | | | Remove unnecessary mkdir | Dpeta | 2022-12-25 | |
| | | | | ||||
| * | | | Fix music/pictures whitelist path in chatterino.profile | Dpeta | 2022-12-25 | |
| | | | | ||||
| * | | | Apply the other code review suggestions to chatterino.profile | Dpeta | 2022-12-25 | |
| | | | | ||||
| * | | | Apply commitable suggestions from code review | Dpeta | 2022-12-25 | |
| | | | | | | | | | | | | | | | | | | | | I'll try the rest manually soon Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> | |||
| * | | | Add Chatterino profile | Dpeta | 2022-12-25 | |
| | | | | ||||
* | | | | Merge pull request #5553 from slowpeek/master | netblue30 | 2023-01-04 | |
|\ \ \ \ | | | | | | | | | | | Blacklist google-drive-ocamlfuse config | |||
| * | | | | Blacklist XDG cache and data dirs for google-drive-ocamlfuse | slowpeek | 2022-12-23 | |
| | | | | | ||||
| * | | | | Blacklist google-drive-ocamlfuse config | slowpeek | 2022-12-23 | |
| |/ / / | ||||
* | | / | ytmdesktop: fix typo (#5567) | glitsj16 | 2023-01-04 | |
| |_|/ |/| | | ||||
* | | | Merge pull request #5554 from Dpeta/dbus-wiki-link-fix | smitsohu | 2022-12-27 | |
|\ \ \ | | | | | | | | | Update DBus wiki link |