aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* profiles: streamline seccomp socket comment (#5735)Libravatar glitsj162023-03-14
| | | | | No functional changes. Relates to #639.
* Merge pull request #5325 from pirate486743186/tutanota-desktop.profile-fixLibravatar netblue302023-03-13
|\ | | | | tutanota-desktop.profile improvements
| * tutanota-desktop.profile improvementsLibravatar pirate4867431862023-02-26
| |
* | Merge pull request #5715 from pirate486743186/yt-dlpLibravatar netblue302023-03-13
|\ \ | | | | | | refactor yt-dlp
| * | refactor yt-dlpLibravatar pirate4867431862023-03-09
| | |
* | | Add Discord PTB profileLibravatar Neotamandua2023-03-12
| | |
* | | mpv: improve and clarify comments (#5711)Libravatar glitsj162023-03-09
| | |
* | | Merge pull request #5717 from glitsj16/aa-examplesLibravatar netblue302023-03-08
|\ \ \ | | | | | | | | firejail-local: fix examples
| * | | firejail-local: fix examplesLibravatar glitsj162023-03-07
| |/ /
* | | Merge pull request #5718 from marek22k/masterLibravatar netblue302023-03-08
|\ \ \ | | | | | | | | email-common.profile: allow bsfilter
| * | | email-common.profile: allow bsfilterLibravatar Marek Küthe2023-03-08
| |/ / | | | | | | | | | | | | https://bsfilter.org/ Signed-off-by: Marek Küthe <m.k@mk16.de>
* | | Merge pull request #5707 from pirate486743186/ani-cliLibravatar netblue302023-03-08
|\ \ \ | | | | | | | | add ani-cli.profile
| * | | add ani-cli.profileLibravatar pirate4867431862023-03-05
| |/ / | | | | | | | | | https://github.com/pystardust/ani-cli
* | | Merge pull request #5714 from pirate486743186/porn-cliLibravatar netblue302023-03-08
|\ \ \ | | | | | | | | add porn-cli.profile
| * | | add porn-cli.profileLibravatar pirate4867431862023-03-05
| |/ /
* / / add lobster.profileLibravatar pirate4867431862023-03-03
|/ / | | | | | | https://github.com/justchokingaround/lobster
* | gajim: allow loading plugins (#5705)Libravatar Marek Küthe2023-03-02
| | | | | | | | | | Closes https://github.com/netblue30/firejail/issues/5704 Signed-off-by: Marek Küthe <m.k@mk16.de>
* | bulk renaming electron to electron-common (#5700)Libravatar pirate4867431862023-03-01
| | | | | | Co-authored-by: pirate486743186 <>
* | rsync-download_only: fix local override name (#5695)Libravatar glitsj162023-02-28
| |
* | minor clarify userns comments (#5686)Libravatar pirate4867431862023-02-26
|/ | | Co-authored-by: pirate486743186 <>
* parsecd: ordering fixes (#5682)Libravatar glitsj162023-02-25
|
* Merge pull request #5646 from NetSysFire/parsecdLibravatar netblue302023-02-24
|\ | | | | New profile: parsecd
| * parsecd.profile: more white and blacklistingLibravatar NetSysFire2023-02-24
| |
| * New profile: parsecdLibravatar NetSysFire2023-02-18
| |
* | Merge pull request #5674 from kmk3/fix-ws-add-editorconfigLibravatar netblue302023-02-24
|\ \ | | | | | | build: Fix whitespace and add .editorconfig
| * | Trim trailing whitespaceLibravatar Kelvin M. Klann2023-02-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commands used to search and replace: $ git grep -Ilz '[[:blank:]]$' | xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed -E \ 's/[[:blank:]]+$//' '{}')\" >'{}'" This fixes all of the "trailing whitespace" errors raised by git: $ git diff --check 4b825dc642cb6eb9a060e54bf8d69288fbee4904..HEAD | grep '^[^+]' | cut -f 3 -d : | LC_ALL=C sort | uniq -c 72 space before tab in indent. 4 trailing whitespace.
| * | Fix EOL at EOFLibravatar Kelvin M. Klann2023-02-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commands used to search and replace: $ git grep -Ilz '.' | xargs -0 -I '{}' sh -c \ "printf '%s\n' \"\$(cat '{}')\" >'{}'" The above commands ensure that there is exaclty 1 line terminator at EOF (rather than 0 or more than 1) on all non-empty text files. This fixes all of the "new blank line at EOF" errors raised by git: $ git diff --check 4b825dc642cb6eb9a060e54bf8d69288fbee4904..HEAD | grep '^[^+]' | cut -f 3 -d : | LC_ALL=C sort | uniq -c 21 new blank line at EOF. 72 space before tab in indent. 4 trailing whitespace.
* | | more private-etcLibravatar netblue302023-02-24
| | |
* | | New profiles: qpdf and redirects (#5675)Libravatar glitsj162023-02-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create qpdf.profile and redirects qpdf (CLI) provides PDF metadata cleaning. See privacy-handbuch.de[1] for details. The site offers pdf-meta-clean.sh[2], which works very well with firejailed qpdf. [1] https://www.privacy-handbuch.de/handbuch_43a.htm [2] https://www.privacy-handbuch.de/download/pdf-meta-clean.sh * RELNOTES: add qpdf and redirects to new profiles section * firecfg.config: add qpdf and redirects * qpdf: use 'seccomp socket' instead of 'protocol unix' See https://github.com/netblue30/firejail/issues/639. Thanks @rusty-snake in code review.
* | | apostrophe: drop whitelist covered by wusc (#5671)Libravatar glitsj162023-02-23
| | |
* | | disable-common.inc: add systemd v253 blacklists (#5669)Libravatar glitsj162023-02-23
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | Arch Linux got systemd v253: https://github.com/archlinux/svntogit-packages/commit/05d0aedb2b83a2e1ba07cab47205772f82cb4814 It adds a few new files we should blacklist in `disable-common.inc`: - /etc/credstore - /etc/credstore.encrypted - /run/credentials/systemd-sysctl.service - /run/credentials/systemd-sysusers.service - /run/credentials/systemd-tmpfiles-setup.service - /run/credentials/systemd-tmpfiles-setup-dev.service
* | merges, testing, private-etcLibravatar netblue302023-02-16
| |
* | wusc: allow hyphenation (#5666)Libravatar glitsj162023-02-15
| |
* | com.github.johnfactotum.Foliate: fix .local include (#5665)Libravatar glitsj162023-02-15
| |
* | qutebrowser: allow userscripts by default (#5649)Libravatar glitsj162023-02-15
| | | | | | | | | | | | | | Fixes #5639. qutebrowser: drop apparmor Suggested in PR review.
* | merges, disable sort.py in profile checks temporarely, two more private-etc ↵Libravatar netblue302023-02-14
| | | | | | | | profiles
* | Merge pull request #5653 from slowpeek/masterLibravatar netblue302023-02-14
|\ \ | | | | | | disable-programs.inc: blacklist sendgmail config
| * | Blacklist sendgmail configLibravatar slowpeek2023-02-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | sendgmail is a cli tool by Google that "uses Gmail in order to mimic sendmail for git send-email" as per its own description. In other words it is a basic sendmail replacement with OAuth2 support to send emails from Gmail accounts. https://github.com/google/gmail-oauth2-tools/tree/master/go/sendgmail Config files location depends on "xdg" build tag. Without the tag it would be "~/.sendgmail.*". With the tag it is either under "$XDG_CONFIG_HOME/sendgmail" if set or "~/.config/sendgmail" otherwise.
* | | Merge pull request #5660 from glitsj16/tmc-fixLibravatar netblue302023-02-14
|\ \ \ | | | | | | | | transmission-cli: allow web client
| * | | transmission-cli: allow web clientLibravatar glitsj162023-02-14
| | | |
* | | | Prevent access to LUKS keyfileLibravatar Netcarver2023-02-14
|/ / /
* / / private-etc: kdiff3, gzip, gunzip, tar etcLibravatar netblue302023-02-10
|/ /
* | private-etc: more on gcryptLibravatar netblue302023-02-09
| |
* | private-etc: moving gcrypt from tls-ca to x11 groupLibravatar netblue302023-02-08
| |
* | private-etc: libreoffice, audacity, forzen-bubble, transmission, ↵Libravatar netblue302023-02-08
|/ | | | md5sum/sha512sum, more sysutils testing, fix electron-hardened.inc.profile
* re-fix private-etcLibravatar glitsj162023-02-06
|
* private-etc: pushing vulkan into games groupLibravatar netblue302023-02-06
|
* Merge pull request #5642 from glitsj16/private-etc-ephemeralLibravatar netblue302023-02-06
|\ | | | | ephemeral: use newly introduced private-etc @groups syntax
| * ephemeral: use newly introduced private-etc @groups syntaxLibravatar glitsj162023-02-06
| |
* | Merge branch 'master' into private-etc-fixesLibravatar netblue302023-02-06
|\|