aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* Rename etc/inc/firefox-common-addons.inc to ↵Libravatar glitsj162021-03-02
| | | | etc/profile-a-l/firefox-common-addons.profile
* chromium-browser-privacy: add cat to private-binLibravatar rusty-snake2021-03-01
|
* Merge pull request #4019 from glitsj16/protocolLibravatar glitsj162021-03-01
|\ | | | | fix protocol list
| * drop useless ignoreLibravatar glitsj162021-03-01
| |
| * add local override functionalityLibravatar glitsj162021-03-01
| | | | | | Due to https://github.com/netblue30/firejail/commit/5d88ee8957dc38a52c36f71b91c786dbec9d4ec9 we should provide an override option here IMO.
| * fix protocol listLibravatar glitsj162021-03-01
| | | | | | Now that https://github.com/netblue30/firejail/commit/5d88ee8957dc38a52c36f71b91c786dbec9d4ec9 introduces new protocol list behaviour, we need to add an ignore here due to the redirect to transmission-common.profile. See https://github.com/netblue30/firejail/issues/4017 for clarification.
* | fixesLibravatar rusty-snake2021-03-01
|/ | | | | | | | | | | | | - RELNOTS: protocol now accumulates - fix #3978 -- Android Studio: cannot create the directory Unresolved: > google-earth.profile has a 'noblacklist ${HOME}/.config/Google' too, > so we should consider to add additional blacklists for ~/.config/Google/*. - marker.profile: allow ${DOCUMENTS} - profile.template: add bluetooth protocol - profile.template: add DBus portal note - firejail-profile.txt: revert 17fe4b9e -- fix private=directory in man firejail-profile see https://github.com/netblue30/firejail/pull/3970#discussion_r574411745
* small fixes and updatesLibravatar netblue302021-02-26
|
* fix spacing in gget.profileLibravatar glitsj162021-02-25
| | | Thx to @rusty-snake for spotting this.
* Create gget.profileLibravatar glitsj162021-02-25
|
* Fixup 0e31d020, torbrowser-launcher missing pathLibravatar Tad2021-02-24
|
* Merge pull request #4001 from kmk3/fix-signal-xdg-ignoreLibravatar netblue302021-02-24
|\ | | | | signal-desktop.profile: fix typo of disable-xdg.profile
| * signal-desktop.profile: fix typo of disable-xdg.profileLibravatar Kelvin M. Klann2021-02-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit f4f676745 ("Refactor electron.profile and electron based programs (#3807)"). This appears to be the only instance of that: $ grep -Fnr 'include-xdg' etc etc/profile-m-z/signal-desktop.profile:9:ignore include-xdg.inc Simply fixing the typo would enable xdg dirs for the first time since the aforementioned commit. But, as talked with @rusty-snake[1], since there has been no negative feedback, and since it's a whitelisting profile, just remove the affected line instead. Credits go to syntax highlighting on vim. [1]: https://github.com/netblue30/firejail/pull/4001
* | Merge pull request #4003 from Neo00001/masterLibravatar netblue302021-02-24
|\ \ | | | | | | Minor fixes for vmware
| * | Create vmware-workstation.profileLibravatar Neo000012021-02-23
| | |
| * | Create vmware-player.profileLibravatar Neo000012021-02-23
| | |
* | | Merge pull request #4002 from kmk3/ipcalc-misc-fixesLibravatar netblue302021-02-24
|\ \ \ | | | | | | | | ipcalc: misc fixes
| * | | ipcalc.profile: move allow include to proper placeLibravatar Kelvin M. Klann2021-02-22
| | | | | | | | | | | | | | | | | | | | | | | | And add missing allow include comment. See etc/templates/profile.template.
| * | | ipcalc-ng.profile: fix double globals.local includeLibravatar Kelvin M. Klann2021-02-22
| | | | | | | | | | | | | | | | | | | | | | | | And add missing redirect comment. See etc/templates/redirect_alias-profile.template.
* | | | update man profileLibravatar netblue302021-02-24
| | | |
* | | | Create lzop.profileLibravatar glitsj162021-02-24
| |/ / |/| |
* | | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar netblue302021-02-23
|\ \ \
| * | | dosbox fixLibravatar netblue302021-02-22
| |/ /
* / / hardening ssh, torLibravatar netblue302021-02-23
|/ /
* | more calibre profilesLibravatar netblue302021-02-22
| |
* | Fix patch-util not having access to libdl.so (#4000)Libravatar zupatisc2021-02-22
| | | | | | | | | | | | | | * Fix patch-util not having access to libdl.so * Update etc/profile-m-z/patch.profile Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
* | apparmor capabilities fixLibravatar netblue302021-02-21
|/
* run sort.pyLibravatar Reiner Herrmann2021-02-20
|
* fix ipcalcLibravatar netblue302021-02-19
|
* adding ipcalc, ipcalc-ngLibravatar netblue302021-02-19
|
* refresh capabilities (#3945)Libravatar smitsohu2021-02-19
|
* Merge pull request #3993 from glitsj16/templateLibravatar glitsj162021-02-17
|\ | | | | fixes for profile.template
| * fix Common-ExtraLibravatar glitsj162021-02-17
| | | | | | See https://github.com/netblue30/firejail/pull/3993/files/660bc3435b43e32d156d9bb5bee2dbad2f84cf36#r577366805.
| * fix ordering in profile.templateLibravatar glitsj162021-02-16
| |
| * miscellaneous fixes to profile.templateLibravatar glitsj162021-02-16
| |
* | fix private-bin in jitsi-meet-desktopLibravatar glitsj162021-02-17
| |
* | adapt to apparmor being opt-in for torbrowser-launcherLibravatar glitsj162021-02-15
| |
* | make apparmor opt-inLibravatar glitsj162021-02-15
| |
* | add note for torbrowser-launcher opt-inLibravatar glitsj162021-02-15
| |
* | revert torbrowser-launcher ruleLibravatar glitsj162021-02-15
| | | | | | See https://github.com/netblue30/firejail/pull/3990#discussion_r576404417.
* | Avoid doubled include globals.localLibravatar glitsj162021-02-15
| | | | | | The final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Unless there's some kind of potential race condition that needs to be avoided by changing this 'logic' we should avoid doubled includes.
* | Avoid doubled include globals.localLibravatar glitsj162021-02-15
| | | | | | The final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Unless there's some kind of potential race condition that needs to be avoided by changing this 'logic' we should avoid doubled includes.
* | Allow access to torbrowser-launcher under ${HOME}Libravatar glitsj162021-02-15
|/ | | Follow up for https://github.com/netblue30/firejail/pull/3988. We need to allow access to torbrowser-launcher executables installed under ${HOME}. Thanks @rusty-snake and @Vincent43 for motivational input.
* fix tor browserLibravatar netblue302021-02-14
|
* disable .ssh and .gnupg in kdiff3 profileLibravatar netblue302021-02-14
|
* add apparmor to torbrowser-launcherLibravatar glitsj162021-02-14
|
* Revert "Merge pull request #3607 from kortewegdevries/wemail"Libravatar rusty-snake2021-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit bd1819a8641e0eeae016846b28a41e625bcc215b, reversing changes made to 807af3dce05786f10747cc0938cc98af484c8e97. The hole PR looks like a single crap, it is not even syntactically correct. Has anyone at least started kmail with this profile before it was merged? See #3979, thanks @creideiki for reporting. > First, there are syntax errors. Several mkdir lines have file names containing asterisks. > This gives the following error: > > Error: "${HOME}/.cache/akonadi*" is an invalid filename: rejected character: "*" > > I am not sure what they intend to do, but whatever it is it's not working. > Especially confusing is the line > > mkdir /tmp/akonadi-* > > Yes, Akonadi creates a directory in /tmp, but its name is random and seems to have been created > using mkstemp(3) or similar. I'm not sure how Firejail is supposed to be able to pre-create it. > > Removing the asterisks makes Firejail at least accept the profile syntactically and try to run > the program. It is rejected by syntax. Has anyone tested? > At startup, Firejail now prints the following warning: > > *** > *** Warning: cannot whitelist ${DOCUMENTS} directory > *** Any file saved in this directory will be lost when the sandbox is closed. > *** Why was 'include disable-xdg.inc' added together with 'whitelist ${DOCUMENTS}', but no 'nobalcklist ${DOCUMENTS}'? It can not work. > The actual error is that PostgreSQL needs access to /usr/lib64/postgresql-13/ in order to run. > Adding the following line to kmail.profile fixes that: > > whitelist /usr/share/postgresql* Again, has anyone thested this? > The next problem is this message on the console: > > kf.config.core: Couldn't write "/home/creideiki/.config/kmail2rc" . Disk full? > > Which may have something to do with the profile creating a directory with that name: > > mkdir ${HOME}/.config/kmail2rc > > when it's supposed to be a file: > > $ stat ~/.config/kmail2rc > File: /home/creideiki/.config/kmail2rc > Size: 24660 Blocks: 56 IO Block: 4096 regular file Has anyone tested this or is this just a blind copy of the noblacklist from above with noblacklist replaced by mkdir? > However, the error message > > kf.config.core: Couldn't write "/home/creideiki/.config/kmail2rc" . Disk full? > > still appears. Looks like #1793. HAS ANYONE TESTED THIS PROFILE??! > Finally, when exiting KMail, it crashes with a SIGSEGV: > > *** KMail got signal 11 (Exiting) > *** Dead letters dumped. > KCrash: crashing... crashRecursionCounter = 2 > KCrash: Application Name = kmail path = /usr/bin pid = 20 > KCrash: Arguments: /usr/bin/kmail Has any... > I tried restoring an older kmail.profile, from commit 319f2dc, and it has none of the above problems. ... I give up asking if anyone tested this. > Given the multitude of problems with commit 5532fbd, I'd suggest reverting it until it can be fixed. Yes, definitely.
* display-im6.q16Libravatar netblue302021-02-11
|
* add support for faccessat2 syscallLibravatar glitsj162021-02-10
|
* Update etc/profile-a-l/firefox.profileLibravatar Albin Kauffmann2021-02-09
| | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-08-31 15:53:15 +0000