aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* Add netlink to QMediathekViewLibravatar glitsj162019-02-08
|
* small changesLibravatar Tad2019-02-07
| | | | | | - merges - klavaro nitpick - vscodium alias for code, from ParrotSec downstream fork
* Review klavaro.profileLibravatar rusty-snake2019-02-06
|
* Add a profile for klavaroLibravatar rusty-snake2019-02-06
|
* profiles: grant zoom access to its configurationLibravatar Patrik Flykt2019-02-05
| | | | https://bugs.debian.org/921454
* Update firejail-localLibravatar glitsj162019-02-05
|
* firejail.config fixesLibravatar smitsohu2019-02-04
| | | | always print a warning, treat join-or-start like join
* Add '$HOME/.local/share/pki' to blacklistLibravatar Vincent432019-02-03
| | | | | Since nss 3.42, '$HOME/.local/share/pki' is supported dir for storing certs https://hg.mozilla.org/projects/nss/rev/da45424cb9a0b4d8e45e5040e2e3b574d994e254
* remove noexec home from chromium-based browsersLibravatar netblue302019-02-02
|
* Temporary fix for noexec ${HOME} breakageLibravatar Tad2019-02-02
|
* Add a missing path to vivaldi profile, partial fix for #2383Libravatar Tad2019-02-01
|
* Merge pull request #2384 from carloabelli/mprisLibravatar Vincent432019-02-01
|\ | | | | remove nodbus from MPRIS client profiles
| * remove nodbus from MPRIS client profilesLibravatar Carlo Abelli2019-02-01
| | | | | | | | | | | | | | MPRIS is a D-Bus interface for controlling media players. The nodbus option prevents these players from being controlled through MPRIS. It seems that most of the other media players did not have the nodbus option or it was already commented out.
* | --name reworkLibravatar netblue302019-02-01
|/
* Merge pull request #2372 from rusty-snake/additional-blacklistingLibravatar SkewedZeppelin2019-01-30
|\ | | | | additional blacklisting
| * Update some IDE profilesLibravatar rusty-snake2019-01-29
| |
| * Update wget.profileLibravatar rusty-snake2019-01-27
| |
| * additional blacklistingLibravatar rusty-snake2019-01-27
| |
* | pybitmessage.profile: remove memory-deny-write-executeLibravatar Vincent432019-01-30
| | | | | | On some systems it causes app to crash on startup, see https://github.com/netblue30/firejail/issues/2379
* | alphabetizeLibravatar smitsohu2019-01-30
| |
* | misc profile hardening (xdg blacklist, private-cache, netfilter)Libravatar smitsohu2019-01-30
| |
* | Fixup qtox profile, closes #2374Libravatar Tad2019-01-28
| |
* | Fixup cliqz profile, closes #2377Libravatar philotux2019-01-28
| |
* | enable/disable cgroup in firejail.configLibravatar netblue302019-01-27
| |
* | Merge pull request #2373 from rusty-snake/fix_gnome-mapsLibravatar Fred Barclay2019-01-27
|\ \ | | | | | | Fix gnome-maps
| * | Fix gnome-mapsLibravatar rusty-snake2019-01-27
| |/
* / Allow processes confined with AppArmor to obtain some process informationLibravatar Reiner Herrmann2019-01-27
|/ | | | | | | | 'firejail --apparmor chromium' logged a huge amount of apparmor denials, because it wants to use read/readby permissions. Allow those accesses, but keep full tracing disabled by default. See also: https://bugs.debian.org/912587 and apparmor.d(5)
* kodi.profile: switch back to default seccomp filterLibravatar Vincent432019-01-24
| | | As mincore syscall was dropped from default list we can use it again.
* fix skypeforlinuxLibravatar netblue302019-01-23
|
* removed mincore syscall from default seccomp filterLibravatar netblue302019-01-23
|
* improve gwenview and dolphin profiles - #2306 #2348Libravatar smitsohu2019-01-22
|
* Fix github-desktop for appimage usageLibravatar glitsj162019-01-22
|
* Redo github-desktop.profile as blacklist profileLibravatar glitsj162019-01-22
| | | Following suggestion in https://github.com/netblue30/firejail/pull/2362 to turn this into a blacklist profile.
* Refactor github-desktop.profileLibravatar glitsj162019-01-22
|
* kodi profile - removed mincore from seccomp filterLibravatar netblue302019-01-21
|
* Add warning to thunderbird profile -- fix #2357Libravatar Fred-Barclay2019-01-20
|
* Merge pull request #2356 from glitsj16/gnome-calculatorLibravatar glitsj162019-01-20
|\ | | | | Unbreak currency conversion for gnome-calculator
| * Unbreak currency conversion for gnome-calculatorLibravatar glitsj162019-01-20
| |
* | Merge pull request #2354 from glitsj16/gcalccmdLibravatar glitsj162019-01-20
|\ \ | | | | | | Create gcalccmd.profile
| * | Create gcalccmd.profileLibravatar glitsj162019-01-20
| | |
* | | Merge pull request #2353 from glitsj16/gnome-calculatorLibravatar glitsj162019-01-20
|\ \ \ | | |/ | |/| Harden gnome-calculator profile
| * | Harden gnome-calculator profileLibravatar glitsj162019-01-20
| |/
* / Harden eog profileLibravatar glitsj162019-01-20
|/
* Create clawsker.profileLibravatar glitsj162019-01-20
|
* Merge pull request #2347 from Lockdis/masterLibravatar SkewedZeppelin2019-01-20
|\ | | | | add google earth pro, update google earth profile
| * Update google-earth-pro.profileLibravatar Lockdis2019-01-18
| |
| * Update google-earth.profileLibravatar Lockdis2019-01-18
| |
| * Create google-earth-pro.profileLibravatar Lockdis2019-01-18
| |
* | Update libreoffice.profileLibravatar rusty-snake2019-01-19
|/ | | comment `machine-id`
* flameshot.profile: remove memory-deny-write-executeLibravatar Vincent432019-01-18
| | | memory-deny-write-execute may break app, see https://github.com/netblue30/firejail/issues/1139#issuecomment-455420202