aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* profiles: move read-only config entries to dcLibravatar Kelvin M. Klann2023-03-28
| | | | | | | | | | Command used to search for entries: $ git grep '^read-only ${HOME}/' -- 'etc/profile*' Note for gpg: ~/.gnupg/gpg.conf is apparently only managed by gpgconf(1) rather than through gpg(1) itself, in which case it does not need to be made read-write in gpg.profile.
* cower: move blacklist from disable-programs to dcLibravatar Kelvin M. Klann2023-03-28
| | | | | | | | This is an AUR helper and disable-common.inc has entries for pacman and other system package managers. Added on commit 6c10737f0 ("archaudit-report and cower for Arch platforms, #1642", 2017-11-15).
* firefox: move read-only entries to disable-common.incLibravatar Kelvin M. Klann2023-03-28
| | | | | | | Instead of duplicating them on every profile that tries to allow opening links in Firefox. And make that path read-write on firefox.profile.
* mpv: move read-only entries to disable-common.incLibravatar Kelvin M. Klann2023-03-27
| | | | | | | Note: mpv itself does not modify anything in ~/.config/mpv as far as I know, in which case it does not need a read-write entry. Relates to #5706 #5707 #5710.
* whitelist-common.inc: remove read-only entriesLibravatar Kelvin M. Klann2023-03-27
| | | | | | | They are already present on etc/inc/disable-common.inc. First added on commit 695b67f43 ("handle ~/.config/user-dirs.dirs", 2015-11-17).
* Merge pull request #5710 from pirate486743186/mov-cliLibravatar netblue302023-03-23
|\ | | | | add mov-cli.profile
| * add mov-cliLibravatar pirate4867431862023-03-04
| |
* | Merge pull request #5728 from pirate486743186/chromium-electron-commonLibravatar netblue302023-03-23
|\ \ | | | | | | create blink-common.profile
| * | create blink-common.profileLibravatar pirate4867431862023-03-16
| | |
* | | keepassxc: Allow offering the Secret ServiceLibravatar Thijs Raymakers2023-03-21
| | | | | | | | | | | | | | | | | | | | | KeePassXC can offer a Secret Service to store secrets for other programs. See https://specifications.freedesktop.org/secret-service/latest/
* | | Add profiles for jami and postman (#5691)Libravatar Kobaxidze2562023-03-15
| | |
* | | fix ani-cli.profile (#5733)Libravatar pirate4867431862023-03-14
| | | | | | | | | Co-authored-by: pirate486743186 <>
* | | refresh engrampa.profile (#5734)Libravatar pirate4867431862023-03-14
| | | | | | | | | Co-authored-by: pirate486743186 <>
* | | file-roller: slight hardening (#5736)Libravatar glitsj162023-03-14
| | |
* | | microsoft-edge fixes (#5697)Libravatar glitsj162023-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * microsoft-edge*: fix spacing * Create microsoft-edge-stable.profile Relates to #5696. * firecfg.config: add support for microsoft-edge-stable redirect * disable-common.inc: blacklist msedge SUID executables * microsoft-edge: add private-opt and allow internal sandbox access
* | | profiles: drop hostname option (#5702)Libravatar glitsj162023-03-14
| | | | | | | | | | | | | | | | | | | | | | | | Now that we have randomized UTS namespaces support[1] by default for every sandbox, there's no longer a need to set hostname to a fixed value. This commit removes such fixed hostname entries from all profiles that have it. [1] https://github.com/netblue30/firejail/discussions/5597#discussioncomment-4996357
* | | profiles: streamline seccomp socket comment (#5735)Libravatar glitsj162023-03-14
| | | | | | | | | | | | | | | No functional changes. Relates to #639.
* | | Merge pull request #5325 from pirate486743186/tutanota-desktop.profile-fixLibravatar netblue302023-03-13
|\ \ \ | | | | | | | | tutanota-desktop.profile improvements
| * | | tutanota-desktop.profile improvementsLibravatar pirate4867431862023-02-26
| | | |
* | | | Merge pull request #5715 from pirate486743186/yt-dlpLibravatar netblue302023-03-13
|\ \ \ \ | | | | | | | | | | refactor yt-dlp
| * | | | refactor yt-dlpLibravatar pirate4867431862023-03-09
| | |_|/ | |/| |
* | | | Add Discord PTB profileLibravatar Neotamandua2023-03-12
| |_|/ |/| |
* | | mpv: improve and clarify comments (#5711)Libravatar glitsj162023-03-09
| | |
* | | Merge pull request #5717 from glitsj16/aa-examplesLibravatar netblue302023-03-08
|\ \ \ | | | | | | | | firejail-local: fix examples
| * | | firejail-local: fix examplesLibravatar glitsj162023-03-07
| |/ /
* | | Merge pull request #5718 from marek22k/masterLibravatar netblue302023-03-08
|\ \ \ | | | | | | | | email-common.profile: allow bsfilter
| * | | email-common.profile: allow bsfilterLibravatar Marek Küthe2023-03-08
| |/ / | | | | | | | | | | | | https://bsfilter.org/ Signed-off-by: Marek Küthe <m.k@mk16.de>
* | | Merge pull request #5707 from pirate486743186/ani-cliLibravatar netblue302023-03-08
|\ \ \ | | | | | | | | add ani-cli.profile
| * | | add ani-cli.profileLibravatar pirate4867431862023-03-05
| |/ / | | | | | | | | | https://github.com/pystardust/ani-cli
* | | Merge pull request #5714 from pirate486743186/porn-cliLibravatar netblue302023-03-08
|\ \ \ | | | | | | | | add porn-cli.profile
| * | | add porn-cli.profileLibravatar pirate4867431862023-03-05
| |/ /
* / / add lobster.profileLibravatar pirate4867431862023-03-03
|/ / | | | | | | https://github.com/justchokingaround/lobster
* | gajim: allow loading plugins (#5705)Libravatar Marek Küthe2023-03-02
| | | | | | | | | | Closes https://github.com/netblue30/firejail/issues/5704 Signed-off-by: Marek Küthe <m.k@mk16.de>
* | bulk renaming electron to electron-common (#5700)Libravatar pirate4867431862023-03-01
| | | | | | Co-authored-by: pirate486743186 <>
* | rsync-download_only: fix local override name (#5695)Libravatar glitsj162023-02-28
| |
* | minor clarify userns comments (#5686)Libravatar pirate4867431862023-02-26
|/ | | Co-authored-by: pirate486743186 <>
* parsecd: ordering fixes (#5682)Libravatar glitsj162023-02-25
|
* Merge pull request #5646 from NetSysFire/parsecdLibravatar netblue302023-02-24
|\ | | | | New profile: parsecd
| * parsecd.profile: more white and blacklistingLibravatar NetSysFire2023-02-24
| |
| * New profile: parsecdLibravatar NetSysFire2023-02-18
| |
* | Merge pull request #5674 from kmk3/fix-ws-add-editorconfigLibravatar netblue302023-02-24
|\ \ | | | | | | build: Fix whitespace and add .editorconfig
| * | Trim trailing whitespaceLibravatar Kelvin M. Klann2023-02-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commands used to search and replace: $ git grep -Ilz '[[:blank:]]$' | xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed -E \ 's/[[:blank:]]+$//' '{}')\" >'{}'" This fixes all of the "trailing whitespace" errors raised by git: $ git diff --check 4b825dc642cb6eb9a060e54bf8d69288fbee4904..HEAD | grep '^[^+]' | cut -f 3 -d : | LC_ALL=C sort | uniq -c 72 space before tab in indent. 4 trailing whitespace.
| * | Fix EOL at EOFLibravatar Kelvin M. Klann2023-02-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commands used to search and replace: $ git grep -Ilz '.' | xargs -0 -I '{}' sh -c \ "printf '%s\n' \"\$(cat '{}')\" >'{}'" The above commands ensure that there is exaclty 1 line terminator at EOF (rather than 0 or more than 1) on all non-empty text files. This fixes all of the "new blank line at EOF" errors raised by git: $ git diff --check 4b825dc642cb6eb9a060e54bf8d69288fbee4904..HEAD | grep '^[^+]' | cut -f 3 -d : | LC_ALL=C sort | uniq -c 21 new blank line at EOF. 72 space before tab in indent. 4 trailing whitespace.
* | | more private-etcLibravatar netblue302023-02-24
| | |
* | | New profiles: qpdf and redirects (#5675)Libravatar glitsj162023-02-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create qpdf.profile and redirects qpdf (CLI) provides PDF metadata cleaning. See privacy-handbuch.de[1] for details. The site offers pdf-meta-clean.sh[2], which works very well with firejailed qpdf. [1] https://www.privacy-handbuch.de/handbuch_43a.htm [2] https://www.privacy-handbuch.de/download/pdf-meta-clean.sh * RELNOTES: add qpdf and redirects to new profiles section * firecfg.config: add qpdf and redirects * qpdf: use 'seccomp socket' instead of 'protocol unix' See https://github.com/netblue30/firejail/issues/639. Thanks @rusty-snake in code review.
* | | apostrophe: drop whitelist covered by wusc (#5671)Libravatar glitsj162023-02-23
| | |
* | | disable-common.inc: add systemd v253 blacklists (#5669)Libravatar glitsj162023-02-23
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | Arch Linux got systemd v253: https://github.com/archlinux/svntogit-packages/commit/05d0aedb2b83a2e1ba07cab47205772f82cb4814 It adds a few new files we should blacklist in `disable-common.inc`: - /etc/credstore - /etc/credstore.encrypted - /run/credentials/systemd-sysctl.service - /run/credentials/systemd-sysusers.service - /run/credentials/systemd-tmpfiles-setup.service - /run/credentials/systemd-tmpfiles-setup-dev.service
* | merges, testing, private-etcLibravatar netblue302023-02-16
| |
* | wusc: allow hyphenation (#5666)Libravatar glitsj162023-02-15
| |
* | com.github.johnfactotum.Foliate: fix .local include (#5665)Libravatar glitsj162023-02-15
| |
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-01 08:04:21 +0000