Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | Allow exec from /usr/libexec & co. with AppArmor | Quentin Minster | 2020-02-22 | |
| | ||||
* | Whitelist more /usr/share for okular and others | Antonio Russo | 2020-02-17 | |
| | | | | | | | | | Some distributions include fonts in the texmf and texlive subdirectories of /usr/share. This makes those fonts accessible, addressing buggy behavior in okular where some text fails to render. This also whitelists /usr/share/config.kcfg which contains default settings that should be available to many applications. | |||
* | apparmor: minor enhancements | Vincent43 | 2020-02-15 | |
| | | | Allow writing some proc paths used by browsers but restrict it to their owner. | |||
* | allow networking in openshot.profile | glitsj16 | 2020-02-13 | |
| | | | Openshot 2.5.0 needs networking. This fixes #3221. | |||
* | added by included profile | rusty-snake | 2020-02-10 | |
| | ||||
* | harden subdownloader | rusty-snake | 2020-02-10 | |
| | ||||
* | firecfg notes in profiles | rusty-snake | 2020-02-10 | |
| | ||||
* | Add a lot of profiles | rusty-snake | 2020-02-10 | |
| | ||||
* | improve baloo hardening suggestion | smitsohu | 2020-02-09 | |
| | ||||
* | harden wine | smitsohu | 2020-02-09 | |
| | ||||
* | simplescreenrecorder.profile | rusty-snake | 2020-02-09 | |
| | | | | | - mdwe broken - ${HOME}/.ssr | |||
* | include wvc to more profiles (#3209) | glitsj16 | 2020-02-08 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * include wvc in aria2c.profile * include wvc in clawsker.profile * include wvc in conky.profile * include wvc in dconf.profile * include wvc in dconf-editor.profile * include wvc in exiftool.profile * include wvc in font-manager.profile * include wvc in gconf.profile * include wvc in git.profile * include wvc in gjs.profile * include wvc in gpg.profile * include wvc in img2txt.profile * include wvc in mediainfo.profile * include wvc in mpd.profile * include wvc in nitroshare.profile * include wvc in ocenaudio.profile * include wvc to ping.profile * include wvc in simple-scan.profile * include wvc in simplescreenrecorder.profile * include wvc in sysprof.profile * include wvc in tshark.profile * include wvc in uget-gtk.profile * include wvc in viewnior.profile * include wvc in weechat.profile | |||
* | harden makepkg.profile | glitsj16 | 2020-02-08 | |
| | ||||
* | fix video play in liferea.profile | glitsj16 | 2020-02-08 | |
| | ||||
* | fix includes in mencoder.profile | glitsj16 | 2020-02-08 | |
| | ||||
* | harden mencoder.profile | glitsj16 | 2020-02-08 | |
| | ||||
* | harden gpg-agent.profile | glitsj16 | 2020-02-08 | |
| | ||||
* | refactor gnome-keyring.profile as whitelist | glitsj16 | 2020-02-07 | |
| | ||||
* | refactor geekbench.profile as whitelist | glitsj16 | 2020-02-07 | |
| | ||||
* | fix preview functionality in subdownloader.profile | glitsj16 | 2020-02-07 | |
| | ||||
* | Fixing the bug in 189772034b211578aca59540d7277f45da4f45d2 breaking meld | KOLANICH | 2020-02-07 | |
| | ||||
* | revert #3178 | glitsj16 | 2020-02-03 | |
| | | | It is still undecided what causes #2681 for the OP. Let's not change the seccomp filter for everyone until we have reproducible issues. | |||
* | Add gnome-hexgl.profile | rusty-snake | 2020-02-03 | |
| | ||||
* | fix gnome-passwordsafe -- no whitelist globing yet | rusty-snake | 2020-02-03 | |
| | ||||
* | housekeeping: strip unneeded whitespace | Fred Barclay | 2020-02-01 | |
| | ||||
* | profiles: whitelist /usr/share/doc in some profiles | Reiner Herrmann | 2020-01-31 | |
| | ||||
* | Add a profile alias for multimc5 | Tad | 2020-01-30 | |
| | ||||
* | add /usr/share/file to wusc | glitsj16 | 2020-01-30 | |
| | | | Thanks to @rusty-snake for his comment in #3198. | |||
* | add /usr/share/file to wusc | glitsj16 | 2020-01-30 | |
| | | | Thanks to @rusty-snake for suggesting to move /usr/share/file to wusc in #3198. | |||
* | fix wusc in nano.profile | glitsj16 | 2020-01-30 | |
| | | | This fixes #3198. | |||
* | fix spelling in disable-common.inc | glitsj16 | 2020-01-29 | |
| | ||||
* | Add profiles for the WPS-Office | rusty-snake | 2020-01-29 | |
| | ||||
* | fix private-lib for Gentoo in unf.profile | glitsj16 | 2020-01-29 | |
| | | | Thanks to @s-hamman for reporting this in the comments of #3193. | |||
* | fix private-lib for Gentoo in geekbench.profile | glitsj16 | 2020-01-29 | |
| | | | Thanks to @s-hamman for reporting this in the comments of #3193. | |||
* | fix private-lib for Gentoo in zathura.profile | glitsj16 | 2020-01-29 | |
| | ||||
* | noblacklist user cache | glitsj16 | 2020-01-29 | |
| | | | Thanks to @rusty-snake's comment in https://github.com/netblue30/firejail/pull/3159. | |||
* | fix ordering in ${HOME}/.cache section and add gummi entree there too | glitsj16 | 2020-01-29 | |
| | ||||
* | gedit: comment private-lib | rusty-snake | 2020-01-29 | |
| | ||||
* | fix missing global include documentation (#3195) | Florian Begusch | 2020-01-29 | |
| | ||||
* | Add profiles for common (la)tex commands and a latex editor (#3159) | Florian Begusch | 2020-01-29 | |
| | ||||
* | disable private-lib in zathura.profile | glitsj16 | 2020-01-29 | |
| | | | Thanks to https://github.com/s-hamann for helping to harden the zathura profile. | |||
* | updates for zathura.profile (#3193) | glitsj16 | 2020-01-29 | |
| | | | | | | | | * move mkdir in zathura.profile * harden zathura.profile * fix private-lib in zathura.profile | |||
* | Update zathura.profile | rusty-snake | 2020-01-28 | |
| | ||||
* | clarify dropping python2 support in meld.profile (#3167) | glitsj16 | 2020-01-27 | |
| | | | | | | * clarify dropping python2 support in meld.profile * properly comment the python2 situation in meld | |||
* | Update whois.profile (#3154) | Amin Vakil | 2020-01-27 | |
| | | | | | | | | | | | | | | * Update whois.profile More details in https://github.com/netblue30/firejail/issues/3153 * Update etc/whois.profile private-etc Alphabetic order Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com> Co-authored-by: rusty-snake <print_hello_world+GitHub@protonmail.com> | |||
* | Merge pull request #3149 from GovanifY/master | netblue30 | 2020-01-27 | |
|\ | | | | | Blacklisting openrc paths by defaults | |||
| * | tighten info gathering for openrc | Gauvain "GovanifY" Roussel-Tarbouriech | 2020-01-15 | |
| | | ||||
* | | fixup! refactor some profiles as electron redirects (#3188) | rusty-snake | 2020-01-27 | |
| | | | | | | | | | | | | - move ignores to top - add remove netlink protocol from whalebird - ignore caps.drop all in wire-desktop | |||
* | | refactor some profiles as electron redirects (#3188) | glitsj16 | 2020-01-26 | |
| | | | | | | | | | | | | | | | | * refactor as electron redirect * refactor as electron redirect * refactor as electron redirect | |||
* | | fix beaker.profile | glitsj16 | 2020-01-26 | |
| | | | | | | whitelist ${DOWNLOADS} is already in the included electron.profile. |