aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* some profile updatesLibravatar netblue302023-01-18
|
* Merge pull request #5595 from kmk3/rename-etc-no-blacklistedLibravatar netblue302023-01-16
|\ | | | | Rename etc-no-blacklisted to etc-hide-blacklisted
| * firejail.config: explain potential issues with etc-hide-blacklistedLibravatar Kelvin M. Klann2023-01-16
| | | | | | | | | | | | | | Let users know that enabling this may break /etc/resolv.conf. Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591.
| * Rename etc-no-blacklisted to etc-hide-blacklistedLibravatar Kelvin M. Klann2023-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To avoid boolean confusion (`no-foo no` / `no-foo yes`) in firejail.config: etc-no-blacklisted no etc-no-blacklisted yes Commands used to search and replace: git grep -Ilz -i 'etc.no.blacklisted' -- etc src | xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed \ -e 's/etc-no-blacklisted/etc-hide-blacklisted/' \ -e 's/ETC_NO_BLACKLISTED/ETC_HIDE_BLACKLISTED/' \ '{}')\" >'{}'" Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591.
* | add timezone access to make libical functionalLibravatar bymoz0892023-01-16
|/ | | claws-mail vcalendar-plugin uses libical to get current timezone. Libical needs access to file `/etc/timezone` to work properly.
* Merge pull request #5591 from smitsohu/private-etc-no-blacklistedLibravatar netblue302023-01-15
|\ | | | | opt-in: hide blacklisted files in /etc
| * opt-in: skip blacklisted files in private-etc - #5010, #5230Libravatar smitsohu2023-01-15
| |
* | Merge pull request #5571 from glitsj16/ec-refactorLibravatar netblue302023-01-15
|\ \ | | | | | | email-common refactoring
| * | balsa: drop private-binLibravatar glitsj162023-01-07
| | | | | | | | | Supporting 'level 1 hack' to allow opening hyperlinks with firefox needs xdg-open (besides bash,sh). Adding xdg-open to private-bin is not enough, as it pulls in a long list of other commands and that's pretty unmaintainable IMO. So I opted to drop private-bin here.
| * | email-common: simplify D-Bus filteringLibravatar glitsj162023-01-06
| | | | | | | | | Suggested in review.
| * | balsa: re-add private-bin comment for gpgLibravatar glitsj162023-01-06
| | | | | | | | | Pointed out in review that this comment was removed by mistake.
| * | email-common: refactoringLibravatar glitsj162023-01-04
| | | | | | | | | No longer used for claws-mail and sylpheed only.
| * | sylpheed: refactoringLibravatar glitsj162023-01-04
| | |
| * | claws-mail: refactoringLibravatar glitsj162023-01-04
| | |
| * | balsa: refactor as email-common.profile redirectLibravatar glitsj162023-01-04
| |/
* | Merge pull request #5563 from glitsj16/linuxqqLibravatar netblue302023-01-15
|\ \ | | | | | | New profiles: linuxqq/qq
| * | Merge branch 'netblue30:master' into linuxqqLibravatar glitsj162023-01-04
| |\|
| * | linuxqq: drop commentLibravatar glitsj162023-01-04
| | | | | | | | | Now that #5569 is in we can remove the hardening comment.
| * | linuxqq: reorder optionsLibravatar glitsj162023-01-03
| | | | | | | | | As suggested in review.
| * | disable-programs.inc: fix ordering QQ configLibravatar glitsj162023-01-03
| | |
| * | Create qq.profileLibravatar glitsj162023-01-03
| | |
| * | Create linuxqq.profileLibravatar glitsj162023-01-03
| | |
| * | disable-programs.inc: add QQ configLibravatar glitsj162023-01-03
| | |
* | | geary: fix opening hyperlinks via D-Bus (#5565)Libravatar glitsj162023-01-12
| | |
* | | QMediathekView: add mkdir and reorder whitelist optionsLibravatar glitsj162023-01-12
| | | | | | | | | As suggested in review.
* | | QMediathekView: hardeningLibravatar glitsj162023-01-11
| |/ |/|
* | Merge pull request #5564 from glitsj16/claws-mail+sylpheedLibravatar netblue302023-01-04
|\ \ | | | | | | claws-mail and sylpheed D-Bus hardening
| * | sylpheed: allow opening hyperlinks via D-BusLibravatar glitsj162023-01-03
| | |
| * | claws-mail: harden D-BusLibravatar glitsj162023-01-03
| |/ | | | | Relates to https://github.com/netblue30/firejail/issues/5477.
* | Merge pull request #5569 from glitsj16/electron-hardeningLibravatar netblue302023-01-04
|\ \ | | | | | | electron hardening fixes
| * | Create electron-hardened.inc.profileLibravatar glitsj162023-01-04
| | |
| * | electron: change hardening commentLibravatar glitsj162023-01-04
| |/
* | Merge pull request #5475 from KOLANICH-tools/aa_fixLibravatar netblue302023-01-04
|\ \ | | | | | | A temporary fix to the bug caused by apparmor profiles stacking.
| * | A temporary fix to the bug caused by apparmor profiles stacking.Libravatar KOLANICH2022-11-15
| | |
* | | Merge pull request #5556 from Dpeta/chatterino-profileLibravatar netblue302023-01-04
|\ \ \ | | | | | | | | Add profile for Chatterino
| * | | Apply code review suggestions to chatterino.profileLibravatar Dpeta2022-12-25
| | | | | | | | | | | | | | | | | | | | | | | | - Remove waf from private-bin - Move optional commands to the top - Reorder allow lua/python
| * | | Apply suggestions from code reviewLibravatar Dpeta2022-12-25
| | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
| * | | Remove unnecessary mkdirLibravatar Dpeta2022-12-25
| | | |
| * | | Fix music/pictures whitelist path in chatterino.profileLibravatar Dpeta2022-12-25
| | | |
| * | | Apply the other code review suggestions to chatterino.profileLibravatar Dpeta2022-12-25
| | | |
| * | | Apply commitable suggestions from code review Libravatar Dpeta2022-12-25
| | | | | | | | | | | | | | | | | | | | I'll try the rest manually soon Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | Add Chatterino profileLibravatar Dpeta2022-12-25
| | | |
* | | | Merge pull request #5553 from slowpeek/masterLibravatar netblue302023-01-04
|\ \ \ \ | | | | | | | | | | Blacklist google-drive-ocamlfuse config
| * | | | Blacklist XDG cache and data dirs for google-drive-ocamlfuseLibravatar slowpeek2022-12-23
| | | | |
| * | | | Blacklist google-drive-ocamlfuse configLibravatar slowpeek2022-12-23
| |/ / /
* | | / ytmdesktop: fix typo (#5567)Libravatar glitsj162023-01-04
| |_|/ |/| |
* | | Merge pull request #5554 from Dpeta/dbus-wiki-link-fixLibravatar smitsohu2022-12-27
|\ \ \ | | | | | | | | Update DBus wiki link
| * | | Update DBus wiki linkLibravatar Dpeta2022-12-23
| |/ /
* / / window manager profiles: fix browser/electron internal sandboxesLibravatar smitsohu2022-12-25
|/ /
* | gpg: fix private-bin (#5550)Libravatar glitsj162022-12-21
| |