Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | /bin/sh is automatically solved to /bin/dash in private-bin - removed dash ↵ | startx2017 | 2017-10-13 |
| | | | | from all profiles | ||
* | python cleanup in profile files | startx2017 | 2017-10-13 |
| | |||
* | block kdeinit sockets | smitsohu | 2017-10-13 |
| | | | | attempts to handle #1599 | ||
* | apparmor | netblue30 | 2017-10-12 |
| | |||
* | Experimental private-lib for mate programmes. | Fred-Barclay | 2017-10-11 |
| | | | | | | | Note that private-lib breaks some gtk apps on Wayland (see https://github.com/netblue30/firejail/commit/f451a2c426df261171ade60d12eb03a0bc140b8e#commitcomment-24870828) Since mate doesn't support wayland (yet) this may not be an issue. Private-lib does seem to break mate-calc. | ||
* | private-lib cleanup | netblue30 | 2017-10-10 |
| | |||
* | Add a profile for ZAProxy | Tad | 2017-10-10 |
| | |||
* | add xcalc profile | netblue30 | 2017-10-09 |
| | |||
* | private-lib | netblue30 | 2017-10-09 |
| | |||
* | private-lib developments | netblue30 | 2017-10-09 |
| | |||
* | private-lib developments | netblue30 | 2017-10-09 |
| | |||
* | fixed mate-calc profile | startx2017 | 2017-10-09 |
| | |||
* | fix xed.profile | startx2017 | 2017-10-09 |
| | |||
* | Merge pull request #1593 from onny/patch-1 | SpotComms | 2017-10-08 |
|\ | | | | | Create signal-desktop.profile | ||
| * | Update signal-desktop.profile | Jonas Heinrich | 2017-10-07 |
| | | | | | | Added additional stuff that works but removed noexec /tmp because of errors in signal | ||
| * | Update signal-desktop.profile | Jonas Heinrich | 2017-10-07 |
| | | | | | | Fix typo in comment | ||
| * | Create signal-desktop.profile | Jonas Heinrich | 2017-10-07 |
| | | | | | | Profile for signal-desktop (standalone electron app, see https://github.com/WhisperSystems/Signal-Desktop) | ||
* | | some profile enhancements | smitsohu | 2017-10-08 |
|/ | |||
* | Fixup c6259375dff79484b9f3d587da9fbfa76a3b68b9 | Tad | 2017-10-05 |
| | |||
* | Tighten multiple profiles. | Fred-Barclay | 2017-10-04 |
| | | | | | This adds whitelist-var-common, machine-id, memory-deny-write-execute, and noexec home and tmp when possible. | ||
* | Tighten spotify profile | Fred-Barclay | 2017-10-04 |
| | |||
* | various profile fixes | netblue30 | 2017-10-04 |
| | |||
* | removed lxterminal support, blacklisting the terminal in disable-common.inc | netblue30 | 2017-10-04 |
| | |||
* | whitelist /var | netblue30 | 2017-10-04 |
| | |||
* | Enumerate root directories in apparmor profile | Antonio Russo | 2017-10-03 |
| | | | | | Replace opaque character class with an explicit list of root-level directories to be granted access. | ||
* | potential fix for mutt/gnupg issue #1585 | netblue30 | 2017-10-02 |
| | |||
* | temporary fix for inkscape profile | netblue30 | 2017-09-30 |
| | |||
* | Merges | Tad | 2017-09-30 |
| | |||
* | Merge pull request #1582 from PharmaceuticalCobweb/master | SpotComms | 2017-09-30 |
|\ | | | | | Add profile for gnome-ring | ||
| * | Create gnome-ring.profile | PharmaceuticalCobweb | 2017-09-29 |
| | | |||
* | | Add a profile for PDFMod | Tad | 2017-09-27 |
| | | | | | | | | an alternative to PDFSam | ||
* | | Misc fixes | Tad | 2017-09-27 |
| | | |||
* | | Merge pull request #1577 from hawkeye116477/master | SpotComms | 2017-09-25 |
|\ \ | | | | | | | Update waterfox.profile | ||
| * | | Whitelist /var and fix private-bit filter for waterfox on Arch | hawkeye116477 | 2017-09-25 |
| | | | |||
* | | | Comment private-etc on Steam | Tad | 2017-09-25 |
|/ / | |||
* | | Add a profile for Android ROM compilation | Tad | 2017-09-25 |
| | | | | | | | | | | | | such as AOSP, LineageOS/CyanogenMod, etc. Use like: firejail --profile=/etc/firejail/aosp.profile /bin/bash | ||
* | | add whitelist-var-common to some profiles | smitsohu | 2017-09-25 |
| | | |||
* | | various profile enhancements | smitsohu | 2017-09-25 |
| | | | | | | | | | | | | | | * okular needs kdeinit4 for open file dialog since recently * memory-deny-write-execute should be a safe addition for desktop use of dnscrypt and unbound * cleanup works | ||
* | | fix nginx and apache2, possible fix for #1534 | netblue30 | 2017-09-25 |
| | | |||
* | | Remove whitelist from pinta | Tad | 2017-09-24 |
| | | |||
* | | Harden mate-* profiles | Fred-Barclay | 2017-09-24 |
| | | |||
* | | tighten mate-calc profile | Fred-Barclay | 2017-09-24 |
| | | |||
* | | Fix gnome-calculator missing theme | Tad | 2017-09-24 |
| | | |||
* | | Gitter on Arch requires env,bash in private-bin. | Fred-Barclay | 2017-09-22 |
| | | | | | | | | | | /usr/bin/gitter redirects to /opt/Gitter/ so a private-opt filter has been added as well. | ||
* | | merge #1565 | netblue30 | 2017-09-22 |
| | | |||
* | | Further fixup #1565 and add a profile for uefitool | Tad | 2017-09-22 |
| | | |||
* | | Fixup merge of #1565 | Tad | 2017-09-22 |
| | | |||
* | | Merge pull request #1565 from nyancat18/master | netblue30 | 2017-09-22 |
|\ \ | |/ |/| | Some profiles | ||
| * | fix | Your Name | 2017-09-19 |
| | | |||
| * | ready | Your Name | 2017-09-19 |
| | |