aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
...
* spotify: D-Bus hardening (#5923)Libravatar glitsj162023-07-25
|
* audacious: D-Bus hardening (#5922)Libravatar glitsj162023-07-25
| | | | | * audacious: D-Bus hardening * audacious: add noprinters
* New profile: sniffnet (#5920)Libravatar glitsj162023-07-25
| | | | | | | * disable-programs.inc: add sniffnet support * Create sniffnet.profile * firecfg.config: add sniffnet support
* profiles: fixes and cleanups for opening links with firefox (#5919)Libravatar glitsj162023-07-25
|
* profiles: Miscellaneous cleanups (#5918)Libravatar glitsj162023-07-25
|
* firefox(-based) profiles: refactor wusc (#5914)Libravatar glitsj162023-07-25
|
* update mov-cli (#5924)Libravatar pirate4867431862023-07-25
| | | Co-authored-by: pirate486743186 <>
* Create mullvad-browser.profile (#5887)Libravatar glitsj162023-07-22
| | | | | | | | | Homepage: https://mullvad.net/en/download/browser/linux mullvad-browser: don't use restrict-namespaces mullvad-browser: cover both installation paths Suggested in review by @kmk3.
* torbrowser-launcher: hardening (#5886)Libravatar glitsj162023-07-22
| | | | | | | torbrowser-launcher: more hardening as per review torbrowser-launcher: revert enabling restrict-namespaces Suggested in review by @rusty-snake.
* firefox-common-addons.profile: restore vulkan whitelistLibravatar Kelvin M. Klann2023-07-20
| | | | | | | | | | | | Multiple profiles include firefox-common.profile, but not all of them include whitelist-usr-share-common.inc. Suggested by @glitsj16[1]. This amends commit 094892dfd ("profiles: remove /usr/share/vulkan already whitelisted by wusc (#5910)", 2023-07-20). [1] https://github.com/netblue30/firejail/pull/5910/files#r1269397348
* profiles: remove /usr/share/vulkan already whitelisted by wusc (#5910)Libravatar glitsj162023-07-20
|
* sqlitebrowser remote support (#5909)Libravatar glitsj162023-07-20
| | | | | * disable-programs.inc: add remote sqlitebrowser support * sqlitebrowser: add support for remote functionality
* modif: drop deprecated 'shell' option references (#5894)Libravatar glitsj162023-07-19
| | | | | | | | | | | | The `shell` option has been removed. Remove stale references. This does NOT remove `shell none`-related code comments in: - src/firejail/fs_lib.c (L433-L441) - src/firejail/join.c (L415-L417) Relates to #5196. Suggested by #5891.
* bleachbit.profile: allow erasing Trash contentsLibravatar ydididodat2023-07-16
| | | | | | | Bleachbit is used to permanently delete files by overwriting the memory. So the most popular feature of Bleachbit is emptying the Trash. Relates to #5337.
* disable-common.inc: blacklist sudo/doas paths in /etcLibravatar Kelvin M. Klann2023-07-14
| | | | | | | | | | | | | | | | | | | | | | Commands used to find the relevant paths in /etc: $ pacman -Qo /etc/* 2>/dev/null | grep sudo | LC_ALL=C sort /etc/pam.d/ is owned by sudo 1.9.14.p1-1 /etc/sudo.conf is owned by sudo 1.9.14.p1-1 /etc/sudo_logsrvd.conf is owned by sudo 1.9.14.p1-1 /etc/sudoers is owned by sudo 1.9.14.p1-1 /etc/sudoers.d/ is owned by sudo 1.9.14.p1-1 Environment: Artix Linux. Also, add missing paths sudo/doas to etc/ids.config and jailcheck. See also commit dbebd71db ("disable-common.inc: blacklist doas binary", 2022-10-05). Relates to #5385. Reported-by: Dieter Plaetinck <dieter@plaetinck.be>
* Merge pull request #5881 from glitsj16/rssguardLibravatar netblue302023-07-13
|\ | | | | New profile: rssguard
| * Merge branch 'netblue30:master' into rssguardLibravatar glitsj162023-07-06
| |\
| * | rssguard.profile: add netlink to protocolLibravatar glitsj162023-07-05
| | |
| * | rssguard.profile: add seccomp.block-secondaryLibravatar glitsj162023-07-04
| | |
| * | disable-programs.inc: fix ordering rssguard entreeLibravatar glitsj162023-07-03
| | | | | | | | | Grrrr
| * | disable-programs.inc: fix rssguard entreeLibravatar glitsj162023-07-03
| | | | | | | | | Apparently a path containing whitespace and ending with a single digit breaks CI: https://github.com/netblue30/firejail/actions/runs/5448790502.
| * | Create rssguard.profileLibravatar glitsj162023-07-03
| | |
| * | disable-programs.inc: add support for rssguardLibravatar glitsj162023-07-03
| | |
* | | Merge pull request #5893 from pirate486743186/fehLibravatar netblue302023-07-13
|\ \ \ | | | | | | | | refresh feh.profile
| * | | refresh feh.profileLibravatar pirate4867431862023-07-12
| | | |
* | | | fix server.profileLibravatar netblue302023-07-10
|/ / /
* | / fix ani-cli.profile (#5892)Libravatar pirate4867431862023-07-10
| |/ |/| | | Co-authored-by: pirate486743186 <>
* | Merge pull request #5885 from pirate486743186/lobsterLibravatar netblue302023-07-06
|\ \ | | | | | | fix lobster.profile
| * | fix lobster.profileLibravatar pirate4867431862023-07-05
| | |
* | | fix mov-cli.profileLibravatar pirate4867431862023-07-05
|/ /
* / virtualbox: gentoo fix (#5880)Libravatar glitsj162023-07-04
|/
* fbreader/FBReader profile fixes; more on static ip mapLibravatar netblue302023-06-27
|
* Merge pull request #5847 from pirate486743186/update-lobster-profileLibravatar Kelvin M. Klann2023-06-23
|\ | | | | update lobster profile
| * update lobster profileLibravatar pirate4867431862023-06-14
| |
* | profiles: vmware: allow develLibravatar Kelvin M. Klann2023-06-21
| | | | | | | | | | | | | | | | | | | | | | It apparently fails on Linux Mint 20.3 (based on Ubuntu 20.04) due to the "VMWare Kernel Module Updater" being unable to find gcc[1]. Relates to #3526. [1] https://github.com/netblue30/firejail/issues/5861#issuecomment-1598407890 Reported-by: @MikeNavy
* | profiles: add vmplayer.profileLibravatar Kelvin M. Klann2023-06-21
| | | | | | | | | | | | | | | | | | | | | | | | | | As a redirect to vmware.profile. This is apparently the filename for the "VMWare Workstation Player" on Linux Mint 20.3 (based on Ubuntu 20.04)[1]. Relates to #3526. [1] https://github.com/netblue30/firejail/issues/5861#issuecomment-1598132860 Reported-by: @MikeNavy
* | profiles: fix descriptions of vmware programsLibravatar Kelvin M. Klann2023-06-21
| | | | | | | | Relates to #3526.
* | cleanupLibravatar netblue2023-06-18
|/
* firefox: fix private-etc firefoxLibravatar glitsj162023-06-05
|
* Merge branch 'master' into clawsmail-clamavLibravatar netblue302023-05-19
|\
| * Merge pull request #5808 from Dieterbe/qutebrowser-qt6-mpris-changeLibravatar netblue302023-05-19
| |\ | | | | | | qutebrowser: update MPRIS name for qutebrowser-qt6
| | * qutebrowser: update MPRIS name for qutebrowser-qt6Libravatar Dieter Plaetinck2023-05-05
| | | | | | | | | | | | see https://github.com/qutebrowser/qutebrowser/issues/7431
| * | block local python (#5826)Libravatar pirate4867431862023-05-11
| | | | | | | | | Co-authored-by: pirate486743186 <>
| * | email-common: fix bogofilter/bsfilter support (#5810)Libravatar glitsj162023-05-05
| | |
| * | Fix mpv 0.35.1 in Fedora 38Libravatar rusty-snake2023-04-29
| |/
| * element-desktop: allow notifications in profile (#5805)Libravatar Pedro Ribeiro2023-04-26
| | | | | | | | | | I assume most people want this on, since it is a messenger application, and you can control whether you turn it on or off in the app.
| * Fix typo in pycharm-professional includeLibravatar Pedro Ribeiro2023-04-24
| |
| * profiles: standardize on just "GTK" on commentsLibravatar Kelvin M. Klann2023-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For consistency and to reduce confusion. The toolkit has been renamed from "GTK+" to just "GTK" in 2019[1]. Note: This also fixes some adjacent typos. Commands used to search and replace: $ git grep -lz 'G[Tt][Kk]' -- etc | xargs -0 -I '{}' sh -c \ "printf '%s\n' \"\$(sed -E \ -e 's/G[Tt][Kk]\+?/GTK/g' \ -e 's/GTK-.\.0/GTK/g' \ -e 's/GTK base/GTK-base/g' \ -e 's/GTK-base /GTK-based /g' \ -e 's/Light weight/Lightweight/g' \ -e 's/client with GTK/client made with GTK/g' '{}')\" >'{}'" Misc: I noticed this on #5722. [1] https://mail.gnome.org/archives/gtk-devel-list/2019-February/msg00000.html
| * Merge pull request #5722 from pirate486743186/youtube-viewersLibravatar Kelvin M. Klann2023-04-19
| |\ | | | | | | youtube-viewers: refactor and add gtk-youtube-viewers-common
| | * youtube-viewers: refactor and add gtk-youtube-viewers-commonLibravatar pirate4867431862023-04-16
| | |
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-01 20:05:03 +0000