aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* adding mincore syscall to the default seccomp filter and some independent ↵Libravatar netblue302019-01-14
| | | | profiles
* Fix ocenaudio profileLibravatar glitsj162019-01-04
|
* Add a profile for ghostwriter (#2319)Libravatar rusty-snake2018-12-30
| | | | | * Add a profile for ghostwriter
* Merge pull request #2313 from rusty-snake/patch-1Libravatar SkewedZeppelin2018-12-27
|\ | | | | Fix gajim.profile
| * Update gajim.profileLibravatar rusty-snake2018-12-27
| |
| * Some additional hardening for gajimLibravatar rusty-snake2018-12-27
| |
| * Add profile alias for gajim-history-managerLibravatar rusty-snake2018-12-27
| |
| * Fix Gajim.profileLibravatar rusty-snake2018-12-26
| |
| * Fix gajim.profileLibravatar rusty-snake2018-12-23
| |
* | Remove network access from cherrytree.profileLibravatar tinmanx2018-12-25
|/
* MergesLibravatar Tad2018-12-22
|
* updates for ~/.cargoLibravatar rusty-snake2018-12-21
|
* adaptations in bibletime.profile and rhythmbox.profileLibravatar rusty-snake2018-12-20
|
* Update disable-common.inc, disable-programs.incLibravatar rusty-snake2018-12-20
|
* New profile for supertuxkart. (#2298)Libravatar rusty-snake2018-12-16
| | | | | | * New profile supertuxkart * review fixes
* Fix bibletime.profile (#2295)Libravatar rusty-snake2018-12-15
| | | | | | | | * Fix bibletime.profile Fix: bibletime don't starts on Fedora and Arch Use `seccomp.drop` from firefox.
* Merge pull request #2293 from smitsohu/smitsohu-patch-libreofficeLibravatar smitsohu2018-12-13
|\ | | | | enable apparmor in libreoffice profile
| * enable apparmor in libreoffice profileLibravatar smitsohu2018-12-09
| | | | | | | | depends on aa37fe19fed6be8e44db461691149237ee71da94
* | profile enhancements: blacklist kdesu daemon socket, rework ↵Libravatar smitsohu2018-12-11
| | | | | | | | c083a7b737050c532977b46fac6400f1dbc24ff6
* | Add a profile for thunderbird-waylandLibravatar rusty-snake2018-12-10
| |
* | Fixes #1951Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-12-09
| |
* | update dolphin profileLibravatar smitsohu2018-12-07
| | | | | | services previously started by kdeinit now run inside the sandbox due to KDE_FORK_SLAVES being set
* | improve sandboxing of KDE apps: set KDE_FORK_SLAVES, blacklist slave-socketsLibravatar smitsohu2018-12-07
|/ | | | | | | | | | setting the KDE_FORK_SLAVES environment variable removes all inconsistencies that arise from slaves running outside the sandbox or in a different sandbox; it also makes it slightly more difficult to abuse KIO in general and helps to mitigate security problems due to thumbnailing, which now always happens inside the same sandbox. The trade-off is more concurrently running slave processes. closes #2285
* mergesLibravatar Tad2018-11-29
|
* restricting more, HOME and tmp in mpsyt.profileLibravatar pirate4867431862018-11-28
|
* Merge pull request #2280 from pirate486743186/patch-2Libravatar SkewedZeppelin2018-11-27
|\ | | | | new profile mpsyt.profile
| * new profile mpsyt.profileLibravatar pirate4867431862018-11-28
| |
* | allowing youtube-dl and python in gnome-mpvLibravatar pirate4867431862018-11-27
|/
* Merge pull request #2275 from pirate486743186/python-localLibravatar SkewedZeppelin2018-11-27
|\ | | | | allowing local python* in mpv and youtube-dl #2262
| * allowing local python* in mpv and youtube-dl #2262Libravatar pirate4867431862018-11-26
| |
* | Update kdenlive.profileLibravatar rusty-snake2018-11-27
| | | | | | Add mlt-melt to private-bin, this is needed on Fedora-systems.
* | Create ocenaudio.profileLibravatar glitsj162018-11-27
| |
* | Add ocenaudio to disable-programs.incLibravatar glitsj162018-11-27
|/
* Add quiet option to transmission-cli profileLibravatar glitsj162018-11-24
|
* Aisleriot fixes + add profile for FeedReaderLibravatar Tad2018-11-22
|
* playonlinux.profile: allow pythonLibravatar Vincent432018-11-22
| | | It won't work without it.
* Update easystroke.profileLibravatar glitsj162018-11-22
|
* Update thunderbird-beta.profileLibravatar glitsj162018-11-20
|
* Update studio.sh.profileLibravatar glitsj162018-11-20
|
* Update steam-native.profileLibravatar glitsj162018-11-20
|
* Update clamscan.profileLibravatar glitsj162018-11-20
|
* Update clamdtop.profileLibravatar glitsj162018-11-20
|
* Update clamdscan.profileLibravatar glitsj162018-11-20
|
* Update chromium-browser.profileLibravatar glitsj162018-11-20
|
* Update brave-browser.profileLibravatar glitsj162018-11-20
|
* Allow /etc/machine-id for EvinceLibravatar announ2018-11-15
|
* Merge pull request #2251 from glitsj16/sortLibravatar glitsj162018-11-08
|\ | | | | Fix alphabetical sort
| * Update disable-programs.incLibravatar glitsj162018-11-08
| |
| * Update disable-interpreters.incLibravatar glitsj162018-11-08
| |
| * Update disable-devel.incLibravatar glitsj162018-11-08
| |