aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* conky needs lua Libravatar curiosityseeker2020-02-28
| | | See issue #3250
* add xournal.profileLibravatar Hans-Christoph Steiner2020-02-27
|
* revive 'net none' in openshot.profileLibravatar glitsj162020-02-27
| | | Fixes #3221.
* Update allow-lua.incLibravatar glitsj162020-02-24
| | | See discussion in https://github.com/netblue30/firejail/commit/56b60dfd0ec5227318f21409093eca965baf136a.
* Fix Lua in disable-interpreters.incLibravatar glitsj162020-02-24
| | | Thanks to @rusty-snake in https://github.com/netblue30/firejail/commit/56b60dfd0ec5227318f21409093eca965baf136a#r37460831.
* additional Lua blacklisting (#3246)Libravatar glitsj162020-02-24
| | | | | | | | | | * more lua blacklisting in disable-interpreters.inc * add some paths to allow-lua.inc * Revert blacklisting /usr/include/lauxlib.h in disable-interpreters.inc /usr/include/lauxlib.h is handled in disable-devel.inc. Thanks to @rusty-snake for pointing that out.
* add lua support for mpv (#3243)Libravatar glitsj162020-02-24
| | | | | | | | * allow lua in mpv.profile * fix allow-lua.inc for mpv * extra lua blacklisting for mpv
* misc thingsLibravatar rusty-snake2020-02-22
| | | | | | - spelling suggestion from @glitsj16 on fda62527 - drop python2 from openshot it never has a python2 version - #3126 note in manpage: cannot combine --private with --private=
* Add profile for offical Linux Teams application (#3152)Libravatar Andreas Hunkeler2020-02-22
| | | | | | | | | | | | | | | | | | | | | | | | * Add profile for offical Linux Teams application * fix: add mkdir suggestions in Teams profile * Merge suggestions for Teams profile * Add suggestion to Teams profile * Add Teams to firecfg.config * Add paths from Teams profile to disable-programs * Remove the duplicated whitelist for downloads in Teams profile Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com> * Cleanup teams profile after testing * Add comment to Teams profile Co-authored-by: rusty-snake <print_hello_world+GitHub@protonmail.com>
* Allow exec from /usr/libexec & co. with AppArmorLibravatar Quentin Minster2020-02-22
|
* Whitelist more /usr/share for okular and othersLibravatar Antonio Russo2020-02-17
| | | | | | | | | Some distributions include fonts in the texmf and texlive subdirectories of /usr/share. This makes those fonts accessible, addressing buggy behavior in okular where some text fails to render. This also whitelists /usr/share/config.kcfg which contains default settings that should be available to many applications.
* apparmor: minor enhancementsLibravatar Vincent432020-02-15
| | | Allow writing some proc paths used by browsers but restrict it to their owner.
* allow networking in openshot.profileLibravatar glitsj162020-02-13
| | | Openshot 2.5.0 needs networking. This fixes #3221.
* added by included profileLibravatar rusty-snake2020-02-10
|
* harden subdownloaderLibravatar rusty-snake2020-02-10
|
* firecfg notes in profilesLibravatar rusty-snake2020-02-10
|
* Add a lot of profilesLibravatar rusty-snake2020-02-10
|
* improve baloo hardening suggestionLibravatar smitsohu2020-02-09
|
* harden wineLibravatar smitsohu2020-02-09
|
* simplescreenrecorder.profileLibravatar rusty-snake2020-02-09
| | | | | - mdwe broken - ${HOME}/.ssr
* include wvc to more profiles (#3209)Libravatar glitsj162020-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * include wvc in aria2c.profile * include wvc in clawsker.profile * include wvc in conky.profile * include wvc in dconf.profile * include wvc in dconf-editor.profile * include wvc in exiftool.profile * include wvc in font-manager.profile * include wvc in gconf.profile * include wvc in git.profile * include wvc in gjs.profile * include wvc in gpg.profile * include wvc in img2txt.profile * include wvc in mediainfo.profile * include wvc in mpd.profile * include wvc in nitroshare.profile * include wvc in ocenaudio.profile * include wvc to ping.profile * include wvc in simple-scan.profile * include wvc in simplescreenrecorder.profile * include wvc in sysprof.profile * include wvc in tshark.profile * include wvc in uget-gtk.profile * include wvc in viewnior.profile * include wvc in weechat.profile
* harden makepkg.profileLibravatar glitsj162020-02-08
|
* fix video play in liferea.profileLibravatar glitsj162020-02-08
|
* fix includes in mencoder.profileLibravatar glitsj162020-02-08
|
* harden mencoder.profileLibravatar glitsj162020-02-08
|
* harden gpg-agent.profileLibravatar glitsj162020-02-08
|
* refactor gnome-keyring.profile as whitelistLibravatar glitsj162020-02-07
|
* refactor geekbench.profile as whitelistLibravatar glitsj162020-02-07
|
* fix preview functionality in subdownloader.profileLibravatar glitsj162020-02-07
|
* Fixing the bug in 189772034b211578aca59540d7277f45da4f45d2 breaking meldLibravatar KOLANICH2020-02-07
|
* revert #3178Libravatar glitsj162020-02-03
| | | It is still undecided what causes #2681 for the OP. Let's not change the seccomp filter for everyone until we have reproducible issues.
* Add gnome-hexgl.profileLibravatar rusty-snake2020-02-03
|
* fix gnome-passwordsafe -- no whitelist globing yetLibravatar rusty-snake2020-02-03
|
* housekeeping: strip unneeded whitespaceLibravatar Fred Barclay2020-02-01
|
* profiles: whitelist /usr/share/doc in some profilesLibravatar Reiner Herrmann2020-01-31
|
* Add a profile alias for multimc5Libravatar Tad2020-01-30
|
* add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | Thanks to @rusty-snake for his comment in #3198.
* add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | Thanks to @rusty-snake for suggesting to move /usr/share/file to wusc in #3198.
* fix wusc in nano.profileLibravatar glitsj162020-01-30
| | | This fixes #3198.
* fix spelling in disable-common.incLibravatar glitsj162020-01-29
|
* Add profiles for the WPS-OfficeLibravatar rusty-snake2020-01-29
|
* fix private-lib for Gentoo in unf.profileLibravatar glitsj162020-01-29
| | | Thanks to @s-hamman for reporting this in the comments of #3193.
* fix private-lib for Gentoo in geekbench.profileLibravatar glitsj162020-01-29
| | | Thanks to @s-hamman for reporting this in the comments of #3193.
* fix private-lib for Gentoo in zathura.profileLibravatar glitsj162020-01-29
|
* noblacklist user cacheLibravatar glitsj162020-01-29
| | | Thanks to @rusty-snake's comment in https://github.com/netblue30/firejail/pull/3159.
* fix ordering in ${HOME}/.cache section and add gummi entree there tooLibravatar glitsj162020-01-29
|
* gedit: comment private-libLibravatar rusty-snake2020-01-29
|
* fix missing global include documentation (#3195)Libravatar Florian Begusch2020-01-29
|
* Add profiles for common (la)tex commands and a latex editor (#3159)Libravatar Florian Begusch2020-01-29
|
* disable private-lib in zathura.profileLibravatar glitsj162020-01-29
| | | Thanks to https://github.com/s-hamann for helping to harden the zathura profile.