aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
...
* removed mincore syscall from default seccomp filterLibravatar netblue302019-01-23
|
* improve gwenview and dolphin profiles - #2306 #2348Libravatar smitsohu2019-01-22
|
* Fix github-desktop for appimage usageLibravatar glitsj162019-01-22
|
* Redo github-desktop.profile as blacklist profileLibravatar glitsj162019-01-22
| | | Following suggestion in https://github.com/netblue30/firejail/pull/2362 to turn this into a blacklist profile.
* Refactor github-desktop.profileLibravatar glitsj162019-01-22
|
* kodi profile - removed mincore from seccomp filterLibravatar netblue302019-01-21
|
* Add warning to thunderbird profile -- fix #2357Libravatar Fred-Barclay2019-01-20
|
* Merge pull request #2356 from glitsj16/gnome-calculatorLibravatar glitsj162019-01-20
|\ | | | | Unbreak currency conversion for gnome-calculator
| * Unbreak currency conversion for gnome-calculatorLibravatar glitsj162019-01-20
| |
* | Merge pull request #2354 from glitsj16/gcalccmdLibravatar glitsj162019-01-20
|\ \ | | | | | | Create gcalccmd.profile
| * | Create gcalccmd.profileLibravatar glitsj162019-01-20
| | |
* | | Merge pull request #2353 from glitsj16/gnome-calculatorLibravatar glitsj162019-01-20
|\ \ \ | | |/ | |/| Harden gnome-calculator profile
| * | Harden gnome-calculator profileLibravatar glitsj162019-01-20
| |/
* / Harden eog profileLibravatar glitsj162019-01-20
|/
* Create clawsker.profileLibravatar glitsj162019-01-20
|
* Merge pull request #2347 from Lockdis/masterLibravatar SkewedZeppelin2019-01-20
|\ | | | | add google earth pro, update google earth profile
| * Update google-earth-pro.profileLibravatar Lockdis2019-01-18
| |
| * Update google-earth.profileLibravatar Lockdis2019-01-18
| |
| * Create google-earth-pro.profileLibravatar Lockdis2019-01-18
| |
* | Update libreoffice.profileLibravatar rusty-snake2019-01-19
|/ | | comment `machine-id`
* flameshot.profile: remove memory-deny-write-executeLibravatar Vincent432019-01-18
| | | memory-deny-write-execute may break app, see https://github.com/netblue30/firejail/issues/1139#issuecomment-455420202
* konversation.profile: add netlink protocolLibravatar Vincent432019-01-17
| | | This suppresses errors seen in https://github.com/netblue30/firejail/issues/1139#issuecomment-454780721
* Update gajim.profileLibravatar rusty-snake2019-01-16
| | | Fix plugin-update and install.
* adding mincore syscall to the default seccomp filter and some independent ↵Libravatar netblue302019-01-14
| | | | profiles
* Fix ocenaudio profileLibravatar glitsj162019-01-04
|
* Add a profile for ghostwriter (#2319)Libravatar rusty-snake2018-12-30
| | | | | * Add a profile for ghostwriter
* Merge pull request #2313 from rusty-snake/patch-1Libravatar SkewedZeppelin2018-12-27
|\ | | | | Fix gajim.profile
| * Update gajim.profileLibravatar rusty-snake2018-12-27
| |
| * Some additional hardening for gajimLibravatar rusty-snake2018-12-27
| |
| * Add profile alias for gajim-history-managerLibravatar rusty-snake2018-12-27
| |
| * Fix Gajim.profileLibravatar rusty-snake2018-12-26
| |
| * Fix gajim.profileLibravatar rusty-snake2018-12-23
| |
* | Remove network access from cherrytree.profileLibravatar tinmanx2018-12-25
|/
* MergesLibravatar Tad2018-12-22
|
* updates for ~/.cargoLibravatar rusty-snake2018-12-21
|
* adaptations in bibletime.profile and rhythmbox.profileLibravatar rusty-snake2018-12-20
|
* Update disable-common.inc, disable-programs.incLibravatar rusty-snake2018-12-20
|
* New profile for supertuxkart. (#2298)Libravatar rusty-snake2018-12-16
| | | | | | * New profile supertuxkart * review fixes
* Fix bibletime.profile (#2295)Libravatar rusty-snake2018-12-15
| | | | | | | | * Fix bibletime.profile Fix: bibletime don't starts on Fedora and Arch Use `seccomp.drop` from firefox.
* Merge pull request #2293 from smitsohu/smitsohu-patch-libreofficeLibravatar smitsohu2018-12-13
|\ | | | | enable apparmor in libreoffice profile
| * enable apparmor in libreoffice profileLibravatar smitsohu2018-12-09
| | | | | | | | depends on aa37fe19fed6be8e44db461691149237ee71da94
* | profile enhancements: blacklist kdesu daemon socket, rework ↵Libravatar smitsohu2018-12-11
| | | | | | | | c083a7b737050c532977b46fac6400f1dbc24ff6
* | Add a profile for thunderbird-waylandLibravatar rusty-snake2018-12-10
| |
* | Fixes #1951Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-12-09
| |
* | update dolphin profileLibravatar smitsohu2018-12-07
| | | | | | services previously started by kdeinit now run inside the sandbox due to KDE_FORK_SLAVES being set
* | improve sandboxing of KDE apps: set KDE_FORK_SLAVES, blacklist slave-socketsLibravatar smitsohu2018-12-07
|/ | | | | | | | | | setting the KDE_FORK_SLAVES environment variable removes all inconsistencies that arise from slaves running outside the sandbox or in a different sandbox; it also makes it slightly more difficult to abuse KIO in general and helps to mitigate security problems due to thumbnailing, which now always happens inside the same sandbox. The trade-off is more concurrently running slave processes. closes #2285
* mergesLibravatar Tad2018-11-29
|
* restricting more, HOME and tmp in mpsyt.profileLibravatar pirate4867431862018-11-28
|
* Merge pull request #2280 from pirate486743186/patch-2Libravatar SkewedZeppelin2018-11-27
|\ | | | | new profile mpsyt.profile
| * new profile mpsyt.profileLibravatar pirate4867431862018-11-28
| |