aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* fix audio/video play in yelp.profileLibravatar glitsj162020-12-10
|
* re-order private-etc in telegram.profileLibravatar glitsj162020-12-10
|
* fix private-etc in telegram.profileLibravatar glitsj162020-12-10
| | | Fixes #3805.
* minor hardenings and commentsLibravatar glitsj162020-12-10
|
* Update yelp.profile (#3803)Libravatar glitsj162020-12-09
|
* harden sysprof (#3802)Libravatar glitsj162020-12-09
|
* fixesLibravatar rusty-snake2020-12-09
| | | | | | - hopefully fix #3795 finally - fix README.md codeblock - blacklist ${HOME}/.texlive20*
* fix #3795 -- teams chrootLibravatar rusty-snake2020-12-07
|
* profile fixes from issuesLibravatar rusty-snake2020-12-07
| | | | closes #3786; closes #3776
* Add profile for authenticator-rs, improve falkon (#3747)Libravatar kortewegdevries2020-12-07
| | | | | | | | | * Add profile for authenticator-rs, improve falkon, balsa * Fix * Add private-tmp to falkon * Revert balsa
* xfce4-screenshooter: comment mdweLibravatar rusty-snake2020-12-06
|
* Add a profile for dolphin-emuLibravatar Tad2020-11-29
| | | | | Games folder must be whitelisted in a dolphin-emu.local Its private-etc can likely be shortened
* Small fixesLibravatar Tad2020-11-29
| | | | | | | | | - gimp: allow mbind syscall. no start on Fedora 33 without - minetest: disable private-cache. without persistent cache connecting to servers can take many minutes - supertuxkart: allow bluetooth protocol. stk can directly connect/pair to WiiMote controllers - supertuxkart: comment private-dev to allow controller use - profiles: unify controller support comments - firecfg: comment evolution with a note, and add a note to epiphany #3647 + #2995
* Fix building C# projects in Godot (#3778)Libravatar RandomVoid2020-11-28
| | | | | | | | | Since version 3.0 Godot is supporting C# as a language for writing scripts. The C# solution can be built directly in Godot editor using MSBuild, which requires access to directory /etc/mono. This directory contains configuration of Mono enviroment. If MSBuild don't have access to this directory, it's not able to determine location of DLL files and it's throwing System.DllNotFoundException at beginning of the build process.
* fix #3777 -- lyx profile seems to be brokenLibravatar rusty-snake2020-11-27
|
* fixes; close #3775Libravatar rusty-snake2020-11-26
|
* make ${HOME}/.local/lib read-onlyLibravatar rusty-snake2020-11-24
|
* disable dbus in QMediathekView (#3771)Libravatar glitsj162020-11-24
|
* add gnome-shell search-provider file to firefox.profile (#3768)Libravatar glitsj162020-11-24
| | | | | | | | | * allow access to gnome-shell search-provider in firefox.profile Firefox has gnome-shell search-provider support since version 78: - https://bugzilla.mozilla.org/show_bug.cgi?id=1239694 - https://mastransky.wordpress.com/2020/09/25/firefox-gnome-shell-search-provider/ * add dbus filter for gnome-shell search-provider
* Add a profile for LutrisLibravatar Tad2020-11-23
| | | | | | | | - Lutris isn't added to firecfg just yet, needs more testing - aria2c profile has a comment regarding Lutris/Winetricks, but it shouldn't matter since it can't be nested - Add commented wusc to wine.profile - Add vulkan and zenity to wusc.inc
* reorder disable-write-mnt.incLibravatar glitsj162020-11-23
|
* drop newline after mdwe in gnome-system-log.profileLibravatar glitsj162020-11-23
|
* drop newline after mdwe in geekbench.profileLibravatar glitsj162020-11-23
|
* drop newline after mdwe in devilspie.profileLibravatar glitsj162020-11-23
|
* drop newline after mdwe in devhelp.profileLibravatar glitsj162020-11-23
|
* ordering wruc correctly in default.profileLibravatar glitsj162020-11-23
|
* Update default.profileLibravatar glitsj162020-11-23
| | | Nitpick wording + added a commented disable-shell.inc
* drop newline in cower.profileLibravatar glitsj162020-11-23
|
* disable mdweLibravatar glitsj162020-11-23
|
* harden xfce4-mixer.profileLibravatar glitsj162020-11-23
|
* Merge pull request #3766 from kris7t/runuser-fixesLibravatar netblue302020-11-22
|\ | | | | Miscellaneous whitelist-runuser-common fixes
| * Whitelist wayland-1 socketLibravatar Kristóf Marussy2020-11-22
| | | | | | | | | | | | If the GDM display manager runs with Wayland support, and it starts a desktop environment other than (?) GNOME, the desktop environment will use the `wayland-1` socket instead of the `wayland-0` socket.
| * Fix typo in thunderbird.profileLibravatar Kristóf Marussy2020-11-22
| | | | | | | | | | We must ignore include `whitelist-runuser-common.profile`, because it breaks Enigmail (TB 68) and GnuPG smartcard (TB 78) support.
* | drop deprecated pathLibravatar glitsj162020-11-22
|/ | | Cfr. https://github.com/netblue30/firejail/pull/3517#issuecomment-664715880: element-desktop no longer uses ${HOME}/.config/Element (Riot).
* minetest: Enable rm (#3764)Libravatar Liorst42020-11-21
| | | rm is needed to uninstall mods and delete game saves (worlds).
* various profilesLibravatar rusty-snake2020-11-20
| | | | | | - disable-common: read-only ${HOME}/.zfunc - fix #3761 -- w3m with w3m-img installed does not display images when on virtual console/framebuffer - yelp can be used to display manpages
* Add profile for straw-viewer (#3742)Libravatar kortewegdevries2020-11-18
| | | | | * Add profile for straw-viewer * Remove blacklist, fixes
* Merge pull request #3757 from rusty-snake/overrides2upstreamLibravatar rusty-snake2020-11-17
|\ | | | | from my overrides
| * from my overridesLibravatar rusty-snake2020-11-16
| | | | | | | | | | | | | | | | - add seccomp.block-secondary to a lot profiles - add wruc to firefox-common and ignore it in TB and firefox-common-addons - harden dia, gnome-keyring, libreoffice, megaglest, pngquant, ghostwriter, rhythmbox, sqlitebrowser
* | add read-only items for ksh and mkshLibravatar glitsj162020-11-14
| | | | | | Follow-up from discussion in https://github.com/netblue30/firejail/pull/3751.
* | disable-shell.inc: add mksh shellLibravatar Ypnose2020-11-14
| |
* | Dbus fixes (#3750)Libravatar glitsj162020-11-13
|/ | | | | * add dbus comment * disable dbus
* Add XAUTHORITY file of sddm from openSUSE Tumblew…Libravatar rusty-snake2020-11-13
| | | | …eed to wruc
* add gvfs-metadata to disable-common.incLibravatar Tad2020-11-13
| | | | - this might need to be looked into
* fix dbusLibravatar glitsj162020-11-12
| | | At least on Ubuntu 16.04 LTS we need an additional own.
* minetest.profile: whitelist /usr/share/games/minetest (#3740)Libravatar Davide Beatrici2020-11-11
| | | It's the path to the game's data in the official Debian package.
* update konsole/plasma blacklistLibravatar smitsohu2020-11-11
|
* adding /dev/mqueue to disable-exec.incLibravatar smitsohu2020-11-11
|
* add alsa/group to private-etcLibravatar glitsj162020-11-10
| | | fix for #3737.
* fix #3736Libravatar glitsj162020-11-10
| | | Added ${HOME}/.alsaequal.bin to fix #3736