aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* clarify that duplicated blacklisting of /proc/config.gz is intentional (#5548)Libravatar glitsj162022-12-21
| | | | | | | * add comment on intentional duplication of blacklisted kernel configuration * disable-proc.inc: update the duplication comment * disable-common.inc: add duplication notice for kernel configuration
* New profile: ssmtp (#5544)Libravatar glitsj162022-12-21
| | | | | | | | | | | | | | | * disable-programs.inc: add ssmtp support * Create ssmtp.profile * ssmtp: support Debian/Ubuntu * README.md: add ssmtp to 'New profiles' section * disable-common.inc: move ssmtp support to keep CI happy * ssmtp: improve dead.letter comment Suggested in [review](https://github.com/netblue30/firejail/pull/5544#pullrequestreview-1225322546).
* spectre-meltdown-checker: fixes (#5546)Libravatar glitsj162022-12-21
|
* seahorse refactoring (#5543)Libravatar glitsj162022-12-21
| | | | | | | | | | | | | | | | | * seahorse: fixes and hardening * seahorse-daemon: hardening * seahorse-tool: move private-etc items to seahorse * seahorse: unbreak nautilus file encryption As suggested [in review](https://github.com/netblue30/firejail/pull/5543#pullrequestreview-1225250520). * seahorse-tool: move private-tmp to seahorse * seahorse: add private-tmp * seahorse: fix access to ssh-agent socket
* Fix mDNS name resolution with wrc (#5541)Libravatar rusty-snake2022-12-21
|
* audacity: networking updates (#5540)Libravatar glitsj162022-12-20
| | | | | | | | | * audacity: networking updates * audacity: fix allowing to run local server * audacity: move comment so it's more visible As suggested [in review](https://github.com/netblue30/firejail/pull/5540#pullrequestreview-1225225897).
* disable-common.inc: add gnome-console to disabled terminals (#5542)Libravatar glitsj162022-12-20
|
* Rename xlinks2 to xlinks2.profileLibravatar rusty-snake2022-12-20
|
* audacity: support more config locations (#5538)Libravatar glitsj162022-12-20
| | | | | | | | | | | | | | | * audacity: support more config locations * disable-programs.inc: add more audacity locations * audacity: cover all XDG supported locations * audacity: cover all XDG supported locations * audacity: fix state dir entree in disable-programs.inc * unbreak disable-programs.inc Oh my, GitHub syntax highlighting support completely threw me off here. Thanks to @kmk3 for [saving the bacon](https://github.com/netblue30/firejail/pull/5538#pullrequestreview-1224604663)!
* add restrict-namespaces to (almost) all profilesLibravatar smitsohu2022-12-20
|
* Rename cinelerra-gg to cinelerra-gg.profileLibravatar glitsj162022-12-19
|
* Merge pull request #5522 from hknaack/avidemux-fixes-for-opensuseLibravatar netblue302022-12-14
|\ | | | | Avidemux tools support
| * Add profile for avidemux3_jobs_qt5Libravatar Hartmut Knaack2022-12-13
| | | | | | | | | | | | | | | | Add a profile for the Qt5 GUI to process Avidemux jobs. Use a redirection to the avidemux3_qt5 profile to reuse translation files. The application needs to create a network socket on localhost and fails to run with protocol unix, so that entry in the default avidemux profile needs to be extended.
| * Add profile for avidemux3_cliLibravatar Hartmut Knaack2022-12-12
| | | | | | | | | | Add a profile for the command-line interface of Avidemux, which redirects to the existing avidemux profile.
| * Avidemux: openSUSE-Packman fixesLibravatar Hartmut Knaack2022-12-12
| | | | | | | | | | | | The Avidemux project stores configuration profile data in ~/.avidemux6, while the package built by Packman-repositories for openSUSE patches it to use ~/.avidemux3 at the moment (at least for Avidemux 2.8).
| * Add profile for avidemux3_qt5Libravatar Hartmut Knaack2022-12-12
| | | | | | | | Add a profile for the Qt5-GUI of Avidemux.
| * Avidemux: add information from template profileLibravatar Hartmut Knaack2022-12-12
| | | | | | | | Add the information that file contents will be overwritten on updates.
* | Add support for Qt6 (#5527)Libravatar glitsj162022-12-14
| | | | | | | | | | * qbittorrent: add support for Qt6 * wusc: add support for Qt6
* | Fix whitelisting for wusc (#5526)Libravatar glitsj162022-12-14
|/ | | Overlooked [this comment](https://github.com/netblue30/firejail/pull/5389#discussion_r992471940) that pointed out a mistake I made.
* clipit hardening (#5521)Libravatar glitsj162022-12-12
| | | | | | | * clipit hardening * clipit: fix hardening * clipit: add xdotool lib to private-lib
* private-etc: always reference 'alternatives' (#5517)Libravatar glitsj162022-12-09
| | | | | | | | | * private-etc: always include 'alternatives' * private-etc: always include 'alternatives' * private-etc: always include 'alternatives' * private-etc: always include 'alternatives'
* New profile: tesseract (#5516)Libravatar glitsj162022-12-09
| | | | | | | | | | | | | | | | | | | | | | | * Add firecfg support for tesseract * Add tesseract to 'New profiles' section in README.md * Create tesseract.profile * tesseract: fix private-etc * tesseract: fix XDG black/whitelisting * tesseract: use 'seccomp socket' instead of 'protocol unix' As kindly suggested by @rusty-snake. * tesseract: add 'restrict-namespaces' As kindly suggested by @rusty-snake. * tesseract: use full seccomp filtering The tesseract application works fine without 'protocol' or 'seccomp socket'.
* Merge pull request #5498 from kmk3/spotify-allow-adblockLibravatar Kelvin M. Klann2022-12-08
|\ | | | | spotify.profile: allow spotify-adblock paths
| * spotify.profile: allow spotify-adblock pathsLibravatar Kelvin M. Klann2022-12-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As suggested by @glitsj16[1]. Project homepage: https://github.com/abba23/spotify-adblock Configuration paths: * /etc/spotify-adblock/config.toml * ~/.config/spotify-adblock/config.toml Fixes #5494. [1] https://github.com/netblue30/firejail/discussions/5494#discussioncomment-4280887 Reported-by: @Rewig95
* | Merge pull request #5496 from kmk3/kcalc-fix-mkfileLibravatar Kelvin M. Klann2022-12-08
|\ \ | |/ |/| kcalc.profile: fix mkfile without mkdir & comment legacy paths
| * kcalc.profile: stop creating legacy KDE pathsLibravatar Kelvin M. Klann2022-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | Leave them commented. With this commit, there are no more profiles creating paths in ~/.kde nor in ~/.kde4: $ git grep -e '^mkdir .*\.kde' -e '^mkfile .*\.kde' -- etc $ See also commit 3ef030257 ("ktorrent.profile: stop creating legacy KDE paths", 2022-10-11) / PR #5415.
| * kcalc.profile: fix mkfile without mkdirLibravatar Kelvin M. Klann2022-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | firejail may fail to create the following files: * ~/.kde/share/config/kcalcrc * ~/.kde4/share/config/kcalcrc Because it does not create the preceding directories beforehand: * ~/.kde/share/config * ~/.kde4/share/config See also commit 7f1906dba ("ktorrent.profile: fix mkfile without mkdir", 2022-10-11) / PR #5415.
* | firefox-common-addons: fix whitelisting in ${RUNUSER} (#5497)Libravatar glitsj162022-12-01
| | | | | | | | | | | | | | * fix whitelisting in ${RUNUSER} See discussions https://github.com/netblue30/firejail/discussions/5495 for context. * Prevent whitelisting ${RUNUSER} comment
* | AppArmor: add more examples to firejail-local (#5493)Libravatar glitsj162022-12-01
|/ | | | | * AppArmor: add more examples to firejail-local * comments fixes
* [firefox-common.profile] Add DRM support when using psd (#5486)Libravatar glitsj162022-11-28
|
* Merge pull request #5415 from kmk3/ktorrent-fix-mkfileLibravatar netblue302022-11-25
|\ | | | | ktorrent.profile: fix mkfile without mkdir & comment legacy paths
| * ktorrent.profile: add missing private-bin pathsLibravatar Kelvin M. Klann2022-11-22
| | | | | | | | | | | | | | | | | | | | | | | | | | Package-provided binaries: $ pacman -Q ktorrent ktorrent 22.08.3-1.2 $ pacman -Qlq ktorrent | grep bin/. /usr/bin/ktmagnetdownloader /usr/bin/ktorrent /usr/bin/ktupnptest Environment: Artix Linux
| * ktorrent.profile: stop creating legacy KDE pathsLibravatar Kelvin M. Klann2022-11-22
| | | | | | | | Leave them commented.
| * ktorrent.profile: fix mkfile without mkdirLibravatar Kelvin M. Klann2022-11-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | firejail fails to create the following files: * ~/.kde/share/config/ktorrentrc * ~/.kde4/share/config/ktorrentrc Because it does not create the preceding directories beforehand: * ~/.kde/share/config * ~/.kde4/share/config Relates to #5414.
* | Merge pull request #5476 from k4leg/fix_pycharmLibravatar netblue302022-11-25
|\ \ | | | | | | fix: PyCharm profiles
| * | fix: PyCharm profilesLibravatar Bogdan Ruslanovich Drozd2022-11-23
| | | | | | | | | | | | | | | | | | | | | Do not use `private-cache`, because PyCharm places in cache directories stuff like spelling dictionary (i. e. if you download spelling dictionary with `private-cache`, on restart PyCharm you need to download spelling dictionary again).
* | | [email-common.profile] add localtime to private-etcLibravatar glitsj162022-11-25
| | |
* | | Merge pull request #5449 from kmk3/lutris-fix-lolLibravatar Kelvin M. Klann2022-11-23
|\ \ \ | | | | | | | | lutris.profile: fix running League of Legends
| * | | lutris.profile: fix running League of LegendsLibravatar Kelvin M. Klann2022-11-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | @Latrolage on Oct 20, 2022[1]: > When I open the game the only error line which appears is this > `modify_ldt: Operation not permitted` So as suggested by @Latrolage[1] and @rusty-snake[2], allow the `modify_ldt` syscall in seccomp. Fixes #5430. [1] https://github.com/netblue30/firejail/discussions/5430#discussion-4488996 [2] https://github.com/netblue30/firejail/discussions/5430#discussioncomment-3924098 Reported-by: @Latrolage
* | | | Merge pull request #5442 from rusty-snake/fixesLibravatar Kelvin M. Klann2022-11-23
|\ \ \ \ | | | | | | | | | | Profile fixes
| * | | | Update etc/profile-a-l/evince.profileLibravatar rusty-snake2022-10-30
| | | | |
| * | | | Fix #5311 -- Whalebird-4.6.2 does not work with the default whalebird.profileLibravatar rusty-snake2022-10-30
| | | | |
| * | | | Fix #4604 -- Brave browser takes a long time opening under FirejailLibravatar rusty-snake2022-10-30
| | | | |
| * | | | Fix #5392 -- Evince doesn't remember settingsLibravatar rusty-snake2022-10-30
| |/ / /
* | | | fix opening links in firefox youtube-viewers-common.profile (#5352)Libravatar pirate4867431862022-11-23
| | | | | | | | | | | | Co-authored-by: pirate486743186 <>
* | | | Add python3 support/fixes to nicotine (#5459)Libravatar glitsj162022-11-22
| |/ / |/| | | | | | | | | | | | | | | | | * Add python3 support to nicotine * Revert private-bin changes Adding shell and python3 support to private-bin kept breaking nicotine for the user who reported it on IRC. Let's revert it as suggested by @rusty-snake.
* | | Add support for cinelerra-gg (#5467)Libravatar glitsj162022-11-13
| | | | | | | | | | | | | | | | | | | | | * Create cinelerra-gg * add cinelerra-gg to `New profiles` section * Add cinelerra-gg to firecfg.config
* | | Add netlink to list of allowed protocols (#5464)Libravatar Jan Sonntag2022-11-10
| | | | | | | | | Fixes #5463 by adding netlink to the list of allowed protocols
* | | Add godot3 redirect (#5456)Libravatar Frostbyte46642022-11-07
|/ / | | | | | | | | * Create godot3.profile * Add godot3 redirect to firecfg.config
* | Fix freetube mpris supportLibravatar rusty-snake2022-10-30
| | | | | | | | Closes #5437
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-31 11:56:29 +0000