Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | cleanup | 2023-01-19 | |
| | |||
* | cleanup | 2023-01-19 | |
| | |||
* | cleanup | 2023-01-19 | |
| | |||
* | more profile fixes/testing | 2023-01-19 | |
| | |||
* | some profile updates | 2023-01-18 | |
| | |||
* | Merge pull request #5595 from kmk3/rename-etc-no-blacklisted | 2023-01-16 | |
|\ | | | | | Rename etc-no-blacklisted to etc-hide-blacklisted | ||
| * | firejail.config: explain potential issues with etc-hide-blacklisted | 2023-01-16 | |
| | | | | | | | | | | | | | | Let users know that enabling this may break /etc/resolv.conf. Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591. | ||
| * | Rename etc-no-blacklisted to etc-hide-blacklisted | 2023-01-16 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To avoid boolean confusion (`no-foo no` / `no-foo yes`) in firejail.config: etc-no-blacklisted no etc-no-blacklisted yes Commands used to search and replace: git grep -Ilz -i 'etc.no.blacklisted' -- etc src | xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed \ -e 's/etc-no-blacklisted/etc-hide-blacklisted/' \ -e 's/ETC_NO_BLACKLISTED/ETC_HIDE_BLACKLISTED/' \ '{}')\" >'{}'" Added on commit ded50200e ("opt-in: skip blacklisted files in private-etc - #5010, #5230", 2023-01-15) / PR #5591. | ||
* | | add timezone access to make libical functional | 2023-01-16 | |
|/ | | | claws-mail vcalendar-plugin uses libical to get current timezone. Libical needs access to file `/etc/timezone` to work properly. | ||
* | Merge pull request #5591 from smitsohu/private-etc-no-blacklisted | 2023-01-15 | |
|\ | | | | | opt-in: hide blacklisted files in /etc | ||
| * | opt-in: skip blacklisted files in private-etc - #5010, #5230 | 2023-01-15 | |
| | | |||
* | | Merge pull request #5571 from glitsj16/ec-refactor | 2023-01-15 | |
|\ \ | | | | | | | email-common refactoring | ||
| * | | balsa: drop private-bin | 2023-01-07 | |
| | | | | | | | | | Supporting 'level 1 hack' to allow opening hyperlinks with firefox needs xdg-open (besides bash,sh). Adding xdg-open to private-bin is not enough, as it pulls in a long list of other commands and that's pretty unmaintainable IMO. So I opted to drop private-bin here. | ||
| * | | email-common: simplify D-Bus filtering | 2023-01-06 | |
| | | | | | | | | | Suggested in review. | ||
| * | | balsa: re-add private-bin comment for gpg | 2023-01-06 | |
| | | | | | | | | | Pointed out in review that this comment was removed by mistake. | ||
| * | | email-common: refactoring | 2023-01-04 | |
| | | | | | | | | | No longer used for claws-mail and sylpheed only. | ||
| * | | sylpheed: refactoring | 2023-01-04 | |
| | | | |||
| * | | claws-mail: refactoring | 2023-01-04 | |
| | | | |||
| * | | balsa: refactor as email-common.profile redirect | 2023-01-04 | |
| |/ | |||
* | | Merge pull request #5563 from glitsj16/linuxqq | 2023-01-15 | |
|\ \ | | | | | | | New profiles: linuxqq/qq | ||
| * | | Merge branch 'netblue30:master' into linuxqq | 2023-01-04 | |
| |\| | |||
| * | | linuxqq: drop comment | 2023-01-04 | |
| | | | | | | | | | Now that #5569 is in we can remove the hardening comment. | ||
| * | | linuxqq: reorder options | 2023-01-03 | |
| | | | | | | | | | As suggested in review. | ||
| * | | disable-programs.inc: fix ordering QQ config | 2023-01-03 | |
| | | | |||
| * | | Create qq.profile | 2023-01-03 | |
| | | | |||
| * | | Create linuxqq.profile | 2023-01-03 | |
| | | | |||
| * | | disable-programs.inc: add QQ config | 2023-01-03 | |
| | | | |||
* | | | geary: fix opening hyperlinks via D-Bus (#5565) | 2023-01-12 | |
| | | | |||
* | | | QMediathekView: add mkdir and reorder whitelist options | 2023-01-12 | |
| | | | | | | | | | As suggested in review. | ||
* | | | QMediathekView: hardening | 2023-01-11 | |
| |/ |/| | |||
* | | Merge pull request #5564 from glitsj16/claws-mail+sylpheed | 2023-01-04 | |
|\ \ | | | | | | | claws-mail and sylpheed D-Bus hardening | ||
| * | | sylpheed: allow opening hyperlinks via D-Bus | 2023-01-03 | |
| | | | |||
| * | | claws-mail: harden D-Bus | 2023-01-03 | |
| |/ | | | | | Relates to https://github.com/netblue30/firejail/issues/5477. | ||
* | | Merge pull request #5569 from glitsj16/electron-hardening | 2023-01-04 | |
|\ \ | | | | | | | electron hardening fixes | ||
| * | | Create electron-hardened.inc.profile | 2023-01-04 | |
| | | | |||
| * | | electron: change hardening comment | 2023-01-04 | |
| |/ | |||
* | | Merge pull request #5475 from KOLANICH-tools/aa_fix | 2023-01-04 | |
|\ \ | | | | | | | A temporary fix to the bug caused by apparmor profiles stacking. | ||
| * | | A temporary fix to the bug caused by apparmor profiles stacking. | 2022-11-15 | |
| | | | |||
* | | | Merge pull request #5556 from Dpeta/chatterino-profile | 2023-01-04 | |
|\ \ \ | | | | | | | | | Add profile for Chatterino | ||
| * | | | Apply code review suggestions to chatterino.profile | 2022-12-25 | |
| | | | | | | | | | | | | | | | | | | | | | | | | - Remove waf from private-bin - Move optional commands to the top - Reorder allow lua/python | ||
| * | | | Apply suggestions from code review | 2022-12-25 | |
| | | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com> | ||
| * | | | Remove unnecessary mkdir | 2022-12-25 | |
| | | | | |||
| * | | | Fix music/pictures whitelist path in chatterino.profile | 2022-12-25 | |
| | | | | |||
| * | | | Apply the other code review suggestions to chatterino.profile | 2022-12-25 | |
| | | | | |||
| * | | | Apply commitable suggestions from code review | 2022-12-25 | |
| | | | | | | | | | | | | | | | | | | | | I'll try the rest manually soon Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> | ||
| * | | | Add Chatterino profile | 2022-12-25 | |
| | | | | |||
* | | | | Merge pull request #5553 from slowpeek/master | 2023-01-04 | |
|\ \ \ \ | | | | | | | | | | | Blacklist google-drive-ocamlfuse config | ||
| * | | | | Blacklist XDG cache and data dirs for google-drive-ocamlfuse | 2022-12-23 | |
| | | | | | |||
| * | | | | Blacklist google-drive-ocamlfuse config | 2022-12-23 | |
| |/ / / | |||
* | | / | ytmdesktop: fix typo (#5567) | 2023-01-04 | |
| |_|/ |/| | |