aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* Added git-cola profile (#3560)Libravatar kortewegdevries2020-07-30
| | | | | | | | | | | * Added git-cola profile Initial * Edit private-etc Add alternatives,pki * Add disable-xdg
* Add vmware profile #3526Libravatar Neo000012020-07-30
|
* new profile: gnome-calendarLibravatar rusty-snake2020-07-30
|
* add profile for sushi (#3558)Libravatar rusty-snake2020-07-30
|
* Added lyx profile (#3556)Libravatar kortewegdevries2020-07-30
| | | | | | | | | * Added lyx profile Initial * Rmoved whitelists Make home directory more accessible
* Added minitube profile (#3555)Libravatar kortewegdevries2020-07-30
| | | | | | | | | * Added minitube profile Initial * Second Removed no3d,added novideo
* Added Nuclear profile (#3553)Libravatar kortewegdevries2020-07-30
| | | Initial
* Added mtpaint profile (#3550)Libravatar kortewegdevries2020-07-30
| | | | | | | | | * Added mtpaint profile Initial * Second Remove IPC-namespace,netfilter
* fix Lua in mpv.profileLibravatar glitsj162020-07-28
| | | Fixes for #3554.
* Added minecraft-launcher profile (#3538)Libravatar kortewegdevries2020-07-27
| | | | | | | | | | | | | | | * Added minecraft-launcher-profile Initial * Changed minecraft-launcher profile Added space,tracelog,nodvd * Third Fixed private-etc,added notes about path,java * Sorting
* fix ordering in xfce4-screenshooter.profileLibravatar glitsj162020-07-26
|
* Merge pull request #3547 from kortewegdevries/mtpaintLibravatar rusty-snake2020-07-26
|\ | | | | Added xfce4-screenshooter profile
| * Added xfce4-screenshooter profileLibravatar kortewegdevries2020-07-25
| | | | | | | | Initial,removed common blaclist,add netfilter,private-etc
* | fix #3551Libravatar rusty-snake2020-07-26
| |
* | fix typo in multicast CIDRLibravatar Emil Gedda2020-07-25
|/
* add newsflash profileLibravatar rusty-snake2020-07-25
|
* Update virtualbox.profile (#3537)Libravatar Neo000012020-07-24
| | | | | | | | | | | | | * Update virtualbox.profile * Update virtualbox.profile * Update virtualbox.profile * Update virtualbox.profile * Update virtualbox.profile * Update virtualbox.profile
* Filter seccompLibravatar kortewegdevries2020-07-24
| | | | Add chroot
* fix ordering in freetube.profileLibravatar glitsj162020-07-23
|
* fix ordering in cawbird.profileLibravatar glitsj162020-07-23
|
* Added freetube profile (#3535)Libravatar kortewegdevries2020-07-23
| | | | | | | | | | | * Added freetube profile Initial * Added freetube profile Second:drop ignore seccomp,add disable-shell See https://github.com/netblue30/firejail/pull/3535
* Added cawbird profile (#3533)Libravatar kortewegdevries2020-07-23
| | | | | | * Added cawbird profile See https://github.com/netblue30/firejail/pull/3533 Squash commits for merging
* Merge pull request #3518 from onovy/zoom-profileLibravatar rusty-snake2020-07-21
|\ | | | | Hardend Zoom profile
| * Hardend Zoom profileLibravatar Ondřej Nový2020-07-20
| |
* | Merge pull request #3520 from onovy/mattermost-profileLibravatar rusty-snake2020-07-21
|\ \ | | | | | | Add Mattermost desktop profile
| * | Add Mattermost desktop profileLibravatar Ondřej Nový2020-07-20
| |/
* | Update telegram.profile (#3529)Libravatar Neo000012020-07-21
| | | | | | | | | | | | | | * Update telegram.profile * Update telegram.profile * Update telegram.profile
* | New profile for homebank (#3525)Libravatar kortewegdevries2020-07-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add files via upload New profile for homebank * Update etc/profile-a-l/homebank.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Update etc/profile-a-l/homebank.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Update homebank.profile * Update firecfg.config homebank added * Update disable-programs.inc Added blacklist. * Update homebank.profile Added disable-shell,removed whitelisted docs * Update disable-programs.inc Changed sorting * Update homebank.profile Changed sorting * Added cawbird profile Initial * Revert "Added cawbird profile" This reverts commit 6b045976adf62a91882236600c55926af34b6a52. Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | fix #3404 (#3511)Libravatar rusty-snake2020-07-20
| | | | | | | | | | * fix #3404 * Update teams.profile
* | Update discord-common.profileLibravatar rusty-snake2020-07-20
| | | | | | | | | | fixes #3528 Are there any reasons why discord has no shell none?
* | fixupsLibravatar rusty-snake2020-07-19
| |
* | Fix gnome-pomodoroLibravatar rusty-snake2020-07-19
| |
* | Harden gnome-calculatorLibravatar rusty-snake2020-07-19
| |
* | Hardend Signal desktop profileLibravatar Ondřej Nový2020-07-17
|/
* add element-desktop redirect profile (#3517)Libravatar glitsj162020-07-16
| | | | | | | | | * Create element-desktop.profile * add element-desktop dirs to disable-programs.inc * add element-desktop to firecfg.config * Update RELNOTES
* fix #3501Libravatar rusty-snake2020-07-16
|
* Blacklist .local/share/kxmlgui5 and allow access only for applications which ↵Libravatar Kishore96in2020-07-16
| | | | | | | | | | | | | | | | | | | | use it. (#3493) * blacklist .local/share/kxmlgui5 KDE programs use this to store their toolbar config. * noblacklist .local/share/kxmlgui5 in the relevant KDE applications. * Whitelist kxmlgui file for okular. * Use a glob to blacklist subfolders instead of the parent folder. noblacklisting individual subdirectories works only if we do it this way (tested by launching bash in the kate profile). * Make directory, not file. * noblacklist relevant subdirs for more KDE applications
* fix keepassxcLibravatar rusty-snake2020-07-14
|
* hardening some profiles (#3505)Libravatar rusty-snake2020-07-09
| | | | | | | | | | | | | * hardening some profiles - harden and fix flameshot - wruc: frogatto, ghostwriter - harden gnome-latex - add whitelist opt-in note to keepassxc - add comment to minetest - harden openarena, tremulous, xonotic - add profile for xonotic-sdl-wrapper * followup
* Update disable-common.inc (#3499)Libravatar rusty-snake2020-07-09
| | | | | | | * Update disable-common.inc * Update disable-common.inc [skip ci]
* Okular profile fixes (#3489)Libravatar Kishore96in2020-07-07
| | | | | | | | | | | | | | | | | * Whitelist some config files used by Okular. These files are used to store the toolbar configurations. * Whitelist files required for okular in firefox-common-addons.inc Without this, okular does not follow the user configuration for toolbars and keyboard shortcuts when launched inside the firefox sandbox (for eg., while opening a downloaded PDF). * Alphabetical sort * Remove noblacklist for files which are not actually blacklisted. I have blacklisted them in a separate pull request.
* Fixed Blender profile being unable to import numpy (#3497)Libravatar neirenoir2020-07-06
| | | Co-authored-by: noir <noir@neire.dev>
* Whitelist /usr/share/hplip for simple-scan (#3496)Libravatar Carlo Abelli2020-07-05
| | | hplip is required for scanning using HP printer/scanners.
* typoLibravatar rusty-snake2020-07-05
|
* fix com.github.dahenson.agenda.profileLibravatar rusty-snake2020-07-05
|
* fixup! Don't blacklist file used to save konversation notifications ↵Libravatar rusty-snake2020-07-04
| | | | configuration. (#3490)
* Don't blacklist file used to save konversation notifications configuration. ↵Libravatar Kishore96in2020-07-04
| | | | | | (#3490) Without this, konversation doesn't remember the settings for notifications.
* drop private-tmp from blender.profileLibravatar glitsj162020-07-04
| | | Blender autosaves to /tmp.
* update comment for apparmor in thunderbird.profileLibravatar glitsj162020-07-04
| | | This should clarify how to configure for reading local mail after https://github.com/netblue30/firejail/commit/dfaf7a7660689c055ba45a935e42b1b548669c57.
* clarify writing to /var/mail and /var/spool/mail in apparmor (#3487)Libravatar glitsj162020-07-04
| | | | | | | * clarify writing to /var/mail and /var/spool/mail in apparmor Thunderbird seems to be our only mail client profile that enables the `apparmor` option. Users need this when they follow instructions on how to allow reading local mail. * fix mail clients rule in firejail-default