aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
...
| * | A temporary fix to the bug caused by apparmor profiles stacking.Libravatar KOLANICH2022-11-15
| | |
* | | Merge pull request #5556 from Dpeta/chatterino-profileLibravatar netblue302023-01-04
|\ \ \ | | | | | | | | Add profile for Chatterino
| * | | Apply code review suggestions to chatterino.profileLibravatar Dpeta2022-12-25
| | | | | | | | | | | | | | | | | | | | | | | | - Remove waf from private-bin - Move optional commands to the top - Reorder allow lua/python
| * | | Apply suggestions from code reviewLibravatar Dpeta2022-12-25
| | | | | | | | | | | | Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
| * | | Remove unnecessary mkdirLibravatar Dpeta2022-12-25
| | | |
| * | | Fix music/pictures whitelist path in chatterino.profileLibravatar Dpeta2022-12-25
| | | |
| * | | Apply the other code review suggestions to chatterino.profileLibravatar Dpeta2022-12-25
| | | |
| * | | Apply commitable suggestions from code review Libravatar Dpeta2022-12-25
| | | | | | | | | | | | | | | | | | | | I'll try the rest manually soon Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | Add Chatterino profileLibravatar Dpeta2022-12-25
| | | |
* | | | Merge pull request #5553 from slowpeek/masterLibravatar netblue302023-01-04
|\ \ \ \ | | | | | | | | | | Blacklist google-drive-ocamlfuse config
| * | | | Blacklist XDG cache and data dirs for google-drive-ocamlfuseLibravatar slowpeek2022-12-23
| | | | |
| * | | | Blacklist google-drive-ocamlfuse configLibravatar slowpeek2022-12-23
| |/ / /
* | | / ytmdesktop: fix typo (#5567)Libravatar glitsj162023-01-04
| |_|/ |/| |
* | | Merge pull request #5554 from Dpeta/dbus-wiki-link-fixLibravatar smitsohu2022-12-27
|\ \ \ | | | | | | | | Update DBus wiki link
| * | | Update DBus wiki linkLibravatar Dpeta2022-12-23
| |/ /
* / / window manager profiles: fix browser/electron internal sandboxesLibravatar smitsohu2022-12-25
|/ /
* | gpg: fix private-bin (#5550)Libravatar glitsj162022-12-21
| |
* | gpg-agent: sort private-bin (even though it's commented) (#5549)Libravatar glitsj162022-12-21
| | | | | | | | | | * gpg-agent: sort private-bin (even though it's commented) * gpg-agent: fix private-bin
* | clarify that duplicated blacklisting of /proc/config.gz is intentional (#5548)Libravatar glitsj162022-12-21
| | | | | | | | | | | | | | * add comment on intentional duplication of blacklisted kernel configuration * disable-proc.inc: update the duplication comment * disable-common.inc: add duplication notice for kernel configuration
* | New profile: ssmtp (#5544)Libravatar glitsj162022-12-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * disable-programs.inc: add ssmtp support * Create ssmtp.profile * ssmtp: support Debian/Ubuntu * README.md: add ssmtp to 'New profiles' section * disable-common.inc: move ssmtp support to keep CI happy * ssmtp: improve dead.letter comment Suggested in [review](https://github.com/netblue30/firejail/pull/5544#pullrequestreview-1225322546).
* | spectre-meltdown-checker: fixes (#5546)Libravatar glitsj162022-12-21
| |
* | seahorse refactoring (#5543)Libravatar glitsj162022-12-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * seahorse: fixes and hardening * seahorse-daemon: hardening * seahorse-tool: move private-etc items to seahorse * seahorse: unbreak nautilus file encryption As suggested [in review](https://github.com/netblue30/firejail/pull/5543#pullrequestreview-1225250520). * seahorse-tool: move private-tmp to seahorse * seahorse: add private-tmp * seahorse: fix access to ssh-agent socket
* | Fix mDNS name resolution with wrc (#5541)Libravatar rusty-snake2022-12-21
| |
* | audacity: networking updates (#5540)Libravatar glitsj162022-12-20
| | | | | | | | | | | | | | | | | | * audacity: networking updates * audacity: fix allowing to run local server * audacity: move comment so it's more visible As suggested [in review](https://github.com/netblue30/firejail/pull/5540#pullrequestreview-1225225897).
* | disable-common.inc: add gnome-console to disabled terminals (#5542)Libravatar glitsj162022-12-20
| |
* | Rename xlinks2 to xlinks2.profileLibravatar rusty-snake2022-12-20
| |
* | audacity: support more config locations (#5538)Libravatar glitsj162022-12-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * audacity: support more config locations * disable-programs.inc: add more audacity locations * audacity: cover all XDG supported locations * audacity: cover all XDG supported locations * audacity: fix state dir entree in disable-programs.inc * unbreak disable-programs.inc Oh my, GitHub syntax highlighting support completely threw me off here. Thanks to @kmk3 for [saving the bacon](https://github.com/netblue30/firejail/pull/5538#pullrequestreview-1224604663)!
* | add restrict-namespaces to (almost) all profilesLibravatar smitsohu2022-12-20
| |
* | Rename cinelerra-gg to cinelerra-gg.profileLibravatar glitsj162022-12-19
| |
* | Merge pull request #5522 from hknaack/avidemux-fixes-for-opensuseLibravatar netblue302022-12-14
|\ \ | | | | | | Avidemux tools support
| * | Add profile for avidemux3_jobs_qt5Libravatar Hartmut Knaack2022-12-13
| | | | | | | | | | | | | | | | | | | | | | | | Add a profile for the Qt5 GUI to process Avidemux jobs. Use a redirection to the avidemux3_qt5 profile to reuse translation files. The application needs to create a network socket on localhost and fails to run with protocol unix, so that entry in the default avidemux profile needs to be extended.
| * | Add profile for avidemux3_cliLibravatar Hartmut Knaack2022-12-12
| | | | | | | | | | | | | | | Add a profile for the command-line interface of Avidemux, which redirects to the existing avidemux profile.
| * | Avidemux: openSUSE-Packman fixesLibravatar Hartmut Knaack2022-12-12
| | | | | | | | | | | | | | | | | | The Avidemux project stores configuration profile data in ~/.avidemux6, while the package built by Packman-repositories for openSUSE patches it to use ~/.avidemux3 at the moment (at least for Avidemux 2.8).
| * | Add profile for avidemux3_qt5Libravatar Hartmut Knaack2022-12-12
| | | | | | | | | | | | Add a profile for the Qt5-GUI of Avidemux.
| * | Avidemux: add information from template profileLibravatar Hartmut Knaack2022-12-12
| | | | | | | | | | | | Add the information that file contents will be overwritten on updates.
* | | Add support for Qt6 (#5527)Libravatar glitsj162022-12-14
| | | | | | | | | | | | | | | * qbittorrent: add support for Qt6 * wusc: add support for Qt6
* | | Fix whitelisting for wusc (#5526)Libravatar glitsj162022-12-14
|/ / | | | | Overlooked [this comment](https://github.com/netblue30/firejail/pull/5389#discussion_r992471940) that pointed out a mistake I made.
* | clipit hardening (#5521)Libravatar glitsj162022-12-12
| | | | | | | | | | | | | | * clipit hardening * clipit: fix hardening * clipit: add xdotool lib to private-lib
* | private-etc: always reference 'alternatives' (#5517)Libravatar glitsj162022-12-09
| | | | | | | | | | | | | | | | | | * private-etc: always include 'alternatives' * private-etc: always include 'alternatives' * private-etc: always include 'alternatives' * private-etc: always include 'alternatives'
* | New profile: tesseract (#5516)Libravatar glitsj162022-12-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add firecfg support for tesseract * Add tesseract to 'New profiles' section in README.md * Create tesseract.profile * tesseract: fix private-etc * tesseract: fix XDG black/whitelisting * tesseract: use 'seccomp socket' instead of 'protocol unix' As kindly suggested by @rusty-snake. * tesseract: add 'restrict-namespaces' As kindly suggested by @rusty-snake. * tesseract: use full seccomp filtering The tesseract application works fine without 'protocol' or 'seccomp socket'.
* | Merge pull request #5498 from kmk3/spotify-allow-adblockLibravatar Kelvin M. Klann2022-12-08
|\ \ | | | | | | spotify.profile: allow spotify-adblock paths
| * | spotify.profile: allow spotify-adblock pathsLibravatar Kelvin M. Klann2022-12-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As suggested by @glitsj16[1]. Project homepage: https://github.com/abba23/spotify-adblock Configuration paths: * /etc/spotify-adblock/config.toml * ~/.config/spotify-adblock/config.toml Fixes #5494. [1] https://github.com/netblue30/firejail/discussions/5494#discussioncomment-4280887 Reported-by: @Rewig95
* | | Merge pull request #5496 from kmk3/kcalc-fix-mkfileLibravatar Kelvin M. Klann2022-12-08
|\ \ \ | |/ / |/| | kcalc.profile: fix mkfile without mkdir & comment legacy paths
| * | kcalc.profile: stop creating legacy KDE pathsLibravatar Kelvin M. Klann2022-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Leave them commented. With this commit, there are no more profiles creating paths in ~/.kde nor in ~/.kde4: $ git grep -e '^mkdir .*\.kde' -e '^mkfile .*\.kde' -- etc $ See also commit 3ef030257 ("ktorrent.profile: stop creating legacy KDE paths", 2022-10-11) / PR #5415.
| * | kcalc.profile: fix mkfile without mkdirLibravatar Kelvin M. Klann2022-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | firejail may fail to create the following files: * ~/.kde/share/config/kcalcrc * ~/.kde4/share/config/kcalcrc Because it does not create the preceding directories beforehand: * ~/.kde/share/config * ~/.kde4/share/config See also commit 7f1906dba ("ktorrent.profile: fix mkfile without mkdir", 2022-10-11) / PR #5415.
* | | firefox-common-addons: fix whitelisting in ${RUNUSER} (#5497)Libravatar glitsj162022-12-01
| | | | | | | | | | | | | | | | | | | | | * fix whitelisting in ${RUNUSER} See discussions https://github.com/netblue30/firejail/discussions/5495 for context. * Prevent whitelisting ${RUNUSER} comment
* | | AppArmor: add more examples to firejail-local (#5493)Libravatar glitsj162022-12-01
|/ / | | | | | | | | * AppArmor: add more examples to firejail-local * comments fixes
* | [firefox-common.profile] Add DRM support when using psd (#5486)Libravatar glitsj162022-11-28
| |
* | Merge pull request #5415 from kmk3/ktorrent-fix-mkfileLibravatar netblue302022-11-25
|\ \ | | | | | | ktorrent.profile: fix mkfile without mkdir & comment legacy paths
| * | ktorrent.profile: add missing private-bin pathsLibravatar Kelvin M. Klann2022-11-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Package-provided binaries: $ pacman -Q ktorrent ktorrent 22.08.3-1.2 $ pacman -Qlq ktorrent | grep bin/. /usr/bin/ktmagnetdownloader /usr/bin/ktorrent /usr/bin/ktupnptest Environment: Artix Linux
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-19 10:06:42 +0000