aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* fixup! add missing blacklist pathsLibravatar rusty-snake2019-09-28
|
* Fix sorting (caught by GitLab CI tests)Libravatar Fred Barclay2019-09-28
|
* fix ffprobeLibravatar rusty-snake2019-09-28
| | | | | | | | | | | $ firejail ffprobe VIDEO execvp: No such file or directory $ firejail --noprofile --private-bin=ffprobe ffprobe VIDEO execvp: No such file or directory $ firejail --ignore=private-bin ffprobe VIDEO Works ffprobe is the only file in PATH that is touched (see --build).
* add missing blacklist pathsLibravatar rusty-snake2019-09-28
|
* KeePassXC: Added a warning regarding tray iconLibravatar Timo Hardebusch2019-09-28
|
* profiles: fix audio playback with ffplayLibravatar Reiner Herrmann2019-09-28
| | | | https://bugs.debian.org/941241
* protect files that can execute commandsLibravatar rusty-snake2019-09-22
|
* Inkscape: allow xcf exportLibravatar rusty-snake2019-09-22
| | | close #2967
* add allow-debuggers to steam.profile (#2971)Libravatar corecontingency2019-09-21
|
* readd .config/dconf to whitelist-common because …Libravatar rusty-snake2019-09-21
| | | | … it breaks feedreader and potential also other programs
* Create pngquant.profileLibravatar rusty-snake2019-09-21
|
* Create gnome-latex.profileLibravatar rusty-snake2019-09-20
|
* apparmor: permit writing to trace fileLibravatar smitsohu2019-09-18
|
* Add allow-perl.inc to w3m.profile (#2965)Libravatar Ethan R2019-09-16
| | | | | | * Removed disable-interpreters.inc from w3m.profile * disable-interpreters + allow-perl
* Fix #2899Libravatar rusty-snake2019-09-15
|
* typos [skip ci]Libravatar rusty-snake2019-09-14
|
* "Net None" Option Breaks Functionality (#2962)Libravatar Barış Ekin Yıldırım2019-09-14
| | | Netfilter is fine but "net none" option breaks functionality of marketplace.
* Fix #2945 (Signal 1.27 Fails to Start)Libravatar rusty-snake2019-09-13
|
* Update SkypeForLinux profile for latest version (#2960)Libravatar Denys Havrysh2019-09-13
| | | Fixes #2933
* Add ar profile (#2949)Libravatar glitsj162019-09-08
| | | | | | * Add ar to firecfg * Create ar.profile
* Fix private-bin in tar.profileLibravatar glitsj162019-09-06
| | | Fixes #2942.
* Fix gnome-scheduleLibravatar glitsj162019-09-06
| | | This fixes #2941.
* Update syscalls.txtLibravatar rusty-snake2019-09-05
|
* remove ~/.config/dconf from whitelist-common.incLibravatar rusty-snake2019-09-05
| | | | | - dconf database is read-only (fde6e04b) and accessed over dbus, there are no reasons to keep it in the sandbox
* explain removal of nodbus in qpdfview.profileLibravatar smitsohu2019-09-05
| | | see previous commit, #2879
* Merge pull request #2879 from Edu4rdSHL/patch-1Libravatar smitsohu2019-09-05
|\ | | | | qpdfview: Fix issue when opening a file from file manager
| * Fix issue when opening a file from file managerLibravatar Eduard Tolosa2019-07-29
| | | | | | I can confirm https://github.com/netblue30/firejail/pull/2837#issuecomment-511334363 when opening a file from `pcmanfm`, it doesn't open if qpdfview contains `nodbus`
* | fixup! Use new seccomp syntax from #2926 in more profilesLibravatar rusty-snake2019-08-30
| |
* | fix #2669Libravatar rusty-snake2019-08-30
| |
* | Use new seccomp syntax (#2926) in more profilesLibravatar rusty-snake2019-08-30
| | | | | | | | | | | | | | | | | | | | Rules for redirecting profiles: - add exceptions: just add 'seccomp !SYSCALL' - remove exception: ``` seccomp ignore seccomp ```
* | Use new seccomp syntax from #2926 in more profilesLibravatar rusty-snake2019-08-30
| |
* | Use new seccomp syntax from #2926Libravatar rusty-snake2019-08-30
| |
* | Fix private-bin order in ghostwriter.profileLibravatar glitsj162019-08-26
| |
* | Fix order of private-cache in mpsyt.profileLibravatar glitsj162019-08-26
| |
* | Fic private-etc ordering for gnome-scheduleLibravatar glitsj162019-08-26
| |
* | many profile fixes (1)Libravatar rusty-snake2019-08-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - add novideo to a lot of profiles (there are still more profiles where novideo can be added) - remove commente mdwe from some gnome applications - add descriptions to some profiles - blacklist ${HOME}/.cargo/credentials - move ${HOME}/.git-credentials and ${HOME}/.git-credential-cache to 'top secret' in disable-common.inc - some ordering in disable-programs.inc - merge tor browser blacklists to ${HOME}/.tor-browser* - qupzilla.profile redirect to falkon.profile - blacklist gnome-builder paths - fix transmission profiles inlude - much more
* | harden strings profileLibravatar smitsohu2019-08-25
| |
* | Merge pull request #2921 from rusty-snake/allow-common-devel.incLibravatar rusty-snake2019-08-22
|\ \ | | | | | | Introduce allow-common-devel.inc
| * | add allow-common-devel to more profilesLibravatar rusty-snake2019-08-22
| | |
| * | Introduce allow-common-devel.incLibravatar rusty-snake2019-08-22
| | |
* | | update syscalls.txtLibravatar rusty-snake2019-08-22
| | |
* | | various fixes and improvementsLibravatar rusty-snake2019-08-22
|/ / | | | | | | | | | | | | | | | | | | | | | | - install contrib/syscalls.sh - add GitLab-CI status to README.md - read-only ${HOME}/.cargo/env - move blacklist ${HOME}/.cargo/registry, ${HOME}/.cargo/config to disable-programs - typo in man firejail firejail-profiles firecfg - better descriptions in man firejail-profiles - fixes in man firejail - template descriptions in firejail-profiles
* | Enable private-bin in transmission-daemonLibravatar glitsj162019-08-21
| |
* | Enable private-bin in transmission-cliLibravatar glitsj162019-08-21
| |
* | Fix private-etc order in i2prouterLibravatar glitsj162019-08-21
| |
* | Fix teamspeak3Libravatar glitsj162019-08-21
| | | | | | Fixes #2901.
* | Merge pull request #2919 from corecontingency/masterLibravatar rusty-snake2019-08-21
|\ \ | | | | | | Profiles: add I2P
| * | Applied further suggestions from code reviewLibravatar core_contingency2019-08-21
| | |
| * | Apply suggestions from code review Libravatar corecontingency2019-08-21
| | | | | | | | | | | | | | | Changed to default seccomp Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com>
| * | profiles: add i2pLibravatar core_contingency2019-08-21
| | |