firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	seccomp: allow defining separate filters for 32-bit arch	Topi Miettinen	2020-03-28
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	System calls (names and numbers) are not exactly the same for 32 bit and 64 bit architectures. Let's allow defining separate filters for 32-bit arch using seccomp.32, seccomp.32.drop, seccomp.32.keep. This is useful for mixed 64/32 bit application environments like Steam and Wine. Implement protocol and mdwx filtering also for 32 bit arch. It's still better to block secondary archs completely if not needed. Lists of supported system calls are also updated. Warn if preload libraries would be needed due to trace, tracelog or postexecseccomp (seccomp.drop=execve etc), because a 32-bit dynamic linker does not understand the 64 bit preload libraries. Closes #3267. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
*	Remove trailing whitespace from src/	Fred Barclay	2017-05-24
\|
*	fix firejail bash completion	netblue30	2017-04-03
\|
*	--nowhitelist	netblue30	2017-03-09
\|
*	bash completion for --hosts-file	netblue30	2017-01-22
\|
*	--read-write rework	netblue30	2016-07-19
\|
*	audit feature: bash completion	netblue30	2016-07-05
\|
*	added firecfg utility	netblue30	2016-03-25
\|
*	added webserver.net and nolocal.net network filters	netblue30	2015-11-20
\|
*	implemented --whitelist option	netblue30	2015-09-07
\|
*	moved bash completion files under src	netblue30	2015-08-18