Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add ./configure --enable-force-nonewprivs | rusty-snake | 2021-03-01 |
| | | | | This will always set 'nonewprivs', 'caps.drop all' and 'nogroups'. | ||
* | compile time: enable LTS | startx2017 | 2021-02-28 |
| | |||
* | compile time: disable --output | startx2017 | 2021-02-28 |
| | |||
* | compile time option to disable --private-cache and --tmpfs for regular user | netblue30 | 2020-10-27 |
| | |||
* | build: add -fPIE to LDFLAGS | Reiner Herrmann | 2020-10-08 |
| | | | | | | | according to GCC documentation (https://gcc.gnu.org/onlinedocs/gcc/Link-Options.html): "For predictable results, you must also specify the same set of options used for compilation (-fpie, -fPIE, or model suboptions) when you specify this linker option." | ||
* | build: remove -pie from CFLAGS, as it is a linker option | Reiner Herrmann | 2020-10-01 |
| | | | | building with clang printed a warning | ||
* | disable dbus proxy at compile time (default enabled) - part 1 | netblue30 | 2020-09-09 |
| | |||
* | preprocessor for man pages | startx2017 | 2020-09-01 |
| | |||
* | removed --disable-seccomp from ./configure | startx2017 | 2020-09-01 |
| | |||
* | Preserve CFLAGS given to configure in common.mk.in | Lior Stern | 2020-03-31 |
| | |||
* | Add support for SELinux labeling | Topi Miettinen | 2020-02-22 |
| | | | | | | | | | | | | | | | | | | | | | | | Running `firejail --noprofile --private-bin=bash,ls ls -1Za /usr/bin` shows that the SELinux labels are not correct: ``` user_u:object_r:user_tmpfs_t:s0 . system_u:object_r:usr_t:s0 .. user_u:object_r:user_tmpfs_t:s0 bash user_u:object_r:user_tmpfs_t:s0 ls ``` After fixing this: ``` system_u:object_r:bin_t:s0 . system_u:object_r:usr_t:s0 .. system_u:object_r:shell_exec_t:s0 bash system_u:object_r:bin_t:s0 ls ``` Most copied files and created directories should now have correct labels (bind mounted objects keep their labels). This is useful to avoid having to change the SELinux rules when using Firejail. | ||
* | Profile builder helper should use correct firejail binary path. | Glenn Washburn | 2019-08-29 |
| | |||
* | fix make scan-build for debian 10 and arch | netblue30 | 2019-07-22 |
| | |||
* | disable firetunnel at config time (#2793) | netblue30 | 2019-06-24 |
| | |||
* | Housekeeping | Fred-Barclay | 2019-02-17 |
| | | | | | Make sure all files end with a newline Strip extra newlines and trailing whitespace from files | ||
* | removed --disable-bind configuration option; some ohter minor cleanup | startx2017 | 2018-08-22 |
| | |||
* | deprecated --git-install and --git-uninstall | netblue30 | 2018-04-04 |
| | |||
* | consolidate makefiles | netblue30 | 2018-03-31 |