aboutsummaryrefslogtreecommitdiffstats
path: root/src/firejail/profile.c
Commit message (Collapse)AuthorAge
* add HAS_NODBUS conditional, ${RUNUSER} makroLibravatar smitsohu2018-12-07
|
* profile parser testingLibravatar netblue302018-11-08
|
* Add new config option to disable U2F in browsers, enabled by defaultLibravatar Tad2018-11-05
|
* Allow include to search userdir then systemdir for "bare" profile file names.Libravatar Glenn Washburn2018-10-17
|
* Add support for rudimentary conditionals in profiles, currently only the ↵Libravatar Glenn Washburn2018-10-16
| | | | HAS_APPIMAGE conditional is supported.
* Allow specifying a profile "name" with the profile option (eg. ↵Libravatar Glenn Washburn2018-10-15
| | | | --profile=firefox).
* rename expand_home -> expand_macros to better reflect usage and remove ↵Libravatar Glenn Washburn2018-10-15
| | | | unneeded homedir argument.
* add switch to disable/enable private-cacheLibravatar smitsohu2018-09-10
|
* cleanupLibravatar netblue302018-08-28
|
* removed --disable-bind configuration option; some ohter minor cleanupLibravatar startx20172018-08-22
|
* clear all warnings from cppcheck static code analysisLibravatar smitsohu2018-08-11
| | | | obtained with: cppcheck --enable=warning --force --inconclusive --quiet ~/firejail/src
* --ignore cleanupLibravatar startx20172018-08-04
|
* removed compile time --enable-network=restricted, --net=none allowed even if ↵Libravatar startx20172018-07-26
| | | | networking was disabled at compile time or at run time, fixed issue #2061
* rework --netmaskLibravatar netblue302018-07-17
|
* --netmask optionLibravatar netblue302018-07-06
|
* Revert "mounting a tmpfs on ~/.cache directory (private-cache) by default"Libravatar Tad2018-06-14
| | | | This reverts commit caa7ad8714206a158123773ddcaca6ef219a5501.
* Add --keep-dev-shm (undocumented for now).Libravatar Chiraag Nataraj2018-06-13
|
* Change --nousb to --nou2f per suggestion on last commit.Libravatar Chiraag Nataraj2018-06-12
|
* Add --nousb optionLibravatar Chiraag Nataraj2018-06-12
|
* mounting a tmpfs on ~/.cache directory (private-cache) by defaultLibravatar netblue302018-06-12
|
* add private-cache optionLibravatar smitsohu2018-06-04
| | | | implementation is based on an idea of James Henstridge, Canonical
* Add --keep-var-tmp and associated profile optionLibravatar Chiraag Nataraj2018-05-01
|
* cleanupLibravatar netblue302018-04-20
|
* add --noautopulse arg for complex pulse setupsLibravatar Melvin Vermeeren2018-04-01
| | | | such as remote pulse servers or non-standard socket paths
* --nodbus, first draft for #1825Libravatar startx20172018-03-26
|
* split run files processing in a separate file - src/firejail/run_files.cLibravatar startx20172018-03-17
|
* overlay fixes and additional hardeningLibravatar netblue302018-01-31
|
* add check for ipv6 address syntaxLibravatar netblue302018-01-16
|
* added support for IPv6 DNS configuration - #1722Libravatar netblue302018-01-16
|
* move copyright statement to 2018Libravatar startx20172018-01-14
|
* redirect output messages to stderrLibravatar startx20172017-12-14
|
* strip trailing whitespaceLibravatar Fred-Barclay2017-11-19
|
* fix --ignore=quietLibravatar netblue302017-10-30
|
* modif: remount-proc-sys deprecated from firejail.configLibravatar netblue302017-10-27
|
* --timeout, fix #1614Libravatar netblue302017-10-25
|
* implemented --rlimit-cpu - set max CPU time for processes running in the ↵Libravatar startx20172017-10-24
| | | | sandbox; for issue #1614, more to come...
* allow blacklists noexec etc. in private home directories; fix bug #1608Libravatar netblue302017-10-20
|
* Merge pull request #1604 from gosre/masterLibravatar startx20172017-10-15
|\ | | | | Addition of RLIMIT_AS
| * RLIMIT_ASLibravatar Clayton Williams2017-10-13
| |
* | enhanced globbing for --blacklistLibravatar startx20172017-10-13
|/
* --writable-run-user, solving ssh/gnupg authentication problems for smarcardsLibravatar netblue302017-09-14
|
* --profile.print optionLibravatar netblue302017-09-02
|
* Feature: switch/config option to block secondary architecturesLibravatar Topi Miettinen2017-08-19
| | | | | | | | | Add a feature for a new (opt-in) command line switch and config file option to block secondary architectures entirely. Also block changing Linux execution domain with personality() system call for the primary architecture. Closes #1479
* added --nodvdLibravatar netblue302017-08-12
|
* --notv for #1446Libravatar startx20172017-08-10
|
* private-lib: support for /etc/firejail/firejail.configLibravatar netblue302017-08-04
|
* Fixes for the private-lib and memory-deny-write-execute featuresLibravatar Topi Miettinen2017-07-30
|
* Memory-deny-write-execute featureLibravatar Topi Miettinen2017-07-30
| | | | Feature to block attempts to create writable and executable memory.
* Private /lib featureLibravatar Topi Miettinen2017-07-30
|
* support for Xephyr screen sizeLibravatar netblue302017-07-19
|