summaryrefslogtreecommitdiffstats
path: root/src/firejail
Commit message (Collapse)AuthorAge
* fix previous mergeLibravatar netblue302019-08-29
|
* Merge branch 'master' into seccomp-allow-exceptionsLibravatar netblue302019-08-29
|\
| * seccomp fix: allow numeric syscallsLibravatar aoand2019-08-26
| | | | | | | | as per man page, numeric syscall is indicated by the dollar sign '$'
* | Allow exceptions to seccomp listsLibravatar Topi Miettinen2019-08-25
|/ | | | | | | Prefix ! can be used to make exceptions to system call blacklists and whitelists used by seccomp, seccomp.drop and seccomp.keep. Closes #1366
* rewrite/partial revert of 8bff773d6a7bf70c97b3d5b751df9ec0dd6c8b5dLibravatar smitsohu2019-08-09
| | | | | | | the commit in question introduced an early check of Firejail configuration file, which broke "firejail in firejail" for some sandboxes. see issue #2877
* integrate private home options with nosound and x11 noneLibravatar smitsohu2019-08-07
| | | | fixes #2867
* private home: don't create unused temporary filesLibravatar smitsohu2019-08-07
|
* tune pam-tmpdir file permissionsLibravatar smitsohu2019-08-01
|
* fix private-tmp/pam-tmpdir interaction - #2685Libravatar smitsohu2019-07-27
|
* fix whitelisting for homedirs outside /homeLibravatar smitsohu2019-07-25
|
* fix verbosity for non-authorized userLibravatar smitsohu2019-07-22
| | | | | | users not in firejail.users should only see the error, not the symlink warning. Also exposes less code to non- authorized users.
* check for dir existence before private-* mountLibravatar smitsohu2019-07-16
| | | fixes #2859
* profile support for allow-debuggers (#2856)Libravatar Sebastian Hafner2019-07-15
|
* homedirs: turn "informational error" into warningLibravatar smitsohu2019-07-14
|
* don't allow root directory as homeLibravatar smitsohu2019-07-14
|
* uniformly mask /home in all private home optionsLibravatar smitsohu2019-07-12
|
* private-home: remove redundancyLibravatar smitsohu2019-07-12
|
* rename some variables so they don't shadow others with same nameLibravatar Reiner Herrmann2019-07-11
| | | | via lgtm.com
* Merge pull request #2843 from crass/fix-2842-extra-appimage-envvarsLibravatar netblue302019-07-09
|\ | | | | Add OWD and ARGV0 environment variables. Correctly create APPIMAGE envvar.
| * Add OWD and ARGV0 environment variables. Correctly create APPIMAGE envvar.Libravatar Glenn Washburn2019-07-09
| |
* | main.c: define O_PATH (CentOS 6 fix)Libravatar smitsohu2019-07-09
| |
* | move to fd based homedir mountsLibravatar smitsohu2019-07-09
| |
* | add symlink resolution for home directoriesLibravatar smitsohu2019-07-09
|/
* more simplification of fs_check_chroot_dirLibravatar smitsohu2019-07-08
|
* reduce redundancy in fs_check_chroot_dirLibravatar smitsohu2019-07-08
|
* misc cleanup (safe_fd function)Libravatar smitsohu2019-07-07
|
* relocate mountinfo functionality testLibravatar smitsohu2019-07-07
|
* Use __clone2 on ia64Libravatar Reiner Herrmann2019-07-07
| | | | | clone has a different interfaces there, as the stack size needs to be known.
* fix --timeoutLibravatar netblue302019-07-04
|
* fix #2820 - adjustable file copy limit; export FIREJAIL_DEBUG into sboxLibravatar netblue302019-07-04
|
* Fixup b1aff3395c77da467b7ba5e8fb8dabc33c37f8c6Libravatar Tad2019-06-30
| | | | https://github.com/netblue30/firejail/commit/b1aff3395c77da467b7ba5e8fb8dabc33c37f8c6#commitcomment-34131283
* Add Fedora install instructionsLibravatar Fred Barclay2019-06-29
|
* typoLibravatar Fred Barclay2019-06-29
|
* free variable in error caseLibravatar Reiner Herrmann2019-06-29
|
* use strcat instead of strncat as using strlen has no benefitLibravatar Reiner Herrmann2019-06-29
| | | | Fixes #2801
* fix option skipping caused by noblacklistLibravatar smitsohu2019-06-29
| | | | closes #1235
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2019-06-28
|\
| * whitespace fixLibravatar rusty-snake2019-06-26
| |
| * Silence xauth output in src/firejail/x11.c (#2796)Libravatar glitsj162019-06-26
| | | | | | | | | | | | | | | | | | | | * Fix typo's and install instructions for Arch * Try to silence xauth output Fixes https://github.com/netblue30/firejail/issues/2787. * Conditionally silence xauth output in x11 options
| * disable firetunnel at config time (#2793)Libravatar netblue302019-06-24
| |
* | simplify octal esc conversion, minor adjustmentsLibravatar smitsohu2019-06-26
|/
* enable additional cppchecks and fix a warningLibravatar Reiner Herrmann2019-06-21
|
* Merge pull request #2771 from smitsohu/homedir2Libravatar netblue302019-06-20
|\ | | | | mount new proc filesystem earlier
| * avoid running without procfs describing the pid namespaceLibravatar smitsohu2019-06-14
| |
* | fix logical OR in disable_fileLibravatar smitsohu2019-06-18
| |
* | no postmount checks when building basic filesystemLibravatar smitsohu2019-06-17
| | | | | | | | fixes #2782
* | cleanupLibravatar smitsohu2019-06-17
| |
* | streamline remounting (ro,rw,noexec)Libravatar smitsohu2019-06-17
|/
* Grammar fixLibravatar Reiner Herrmann2019-05-29
| | | | (found by lintian)
* small private-cwd adjustmentsLibravatar smitsohu2019-05-24
|