Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | fix previous merge | 2019-08-29 | |
| | |||
* | Merge branch 'master' into seccomp-allow-exceptions | 2019-08-29 | |
|\ | |||
| * | seccomp fix: allow numeric syscalls | 2019-08-26 | |
| | | | | | | | | as per man page, numeric syscall is indicated by the dollar sign '$' | ||
* | | Allow exceptions to seccomp lists | 2019-08-25 | |
|/ | | | | | | | Prefix ! can be used to make exceptions to system call blacklists and whitelists used by seccomp, seccomp.drop and seccomp.keep. Closes #1366 | ||
* | rewrite/partial revert of 8bff773d6a7bf70c97b3d5b751df9ec0dd6c8b5d | 2019-08-09 | |
| | | | | | | | the commit in question introduced an early check of Firejail configuration file, which broke "firejail in firejail" for some sandboxes. see issue #2877 | ||
* | integrate private home options with nosound and x11 none | 2019-08-07 | |
| | | | | fixes #2867 | ||
* | private home: don't create unused temporary files | 2019-08-07 | |
| | |||
* | tune pam-tmpdir file permissions | 2019-08-01 | |
| | |||
* | fix private-tmp/pam-tmpdir interaction - #2685 | 2019-07-27 | |
| | |||
* | fix whitelisting for homedirs outside /home | 2019-07-25 | |
| | |||
* | fix verbosity for non-authorized user | 2019-07-22 | |
| | | | | | | users not in firejail.users should only see the error, not the symlink warning. Also exposes less code to non- authorized users. | ||
* | check for dir existence before private-* mount | 2019-07-16 | |
| | | | fixes #2859 | ||
* | profile support for allow-debuggers (#2856) | 2019-07-15 | |
| | |||
* | homedirs: turn "informational error" into warning | 2019-07-14 | |
| | |||
* | don't allow root directory as home | 2019-07-14 | |
| | |||
* | uniformly mask /home in all private home options | 2019-07-12 | |
| | |||
* | private-home: remove redundancy | 2019-07-12 | |
| | |||
* | rename some variables so they don't shadow others with same name | 2019-07-11 | |
| | | | | via lgtm.com | ||
* | Merge pull request #2843 from crass/fix-2842-extra-appimage-envvars | 2019-07-09 | |
|\ | | | | | Add OWD and ARGV0 environment variables. Correctly create APPIMAGE envvar. | ||
| * | Add OWD and ARGV0 environment variables. Correctly create APPIMAGE envvar. | 2019-07-09 | |
| | | |||
* | | main.c: define O_PATH (CentOS 6 fix) | 2019-07-09 | |
| | | |||
* | | move to fd based homedir mounts | 2019-07-09 | |
| | | |||
* | | add symlink resolution for home directories | 2019-07-09 | |
|/ | |||
* | more simplification of fs_check_chroot_dir | 2019-07-08 | |
| | |||
* | reduce redundancy in fs_check_chroot_dir | 2019-07-08 | |
| | |||
* | misc cleanup (safe_fd function) | 2019-07-07 | |
| | |||
* | relocate mountinfo functionality test | 2019-07-07 | |
| | |||
* | Use __clone2 on ia64 | 2019-07-07 | |
| | | | | | clone has a different interfaces there, as the stack size needs to be known. | ||
* | fix --timeout | 2019-07-04 | |
| | |||
* | fix #2820 - adjustable file copy limit; export FIREJAIL_DEBUG into sbox | 2019-07-04 | |
| | |||
* | Fixup b1aff3395c77da467b7ba5e8fb8dabc33c37f8c6 | 2019-06-30 | |
| | | | | https://github.com/netblue30/firejail/commit/b1aff3395c77da467b7ba5e8fb8dabc33c37f8c6#commitcomment-34131283 | ||
* | Add Fedora install instructions | 2019-06-29 | |
| | |||
* | typo | 2019-06-29 | |
| | |||
* | free variable in error case | 2019-06-29 | |
| | |||
* | use strcat instead of strncat as using strlen has no benefit | 2019-06-29 | |
| | | | | Fixes #2801 | ||
* | fix option skipping caused by noblacklist | 2019-06-29 | |
| | | | | closes #1235 | ||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2019-06-28 | |
|\ | |||
| * | whitespace fix | 2019-06-26 | |
| | | |||
| * | Silence xauth output in src/firejail/x11.c (#2796) | 2019-06-26 | |
| | | | | | | | | | | | | | | | | | | | | * Fix typo's and install instructions for Arch * Try to silence xauth output Fixes https://github.com/netblue30/firejail/issues/2787. * Conditionally silence xauth output in x11 options | ||
| * | disable firetunnel at config time (#2793) | 2019-06-24 | |
| | | |||
* | | simplify octal esc conversion, minor adjustments | 2019-06-26 | |
|/ | |||
* | enable additional cppchecks and fix a warning | 2019-06-21 | |
| | |||
* | Merge pull request #2771 from smitsohu/homedir2 | 2019-06-20 | |
|\ | | | | | mount new proc filesystem earlier | ||
| * | avoid running without procfs describing the pid namespace | 2019-06-14 | |
| | | |||
* | | fix logical OR in disable_file | 2019-06-18 | |
| | | |||
* | | no postmount checks when building basic filesystem | 2019-06-17 | |
| | | | | | | | | fixes #2782 | ||
* | | cleanup | 2019-06-17 | |
| | | |||
* | | streamline remounting (ro,rw,noexec) | 2019-06-17 | |
|/ | |||
* | Grammar fix | 2019-05-29 | |
| | | | | (found by lintian) | ||
* | small private-cwd adjustments | 2019-05-24 | |
| |