Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | clean /run/user directory | 2018-10-07 | |
| | |||
* | Merge pull request #2141 from crass/fix-appimage-hdr-calc | 2018-10-06 | |
|\ | | | | | Update appimage size calculation to newest code from libappimage. | ||
| * | Update appimage size calculation to newest code from libappimage. | 2018-10-05 | |
| | | |||
* | | Merge pull request #2130 from crass/fix-2045 | 2018-10-04 | |
|\ \ | | | | | | | FIX-2045: Fix command name parsing for program paths with spaces. | ||
| * | | Fix command name parsing so that program paths with spaces do not cause the ↵ | 2018-10-01 | |
| |/ | | | | | | | wrong or no profile to be detected. | ||
* / | incomplete fix: whitelisting of symlinks to other home dirs | 2018-10-02 | |
|/ | | | | | | | | | belongs to previous commit 51eeef2059f00de117472046601e10a9fd958d51 short summary of the new behavior, which should catch a few corner cases better: - a non-existant file in another homedir (say homedirs are "/foo/user" and "/foo/user2") is silently ignored (previously a tmpfs was mounted on the users homedir, which was wrong) - a symlink pointing to an existing file in another homedir now works (but the link will be always dangling; you need --allusers to see this) - a symlink pointing back to the entire homedir now works as expected | ||
* | mount empty home if macro can't be whitelisted | 2018-10-01 | |
| | |||
* | fs_whitelist: reduce number of loop iterations | 2018-10-01 | |
| | |||
* | tiny memleaks | 2018-10-01 | |
| | |||
* | regression: fix whitelisting of symlinks to other home dirs, small improvements | 2018-10-01 | |
| | | | | | | | | handling of home dir paths is more explicit and rigorous now, which should make it easier to audit. Also this should come handy if one day fs_private() supports home directories outside /home rf. #2123 | ||
* | cleanup | 2018-09-30 | |
| | |||
* | 0.9.56 released0.9.56 | 2018-09-18 | |
| | |||
* | error strings | 2018-09-17 | |
| | |||
* | fix --bandwidth, --cpu.print | 2018-09-15 | |
| | |||
* | exit if execl fails (arg_audit) | 2018-09-11 | |
| | |||
* | add switch to disable/enable private-cache | 2018-09-10 | |
| | |||
* | small rlimits adjustment | 2018-09-10 | |
| | |||
* | Merge branch 'master' of http://github.com/netblue30/firejail | 2018-09-09 | |
|\ | |||
| * | set rlimits at later timepoint during sandbox setup | 2018-09-09 | |
| | | |||
* | | support for firetunnel utility | 2018-09-09 | |
|/ | |||
* | disallow overriding of global rlimits, tiny improvements | 2018-09-06 | |
| | |||
* | cleanup | 2018-09-05 | |
| | |||
* | improve safe_fd() function for better readability and auditability | 2018-09-05 | |
| | |||
* | fix --shell | 2018-09-03 | |
| | |||
* | minor cleanup | 2018-09-03 | |
| | |||
* | chroot problem (Debian) | 2018-09-03 | |
| | |||
* | additional restrictions for write-permissions on chroot | 2018-09-02 | |
| | |||
* | chroot problem: default profile not configured by default | 2018-09-01 | |
| | |||
* | --chroot fixes (Debian problem) | 2018-09-01 | |
| | |||
* | error strings | 2018-09-01 | |
| | |||
* | consolidate and enhance checks run on chroot directory hierarchy (patch n/n) | 2018-09-01 | |
| | |||
* | reduce number of chown/chmod calls in fs_chroot | 2018-08-31 | |
| | |||
* | little tweak | 2018-08-30 | |
| | |||
* | reject chroot if it is world-writable, related enhancements | 2018-08-30 | |
| | |||
* | more silencing of /sys umount warnings | 2018-08-29 | |
| | |||
* | cleanup | 2018-08-29 | |
| | |||
* | cleanup | 2018-08-29 | |
| | |||
* | silence warning about failed unmounting of /sys (overlay options) | 2018-08-29 | |
| | |||
* | cleanup | 2018-08-28 | |
| | |||
* | Revert "improve --chroot directory check" | 2018-08-28 | |
| | | | | | | this was unnecessary This reverts commit 0c2cbf05aa9553fbf5c90fb69928f2b276fead8b. | ||
* | improve --chroot directory check | 2018-08-28 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2018-08-28 | |
|\ | |||
| * | memory leaks | 2018-08-28 | |
| | | |||
* | | fix and harden overlay options | 2018-08-28 | |
|/ | |||
* | cleanup, small improvements | 2018-08-25 | |
| | |||
* | removed --disable-bind configuration option; some ohter minor cleanup | 2018-08-22 | |
| | |||
* | relax restrictions imposed on filesystem log (fslogger) in ↵ | 2018-08-22 | |
| | | | | ec7f59b8d370c29bd229fa9124640611c0667159 | ||
* | close private-cache memleak | 2018-08-22 | |
| | |||
* | drop privs when permissions are changed in /run/user/$UID | 2018-08-22 | |
| | |||
* | refactor, check the sandbox status for all join options | 2018-08-20 | |
| |