Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | seccomp: allow defining separate filters for 32-bit arch | 2020-03-28 | |
| | | | | | | | | | | | | | | | | | | | | | System calls (names and numbers) are not exactly the same for 32 bit and 64 bit architectures. Let's allow defining separate filters for 32-bit arch using seccomp.32, seccomp.32.drop, seccomp.32.keep. This is useful for mixed 64/32 bit application environments like Steam and Wine. Implement protocol and mdwx filtering also for 32 bit arch. It's still better to block secondary archs completely if not needed. Lists of supported system calls are also updated. Warn if preload libraries would be needed due to trace, tracelog or postexecseccomp (seccomp.drop=execve etc), because a 32-bit dynamic linker does not understand the 64 bit preload libraries. Closes #3267. Signed-off-by: Topi Miettinen <toiwoton@gmail.com> | ||
* | new condition: HAS_NOSOUND | 2020-03-15 | |
| | |||
* | Documentation for DHCP support | 2020-01-27 | |
| | |||
* | add HAS_NET conditional | 2019-11-11 | |
| | |||
* | add HAS_X11 conditional, disconnect session manager - #2205 | 2019-10-08 | |
| | |||
* | alphabetize man page entries | 2019-10-04 | |
| | |||
* | various fixes and improvements | 2019-08-22 | |
| | | | | | | | | | | | | - install contrib/syscalls.sh - add GitLab-CI status to README.md - read-only ${HOME}/.cargo/env - move blacklist ${HOME}/.cargo/registry, ${HOME}/.cargo/config to disable-programs - typo in man firejail firejail-profiles firecfg - better descriptions in man firejail-profiles - fixes in man firejail - template descriptions in firejail-profiles | ||
* | document profile support for allow-debuggers in firejail-profile man page ↵ | 2019-07-17 | |
| | | | | (#2861) | ||
* | template hint in CONTRIBUTING.md & firejail-prof… | 2019-06-04 | |
| | | | | | …ile manpage added + some profileprofile fixes | ||
* | Grammar fix | 2019-05-29 | |
| | | | | (found by lintian) | ||
* | Merge pull request #2712 from apmorton/features/private-cwd | 2019-05-24 | |
|\ | | | | | Add private-cwd option to control working directory within jail | ||
| * | Add private-cwd option to control working directory within jail | 2019-05-23 | |
| | | |||
* | | Add deterministic-exit-code option to ensure firejail exits with the first ↵ | 2019-05-20 | |
|/ | | | | childs exit code regardless of the termination ordering of orphaned children | ||
* | update man pages (private-dev, noexec) | 2019-05-04 | |
| | |||
* | Add a conditional to control DRM/noexec exception for browsers | 2019-04-13 | |
| | |||
* | add HAS_NODBUS conditional, ${RUNUSER} makro | 2018-12-07 | |
| | |||
* | Misc. typos | 2018-11-19 | |
| | | | Found using `codespell -q 3 -L shotcut,objext,als,ans,creat,varius,chage,tthe` | ||
* | Add new config option to disable U2F in browsers, enabled by default | 2018-11-05 | |
| | |||
* | Fix doc: A more accurate example of profile loading by profile name. | 2018-10-17 | |
| | |||
* | Update profile manpage to detail added "include" functionality. | 2018-10-17 | |
| | |||
* | Update documentation for profile conditionals. | 2018-10-16 | |
| | |||
* | Update man pages and usage to reflect --profile enhancement. | 2018-10-15 | |
| | |||
* | --ignore cleanup | 2018-08-04 | |
| | |||
* | tunneling support - tap interface in --net option | 2018-07-11 | |
| | |||
* | Add documentation for keep-dev-shm option | 2018-07-09 | |
| | |||
* | --netmask option | 2018-07-06 | |
| | |||
* | Merges + misc fixes | 2018-07-04 | |
| | | | | | | | | - Change some links in README to HTTPS - Fixup some typos in firejail-profile manpage - Cleanup dash from private-etc - Fixup gradio - Synchronize server profile with default profile | ||
* | Revert "mounting a tmpfs on ~/.cache directory (private-cache) by default" | 2018-06-14 | |
| | | | | This reverts commit caa7ad8714206a158123773ddcaca6ef219a5501. | ||
* | Change --nousb to --nou2f per suggestion on last commit. | 2018-06-12 | |
| | |||
* | Add --nousb option | 2018-06-12 | |
| | |||
* | mounting a tmpfs on ~/.cache directory (private-cache) by default | 2018-06-12 | |
| | |||
* | update man page (private-cache) | 2018-06-12 | |
| | |||
* | merges0.9.54-rc2 | 2018-05-12 | |
| | |||
* | Moved documentation to conform with alphabetical ordering | 2018-05-03 | |
| | |||
* | Add --keep-var-tmp and associated profile option | 2018-05-01 | |
| | |||
* | docs and comment updates | 2018-04-20 | |
| | | | | adds sorting to syscall list in firejail man page | ||
* | firejail user access database | 2018-04-08 | |
| | |||
* | add --noautopulse arg for complex pulse setups | 2018-04-01 | |
| | | | | such as remote pulse servers or non-standard socket paths | ||
* | modif: --profile-path was deprecated | 2017-10-27 | |
| | |||
* | --timeout, fix #1614 | 2017-10-25 | |
| | |||
* | implemented --rlimit-cpu - set max CPU time for processes running in the ↵ | 2017-10-24 | |
| | | | | sandbox; for issue #1614, more to come... | ||
* | merge --rlimit-as | 2017-10-15 | |
| | |||
* | Update manpages to use HTTPS links | 2017-10-07 | |
| | | | | | All of these websites support HTTPS, and nearly all of them redirect to it anyways. | ||
* | --writable-run-user, solving ssh/gnupg authentication problems for smarcards | 2017-09-14 | |
| | |||
* | Feature: switch/config option to block secondary architectures | 2017-08-19 | |
| | | | | | | | | | Add a feature for a new (opt-in) command line switch and config file option to block secondary architectures entirely. Also block changing Linux execution domain with personality() system call for the primary architecture. Closes #1479 | ||
* | private-lib | 2017-08-17 | |
| | |||
* | memory-deny-write-execute | 2017-08-17 | |
| | |||
* | added --nodvd | 2017-08-12 | |
| | |||
* | typo | 2017-08-10 | |
| | |||
* | --notv for #1446 | 2017-08-10 | |
| |