Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | docs and comment updates | 2018-04-20 | |
| | | | | adds sorting to syscall list in firejail man page | ||
* | cleanup | 2018-04-20 | |
| | |||
* | firejail user access database | 2018-04-08 | |
| | |||
* | consistent pid/PID usage | 2018-04-04 | |
| | | | Nitpicking. Seems there's a pattern throughout the manual, using `pid` for arguments and `PID` in descriptions and examples. Fix some inconsistencies in that regard. Changed `--fs.print=name|print` to `--fs.print=name|pid` as 'print' would be regarded as the name of the sandbox. | ||
* | deprecated --git-install and --git-uninstall | 2018-04-04 | |
| | |||
* | deprecating --force | 2018-04-03 | |
| | |||
* | add --noautopulse arg for complex pulse setups | 2018-04-01 | |
| | | | | such as remote pulse servers or non-standard socket paths | ||
* | nodbus man pages, etc. | 2018-03-30 | |
| | |||
* | added sandbox name support in firemon | 2018-03-21 | |
| | |||
* | man page, README.md, RELNOTES | 2018-02-21 | |
| | |||
* | added firejail --apparmor.print and firemon --apparmor | 2018-01-24 | |
| | |||
* | testing | 2017-12-06 | |
| | |||
* | strip trailing whitespace | 2017-11-19 | |
| | |||
* | netfilter template support | 2017-11-18 | |
| | |||
* | netfilter split, --netfilter.print, --netfilter6.print | 2017-11-15 | |
| | |||
* | seccomp mdwx: block pkey_mprotect like mprotect | 2017-11-11 | |
| | |||
* | private-bin and private-lib fixes | 2017-11-08 | |
| | |||
* | modif: --profile-path was deprecated | 2017-10-27 | |
| | |||
* | --timeout, fix #1614 | 2017-10-25 | |
| | |||
* | implemented --rlimit-cpu - set max CPU time for processes running in the ↵ | 2017-10-24 | |
| | | | | sandbox; for issue #1614, more to come... | ||
* | --build: save the resulting profile in a file | 2017-10-22 | |
| | |||
* | allow blacklists noexec etc. in private home directories; fix bug #1608 | 2017-10-20 | |
| | |||
* | merge --rlimit-as | 2017-10-15 | |
| | |||
* | globbing - manpage | 2017-10-15 | |
| | |||
* | apparmor | 2017-10-12 | |
| | |||
* | Update manpages to use HTTPS links | 2017-10-07 | |
| | | | | | All of these websites support HTTPS, and nearly all of them redirect to it anyways. | ||
* | potential fix for mutt/gnupg issue #1585 | 2017-10-02 | |
| | |||
* | Update man page since --private-dev allows disc devices like cdrom | 2017-09-19 | |
| | |||
* | spelling | 2017-09-17 | |
| | |||
* | profile build tool | 2017-09-17 | |
| | |||
* | --writable-run-user man page | 2017-09-14 | |
| | |||
* | --writable-run-user, solving ssh/gnupg authentication problems for smarcards | 2017-09-14 | |
| | |||
* | fix manpage for --output | 2017-09-12 | |
| | |||
* | --profile.print option | 2017-09-02 | |
| | |||
* | man page | 2017-08-23 | |
| | |||
* | cleanup | 2017-08-23 | |
| | |||
* | Feature: switch/config option to block secondary architectures | 2017-08-19 | |
| | | | | | | | | | Add a feature for a new (opt-in) command line switch and config file option to block secondary architectures entirely. Also block changing Linux execution domain with personality() system call for the primary architecture. Closes #1479 | ||
* | Postpone installation of seccomp filters just before execve | 2017-08-19 | |
| | |||
* | Minor manpage correction | 2017-08-18 | |
| | |||
* | memory-deny-write-execute testing | 2017-08-18 | |
| | |||
* | private-lib | 2017-08-17 | |
| | |||
* | --net=none documentation | 2017-08-17 | |
| | |||
* | update RELNOTES/Readme.md/--help; man page update for #1439 | 2017-08-14 | |
| | |||
* | Allow any syscall to be blacklisted (#1447) | 2017-08-13 | |
| | | | | | | | Allow any syscall to be blacklisted with aid of LD_PRELOAD library, libpostexecseccomp.so. Closes: #1447 | ||
* | modif: --output split in two commands, --output and --output-stderr; fix for ↵ | 2017-08-13 | |
| | | | | #1458 | ||
* | added --nodvd | 2017-08-12 | |
| | |||
* | typo | 2017-08-10 | |
| | |||
* | --notv for #1446 | 2017-08-10 | |
| | |||
* | Seccomp: split @default into more meaningful smaller groups | 2017-08-06 | |
| | |||
* | Seccomp: system call grouping and call numbers | 2017-08-06 | |
| |