Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Stress apparmor local overrides | glitsj16 | 2019-02-05 |
| | | | As per discussion on https://github.com/netblue30/firejail/pull/2390, we better use slightly stronger/less optional wording when it comes to where local apparmor overrides need to be done. | ||
* | --name rework | netblue30 | 2019-02-01 |
| | |||
* | removed mincore syscall from default seccomp filter | netblue30 | 2019-01-23 |
| | |||
* | adding mincore syscall to the default seccomp filter and some independent ↵ | netblue30 | 2019-01-14 |
| | | | | profiles | ||
* | Merge pull request #2297 from smitsohu/patch | startx2017 | 2018-12-17 |
|\ | | | | | enforce nonewprivs instead of seccomp for chroot sandboxes | ||
| * | enforce nonewprivs instead of seccomp for chroot sandboxes | smitsohu | 2018-12-15 |
| | | | | | | | | | | currently users are able to specify a seccomp filter of their choosing, leaving the real defense to nonewprivs anyway. | ||
* | | fix netstats typo in man firejail | glitsj16 | 2018-12-16 |
|/ | |||
* | Merge pull request #2276 from smitsohu/tmpfs | netblue30 | 2018-11-28 |
|\ | | | | | refactor private-cache and tmpfs | ||
| * | refactor private-cache and tmpfs | smitsohu | 2018-11-26 |
| | | | | | | | | | | | | has the immediate benefit that the result of combining --noexec and --tmpfs does not depend on the sequence of the options | ||
* | | man page typo | smitsohu | 2018-11-27 |
|/ | |||
* | Misc. typos | luz.paz | 2018-11-19 |
| | | | Found using `codespell -q 3 -L shotcut,objext,als,ans,creat,varius,chage,tthe` | ||
* | Add better documentation for "-c" option. | Glenn Washburn | 2018-11-18 |
| | |||
* | Allow prefixing colon to profile argument of --profile to for a profile ↵ | Glenn Washburn | 2018-11-09 |
| | | | | search, and disallow a directory to match as a profile file. | ||
* | adding --net.print command line option | netblue30 | 2018-10-29 |
| | |||
* | Fix doc: A more accurate example of profile loading by profile name. | Glenn Washburn | 2018-10-17 |
| | |||
* | Fix docs on default seccomp list: change mfsservctl -> nfsservctl and ↵ | Glenn Washburn | 2018-10-17 |
| | | | | reorder, add ni_syscall, remove duplicate process_vm_writev, add sys_debug_setcontext. | ||
* | manpages: update disable-mnt description | Vincent43 | 2018-10-16 |
| | | | This will better match current code. | ||
* | Update man pages and usage to reflect --profile enhancement. | Glenn Washburn | 2018-10-15 |
| | |||
* | manpage cleanup | netblue30 | 2018-09-26 |
| | |||
* | manpages: fix apparmor profile path | Vincent43 | 2018-09-22 |
| | |||
* | manpages: fix alignment | Vincent43 | 2018-09-22 |
| | |||
* | manpages: update AppArmor info | Vincent43 | 2018-09-22 |
| | |||
* | support for firetunnel utility | netblue30 | 2018-09-09 |
| | |||
* | --chroot fixes (Debian problem) | netblue30 | 2018-09-01 |
| | |||
* | fix and harden overlay options | smitsohu | 2018-08-28 |
| | |||
* | man: fix example for --build command | Reiner Herrmann | 2018-08-19 |
| | |||
* | --ignore cleanup | startx2017 | 2018-08-04 |
| | |||
* | tunneling support - tap interface in --net option | netblue30 | 2018-07-11 |
| | |||
* | Add documentation for keep-dev-shm option | ಚಿರಾಗ್ ನಟರಾಜ್ | 2018-07-09 |
| | |||
* | --netmask option | netblue30 | 2018-07-06 |
| | |||
* | Revert "mounting a tmpfs on ~/.cache directory (private-cache) by default" | Tad | 2018-06-14 |
| | | | | This reverts commit caa7ad8714206a158123773ddcaca6ef219a5501. | ||
* | Change --nousb to --nou2f per suggestion on last commit. | Chiraag Nataraj | 2018-06-12 |
| | |||
* | Add --nousb option | Chiraag Nataraj | 2018-06-12 |
| | |||
* | mounting a tmpfs on ~/.cache directory (private-cache) by default | netblue30 | 2018-06-12 |
| | |||
* | update man page (private-cache) | smitsohu | 2018-06-12 |
| | |||
* | wireless support | netblue30 | 2018-06-09 |
| | |||
* | support wireless interfaces for --net | netblue30 | 2018-06-09 |
| | |||
* | merges0.9.54-rc2 | netblue30 | 2018-05-12 |
| | |||
* | Moved documentation to conform with alphabetical ordering | Chiraag Nataraj | 2018-05-03 |
| | |||
* | Add --keep-var-tmp and associated profile option | Chiraag Nataraj | 2018-05-01 |
| | |||
* | docs and comment updates | smitsohu | 2018-04-20 |
| | | | | adds sorting to syscall list in firejail man page | ||
* | cleanup | netblue30 | 2018-04-20 |
| | |||
* | firejail user access database | netblue30 | 2018-04-08 |
| | |||
* | consistent pid/PID usage | glitsj16 | 2018-04-04 |
| | | | Nitpicking. Seems there's a pattern throughout the manual, using `pid` for arguments and `PID` in descriptions and examples. Fix some inconsistencies in that regard. Changed `--fs.print=name|print` to `--fs.print=name|pid` as 'print' would be regarded as the name of the sandbox. | ||
* | deprecated --git-install and --git-uninstall | netblue30 | 2018-04-04 |
| | |||
* | deprecating --force | netblue30 | 2018-04-03 |
| | |||
* | add --noautopulse arg for complex pulse setups | Melvin Vermeeren | 2018-04-01 |
| | | | | such as remote pulse servers or non-standard socket paths | ||
* | nodbus man pages, etc. | netblue30 | 2018-03-30 |
| | |||
* | added sandbox name support in firemon | netblue30 | 2018-03-21 |
| | |||
* | man page, README.md, RELNOTES | netblue30 | 2018-02-21 |
| |