Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | get_mempolicy syscall was temporarily removed from the default seccomp list. ↵ | netblue30 | 2017-08-02 | |
| | | | | | | It seems to break playing youtube videos on Firefox Nightly - #1414 | |||
* | Memory-deny-write-execute feature | Topi Miettinen | 2017-07-30 | |
| | | | | Feature to block attempts to create writable and executable memory. | |||
* | Private /lib feature | Topi Miettinen | 2017-07-30 | |
| | ||||
* | merges | netblue30 | 2017-07-25 | |
| | ||||
* | support for Xephyr screen size | netblue30 | 2017-07-19 | |
| | ||||
* | per-profile disable-mnt | netblue30 | 2017-07-04 | |
| | ||||
* | fix manpage: removed --seccomp.errno, currently supported by the regular ↵ | startx2017 | 2017-05-26 | |
| | | | | --seccomp=command | |||
* | --novideo option | Fred Barclay | 2017-05-22 | |
| | | | | | Still a work in progress. Code needs cleanup and improvement, but it does block /dev/video* in all of my tests so far. | |||
* | support /dev/video* in private-dev, bringing back private-dev in firefox profile | netblue30 | 2017-05-19 | |
| | ||||
* | --fix-sound support in firecfg | netblue30 | 2017-05-03 | |
| | ||||
* | allow PulseAudio sockets in --private-tmp | netblue30 | 2017-04-30 | |
| | ||||
* | man pages | netblue30 | 2017-04-28 | |
| | ||||
* | set desktop files with firecfg by default (former --fix option) | netblue30 | 2017-04-22 | |
| | ||||
* | man: update output of --trace command | Reiner Herrmann | 2017-04-22 | |
| | ||||
* | Drop removed --overlay-path from manpage. | Reiner Herrmann | 2017-04-10 | |
| | | | | Found by GSR (https://bugs.debian.org/859979) | |||
* | seccomp and brave profile merges | netblue30 | 2017-04-03 | |
| | ||||
* | --nowhitelist | netblue30 | 2017-03-09 | |
| | ||||
* | xvfb X11 server support (--x11=xvfb) | netblue30 | 2017-03-03 | |
| | ||||
* | --git-install/--git-uninstall | netblue30 | 2017-02-05 | |
| | ||||
* | --writable-var-log | netblue30 | 2017-01-30 | |
| | ||||
* | --hosts-file option | netblue30 | 2017-01-22 | |
| | ||||
* | Add support for joining a persistent, named network namespace. | Zack Weinberg | 2017-01-20 | |
| | ||||
* | man page fix | netblue30 | 2017-01-20 | |
| | ||||
* | fix PulseAudio/machine-id problem | netblue30 | 2017-01-18 | |
| | ||||
* | security fix | netblue30 | 2017-01-06 | |
| | ||||
* | testing | netblue30 | 2016-12-19 | |
| | ||||
* | allusers manpage fix | netblue30 | 2016-12-11 | |
| | ||||
* | spoof machine-id | netblue30 | 2016-12-05 | |
| | ||||
* | private-opt, private-srv | netblue30 | 2016-11-30 | |
| | ||||
* | explain audit for seccomp logging | Vasya Novikov | 2016-11-19 | |
| | ||||
* | fixed typo | valoq | 2016-11-04 | |
| | ||||
* | private-tmp changes | valoq | 2016-11-03 | |
| | ||||
* | added /srv in whitelist option | valoq | 2016-10-15 | |
| | ||||
* | --x11=xorg | netblue30 | 2016-10-03 | |
| | ||||
* | renamed --x11=block to --x11=none, brought back the requirement for network ↵ | netblue30 | 2016-10-02 | |
| | | | | namespaces for x11 sandboxing | |||
* | Fix typos found by lintian | Reiner Herrmann | 2016-10-02 | |
| | ||||
* | --veth-name option | netblue30 | 2016-09-28 | |
| | ||||
* | --no3d - disable 3D hardware acceleration | netblue30 | 2016-09-28 | |
| | ||||
* | --allusers | netblue30 | 2016-09-25 | |
| | ||||
* | update man | Aleksey Manevich | 2016-09-23 | |
| | ||||
* | add files to sandbox container (--put) | netblue30 | 2016-09-22 | |
| | ||||
* | remove man firejail-config | netblue30 | 2016-09-19 | |
| | ||||
* | update man | Aleksey Manevich | 2016-09-15 | |
| | ||||
* | update man | Aleksey Manevich | 2016-09-10 | |
| | ||||
* | bringing back --private-home | netblue30 | 2016-09-04 | |
| | ||||
* | update man | Aleksey Manevich | 2016-09-02 | |
| | ||||
* | another typo | Reiner Herrmann | 2016-08-29 | |
| | ||||
* | testing 0.9.42~rc2 | netblue30 | 2016-08-24 | |
| | ||||
* | overlayfs fixes | netblue30 | 2016-08-23 | |
| | ||||
* | allow-debuggers | netblue30 | 2016-08-22 | |
| |