Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | add HAS_NET conditional | 2019-11-11 | |
| | |||
* | add HAS_X11 conditional, disconnect session manager - #2205 | 2019-10-08 | |
| | |||
* | alphabetize man page entries | 2019-10-04 | |
| | |||
* | increase socket buffer size for firemon, bug #2700 | 2019-09-29 | |
| | |||
* | Merge branch 'master' into fix-profile-builder | 2019-09-15 | |
|\ | |||
| * | update seccomp in man firejail | 2019-09-13 | |
| | | |||
* | | Update man page to note that --trace can now take an optional parameter. | 2019-08-29 | |
|/ | |||
* | Merge pull request #2928 from topimiettinen/seccomp-more-groups | 2019-08-29 | |
|\ | | | | | Add further seccomp groups | ||
| * | Add further seccomp groups | 2019-08-28 | |
| | | | | | | | | Get further seccomp group definitions from systemd. | ||
* | | Allow exceptions to seccomp lists | 2019-08-25 | |
|/ | | | | | | | Prefix ! can be used to make exceptions to system call blacklists and whitelists used by seccomp, seccomp.drop and seccomp.keep. Closes #1366 | ||
* | various fixes and improvements | 2019-08-22 | |
| | | | | | | | | | | | | - install contrib/syscalls.sh - add GitLab-CI status to README.md - read-only ${HOME}/.cargo/env - move blacklist ${HOME}/.cargo/registry, ${HOME}/.cargo/config to disable-programs - typo in man firejail firejail-profiles firecfg - better descriptions in man firejail-profiles - fixes in man firejail - template descriptions in firejail-profiles | ||
* | fix private-bin for tb-starter-wrapper #2863 | 2019-08-19 | |
| | |||
* | document profile support for allow-debuggers in firejail-profile man page ↵ | 2019-07-17 | |
| | | | | (#2861) | ||
* | man fix (appimage, #2807) | 2019-07-04 | |
| | |||
* | Fix typo in man firejail [--x11] (#2785) | 2019-06-19 | |
| | |||
* | template hint in CONTRIBUTING.md & firejail-prof… | 2019-06-04 | |
| | | | | | …ile manpage added + some profileprofile fixes | ||
* | Grammar fix | 2019-05-29 | |
| | | | | (found by lintian) | ||
* | Merge pull request #2712 from apmorton/features/private-cwd | 2019-05-24 | |
|\ | | | | | Add private-cwd option to control working directory within jail | ||
| * | Add private-cwd option to control working directory within jail | 2019-05-23 | |
| | | |||
* | | Add deterministic-exit-code option to ensure firejail exits with the first ↵ | 2019-05-20 | |
|/ | | | | childs exit code regardless of the termination ordering of orphaned children | ||
* | man pages: add FIREJAIL_QUIET | 2019-05-18 | |
| | |||
* | dbus: make --nodbus block also system D-Bus socket | 2019-05-15 | |
| | | | | Signed-off-by: Topi Miettinen <toiwoton@gmail.com> | ||
* | update man pages (private-dev, noexec) | 2019-05-04 | |
| | |||
* | Add a conditional to control DRM/noexec exception for browsers | 2019-04-13 | |
| | |||
* | Fixes for man firejail (#2628) | 2019-03-29 | |
| | |||
* | Follow-up on flatpak/snap support (#2601) | 2019-03-16 | |
| | | | | | | | | | | * Remove obsolete snap support from disable-programs.inc * Remove obsolete snap support from pycharm-community.profile * Update RELNOTES to reflect non-existing/dropped flatpak/snap support * Update firejail.txt to reflect flatpak/snap packages are not supported | ||
* | Update firejail.txt (#2585) | 2019-03-13 | |
| | |||
* | mdwx: block memfd_create | 2019-03-05 | |
| | | | | | Some profiles may need adjusting if app uses memfd_create(2) and memory-deny-write-execute was enabled. | ||
* | Sort items alphabetically in man firejail (#2479) | 2019-02-26 | |
| | |||
* | documentation update | 2019-02-23 | |
| | |||
* | Add machine-id note to man firejail (#2442) | 2019-02-21 | |
| | |||
* | Stress apparmor local overrides | 2019-02-05 | |
| | | | As per discussion on https://github.com/netblue30/firejail/pull/2390, we better use slightly stronger/less optional wording when it comes to where local apparmor overrides need to be done. | ||
* | --name rework | 2019-02-01 | |
| | |||
* | removed mincore syscall from default seccomp filter | 2019-01-23 | |
| | |||
* | adding mincore syscall to the default seccomp filter and some independent ↵ | 2019-01-14 | |
| | | | | profiles | ||
* | Merge pull request #2297 from smitsohu/patch | 2018-12-17 | |
|\ | | | | | enforce nonewprivs instead of seccomp for chroot sandboxes | ||
| * | enforce nonewprivs instead of seccomp for chroot sandboxes | 2018-12-15 | |
| | | | | | | | | | | currently users are able to specify a seccomp filter of their choosing, leaving the real defense to nonewprivs anyway. | ||
* | | fix netstats typo in man firejail | 2018-12-16 | |
|/ | |||
* | add HAS_NODBUS conditional, ${RUNUSER} makro | 2018-12-07 | |
| | |||
* | Merge pull request #2276 from smitsohu/tmpfs | 2018-11-28 | |
|\ | | | | | refactor private-cache and tmpfs | ||
| * | refactor private-cache and tmpfs | 2018-11-26 | |
| | | | | | | | | | | | | has the immediate benefit that the result of combining --noexec and --tmpfs does not depend on the sequence of the options | ||
* | | firecfg: small tweaks, fixes, man page update | 2018-11-27 | |
| | | |||
* | | man page typo | 2018-11-27 | |
|/ | |||
* | Misc. typos | 2018-11-19 | |
| | | | Found using `codespell -q 3 -L shotcut,objext,als,ans,creat,varius,chage,tthe` | ||
* | Add better documentation for "-c" option. | 2018-11-18 | |
| | |||
* | Allow prefixing colon to profile argument of --profile to for a profile ↵ | 2018-11-09 | |
| | | | | search, and disallow a directory to match as a profile file. | ||
* | Add new config option to disable U2F in browsers, enabled by default | 2018-11-05 | |
| | |||
* | adding --net.print command line option | 2018-10-29 | |
| | |||
* | Fix doc: A more accurate example of profile loading by profile name. | 2018-10-17 | |
| | |||
* | Fix docs on default seccomp list: change mfsservctl -> nfsservctl and ↵ | 2018-10-17 | |
| | | | | reorder, add ni_syscall, remove duplicate process_vm_writev, add sys_debug_setcontext. |