firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	Merge pull request #2928 from topimiettinen/seccomp-more-groups	netblue30	2019-08-29
\|\ \| \| \| \|	Add further seccomp groups
\| *	Add further seccomp groups	Topi Miettinen	2019-08-28
\| \| \| \| \| \| \| \|	Get further seccomp group definitions from systemd.
* \|	Allow exceptions to seccomp lists	Topi Miettinen	2019-08-25
\|/ \| \| \| \| \| \|	Prefix ! can be used to make exceptions to system call blacklists and whitelists used by seccomp, seccomp.drop and seccomp.keep. Closes #1366
*	various fixes and improvements	rusty-snake	2019-08-22
\| \| \| \| \| \| \| \| \| \| \| \|	- install contrib/syscalls.sh - add GitLab-CI status to README.md - read-only ${HOME}/.cargo/env - move blacklist ${HOME}/.cargo/registry, ${HOME}/.cargo/config to disable-programs - typo in man firejail firejail-profiles firecfg - better descriptions in man firejail-profiles - fixes in man firejail - template descriptions in firejail-profiles
*	fix private-bin for tb-starter-wrapper #2863	rusty-snake	2019-08-19
\|
*	document profile support for allow-debuggers in firejail-profile man page ↵	Sebastian Hafner	2019-07-17
\| \| \| \|	(#2861)
*	man fix (appimage, #2807)	netblue30	2019-07-04
\|
*	Fix typo in man firejail [--x11] (#2785)	glitsj16	2019-06-19
\|
*	template hint in CONTRIBUTING.md & firejail-prof…	rusty-snake	2019-06-04
\| \| \| \| \|	…ile manpage added + some profileprofile fixes
*	Grammar fix	Reiner Herrmann	2019-05-29
\| \| \| \|	(found by lintian)
*	Merge pull request #2712 from apmorton/features/private-cwd	smitsohu	2019-05-24
\|\ \| \| \| \|	Add private-cwd option to control working directory within jail
\| *	Add private-cwd option to control working directory within jail	Austin Morton	2019-05-23
\| \|
* \|	Add deterministic-exit-code option to ensure firejail exits with the first ↵	Austin Morton	2019-05-20
\|/ \| \| \|	childs exit code regardless of the termination ordering of orphaned children
*	man pages: add FIREJAIL_QUIET	smitsohu	2019-05-18
\|
*	dbus: make --nodbus block also system D-Bus socket	Topi Miettinen	2019-05-15
\| \| \| \|	Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
*	update man pages (private-dev, noexec)	smitsohu	2019-05-04
\|
*	Add a conditional to control DRM/noexec exception for browsers	Tad	2019-04-13
\|
*	Fixes for man firejail (#2628)	glitsj16	2019-03-29
\|
*	Follow-up on flatpak/snap support (#2601)	glitsj16	2019-03-16
\| \| \| \| \| \| \| \| \| \|	* Remove obsolete snap support from disable-programs.inc * Remove obsolete snap support from pycharm-community.profile * Update RELNOTES to reflect non-existing/dropped flatpak/snap support * Update firejail.txt to reflect flatpak/snap packages are not supported
*	Update firejail.txt (#2585)	glitsj16	2019-03-13
\|
*	mdwx: block memfd_create	Topi Miettinen	2019-03-05
\| \| \| \| \|	Some profiles may need adjusting if app uses memfd_create(2) and memory-deny-write-execute was enabled.
*	Sort items alphabetically in man firejail (#2479)	glitsj16	2019-02-26
\|
*	documentation update	smitsohu	2019-02-23
\|
*	Add machine-id note to man firejail (#2442)	glitsj16	2019-02-21
\|
*	Stress apparmor local overrides	glitsj16	2019-02-05
\| \| \|	As per discussion on https://github.com/netblue30/firejail/pull/2390, we better use slightly stronger/less optional wording when it comes to where local apparmor overrides need to be done.
*	--name rework	netblue30	2019-02-01
\|
*	removed mincore syscall from default seccomp filter	netblue30	2019-01-23
\|
*	adding mincore syscall to the default seccomp filter and some independent ↵	netblue30	2019-01-14
\| \| \| \|	profiles
*	Merge pull request #2297 from smitsohu/patch	startx2017	2018-12-17
\|\ \| \| \| \|	enforce nonewprivs instead of seccomp for chroot sandboxes
\| *	enforce nonewprivs instead of seccomp for chroot sandboxes	smitsohu	2018-12-15
\| \| \| \| \| \| \| \| \| \|	currently users are able to specify a seccomp filter of their choosing, leaving the real defense to nonewprivs anyway.
* \|	fix netstats typo in man firejail	glitsj16	2018-12-16
\|/
*	add HAS_NODBUS conditional, ${RUNUSER} makro	smitsohu	2018-12-07
\|
*	Merge pull request #2276 from smitsohu/tmpfs	netblue30	2018-11-28
\|\ \| \| \| \|	refactor private-cache and tmpfs
\| *	refactor private-cache and tmpfs	smitsohu	2018-11-26
\| \| \| \| \| \| \| \| \| \| \| \|	has the immediate benefit that the result of combining --noexec and --tmpfs does not depend on the sequence of the options
* \|	firecfg: small tweaks, fixes, man page update	smitsohu	2018-11-27
\| \|
* \|	man page typo	smitsohu	2018-11-27
\|/
*	Misc. typos	luz.paz	2018-11-19
\| \| \|	Found using `codespell -q 3 -L shotcut,objext,als,ans,creat,varius,chage,tthe`
*	Add better documentation for "-c" option.	Glenn Washburn	2018-11-18
\|
*	Allow prefixing colon to profile argument of --profile to for a profile ↵	Glenn Washburn	2018-11-09
\| \| \| \|	search, and disallow a directory to match as a profile file.
*	Add new config option to disable U2F in browsers, enabled by default	Tad	2018-11-05
\|
*	adding --net.print command line option	netblue30	2018-10-29
\|
*	Fix doc: A more accurate example of profile loading by profile name.	Glenn Washburn	2018-10-17
\|
*	Fix docs on default seccomp list: change mfsservctl -> nfsservctl and ↵	Glenn Washburn	2018-10-17
\| \| \| \|	reorder, add ni_syscall, remove duplicate process_vm_writev, add sys_debug_setcontext.
*	Update profile manpage to detail added "include" functionality.	Glenn Washburn	2018-10-17
\|
*	Merge pull request #2158 from crass/profile_conditional	crass	2018-10-17
\|\ \| \| \| \|	#2158: Add support for rudimentary conditionals in profiles
\| *	Update documentation for profile conditionals.	Glenn Washburn	2018-10-16
\| \|
* \|	manpages: update disable-mnt description	Vincent43	2018-10-16
\|/ \| \|	This will better match current code.
*	Update man pages and usage to reflect --profile enhancement.	Glenn Washburn	2018-10-15
\|
*	manpage cleanup	netblue30	2018-09-26
\|
*	manpages: fix apparmor profile path	Vincent43	2018-09-22
\|