aboutsummaryrefslogtreecommitdiffstats
path: root/src/man
Commit message (Collapse)AuthorAge
* more on disable cgroupsLibravatar netblue302022-06-13
|
* makefiles: include config.mk instead of common.mk where possibleLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | common.mk contains definitions for building programs and it includes config.mk. Some makefiles that include common.mk do not contain any targets for building programs. They depend only on configure-time variable definitions (which are defined on config.mk) rather than anything specific to common.mk. So change their includes of common.mk to config.mk.
* makefiles: define root dir and include relative to itLibravatar Kelvin M. Klann2022-06-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A non-absolute path on an include command is always treated as being relative to the directory in which "make" was started in, rather than being relative to the makefile that contains the command. For example, given the following project structure and file contents: * Makefile: include src/foo.mk * src/foo.mk: include bar.mk * src/bar.mk: Running "make" on the root project directory (that is, where "Makefile" is) yields the following: src/foo.mk:1: bar.mk: No such file or directory As "bar.mk" in "include bar.mk" is relative to the current (process) directory (that is, "./bar.mk") and not to where foo.mk is located in ("./src/bar.mk"). So on every makefile that contains an include command, define the root project directory in the ROOT variable and always include relative to it, to later enable any included mkfiles to include other mkfiles without having to worry about the correct path. Commands used to search and replace: $ git grep -Flz 'include ../common.mk' -- src | xargs -0 -I '{}' sh -c \ "printf '%s\n' \"\`sed 's|include ../common.mk|ROOT = ../..\ninclude \$(ROOT)/src/common.mk|' '{}'\`\" >'{}'" Environment: GNU make 4.3-3.1 on Artix Linux
* removed enforcement of nonewprivs for --noprofileLibravatar netblue302022-06-03
|
* --nettrace only available when running the sandbox as rootLibravatar netblue302022-06-03
|
* enforce nonewprivs for --noprofile optionLibravatar netblue302022-06-03
|
* Removed IDS feature from the default build. To enable it, use --enable-ids ↵Libravatar netblue302022-05-25
| | | | at compile time.
* config guide (firecfg --guide) man pageLibravatar netblue302022-05-23
|
* --oom (#5122)Libravatar netblue302022-05-20
|
* man: typo fixes (#5084)Libravatar glitsj162022-03-31
|
* docs: mention capabilities(7) on --capsLibravatar Kelvin M. Klann2022-03-27
| | | | | | As hinted by @rusty-snake[1]. [1] https://github.com/netblue30/firejail/discussions/5064#discussioncomment-2417395
* Merge pull request #5052 from kmk3/docs-private-bugLibravatar netblue302022-03-24
|\ | | | | docs: mention inconsistent homedir bug involving --private=dir
| * docs: mention inconsistent homedir bug involving --private=dirLibravatar Kelvin M. Klann2022-03-14
| | | | | | | | | | | | | | | | | | And the workaround suggested by @smitsohu[1] and @rusty-snake[2]. Relates to #903 #5048. [1] https://github.com/netblue30/firejail/issues/903#issuecomment-946673346 [2] https://github.com/netblue30/firejail/discussions/5048#discussioncomment-2360034
| * docs: add missing --private note to firejail-profile.txtLibravatar Kelvin M. Klann2022-03-14
| | | | | | | | | | | | It's currently only present on firejail.txt. This amends commit 340699fbd ("misc things", 2020-02-22).
* | Merge pull request #5043 from kmk3/docs-protocol-accLibravatar netblue302022-03-24
|\ \ | |/ |/| man: mention that the protocol command accumulates
| * man: mention that the protocol command accumulatesLibravatar Kelvin M. Klann2022-03-13
| | | | | | | | | | | | | | | | | | | | | | | | As mentioned by @rusty-snake[1]. This amends commit 39654d016 ("adding netlink to --protocol list (#4605)", 2022-01-21). See also commit 75073e0e4 ("man: mention that private-bin and private-etc are cumulative", 2022-01-22) and issue #4078. [1] https://github.com/netblue30/firejail/pull/5042/files#r825477891
* | fbuilder: update man pageLibravatar smitsohu2022-03-13
|/
* build option: support chromium/electron apps most of the timeLibravatar smitsohu2022-03-09
|
* more on --tabLibravatar netblue302022-02-20
|
* --tab: enable shell tab completionLibravatar netblue302022-02-20
|
* netlocker fixesLibravatar netblue302022-02-02
|
* more man page fixesLibravatar smitsohu2022-01-23
| | | | | | there are two build options, should clean up both follow-up to commit a6283fd7873a4f1dffb0730a968406d52545c73a
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2022-01-23
|\
| * netlink: revert man pagesLibravatar netblue302022-01-22
| |
* | build option: remove deprecated strace feature from manualLibravatar smitsohu2022-01-23
|/
* man: mention that private-bin and private-etc are cumulativeLibravatar Kelvin M. Klann2022-01-22
| | | | | | This amends commit ac6c8c038 ("fix #4078", 2022-01-21). Fixes #4078.
* adding netlink to --protocol list (#4605)Libravatar netblue2022-01-21
|
* fix #4078Libravatar netblue302022-01-21
|
* nettrace fixesLibravatar netblue302022-01-18
|
* keep-fd option (#4845)Libravatar smitsohu2022-01-14
|
* Merge pull request #4827 from kmk3/noprinters-add-missingLibravatar netblue302022-01-08
|\ | | | | noprinters: add missing items & add to profile.template
| * noprinters: add missing items from new command checklistLibravatar Kelvin M. Klann2022-01-05
| | | | | | | | | | | | | | | | | | | | | | | | See CONTRIBUTING.md. The changes are based on what was done on commit 5a612029b ("rename noautopulse to keep-config-pulse", 2021-05-13) / PR #4278. This amends commit bd15e763e ("--noprinter option", 2021-10-20) and commit d9403dcdc ("small fix", 2021-10-20). Relates to #4607.
* | 2022 copyright updateLibravatar netblue302022-01-07
| |
* | more on nettraceLibravatar netblue302022-01-07
|/
* updatesLibravatar netblue302021-12-28
|
* nettraceLibravatar netblue302021-12-28
|
* Fix a typoLibravatar Tad2021-12-21
| | | | Signed-off-by: Tad <tad@spotco.us>
* updatesLibravatar netblue302021-12-19
|
* --ids-check/--ids-init documentationLibravatar netblue302021-11-13
|
* Merge pull request #4635 from smitsohu/noorphansLibravatar netblue302021-11-13
|\ | | | | deterministic-shutdown option
| * deterministic-shutdown optionLibravatar smitsohu2021-10-28
| |
* | Relocate firecfg.config to /etc/firejail/Libravatar Hank Leininger2021-11-05
|/ | | | | | | | | | | | This should make it easier for users, and distributions, to customize which programs they want firejail to wrap. Also fixed some firecfg.cfg -> firecfg.config references. Signed-off-by: Hank Leininger <hlein@korelogic.com> Closes: https://github.com/netblue30/firejail/issues/408 Bug: https://github.com/netblue30/firejail/issues/2097 Bug: https://github.com/netblue30/firejail/issues/2829 Bug: https://github.com/netblue30/firejail/issues/3665
* man pagesLibravatar smitsohu2021-10-18
|
* cgroup: minor refactor, add v2 support, bugfixesLibravatar smitsohu2021-10-16
| | | | | | | | Adds minimal cgroupv2 support, and fixes an effective user id assertion in --join (instead of asserting effective user id of the user, drop privileges completely in a child process).
* Merge pull request #4510 from rusty-snake/allow-tray-conditionLibravatar netblue302021-10-09
|\ | | | | Add new condition ALLOW_TRAY
| * Add new condition ALLOW_TRAYLibravatar rusty-snake2021-09-04
| |
* | trim excess whitespaceLibravatar a13460542021-09-25
| |
* | fix spelling (#4573)Libravatar a13460542021-09-22
| |
* | Revert "allow/deny help and man pages"Libravatar Kelvin M. Klann2021-09-02
|/ | | | | | | | | | | | | | | | | This reverts commit a11707ea273e5665047f8a7d9387ba07f08d72f6. The man pages currently direct users to use the aliases instead of the commands, which some users of firejail-git may end up doing. Example: https://github.com/netblue30/firejail/discussions/4496 So revert the man page changes as well to avoid confusion. Note: This is not a full revert. The commit in question also contains some string formatting fixes on src/firejail/usage.c (related to dbus and netmask), which are left intact. Relates to #4410.
* fix man firejail-profileLibravatar rusty-snake2021-08-09
| | | | | machine-id is not affected by --disable-network and matches in "User Environment" as well.