Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | quiet fix | 2017-02-04 | ||
| | ||||
* | --writable-var-log | 2017-01-30 | ||
| | ||||
* | --quiet fix | 2017-01-30 | ||
| | ||||
* | merges | 2017-01-29 | ||
| | ||||
* | fixing --hosts-file privelege check | 2017-01-29 | ||
| | | | | | | Currently the code uses the access() call to check if the user has an access to a file that is copied into the root as /etc/hosts. This inevitably adds a race when the user changes the file to a symbolic link pointing to an arbitrary location on the filsystem after the access check is done but before opening the file to copy it. This potentially allows to read any file on the system. To close this the code adds a utility copy_file_from_user_to_root . It opens the copy destination file as root and then forks/drop privileges. Then as a user the utility opens the source file and do the copy into the destination descriptor that is preserved accross the fork. | |||
* | support allow-private-blacklist in profile files | 2017-01-28 | ||
| | ||||
* | fixed access for --hosts-file | 2017-01-23 | ||
| | ||||
* | bash completion for --hosts-file | 2017-01-22 | ||
| | ||||
* | --hosts-file option | 2017-01-22 | ||
| | ||||
* | Add support for joining a persistent, named network namespace. | 2017-01-20 | ||
| | ||||
* | firejail/fs.c: include sys/wait.h for declaration of waitpid | 2017-01-20 | ||
| | ||||
* | man page fix | 2017-01-20 | ||
| | ||||
* | fix PulseAudio/machine-id problem | 2017-01-18 | ||
| | ||||
* | fix ASSERT_PERMS_FD macro | 2017-01-14 | ||
| | ||||
* | local customization | 2017-01-14 | ||
| | ||||
* | nvidia fix | 2017-01-13 | ||
| | ||||
* | cleanup | 2017-01-12 | ||
| | ||||
* | Gentoo compile fix | 2017-01-12 | ||
| | ||||
* | copy_file cleanup | 2017-01-11 | ||
| | ||||
* | fix | 2017-01-11 | ||
| | ||||
* | temoprary fix for local profile feature | 2017-01-11 | ||
| | ||||
* | chroot tightening | 2017-01-10 | ||
| | ||||
* | copy_file cleanup | 2017-01-10 | ||
| | ||||
* | security fix | 2017-01-10 | ||
| | ||||
* | security fix | 2017-01-06 | ||
| | ||||
* | security fix | 2017-01-06 | ||
| | ||||
* | security fixes | 2017-01-04 | ||
| | ||||
* | security fix | 2017-01-04 | ||
| | ||||
* | allow non-seccomp setup for OverlayFS sandboxes | 2017-01-04 | ||
| | ||||
* | gpg fixes | 2016-12-29 | ||
| | ||||
* | Merge pull request #1004 from thewisenerd/patch-multiple-private-argv | 2016-12-24 | ||
|\ | | | | | allow multiple private-argv | |||
| * | firejail: argv: allow multiple private-* options | 2016-12-24 | ||
| | | ||||
| * | firejail: profile: allow multiple private-* options | 2016-12-24 | ||
| | | ||||
| * | firejail: private-* : check, then assign. | 2016-12-24 | ||
| | | ||||
| * | argv: private-home: exit on invalid option | 2016-12-24 | ||
| | | ||||
* | | main: guess_shell: use $SHELL variable if set | 2016-12-24 | ||
|/ | | | | fixes #983 | |||
* | compile fixes | 2016-12-22 | ||
| | ||||
* | testing | 2016-12-19 | ||
| | ||||
* | Merge pull request #991 from thewisenerd/master | 2016-12-19 | ||
|\ | | | | | appimage: pass commandline arguments | |||
| * | appimage: pass commandline arguments | 2016-12-19 | ||
| | | | | | | | | | | | | | | | | | | | | | | | | | | commandline arguments are not being passed to appimage, which hinders some functionality. This adds the function build_appimage_cmdline based on build_cmdline which works by calling quote_cmdline with passed argv, and then replaces initial argument with AppRun path generated in appimage_set. TODO: deal with extra memory allocation. The 'quoted' length of the first '*.AppImage' argument may or may not be greater than the 'quoted' AppRun path. | |||
* | | Implement the --allow-private-blacklist option | 2016-12-18 | ||
| | | ||||
* | | Remove compiler warnings on Ubuntu 16.04 | 2016-12-18 | ||
|/ | ||||
* | Merge pull request #978 from Fred-Barclay/keepassx2 | 2016-12-16 | ||
|\ | | | | | Add keepassx2 profile | |||
| * | Add keepassx2 profile | 2016-12-14 | ||
| | | ||||
* | | fix older platforms | 2016-12-15 | ||
|/ | ||||
* | added a 1 second delay after xpra server is started | 2016-12-14 | ||
| | ||||
* | machine-id fix | 2016-12-14 | ||
| | ||||
* | snap profile fix | 2016-12-14 | ||
| | ||||
* | Merge pull request #967 from valoq/master | 2016-12-14 | ||
|\ | | | | | make ipc blacklist more reliable | |||
| * | fix comment | 2016-12-11 | ||
| | |