aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAge
* Fix doc: A more accurate example of profile loading by profile name.Libravatar Glenn Washburn2018-10-17
|
* Fix docs on default seccomp list: change mfsservctl -> nfsservctl and ↵Libravatar Glenn Washburn2018-10-17
| | | | reorder, add ni_syscall, remove duplicate process_vm_writev, add sys_debug_setcontext.
* Update profile manpage to detail added "include" functionality.Libravatar Glenn Washburn2018-10-17
|
* Allow include to search userdir then systemdir for "bare" profile file names.Libravatar Glenn Washburn2018-10-17
|
* Merge pull request #2158 from crass/profile_conditionalLibravatar crass2018-10-17
|\ | | | | #2158: Add support for rudimentary conditionals in profiles
| * Update documentation for profile conditionals.Libravatar Glenn Washburn2018-10-16
| |
| * Add support for rudimentary conditionals in profiles, currently only the ↵Libravatar Glenn Washburn2018-10-16
| | | | | | | | HAS_APPIMAGE conditional is supported.
* | manpages: update disable-mnt descriptionLibravatar Vincent432018-10-16
|/ | | This will better match current code.
* Update man pages and usage to reflect --profile enhancement.Libravatar Glenn Washburn2018-10-15
|
* Allow specifying a profile "name" with the profile option (eg. ↵Libravatar Glenn Washburn2018-10-15
| | | | --profile=firefox).
* rename expand_home -> expand_macros to better reflect usage and remove ↵Libravatar Glenn Washburn2018-10-15
| | | | unneeded homedir argument.
* tentative fix: automatically mount libdir in chroot - #2176Libravatar smitsohu2018-10-15
|
* Merge pull request #2192 from crass/fix-ld.so.preload-pathLibravatar startx20172018-10-14
|\ | | | | The path in ld.so.preload should point to RUN_FIREJAIL_LIB_DIR, as LIBDIR may not exist.
| * The path in ld.so.preload should point to RUN_FIREJAIL_LIB_DIR, as LIBDIR ↵Libravatar Glenn Washburn2018-10-13
| | | | | | | | may not exist.
* | Make --join return exit code of the invoked programLibravatar Paweł2018-10-14
| |
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-10-13
|\|
| * bringing in the fix for always have helpers in sandbox (original pull rq ↵Libravatar netblue302018-10-13
| | | | | | | | from crass)
| * private-lib fixLibravatar netblue302018-10-13
| |
| * Revert "Fix issue #2148: Make sure firejail can find helper programs in ↵Libravatar netblue302018-10-13
| | | | | | | | | | | | | | | | | | sandbox regardless of options." This reverts commit 4017e8a1359208e149b2eac10900987acd4a6f9e. I am running into some problems with the initial unshare/mount in main.c. I'll bring in the files one by one.
| * Merge pull request #2185 from glitsj16/masterpdfeditorLibravatar Vincent432018-10-13
| |\ | | | | | | New profile masterpdfeditor
| | * Add masterpdfeditor to firecfgLibravatar glitsj162018-10-13
| | |
| * | Fix issue #2148: Make sure firejail can find helper programs in sandbox ↵Libravatar Glenn Washburn2018-10-13
| |/ | | | | | | regardless of options.
| * Merge pull request #2183 from glitsj16/nitroshareLibravatar SkewedZeppelin2018-10-13
| |\ | | | | | | New profile nitroshare
| | * Add nitroshare to firecfgLibravatar glitsj162018-10-13
| | |
| * | Add artha to firecfgLibravatar glitsj162018-10-13
| |/
* / improve clean_pathname() function: drop reallocLibravatar smitsohu2018-10-13
|/ | | | | | | rf. previous commit a5b7a9a8bec6a7f2162850449b1ff29c1fde2826 freeing what is expected to be a single byte only is most probably not worth the effort
* fs_whitelist: no warning if macro resolution fails because of missing homedirLibravatar smitsohu2018-10-12
|
* clean homedir pathnameLibravatar smitsohu2018-10-12
| | | | fixes #2137 and similar issues with the /proc/self/mountinfo checks
* Minor fixesLibravatar Tad2018-10-11
|
* Merge pull request #2172 from glitsj16/minLibravatar netblue302018-10-11
|\ | | | | New profile min
| * Update for minLibravatar glitsj162018-10-11
| |
* | Merge pull request #2171 from glitsj16/desktopLibravatar netblue302018-10-11
|\ \ | | | | | | New profile desktop (a.k.a. github-desktop)
| * | Update for desktop (a.k.a. github-desktop)Libravatar glitsj162018-10-11
| |/
* | Merge pull request #2170 from glitsj16/easystrokeLibravatar netblue302018-10-11
|\ \ | | | | | | New profile easystroke
| * | Update for easystrokeLibravatar glitsj162018-10-11
| |/
* | Merge pull request #2165 from glitsj16/authenticatorLibravatar netblue302018-10-11
|\ \ | | | | | | Authenticator
| * | Update for authenticatorLibravatar glitsj162018-10-11
| |/
* | Merge pull request #2162 from glitsj16/QMediathekViewLibravatar netblue302018-10-11
|\ \ | | | | | | new profile QMediathekView
| * | Update firecfg.configLibravatar glitsj162018-10-11
| |/
* / allow overriding of disable-mnt with noblacklist - #2154Libravatar smitsohu2018-10-11
|/
* clean /run/user directoryLibravatar smitsohu2018-10-07
|
* Merge pull request #2141 from crass/fix-appimage-hdr-calcLibravatar netblue302018-10-06
|\ | | | | Update appimage size calculation to newest code from libappimage.
| * Update appimage size calculation to newest code from libappimage.Libravatar Glenn Washburn2018-10-05
| |
* | Merge pull request #2138 from crass/fix-fj-proc-detectLibravatar netblue302018-10-06
|\ \ | | | | | | Fix incorrect --list and --tree output under certain circumstances
| * | Firejail should look for processes with names exactly named "firejail" to ↵Libravatar Glenn Washburn2018-10-05
| |/ | | | | | | avoid accounting for processes with a "firejail" prefix.
* | Merge pull request #2130 from crass/fix-2045Libravatar netblue302018-10-04
|\ \ | | | | | | FIX-2045: Fix command name parsing for program paths with spaces.
| * | Fix command name parsing so that program paths with spaces do not cause the ↵Libravatar Glenn Washburn2018-10-01
| |/ | | | | | | wrong or no profile to be detected.
* / incomplete fix: whitelisting of symlinks to other home dirsLibravatar smitsohu2018-10-02
|/ | | | | | | | | belongs to previous commit 51eeef2059f00de117472046601e10a9fd958d51 short summary of the new behavior, which should catch a few corner cases better: - a non-existant file in another homedir (say homedirs are "/foo/user" and "/foo/user2") is silently ignored (previously a tmpfs was mounted on the users homedir, which was wrong) - a symlink pointing to an existing file in another homedir now works (but the link will be always dangling; you need --allusers to see this) - a symlink pointing back to the entire homedir now works as expected
* mount empty home if macro can't be whitelistedLibravatar smitsohu2018-10-01
|
* fs_whitelist: reduce number of loop iterationsLibravatar smitsohu2018-10-01
|
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-09 22:00:45 +0000