firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
*	Merge pull request #293 from reinerh/master	netblue30	2016-02-14
\|\ \| \| \| \|	Fix memory leak
\| *	Fix memory leak	Reiner Herrmann	2016-02-13
\| \|
* \|	small fixes	netblue30	2016-02-14
\| \|
* \|	--trace fix	netblue30	2016-02-13
\| \|
* \|	--trace fix	netblue30	2016-02-13
\|/
*	seccomp fixes	netblue30	2016-02-12
\|
*	set sandbox nice value	netblue30	2016-02-11
\|
*	Merge pull request #289 from manevich/patch-2	netblue30	2016-02-10
\|\ \| \| \| \|	Fix problem with relative path in storage_find function
\| *	Fix problem with relative path in storage_find function	Aleksey Manevich	2016-02-10
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	storage_find function fails on relative path, so nothing reported to log when blacklisted file accessed by relative path. This is because CWD is NULL when realpath function called. How to reproduce: touch /home/user/somefile firejail --blacklist=somefile --tracelog cat somefile Solution: keep CWD value and set it before calling realpath. In order to do this: * new wrapper for chdir call, and variable to keep CWD added. * storage_find modified to chdir before calling realpath function. * order of storage_find and orig_* calls in syscall wrappers changed, to prevent error set by calls in storage_find leak outside. * condition for calling realpath changed to include double-slash and path without initial slash.
* \|	STUN/WebRTC disabled in default netfilter configuration	netblue30	2016-02-10
\|/
*	fixed man firejail-profile	netblue30	2016-02-09
\|
*	isolate command name problem	netblue30	2016-02-08
\|
*	whitelist fix	netblue30	2016-02-08
\|
*	fixed whitelist problem	netblue30	2016-02-08
\|
*	set window title	netblue30	2016-02-08
\|
*	default seccomp filter update	netblue30	2016-02-08
\|
*	0.9.38 testing	netblue30	2016-02-02
\|
*	0.9.38 testing	netblue30	2016-02-01
\|
*	deprecated --private-home feature	netblue30	2016-02-01
\|
*	various fixes	netblue30	2016-01-31
\|
*	various fixes	netblue30	2016-01-31
\|
*	fixed ssh login in firejail shell	netblue30	2016-01-31
\|
*	Typos	Martin Carpenter	2016-01-30
\|
*	0.9.38-rc1 testing	netblue30	2016-01-29
\|
*	Merge pull request #269 from mcarpenter/sa_family_t	netblue30	2016-01-29
\|\ \| \| \| \|	Include <sys/socket.h> for sa_family_t (RHEL 6.6)
\| *	Include <sys/socket.h> for sa_family_t (RHEL 6.6)	Martin Carpenter	2016-01-29
\| \|
* \|	Fix for systems that don't have CAP_SYSLOG	Martin Carpenter	2016-01-29
\|/ \| \| \| \| \| \|	CAP_SYSLOG was retroactively split from CAP_SYSADMIN (Linux kernel commit ce6ada35bdf710d16582cc4869c26722547e6f11). Existing supported systems might not yet have this commit (eg RHEL 6.6) in which case compilation fails.
*	the first protocol list requested takes precedence	netblue30	2016-01-28
\|
*	don't allow --chroot as user without seccomp support	netblue30	2016-01-26
\|
*	--private-tmp	root	2016-01-26
\|
*	--tmpfs allowd only as root user	root	2016-01-25
\|
*	--disable-network --disable-userns compile time options	netblue30	2016-01-25
\|
*	0.9.38 testing	netblue30	2016-01-24
\|
*	testing	netblue30	2016-01-24
\|
*	Make the sandbox process reap all children.	Karl-Johan Karlsson	2016-01-23
\| \| \| \| \| \| \|	The sandbox process is PID 1 in the sandbox, which means it needs to reap orphans within the jail by running waitpid(-1). Solves netblue30/firejail#256
*	set terminal window title	netblue30	2016-01-23
\|
*	Merge pull request #255 from sinkuu/fix_run_symlink	netblue30	2016-01-23
\|\ \| \| \| \|	Fix symlink invocation for programs placing symlinks in $PATH
\| *	Fix symlink invocation for programs placing symlinks in $PATH	sinkuu	2016-01-23
\| \|
* \|	disable /dev/kmsg and /proc/kmsg	netblue30	2016-01-23
\| \|
* \|	added --user command	netblue30	2016-01-23
\|/
*	fixed .asoundrc problems for Debian sid	netblue30	2016-01-22
\|
*	fix gvfs bug	netblue30	2016-01-21
\|
*	whitelist fix	netblue30	2016-01-21
\|
*	changed typo in man file generation	Holger Heinz	2016-01-20
\|
*	build regressions	netblue30	2016-01-20
\|
*	debug whitelist code	netblue30	2016-01-19
\|
*	man firejail-profile fixes	netblue30	2016-01-18
\|
*	if the program name is a symbolic link, use the real path to generate the ↵	netblue30	2016-01-17
\| \| \| \|	name of the profile file
*	symlink invocation	netblue30	2016-01-17
\|
*	faster exit	netblue30	2016-01-16
\|