Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | cleanup for previous commit | netblue30 | 2022-01-21 |
| | |||
* | fix attribute for /tmp/user in --private-tmp, and fix #4151 | netblue30 | 2022-01-21 |
| | |||
* | hostnames -> static-ip-map | netblue30 | 2022-01-20 |
| | |||
* | compile fix | netblue30 | 2022-01-18 |
| | |||
* | nettrace fixes | netblue30 | 2022-01-18 |
| | |||
* | following up 493a0ef306a8b610f3ed6a1b88a4dbea25e8498b | smitsohu | 2022-01-18 |
| | |||
* | keep-fd cleanup | smitsohu | 2022-01-17 |
| | |||
* | some hardening | smitsohu | 2022-01-17 |
| | |||
* | gcov | smitsohu | 2022-01-17 |
| | |||
* | more compile warnings | netblue30 | 2022-01-16 |
| | |||
* | compile warnings | netblue30 | 2022-01-16 |
| | |||
* | disable pipewire with --nosound | netblue | 2022-01-16 |
| | |||
* | compile warnings | netblue30 | 2022-01-16 |
| | |||
* | more on nettrace | netblue30 | 2022-01-16 |
| | |||
* | Merge pull request #4856 from smitsohu/fildes | netblue30 | 2022-01-16 |
|\ | | | | | keep-fd option (#4845) | ||
| * | keep-fd option (#4845) | smitsohu | 2022-01-14 |
| | | |||
* | | Merge pull request #4851 from kmk3/groups-keep-vglusers | netblue30 | 2022-01-16 |
|\ \ | | | | | | | Keep vglusers group unless no3d is used (virtualgl) | ||
| * | | Keep vglusers group unless no3d is used (virtualgl) | Kelvin M. Klann | 2022-01-12 |
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | virtualgl[1] runs `chown root:vglusers` on `/dev/nvidia*` and on devices usually owned by the "render" group[2]. This makes them unavailable in the sandbox if `noroot` (which causes groups to be dropped) is used. Since firejail classifies all of the aforementioned devices as being `DEV_3D` on fs_dev.c (which means that they are controlled by `no3d`), treat the "vglusers" group the same as the "render" group (by always keeping "vglusers" unless `no3d` is used). See the discussion on #2042 (from this comment[3] onwards). [1] https://virtualgl.org [2] https://github.com/VirtualGL/virtualgl/blob/6f0b90be02d13171dfdfffb112485f4091a5904f/server/vglserver_config#L393 [3] https://github.com/netblue30/firejail/issues/2042#issuecomment-1007468715 Reported-by: @JCallicoat | ||
* | | raincat | netblue30 | 2022-01-14 |
| | | |||
* | | fix warzone2100 (Debian 11) | netblue30 | 2022-01-13 |
| | | |||
* | | add wget2 to firecfg.config | glitsj16 | 2022-01-13 |
|/ | |||
* | refactor closing of file descriptors | smitsohu | 2022-01-12 |
| | |||
* | fix scan-build | netblue30 | 2022-01-11 |
| | |||
* | fix scan-build/cppcheck warnings | netblue30 | 2022-01-11 |
| | |||
* | remove compile warning | netblue30 | 2022-01-10 |
| | |||
* | nettrace | netblue30 | 2022-01-09 |
| | |||
* | Merge pull request #4826 from adrianlshaw/master | netblue30 | 2022-01-08 |
|\ | | | | | RPCS3 profile | ||
| * | Add rpcs3 profile | Adrian L. Shaw | 2022-01-06 |
| | | |||
* | | Merge pull request #4827 from kmk3/noprinters-add-missing | netblue30 | 2022-01-08 |
|\ \ | | | | | | | noprinters: add missing items & add to profile.template | ||
| * | | noprinters: add missing items from new command checklist | Kelvin M. Klann | 2022-01-05 |
| |/ | | | | | | | | | | | | | | | | | | | | | | | See CONTRIBUTING.md. The changes are based on what was done on commit 5a612029b ("rename noautopulse to keep-config-pulse", 2021-05-13) / PR #4278. This amends commit bd15e763e ("--noprinter option", 2021-10-20) and commit d9403dcdc ("small fix", 2021-10-20). Relates to #4607. | ||
* | | 2022 copyright update | netblue30 | 2022-01-07 |
| | | |||
* | | more on nettrace | netblue30 | 2022-01-07 |
| | | |||
* | | fix wrap/nowrap help string in firemon | netblue30 | 2022-01-07 |
|/ | |||
* | add notable | glitsj16 | 2022-01-05 |
| | |||
* | nettrace/netlock | netblue30 | 2022-01-04 |
| | |||
* | remove compile warnings | netblue30 | 2021-12-28 |
| | |||
* | updates | netblue30 | 2021-12-28 |
| | |||
* | Merge branch 'master' into whitelist-ro | netblue30 | 2021-12-28 |
|\ | |||
| * | nettrace | netblue30 | 2021-12-28 |
| | | |||
| * | nettrace/netlock | netblue30 | 2021-12-28 |
| | | |||
| * | Fix a typo | Tad | 2021-12-21 |
| | | | | | | | | Signed-off-by: Tad <tad@spotco.us> | ||
| * | firecfg fix (#4235) | netblue30 | 2021-12-21 |
| | | |||
| * | fix bug: firejail rejects empty arguments (#4395) | netblue30 | 2021-12-21 |
| | | |||
| * | updates | netblue30 | 2021-12-19 |
| | | |||
| * | fix --private-cwd problem | netblue30 | 2021-12-19 |
| | | |||
| * | Remove profcleaner.c and profcleaner.sh | Kelvin M. Klann | 2021-12-10 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | As of this commit, these are not of much use. Though later if a generic profile search/replace tool with built-in rules is to be added, the tools in question could be used as a starting point. src/tools/profcleaner.c was added on commit fe0f975f4 ("move whitelist/blacklist to allow/deny", 2021-07-05). src/tools/profcleaner.sh was added on commit ed02ab57b ("Create profcleaner.sh", 2021-07-07) / PR #4389. Relates to #4410. | ||
| * | Revert "allow/noallow/deny/nodeny aliases for ↵ | Kelvin M. Klann | 2021-12-10 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | whitelist/nowhitelist/blacklist/noblacklist" This reverts commit 45f2ba544e9934b49e03b17c0a638dddc3a44734. Note: This is not a clean revert. Note2: This also reverts the changes to src/firejail/profile.c from commit fe0f975f4 ("move whitelist/blacklist to allow/deny", 2021-07-05). Relates to #4410. | ||
| * | Revert "allow/deny in zsh completion" | Kelvin M. Klann | 2021-12-10 |
| | | | | | | | | | | | | This reverts commit 1021fb9e5d32a48698c0c8c913d44a048b12db7f. Relates to #4388 and #4410. | ||
| * | profstats fix (#4733) | netblue30 | 2021-12-10 |
| | | |||
| * | Merge pull request #4743 from vnepogodin/master | netblue30 | 2021-12-08 |
| |\ | | | | | | | Add CachyBrowser profile |