Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add ephemeral profile (#3094) | glitsj16 | 2019-12-23 |
| | | | | | | | | * Create ephemeral.profile * Add ephemeral.profile * Add ephemeral.profile | ||
* | Add gfeeds.profile | rusty-snake | 2019-12-20 |
| | |||
* | Fix Brave's native sandbox (#3087) | glitsj16 | 2019-12-19 |
| | | | | | | | | | | * Allow user access to /proc/config.gz * Fix Brave's native sandbox * Move /proc/config.gz to disable-common.inc * Move /proc/config.gz to disable-common.inc | ||
* | Add brave redirect profiles (#3088) | glitsj16 | 2019-12-18 |
| | | | | | | | | | | | | | | * Add more brave redirects to firecfg.config These redirects are found on Debian/Ubuntu when enabling the official Brave repositories cfr. https://brave-browser.readthedocs.io/en/latest/installing-brave.html#linux * Create brave-browser-beta.profile * Create brave-browser-dev.profile * Create brave-browser-nightly.profile * Create brave-browser-stable.profile | ||
* | Fix ordering of 'RESTRICTED SHELL' | glitsj16 | 2019-12-15 |
| | |||
* | postmortem: playing around | netblue30 | 2019-12-15 |
| | |||
* | small fix | netblue30 | 2019-12-15 |
| | |||
* | Fix --appimage on linux 5.4.x kernel | glitsj16 | 2019-12-14 |
| | | | Fixes #3068. | ||
* | little things | smitsohu | 2019-12-11 |
| | |||
* | cleanup | smitsohu | 2019-12-03 |
| | |||
* | fix stack alignment | smitsohu | 2019-11-30 |
| | | | | apparently on x86 and on other platforms like aarch64 a 16 byte aligned stack is expected todo: replace this with a generic check | ||
* | libreoffice aliasen | rusty-snake | 2019-11-28 |
| | |||
* | add private-tmp debug message | smitsohu | 2019-11-28 |
| | |||
* | mask more private options runtime directories, just to be sure | smitsohu | 2019-11-28 |
| | |||
* | fix interaction between private options and allusers option | smitsohu | 2019-11-28 |
| | |||
* | Add gist-paste to firecfg.config | glitsj16 | 2019-11-25 |
| | |||
* | Add new profile: gist (#3061) | glitsj16 | 2019-11-25 |
| | | | | | | | | | | | | * Create gist.profile * Add gist config to disable-programs.inc * Add gist to firecfg.config * Update RELNOTES * Update README.md | ||
* | Add new profile: unf (#3060) | glitsj16 | 2019-11-24 |
| | | | | | | * Create unf.profile * Add unf to firecfg.config | ||
* | Add new profile: gmpc (#3059) | glitsj16 | 2019-11-24 |
| | | | | | | | | * Create gmpc.profile * Add gmpc config to disable-programs.inc * Add gmpc to firecfg.config | ||
* | Add new profile: drawio (#3058) | glitsj16 | 2019-11-24 |
| | | | | | | | | * Create drawio.profile * Add drawio config to disable-programs.inc * Add drawio to firecfg.config | ||
* | Add new profile: ddgtk (#3057) | glitsj16 | 2019-11-24 |
| | | | | | | * Create ddgtk.profile * Add ddgtk to firecfg.config | ||
* | Add new profile: cameramonitor (#3056) | glitsj16 | 2019-11-24 |
| | | | | | | * Create cameramonitor.profile * Add cameramonitor to firecfg.config | ||
* | New profile: audio-recorder (#3055) | glitsj16 | 2019-11-24 |
| | | | | | | * Create audio-recorder.profile * Add audio-recorder to firecfg.config | ||
* | merges | Tad | 2019-11-24 |
| | |||
* | Add new electron-mail profile (#3053) | glitsj16 | 2019-11-23 |
| | | | | | | | | * Create electron-mail.profile * Add electron-mail to disable-programs.inc * Add electron-mail to firecfg.config | ||
* | improving remount performance | smitsohu | 2019-11-19 |
| | |||
* | fix previous commit | netblue30 | 2019-11-15 |
| | |||
* | enable apparmor profile from firecfg | netblue30 | 2019-11-15 |
| | |||
* | fixing the fix | smitsohu | 2019-11-14 |
| | | | | | get previous commit acbf707889ae241bfd476f5371df4599103b6606 in line with treatment of other directories in /run/firejail/mnt | ||
* | blacklist private-home runtime directory | smitsohu | 2019-11-14 |
| | | | | | as far as possible avoid creating locations in the file system that are both writable and executable | ||
* | simplify private option ownership checks and make them more consistent | smitsohu | 2019-11-14 |
| | | | | | | allowing private and home directory to be owned by different users if the home directory is inside /home was thought to add flexibility, but the scenario is maybe a bit too exotic, and ignoring it paves the way for a simplification | ||
* | Merge pull request #3037 from vutny/fix-3029 | netblue30 | 2019-11-13 |
|\ | | | | | Resolve #3029: drop outdated Skype profile | ||
| * | Resolve #3029: drop outdated Skype profile | Denys Havrysh | 2019-11-12 |
| | | |||
* | | private-options: add homedir ownership check | smitsohu | 2019-11-12 |
| | | |||
* | | private-cache warning messages - #2968 | smitsohu | 2019-11-12 |
| | | |||
* | | add HAS_NET conditional | smitsohu | 2019-11-11 |
|/ | |||
* | add kfind profile | smitsohu | 2019-11-09 |
| | |||
* | Disabled --overlay for kernels 4.219 and newer until we can bring a fix in | netblue30 | 2019-11-08 |
| | |||
* | dns fixes | netblue30 | 2019-10-31 |
| | |||
* | cleanup after scan-build | netblue30 | 2019-10-31 |
| | |||
* | remove scan-build warning | netblue30 | 2019-10-31 |
| | |||
* | Rework waterfox profile (#3014) | rusty-snake | 2019-10-28 |
| | | | closes #3013 | ||
* | fixup! Add amuled profile (redirect from amule) | rusty-snake | 2019-10-27 |
| | |||
* | Update main.c | Manuel Dipolt | 2019-10-25 |
| | | | Eight byte stack alignment is a requirement of the Procedure Call Standard for the ARM Architecture [AAPCS]. This specifies that functions must maintain an eight-byte aligned stack address (for example: 0x00, 0x08, 0x10, 0x18, 0x20) on all external interfaces | ||
* | Fix #2995 | rusty-snake | 2019-10-16 |
| | |||
* | Profiles: add signal-cli profile (#3002) | Timo Hardebusch | 2019-10-15 |
| | | | | | | | | * Profiles: add signal-cli profile Clarification regarding Java * Added suggestions from code review | ||
* | blacklist runtime profile directory | smitsohu | 2019-10-14 |
| | |||
* | chroot error message typo | smitsohu | 2019-10-13 |
| | |||
* | postpone procfs mount until after chroot call | smitsohu | 2019-10-13 |
| | | | | issue #2301 | ||
* | fix chroot with mounted resolv.conf | smitsohu | 2019-10-13 |
| |