Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | let is_ready_for_join() return a boolean | smitsohu | 2019-12-23 |
| | |||
* | simplify join timeout | smitsohu | 2019-12-23 |
| | |||
* | cleanup | smitsohu | 2019-12-23 |
| | |||
* | make join timeout configurable in firejail.config | smitsohu | 2019-12-23 |
| | |||
* | let join wait if target sandbox is not ready yet | smitsohu | 2019-12-23 |
| | | | | fixes #2139 | ||
* | move invalid_sandbox function to join module | smitsohu | 2019-12-22 |
| | |||
* | fixing the fix | smitsohu | 2019-11-14 |
| | | | | | get previous commit acbf707889ae241bfd476f5371df4599103b6606 in line with treatment of other directories in /run/firejail/mnt | ||
* | blacklist private-home runtime directory | smitsohu | 2019-11-14 |
| | | | | | as far as possible avoid creating locations in the file system that are both writable and executable | ||
* | simplify private option ownership checks and make them more consistent | smitsohu | 2019-11-14 |
| | | | | | | allowing private and home directory to be owned by different users if the home directory is inside /home was thought to add flexibility, but the scenario is maybe a bit too exotic, and ignoring it paves the way for a simplification | ||
* | Merge pull request #3037 from vutny/fix-3029 | netblue30 | 2019-11-13 |
|\ | | | | | Resolve #3029: drop outdated Skype profile | ||
| * | Resolve #3029: drop outdated Skype profile | Denys Havrysh | 2019-11-12 |
| | | |||
* | | private-options: add homedir ownership check | smitsohu | 2019-11-12 |
| | | |||
* | | private-cache warning messages - #2968 | smitsohu | 2019-11-12 |
| | | |||
* | | add HAS_NET conditional | smitsohu | 2019-11-11 |
|/ | |||
* | add kfind profile | smitsohu | 2019-11-09 |
| | |||
* | Disabled --overlay for kernels 4.219 and newer until we can bring a fix in | netblue30 | 2019-11-08 |
| | |||
* | dns fixes | netblue30 | 2019-10-31 |
| | |||
* | cleanup after scan-build | netblue30 | 2019-10-31 |
| | |||
* | remove scan-build warning | netblue30 | 2019-10-31 |
| | |||
* | Rework waterfox profile (#3014) | rusty-snake | 2019-10-28 |
| | | | closes #3013 | ||
* | fixup! Add amuled profile (redirect from amule) | rusty-snake | 2019-10-27 |
| | |||
* | Update main.c | Manuel Dipolt | 2019-10-25 |
| | | | Eight byte stack alignment is a requirement of the Procedure Call Standard for the ARM Architecture [AAPCS]. This specifies that functions must maintain an eight-byte aligned stack address (for example: 0x00, 0x08, 0x10, 0x18, 0x20) on all external interfaces | ||
* | Fix #2995 | rusty-snake | 2019-10-16 |
| | |||
* | Profiles: add signal-cli profile (#3002) | Timo Hardebusch | 2019-10-15 |
| | | | | | | | | * Profiles: add signal-cli profile Clarification regarding Java * Added suggestions from code review | ||
* | blacklist runtime profile directory | smitsohu | 2019-10-14 |
| | |||
* | chroot error message typo | smitsohu | 2019-10-13 |
| | |||
* | postpone procfs mount until after chroot call | smitsohu | 2019-10-13 |
| | | | | issue #2301 | ||
* | fix chroot with mounted resolv.conf | smitsohu | 2019-10-13 |
| | |||
* | x11 hardening | smitsohu | 2019-10-13 |
| | |||
* | kalgebra.profile, kalgebramobile.profile | rusty-snake | 2019-10-12 |
| | |||
* | x11 xorg: blacklist non-default Xauthority file | smitsohu | 2019-10-08 |
| | | | fixes #1652 | ||
* | add x11 xorg option to HAS_X11 conditional - #2205 | smitsohu | 2019-10-08 |
| | |||
* | add HAS_X11 conditional, disconnect session manager - #2205 | smitsohu | 2019-10-08 |
| | |||
* | little tweaks | smitsohu | 2019-10-08 |
| | |||
* | Merge pull request #2982 from smitsohu/chroot | netblue30 | 2019-10-04 |
|\ | | | | | Move chroot entirely from path based to file descriptor based mounts | ||
| * | improve enforce_filters warning | smitsohu | 2019-10-01 |
| | | | | | | added an additional newline in order to keep it visually separate from other unrelated error messages | ||
| * | simplify chroot option parsing | smitsohu | 2019-10-01 |
| | | | | | | | | this is a partial revert, back to the original code | ||
| * | base checks and mounts on same file descriptor | smitsohu | 2019-10-01 |
| | | |||
| * | improve variable names | smitsohu | 2019-09-29 |
| | | |||
| * | chroot module | smitsohu | 2019-09-29 |
| | | |||
| * | move chroot from path based to file descriptor based mounts | smitsohu | 2019-09-29 |
| | | |||
* | | fix the fix | smitsohu | 2019-10-04 |
| | | | | | | | | | | | | cf. previous commit 34e5ad65b238b698c55e4921c9ac9294e6548cc7 line buffered output is what we really want | ||
* | | alphabetize man page entries | smitsohu | 2019-10-04 |
| | | |||
* | | fix concurrent writing to trace file | smitsohu | 2019-10-04 |
| | | |||
* | | break out of libtrace file open loop | smitsohu | 2019-10-04 |
| | | |||
* | | commented out some debug code in libtrace | netblue30 | 2019-09-29 |
| | | |||
* | | increase socket buffer size for firemon, bug #2700 | netblue30 | 2019-09-29 |
|/ | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | smitsohu | 2019-09-22 |
|\ | |||
| * | Create pngquant.profile | rusty-snake | 2019-09-21 |
| | | |||
| * | Create gnome-latex.profile | rusty-snake | 2019-09-20 |
| | |