Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | cleanup | 2016-03-10 | |
| | |||
* | Merge pull request #363 from ligthyear/fixing-exit-code | 2016-03-10 | |
|\ | | | | | Forward exit code from child process | ||
| * | Forward exit code from child process | 2016-03-10 | |
| | | | | | | | | | | | | | | | | This changeset reads the status code of the child process run inside the sandbox and forwards it to the outer process. Which in turn makes that result its own exiting status code. Fixes #358 | ||
* | | centos8 user namespace fix | 2016-03-10 | |
| | | |||
* | | overlayfs fix for home directories mounted on a different partition | 2016-03-10 | |
| | | |||
* | | overlay fix | 2016-03-10 | |
| | | |||
* | | fix overlayfs problem | 2016-03-09 | |
|/ | |||
* | fixes | 2016-03-09 | |
| | |||
* | fs work | 2016-03-08 | |
| | |||
* | logging fixes | 2016-03-07 | |
| | |||
* | fixes | 2016-03-05 | |
| | |||
* | documentation | 2016-03-04 | |
| | |||
* | --ls | 2016-03-04 | |
| | |||
* | --ls | 2016-03-04 | |
| | |||
* | cleanup | 2016-03-03 | |
| | |||
* | debugging | 2016-03-02 | |
| | |||
* | cleanup | 2016-03-02 | |
| | |||
* | added ipc-namespace profile command | 2016-03-02 | |
| | |||
* | sshd fixes | 2016-03-01 | |
| | |||
* | scp fixes | 2016-03-01 | |
| | |||
* | fix typo | 2016-03-01 | |
| | |||
* | firemon fixes | 2016-02-29 | |
| | |||
* | various fixes | 2016-02-28 | |
| | |||
* | firemon fixes | 2016-02-27 | |
| | |||
* | man page fixes | 2016-02-27 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2016-02-26 | |
|\ | |||
| * | Fix manual typo | 2016-02-26 | |
| | | |||
* | | x11 support | 2016-02-26 | |
|/ | |||
* | x11 fixes | 2016-02-25 | |
| | |||
* | x11 work | 2016-02-24 | |
| | |||
* | x11 work | 2016-02-24 | |
| | |||
* | allow --interface only to root user for --enable-network=restricted | 2016-02-24 | |
| | |||
* | x11 work | 2016-02-24 | |
| | |||
* | Merge branch 'master' of https://github.com/netblue30/firejail | 2016-02-24 | |
|\ | |||
| * | Merge pull request #319 from yumkam/network-restricted | 2016-02-24 | |
| |\ | | | | | | | Add compile-time option to restrict --net= to root only | ||
| | * | Add compile-time option to restrict --net= to root only | 2016-02-23 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ./configure --enable-network=restricted allows only --net=none to non-root users. Other variants delegate too much power to non-root users and dangerous (it completely bypasses system-wide firewall and routing, it allows introducing arbitrary-chosen MAC and IP interfaces on LAN [disregarding DHCP policy], etc). Root already had power to twiddle with anything, so no sense to restrain her, and --net=none looks safe enough (and still useful) for ordinary users. | ||
| * | | man/firejail.txt: note you don't need --ip6= with SLAAC | 2016-02-23 | |
| |/ | |||
* / | x11 work | 2016-02-23 | |
|/ | |||
* | x11 work | 2016-02-23 | |
| | |||
* | small fixes | 2016-02-21 | |
| | |||
* | fixes | 2016-02-20 | |
| | |||
* | testing | 2016-02-20 | |
| | |||
* | euid switching | 2016-02-19 | |
| | |||
* | euid switching | 2016-02-19 | |
| | |||
* | moved sandbox name to /run/firejail/name/<PID> | 2016-02-19 | |
| | |||
* | euid switching | 2016-02-18 | |
| | |||
* | added mkdir in all whitelisted profiles | 2016-02-18 | |
| | |||
* | mkdir support in profile files | 2016-02-17 | |
| | |||
* | centos7 fixes; support for building rpm packages | 2016-02-16 | |
| | |||
* | fix path | 2016-02-15 | |
| |