aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAge
* Misc. typos Libravatar luz.paz2018-11-19
| | | Found using `codespell -q 3 -L shotcut,objext,als,ans,creat,varius,chage,tthe`
* Remove -c from usage completely.Libravatar Glenn Washburn2018-11-18
|
* Add better documentation for "-c" option.Libravatar Glenn Washburn2018-11-18
|
* Merge pull request #2255 from crass/fix-profile-name-handlingLibravatar netblue302018-11-14
|\ | | | | Allow prefixing colon to profile argument of --profile to for a profile search
| * Allow prefixing colon to profile argument of --profile to for a profile ↵Libravatar Glenn Washburn2018-11-09
| | | | | | | | search, and disallow a directory to match as a profile file.
* | still fixing indentationLibravatar smitsohu2018-11-13
| | | | | | | | my editor is weird sometimes
* | identation fixLibravatar smitsohu2018-11-13
| |
* | misc small adjustmentsLibravatar smitsohu2018-11-13
| |
* | user database: improve error strings and checksLibravatar smitsohu2018-11-11
| |
* | fix the fix: ff6612fac86e1a79ba264167f0263ff12f62f346Libravatar smitsohu2018-11-10
| |
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-11-10
|\|
| * Have appimage handling be the same with or with out special -- argument.Libravatar Glenn Washburn2018-11-08
| |
| * fix compileLibravatar netblue302018-11-08
| |
| * profile parser testingLibravatar netblue302018-11-08
| |
| * Merge pull request #2247 from SkewedZeppelin/u2f_condLibravatar netblue302018-11-07
| |\ | | | | | | Add new config option to disable U2F in browsers, enabled by default
| | * Add new config option to disable U2F in browsers, enabled by defaultLibravatar Tad2018-11-05
| | |
* | | unreadable firejail.users database fixesLibravatar smitsohu2018-11-10
|/ / | | | | | | | | | | | | run firecfg with umask 022 and print a diagnostic message if the database is not readable. closes #2225
* / Fixes for brave browserLibravatar Fred-Barclay2018-11-05
|/
* fix --bandwidth commandLibravatar netblue302018-11-05
|
* recursive remounts: add fallback for old kernels, some improvementsLibravatar smitsohu2018-11-04
| | | | | | | | | | | * vanilla kernels before 3.15 don't expose a mount id in /proc/pid/fdinfo files. This is still relevant on Ubuntu 14.04 with 3.13 kernel, CentOS 7 doesn't have this problem. In this case fall back to simple a remount and print a warning. * drop euid switching as it doesn't really serve a purpose here (paths are not opened in reading or writing mode, and we are not doing anything with it) and potentially causes problems when suid programs are sandboxed * more rigorous error handling
* mount appimages nodev,nosuidLibravatar smitsohu2018-11-04
|
* fs_whitelist: minor mountinfo check improvement, cleanupLibravatar smitsohu2018-11-04
|
* Add Mendeley profileLibravatar Fred-Barclay2018-11-02
|
* adding --net.print command line optionLibravatar netblue302018-10-29
|
* aisleriotLibravatar netblue302018-10-28
|
* little tweaks, cosmetic changesLibravatar smitsohu2018-10-26
|
* fix: return with euid 0Libravatar smitsohu2018-10-25
|
* experimental: remounts child mount points as well (read-only, read-write, ↵Libravatar smitsohu2018-10-25
| | | | noexec)
* Add QOwnNotes profileLibravatar Fred-Barclay2018-10-20
|
* improve some error messagesLibravatar smitsohu2018-10-17
|
* improve clean_pathname functionLibravatar smitsohu2018-10-17
|
* fs_whitelist: cache length of home directory stringLibravatar smitsohu2018-10-17
|
* fix #2197Libravatar netblue302018-10-17
|
* Merge pull request #2199 from crass/fix-2142-firefox-sandbox-appimageLibravatar netblue302018-10-17
|\ | | | | Fix #2142: Firefox appimage fails because it needs non-default seccomp
| * Do not override user provided seccomp lists when in chroot/overlay/appimage, ↵Libravatar Glenn Washburn2018-10-16
| | | | | | | | but to use the default if none is provided.
* | Fix doc: A more accurate example of profile loading by profile name.Libravatar Glenn Washburn2018-10-17
| |
* | Fix docs on default seccomp list: change mfsservctl -> nfsservctl and ↵Libravatar Glenn Washburn2018-10-17
| | | | | | | | reorder, add ni_syscall, remove duplicate process_vm_writev, add sys_debug_setcontext.
* | Update profile manpage to detail added "include" functionality.Libravatar Glenn Washburn2018-10-17
| |
* | Allow include to search userdir then systemdir for "bare" profile file names.Libravatar Glenn Washburn2018-10-17
| |
* | Merge pull request #2158 from crass/profile_conditionalLibravatar crass2018-10-17
|\ \ | | | | | | #2158: Add support for rudimentary conditionals in profiles
| * | Update documentation for profile conditionals.Libravatar Glenn Washburn2018-10-16
| | |
| * | Add support for rudimentary conditionals in profiles, currently only the ↵Libravatar Glenn Washburn2018-10-16
| |/ | | | | | | HAS_APPIMAGE conditional is supported.
* / manpages: update disable-mnt descriptionLibravatar Vincent432018-10-16
|/ | | This will better match current code.
* Update man pages and usage to reflect --profile enhancement.Libravatar Glenn Washburn2018-10-15
|
* Allow specifying a profile "name" with the profile option (eg. ↵Libravatar Glenn Washburn2018-10-15
| | | | --profile=firefox).
* rename expand_home -> expand_macros to better reflect usage and remove ↵Libravatar Glenn Washburn2018-10-15
| | | | unneeded homedir argument.
* tentative fix: automatically mount libdir in chroot - #2176Libravatar smitsohu2018-10-15
|
* Merge pull request #2192 from crass/fix-ld.so.preload-pathLibravatar startx20172018-10-14
|\ | | | | The path in ld.so.preload should point to RUN_FIREJAIL_LIB_DIR, as LIBDIR may not exist.
| * The path in ld.so.preload should point to RUN_FIREJAIL_LIB_DIR, as LIBDIR ↵Libravatar Glenn Washburn2018-10-13
| | | | | | | | may not exist.
* | Make --join return exit code of the invoked programLibravatar Paweł2018-10-14
| |