Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Merge pull request #289 from manevich/patch-2 | 2016-02-10 | |
|\ | | | | | Fix problem with relative path in storage_find function | ||
| * | Fix problem with relative path in storage_find function | 2016-02-10 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | storage_find function fails on relative path, so nothing reported to log when blacklisted file accessed by relative path. This is because CWD is NULL when realpath function called. How to reproduce: touch /home/user/somefile firejail --blacklist=somefile --tracelog cat somefile Solution: keep CWD value and set it before calling realpath. In order to do this: * new wrapper for chdir call, and variable to keep CWD added. * storage_find modified to chdir before calling realpath function. * order of storage_find and orig_* calls in syscall wrappers changed, to prevent error set by calls in storage_find leak outside. * condition for calling realpath changed to include double-slash and path without initial slash. | ||
* | | STUN/WebRTC disabled in default netfilter configuration | 2016-02-10 | |
|/ | |||
* | fixed man firejail-profile | 2016-02-09 | |
| | |||
* | isolate command name problem | 2016-02-08 | |
| | |||
* | whitelist fix | 2016-02-08 | |
| | |||
* | fixed whitelist problem | 2016-02-08 | |
| | |||
* | set window title | 2016-02-08 | |
| | |||
* | default seccomp filter update | 2016-02-08 | |
| | |||
* | 0.9.38 testing | 2016-02-02 | |
| | |||
* | 0.9.38 testing | 2016-02-01 | |
| | |||
* | deprecated --private-home feature | 2016-02-01 | |
| | |||
* | various fixes | 2016-01-31 | |
| | |||
* | various fixes | 2016-01-31 | |
| | |||
* | fixed ssh login in firejail shell | 2016-01-31 | |
| | |||
* | Typos | 2016-01-30 | |
| | |||
* | 0.9.38-rc1 testing | 2016-01-29 | |
| | |||
* | Merge pull request #269 from mcarpenter/sa_family_t | 2016-01-29 | |
|\ | | | | | Include <sys/socket.h> for sa_family_t (RHEL 6.6) | ||
| * | Include <sys/socket.h> for sa_family_t (RHEL 6.6) | 2016-01-29 | |
| | | |||
* | | Fix for systems that don't have CAP_SYSLOG | 2016-01-29 | |
|/ | | | | | | | CAP_SYSLOG was retroactively split from CAP_SYSADMIN (Linux kernel commit ce6ada35bdf710d16582cc4869c26722547e6f11). Existing supported systems might not yet have this commit (eg RHEL 6.6) in which case compilation fails. | ||
* | the first protocol list requested takes precedence | 2016-01-28 | |
| | |||
* | don't allow --chroot as user without seccomp support | 2016-01-26 | |
| | |||
* | --private-tmp | 2016-01-26 | |
| | |||
* | --tmpfs allowd only as root user | 2016-01-25 | |
| | |||
* | --disable-network --disable-userns compile time options | 2016-01-25 | |
| | |||
* | 0.9.38 testing | 2016-01-24 | |
| | |||
* | testing | 2016-01-24 | |
| | |||
* | Make the sandbox process reap all children. | 2016-01-23 | |
| | | | | | | | The sandbox process is PID 1 in the sandbox, which means it needs to reap orphans within the jail by running waitpid(-1). Solves netblue30/firejail#256 | ||
* | set terminal window title | 2016-01-23 | |
| | |||
* | Merge pull request #255 from sinkuu/fix_run_symlink | 2016-01-23 | |
|\ | | | | | Fix symlink invocation for programs placing symlinks in $PATH | ||
| * | Fix symlink invocation for programs placing symlinks in $PATH | 2016-01-23 | |
| | | |||
* | | disable /dev/kmsg and /proc/kmsg | 2016-01-23 | |
| | | |||
* | | added --user command | 2016-01-23 | |
|/ | |||
* | fixed .asoundrc problems for Debian sid | 2016-01-22 | |
| | |||
* | fix gvfs bug | 2016-01-21 | |
| | |||
* | whitelist fix | 2016-01-21 | |
| | |||
* | changed typo in man file generation | 2016-01-20 | |
| | |||
* | build regressions | 2016-01-20 | |
| | |||
* | debug whitelist code | 2016-01-19 | |
| | |||
* | man firejail-profile fixes | 2016-01-18 | |
| | |||
* | if the program name is a symbolic link, use the real path to generate the ↵ | 2016-01-17 | |
| | | | | name of the profile file | ||
* | symlink invocation | 2016-01-17 | |
| | |||
* | faster exit | 2016-01-16 | |
| | |||
* | join command enhancements | 2016-01-14 | |
| | |||
* | --join fixes | 2016-01-14 | |
| | |||
* | copyright 2016 | 2016-01-13 | |
| | |||
* | ipv6 support | 2016-01-13 | |
| | |||
* | IPv6 support | 2016-01-11 | |
| | |||
* | fixed minimum mtu | 2016-01-11 | |
| | |||
* | network work | 2016-01-10 | |
| |