firejail - Mirror of https://github.com/netblue30/firejail

	Commit message (Collapse)	Author	Age
...
* \|	display-im6.q16	netblue30	2021-02-11
\| \|
* \|	Merge pull request #3969 from glitsj16/fsaccessat2	netblue30	2021-02-11
\|\ \ \| \| \| \| \| \|	add support for faccessat2 syscall
\| * \|	add support for faccessat2 syscall	glitsj16	2021-02-10
\| \| \|
\| * \|	add support for faccessat2 syscall	glitsj16	2021-02-10
\| \| \|
\| * \|	add support for faccessat2 syscall	glitsj16	2021-02-10
\| \| \|
\| * \|	add support for fsaccessat2 syscall	glitsj16	2021-02-10
\| \| \|
* \| \|	fix spacing in man firejail	glitsj16	2021-02-10
\| \| \|
* \| \|	fix private=directory in man firejail-profile	glitsj16	2021-02-10
\| \| \|
* \| \|	fix ordering of deterministic-exit-code in man firejail	glitsj16	2021-02-10
\|/ /
* \|	adding DISPLAY to env_whitelist	netblue30	2021-02-09
\| \|
* \|	Merge pull request #3849 from bbhtt/email	netblue30	2021-02-09
\|\ \ \| \| \| \| \| \|	Email part (2)
\| * \|	Add neomutt to firefg.config	bbhtt	2020-12-28
\| \| \|
* \| \|	Filter environment variables	Topi Miettinen	2021-02-08
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Save all environment variables for later use in the application, clear environment and re-apply only whitelisted variables for the main firejail process. The whitelisted environment is only used by C library. Sandboxed tools will get further variables used internally (FIREJAIL_*). All variables will be reapplied for the firejailed application. This also lifts the length restriction for environment variables, except for the variables used by Firejail itself or the sandboxed tools.
* \| \|	Add profile for Gemini (#3946)	Neo00001	2021-02-07
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Update disable-programs.inc * Create calligragemini.profile * Update calligra.profile * Update calligra.profile * Update firecfg.config
* \| \|	Seccomp error action fixes	Topi Miettinen	2021-02-01
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	fsec-optimize: Optimize BPF with current seccomp error action, not just KILL fseccomp: use correct BPF code for errno action firejail: honor seccomp error action for X32 and secondary filters, rebuild filters if the error action is changed Closes: #3933 Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
* \| \|	Add profile for avidemux (#3935)	Neo00001	2021-01-31
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* Update disable-programs.inc * Update disable-programs.inc * Update firecfg.config * Create avidemux.profile * Update avidemux.profile
* \| \|	Fix minor typo in firecfg's manual page	irandms	2021-01-31
\| \| \|
* \| \|	merge/readme update	netblue30	2021-01-25
\| \| \|
* \| \|	Merge pull request #3853 from botherder/master	netblue30	2021-01-25
\|\ \ \ \| \| \| \| \| \| \| \|	New profile for CoyIM
\| * \| \|	Implementing some of the suggested changes from #3853	Nex	2020-12-29
\| \|/ /
* \| \|	Merge pull request #3918 from Neo00001/master	netblue30	2021-01-25
\|\ \ \ \| \| \| \| \| \| \| \|	Add profile for kdiff3
\| * \| \|	Update firecfg.config	Neo00001	2021-01-24
\| \| \| \|
* \| \| \|	fix #3914	netblue30	2021-01-24
\| \| \| \|
* \| \| \|	profstats	netblue30	2021-01-24
\|/ / /
* \| \|	refactoring	smitsohu	2021-01-20
\| \| \|
* \| \|	Merge pull request #3900 from smitsohu/privatelib	smitsohu	2021-01-20
\|\ \ \ \| \| \| \| \| \| \| \|	Add $PATH expansion to private-lib
\| * \| \|	private-lib: search executables in $PATH	smitsohu	2021-01-20
\| \| \| \|
* \| \| \|	Merge pull request #3903 from smitsohu/privatelib3	smitsohu	2021-01-20
\|\ \ \ \ \| \| \| \| \| \| \| \| \| \|	private-lib: add new timetrace
\| * \| \| \|	private-lib: add timetrace for Firejail libraries	smitsohu	2021-01-18
\| \|/ / /
* \| \| \|	misc fcopy fixes	smitsohu	2021-01-20
\| \| \| \|
* \| \| \|	private-lib: simplify installation of stdc	smitsohu	2021-01-20
\|/ / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	as modern-day Debian only keeps a single symbolic link in /lib64, going through both directories systematically adds virtually no overhead (as indicated by the timetrace). At the same time it is simpler and more robust in producing a correct representation of the filesystem.
* \| \|	blacklist firejail appimage dir if not used	smitsohu	2021-01-15
\| \| \|
* \| \|	fbuilder: don't suggest to whitelist strace output file	smitsohu	2021-01-15
\| \| \|
* \| \|	fbuilder: undo variable shadowing	smitsohu	2021-01-15
\| \| \|
* \| \|	private-lib: install dhclient libraries	smitsohu	2021-01-15
\| \| \|
* \| \|	Merge pull request #3867 from smitsohu/non-dumpable	smitsohu	2021-01-15
\|\ \ \ \| \| \| \| \| \| \| \|	return to non-dumpable plugins
\| * \| \|	fix broken tests and regression on 45304621a6c600d8e30e98bfbef05149caaf56c5	smitsohu	2021-01-06
\| \| \| \|
\| * \| \|	non-dumpable plugins	smitsohu	2021-01-04
\| \| \|/ \| \|/\| \| \| \| \| \| \| \| \| \|	(hopefully) fixes the issues that led to reverting commits 6abb65d328af61d67361890743190bd4c57f8e3c and 98e42dc6da4e4b1e47ed2aa020012d4dedc1e80e
* \| \|	new profile: qnapi (#3890)	glitsj16	2021-01-13
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* add new profile: qnapi * add new profile: qnapi * Create qnapi.profile * add qnapi configs * Update README.md * Update README.md
* \| \|	add new profile: shotwell (#3889)	glitsj16	2021-01-13
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* new profile: shotwell * Create shotwell.profile * new profile: shotwell * add shotwell blacklists
* \| \|	Add new profile for marker	rusty-snake	2021-01-08
\| \| \|
* \| \|	update manpages and RELNOTES	rusty-snake	2021-01-08
\| \| \|
* \| \|	fbuilder: check Yama permissions	smitsohu	2021-01-08
\| \| \| \| \| \| \| \| \| \| \| \|	closes #3237
* \| \|	fbuilder: whitelist-common.inc processing	smitsohu	2021-01-08
\| \| \|
* \| \|	simplify clean_pathname function	smitsohu	2021-01-08
\| \| \|
* \| \|	mount private-lib directories read-only	smitsohu	2021-01-06
\| \| \| \| \| \| \| \| \| \| \| \|	avoids creating holes in the basic read-only filesystem
* \| \|	join: misc improvements	smitsohu	2021-01-06
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* don't mess with umask of root, it could be more strict than user umask and relaxing it may catch root by surprise * join needs execveat syscall, need to drop it post-exec * make things more explicit
* \| \|	new profile: tutanota-desktop (#3870)	glitsj16	2021-01-05
\|/ / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* new profile: tutanota-desktop * add tutanota-desktop to firecfg * blacklist tutanota-desktop files * Create tutanota-desktop.profile
* \|	Merge pull request #3850 from smitsohu/smitsohu-shell	netblue30	2020-12-30
\|\ \ \| \| \| \| \| \|	join: add fexecve fallback for shells
\| * \|	join: add fexecve fallback for shells	smitsohu	2020-12-29
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Allows users to join a sandbox and get a shell even if there is none in the sandbox mount namespace. There are few limitations: 1. This will fail with scripted shells (see man 3 fexecve for an explanation) 2. Shell process names are not user friendly