aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAge
* xdg macro testingLibravatar netblue302018-08-07
|
* xdg support: split xdg whitelist code in a different moduleLibravatar netblue302018-08-07
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar startx20172018-08-04
|\
| * indentation fixLibravatar smitsohu2018-08-04
| |
| * automatically trim trailing slashes for whitelisting, fix mountinfo testLibravatar smitsohu2018-08-04
| | | | | | | | | | | | Command-line autocompletion adds a trailing slash to directories, which leads to a usability problem for whitelisting. So before doing any path validation it is attempted to trim trailing slashes and dots.
* | --ignore cleanupLibravatar startx20172018-08-04
|/
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-08-02
|\
| * Check tmp1 and tmp2 for NULL before passing to parse_nowhitelist (thanks ↵Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-08-02
| | | | | | | | @smitsohu!)
* | port whitelist path creation to "at" family of functionsLibravatar smitsohu2018-08-02
| |
* | Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-08-01
|\|
| * Fixed Documents handling (consume trailing /) and hide XDG warnings unless ↵Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-31
| | | | | | | | --debug is enabled.
| * Check to see if expand_home is called as root and switch to user (and ↵Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-31
| | | | | | | | restore root at the end)
| * Add XDG variable support to blacklist and read-only.Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-31
| |
* | enhance safe_fd function so it can digest arbitrary pathnamesLibravatar smitsohu2018-08-01
|/
* removed compile time --enable-network=restricted, --net=none allowed even if ↵Libravatar startx20172018-07-26
| | | | networking was disabled at compile time or at run time, fixed issue #2061
* MergesLibravatar Fred-Barclay2018-07-25
|
* fix --net=wlanLibravatar netblue302018-07-25
|
* Add profile for patch and shellcheckLibravatar Tad2018-07-24
|
* Add ${MUSIC}, ${VIDEOS}, ${PICTURES}, ${DOCUMENTS}, and ${DESKTOP} (Fixes #259)Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-23
|
* Fix #1638Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-23
|
* MergesLibravatar Tad2018-07-22
|
* Fixes #1404Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-21
|
* rework --netmaskLibravatar netblue302018-07-17
|
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2018-07-16
|\
| * fix private-lib crashLibravatar netblue302018-07-15
| |
* | set umask for internal useLibravatar smitsohu2018-07-16
| |
* | rework fix for empty spaces in mountinfo fieldsLibravatar smitsohu2018-07-16
|/ | | | cf. 949b924fba58dc05f1c21d6621f05047be5397f0 and 5c69440cc943f530830b8534d99d2061bdcfaf40
* minor improvements to previous commit 949b924fba58dc05f1c21d6621f05047be5397f0Libravatar smitsohu2018-07-14
|
* fix empty spaces in mountinfo fieldsLibravatar smitsohu2018-07-13
|
* tunneling support - tap interface in --net optionLibravatar netblue302018-07-11
|
* Add documentation for keep-dev-shm optionLibravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-09
|
* Add personality to allow-debuggers (see #2021)Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-09
|
* fix f57dd4a1437e1e6a1096012345067c2ac8bbb9d2 (mountinfo, fslogger)Libravatar smitsohu2018-07-06
|
* --netmask optionLibravatar netblue302018-07-06
|
* additional whitelist hardeningLibravatar smitsohu2018-07-06
|
* remove redundant checks in whitelist_pathLibravatar smitsohu2018-07-05
|
* Merges + misc fixesLibravatar Tad2018-07-04
| | | | | | | | - Change some links in README to HTTPS - Fixup some typos in firejail-profile manpage - Cleanup dash from private-etc - Fixup gradio - Synchronize server profile with default profile
* merged Amend Wire profiles #1998 form @flacksLibravatar netblue302018-06-30
|
* increase include level for profile files to 16 - issue 2009Libravatar netblue302018-06-30
|
* cleanupLibravatar smitsohu2018-06-26
|
* whitelist symlink handling, allow /var/tmp symlinks - issue #2011Libravatar smitsohu2018-06-26
|
* fix bc70dbf152b10185f61b020064967f9b4616e100Libravatar smitsohu2018-06-23
|
* fix whitelisting of /dev/logLibravatar smitsohu2018-06-22
| | | /dev/log is a symlink to /run/systemd/journal/dev-log on Debian/Ubuntu and probably elsewhere
* print Xephyr params at startupLibravatar netblue302018-06-22
|
* merge from LTS branch: cleanup O_PATH, --private-templateLibravatar startx20172018-06-19
|
* Revert "mounting a tmpfs on ~/.cache directory (private-cache) by default"Libravatar Tad2018-06-14
| | | | This reverts commit caa7ad8714206a158123773ddcaca6ef219a5501.
* mergesLibravatar Tad2018-06-14
|
* mergesLibravatar Tad2018-06-14
|
* Add --keep-dev-shm (undocumented for now).Libravatar Chiraag Nataraj2018-06-13
|
* Change --nousb to --nou2f per suggestion on last commit.Libravatar Chiraag Nataraj2018-06-12
|