aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAge
* merge/readme updateLibravatar netblue302021-01-25
|
* Merge pull request #3853 from botherder/masterLibravatar netblue302021-01-25
|\ | | | | New profile for CoyIM
| * Implementing some of the suggested changes from #3853Libravatar Nex2020-12-29
| |
* | Merge pull request #3918 from Neo00001/masterLibravatar netblue302021-01-25
|\ \ | | | | | | Add profile for kdiff3
| * | Update firecfg.configLibravatar Neo000012021-01-24
| | |
* | | fix #3914Libravatar netblue302021-01-24
| | |
* | | profstatsLibravatar netblue302021-01-24
|/ /
* | refactoringLibravatar smitsohu2021-01-20
| |
* | Merge pull request #3900 from smitsohu/privatelibLibravatar smitsohu2021-01-20
|\ \ | | | | | | Add $PATH expansion to private-lib
| * | private-lib: search executables in $PATHLibravatar smitsohu2021-01-20
| | |
* | | Merge pull request #3903 from smitsohu/privatelib3Libravatar smitsohu2021-01-20
|\ \ \ | | | | | | | | private-lib: add new timetrace
| * | | private-lib: add timetrace for Firejail librariesLibravatar smitsohu2021-01-18
| |/ /
* | | misc fcopy fixesLibravatar smitsohu2021-01-20
| | |
* | | private-lib: simplify installation of stdcLibravatar smitsohu2021-01-20
|/ / | | | | | | | | | | | | | | as modern-day Debian only keeps a single symbolic link in /lib64, going through both directories systematically adds virtually no overhead (as indicated by the timetrace). At the same time it is simpler and more robust in producing a correct representation of the filesystem.
* | blacklist firejail appimage dir if not usedLibravatar smitsohu2021-01-15
| |
* | fbuilder: don't suggest to whitelist strace output fileLibravatar smitsohu2021-01-15
| |
* | fbuilder: undo variable shadowingLibravatar smitsohu2021-01-15
| |
* | private-lib: install dhclient librariesLibravatar smitsohu2021-01-15
| |
* | Merge pull request #3867 from smitsohu/non-dumpableLibravatar smitsohu2021-01-15
|\ \ | | | | | | return to non-dumpable plugins
| * | fix broken tests and regression on 45304621a6c600d8e30e98bfbef05149caaf56c5Libravatar smitsohu2021-01-06
| | |
| * | non-dumpable pluginsLibravatar smitsohu2021-01-04
| | | | | | | | | | | | | | | (hopefully) fixes the issues that led to reverting commits 6abb65d328af61d67361890743190bd4c57f8e3c and 98e42dc6da4e4b1e47ed2aa020012d4dedc1e80e
* | | new profile: qnapi (#3890)Libravatar glitsj162021-01-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add new profile: qnapi * add new profile: qnapi * Create qnapi.profile * add qnapi configs * Update README.md * Update README.md
* | | add new profile: shotwell (#3889)Libravatar glitsj162021-01-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | * new profile: shotwell * Create shotwell.profile * new profile: shotwell * add shotwell blacklists
* | | Add new profile for markerLibravatar rusty-snake2021-01-08
| | |
* | | update manpages and RELNOTESLibravatar rusty-snake2021-01-08
| | |
* | | fbuilder: check Yama permissionsLibravatar smitsohu2021-01-08
| | | | | | | | | | | | closes #3237
* | | fbuilder: whitelist-common.inc processingLibravatar smitsohu2021-01-08
| | |
* | | simplify clean_pathname functionLibravatar smitsohu2021-01-08
| | |
* | | mount private-lib directories read-onlyLibravatar smitsohu2021-01-06
| | | | | | | | | | | | avoids creating holes in the basic read-only filesystem
* | | join: misc improvementsLibravatar smitsohu2021-01-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | * don't mess with umask of root, it could be more strict than user umask and relaxing it may catch root by surprise * join needs execveat syscall, need to drop it post-exec * make things more explicit
* | | new profile: tutanota-desktop (#3870)Libravatar glitsj162021-01-05
|/ / | | | | | | | | | | | | | | | | * new profile: tutanota-desktop * add tutanota-desktop to firecfg * blacklist tutanota-desktop files * Create tutanota-desktop.profile
* | Merge pull request #3850 from smitsohu/smitsohu-shellLibravatar netblue302020-12-30
|\ \ | | | | | | join: add fexecve fallback for shells
| * | join: add fexecve fallback for shellsLibravatar smitsohu2020-12-29
| | | | | | | | | | | | | | | | | | | | | | | | Allows users to join a sandbox and get a shell even if there is none in the sandbox mount namespace. There are few limitations: 1. This will fail with scripted shells (see man 3 fexecve for an explanation) 2. Shell process names are not user friendly
* | | Merge pull request #3852 from rusty-snake/fix-3846Libravatar netblue302020-12-30
|\ \ \ | | | | | | | | Implement netns in profiles, closes #3846
| * | | Implement netns in profiles, closes #3846Libravatar rusty-snake2020-12-29
| | | |
* | | | Merge branch 'master' into browsersLibravatar Reiner Herrmann2020-12-29
|\ \ \ \
| * | | | profiles: add redirect from matrix-mirage to mirage (#3854)Libravatar Reiner Herrmann2020-12-29
| | | | |
| * | | | manpage: /bin/bash -> user's perferred shellLibravatar rusty-snake2020-12-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We do not start /bin/bash in the sandbox, we use $SHELL (which is usually /bin/bash). See #3434 and #3844. This commit updates the manpage accordingly until #3434 is resolved with a final solution like using /bin/bash or /bin/sh as hardcoded default. Close #3844. The descriptions of --join* are not updated as there is currenly some work, see #2934 and #3850.
| * | | | cleanupLibravatar smitsohu2020-12-28
| | |_|/ | |/| | | | | | case is handled in guess_shell()
* | | | On Debian/Ubunbtu microsoft-edge redirects to dev-channel right nowLibravatar bbhtt2020-12-29
| | | |
* | | | Add profiles for MS Edge dev build for Linux and LibrewolfLibravatar bbhtt2020-12-28
|/ / /
* | | shell autoselection fixupLibravatar smitsohu2020-12-22
| | |
* | | rework previous commit 45c28b808df9529aca32fdd755ac14e8101af3c1Libravatar smitsohu2020-12-22
| | |
* | | noroot option: create mapping of firejail groupLibravatar smitsohu2020-12-21
| | | | | | | | | | | | | | | issue #3604 follow-up to a7607e423f3336f67daf2ec296414d55c6740f84
* | | fix forwarding of login option to restricted shellLibravatar smitsohu2020-12-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If firejail is the login shell, the SHELL environment variable is set to the path of the firejail executable. This leads to execution of a 'firejail -l' command, but firejail inside the sandbox does not know what to do with the -l option and just starts bash without forwarding this option. Fix this by not checking $SHELL when guessing which shell should be used. run_no_sandbox(), which relies on reading the environment, runs before setting the login_shell variable, and is not affected.
* | | add mac multicast address check to profile_check_lineLibravatar smitsohu2020-12-21
| | | | | | | | | | | | | | | issue #3784 related commit 4bc92b8fd0a5c22c7d4c6f9323378501c60ff149
* | | minor cleanup, cosmeticsLibravatar smitsohu2020-12-21
|/ /
* | Merge pull request #3839 from rusty-snake/fix-3838Libravatar smitsohu2020-12-21
|\ \ | | | | | | x11=none: don't fail on abstract socket if netns …
| * | x11=none: don't fail on abstract socket if netns …Libravatar rusty-snake2020-12-19
| |/ | | | | | | | | | | …is used. fix #3838 -- --x11=none --netns=isolated invalidly errors on the abstract X11 socket being accessible
* | increase verbosity if masking ~/.config/pulse failsLibravatar smitsohu2020-12-21
| | | | | | | | plus very minor cosmetic improvements
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-28 18:34:21 +0000