aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAge
* memory-deny-write-execute testingLibravatar netblue302017-08-18
|
* private-libLibravatar netblue302017-08-17
|
* memory-deny-write-executeLibravatar netblue302017-08-17
|
* --net=none documentationLibravatar netblue302017-08-17
|
* fix x11 display reporting in firemon and firetools for sessions joining an ↵Libravatar netblue302017-08-15
| | | | existing x11 sandbox
* compile cleanupLibravatar startx20172017-08-15
|
* fix #1462Libravatar startx20172017-08-15
|
* update RELNOTES/Readme.md/--help; man page update for #1439Libravatar startx20172017-08-14
|
* Fix compile with older kernel headersLibravatar Topi Miettinen2017-08-13
|
* Fix copy-pasteLibravatar Topi Miettinen2017-08-13
|
* Allow any syscall to be blacklisted (#1447)Libravatar Topi Miettinen2017-08-13
| | | | | | | Allow any syscall to be blacklisted with aid of LD_PRELOAD library, libpostexecseccomp.so. Closes: #1447
* modif: --output split in two commands, --output and --output-stderr; fix for ↵Libravatar netblue302017-08-13
| | | | #1458
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar netblue302017-08-12
|\
| * Enable system call groups with minus signLibravatar Topi Miettinen2017-08-12
| |
* | added --nodvdLibravatar netblue302017-08-12
|/
* private-dev enhancementsLibravatar netblue302017-08-11
|
* Add TuxGuitar profile (#1453)Libravatar smitsohu2017-08-10
| | | | | | | | | | | | | | | | | | | | * add tuxguitar profile tested for versions < 1.3 * blacklist tuxguitar * add tuxguitar * add tuxguitar * add support for tuxguitar > 1.2 higher versions fail to launch without protocol=inet,inet6 and with noexec=~. Yet, net=none seems to be still tolerated, which comes handy to block talk with internet and dbus. * unbreak tuxguitar Internet access versions >= 1.3 actually run fine with net=none enabled, if the built-in internet dependent feature is not used
* Enable syscall groups for non-internal useLibravatar Topi Miettinen2017-08-10
|
* typoLibravatar Reiner Herrmann2017-08-10
|
* Add a profile alias for Firefox NightlyLibravatar Tad2017-08-10
|
* --notv for #1446Libravatar startx20172017-08-10
|
* add /dev/dbv to private-dev listLibravatar startx20172017-08-09
|
* mergesLibravatar Fred-Barclay2017-08-07
|
* Seccomp: split @default into more meaningful smaller groupsLibravatar Topi Miettinen2017-08-06
|
* Seccomp: system call grouping and call numbersLibravatar Topi Miettinen2017-08-06
|
* private-lib fixesLibravatar netblue302017-08-06
|
* private-lib: fix crashLibravatar netblue302017-08-06
|
* prive-lib: integration with firetoolsLibravatar netblue302017-08-06
|
* bring in private-lib libraries for all private-bin programs. ↵Libravatar startx20172017-08-06
| | | | Example:firejail --private-lib --private-bin=bash,ls,find,pwd,grep
* fix copyright statementLibravatar netblue302017-08-05
|
* Improve library handling: use DT_RPATH/DT_RUNPATH to find more libsLibravatar Topi Miettinen2017-08-05
| | | | | | Helps in more complex cases like this: libpulse.so wants libpulsecommon-10.0.so, which is located in /usr/lib/x86_64-linux-gnu/pulseaudio. This path is specified with DT_RUNPATH.
* Merge pull request #1436 from SpotComms/gtLibravatar Fred Barclay2017-08-05
|\ | | | | Add a profile for Gnome Twitch
| * Add a profile for Gnome TwitchLibravatar Tad2017-08-05
| |
* | private-lib: preliminary support for directories in private-lib listLibravatar netblue302017-08-05
|/
* Update firecfg.config and add a wireshark-* aliasLibravatar Tad2017-08-04
|
* private-lib: add src/flddLibravatar netblue302017-08-04
|
* private-lib: support for /etc/firejail/firejail.configLibravatar netblue302017-08-04
|
* private-lib: bringing in private-lib list from command lineLibravatar netblue302017-08-04
|
* private-lib: split fldd as a separate applicationLibravatar netblue302017-08-03
|
* Add rambox profile from #1425Libravatar Fred Barclay2017-08-02
|
* get_mempolicy syscall was temporarily removed from the default seccomp list. ↵Libravatar netblue302017-08-02
| | | | | | It seems to break playing youtube videos on Firefox Nightly - #1414
* x11/xpra supportLibravatar netblue302017-08-01
|
* compile cleanupLibravatar netblue302017-08-01
|
* Fix tracing with private-libLibravatar Topi Miettinen2017-08-01
|
* Merge pull request #1415 from chiraag-nataraj/masterLibravatar netblue302017-07-31
|\ | | | | Tentative implementation for #1405
| * Ensure malloc was successfulLibravatar Chiraag Nataraj2017-07-30
| |
| * Remove debugging stuff, free start_child, exit properlyLibravatar Chiraag Nataraj2017-07-30
| |
| * Tentative implementation for #1405Libravatar Chiraag Nataraj2017-07-30
| |
* | Fixes for the private-lib and memory-deny-write-execute featuresLibravatar Topi Miettinen2017-07-30
| |
* | Memory-deny-write-execute featureLibravatar Topi Miettinen2017-07-30
| | | | | | | | Feature to block attempts to create writable and executable memory.