aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAge
* Add personality to allow-debuggers (see #2021)Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-09
|
* fix f57dd4a1437e1e6a1096012345067c2ac8bbb9d2 (mountinfo, fslogger)Libravatar smitsohu2018-07-06
|
* --netmask optionLibravatar netblue302018-07-06
|
* additional whitelist hardeningLibravatar smitsohu2018-07-06
|
* remove redundant checks in whitelist_pathLibravatar smitsohu2018-07-05
|
* Merges + misc fixesLibravatar Tad2018-07-04
| | | | | | | | - Change some links in README to HTTPS - Fixup some typos in firejail-profile manpage - Cleanup dash from private-etc - Fixup gradio - Synchronize server profile with default profile
* merged Amend Wire profiles #1998 form @flacksLibravatar netblue302018-06-30
|
* increase include level for profile files to 16 - issue 2009Libravatar netblue302018-06-30
|
* cleanupLibravatar smitsohu2018-06-26
|
* whitelist symlink handling, allow /var/tmp symlinks - issue #2011Libravatar smitsohu2018-06-26
|
* fix bc70dbf152b10185f61b020064967f9b4616e100Libravatar smitsohu2018-06-23
|
* fix whitelisting of /dev/logLibravatar smitsohu2018-06-22
| | | /dev/log is a symlink to /run/systemd/journal/dev-log on Debian/Ubuntu and probably elsewhere
* print Xephyr params at startupLibravatar netblue302018-06-22
|
* merge from LTS branch: cleanup O_PATH, --private-templateLibravatar startx20172018-06-19
|
* Revert "mounting a tmpfs on ~/.cache directory (private-cache) by default"Libravatar Tad2018-06-14
| | | | This reverts commit caa7ad8714206a158123773ddcaca6ef219a5501.
* mergesLibravatar Tad2018-06-14
|
* mergesLibravatar Tad2018-06-14
|
* Add --keep-dev-shm (undocumented for now).Libravatar Chiraag Nataraj2018-06-13
|
* Change --nousb to --nou2f per suggestion on last commit.Libravatar Chiraag Nataraj2018-06-12
|
* Add --nousb optionLibravatar Chiraag Nataraj2018-06-12
|
* Add /dev/hidraw* devices for potential fix for Yubikey devicesLibravatar Chiraag Nataraj2018-06-12
|
* potential fix for Yubikey devicesLibravatar netblue302018-06-12
|
* mounting a tmpfs on ~/.cache directory (private-cache) by defaultLibravatar netblue302018-06-12
|
* Add profiles for Microsoft Office Online apps (from Manjaro devs)Libravatar Fred-Barclay2018-06-11
|
* update man page (private-cache)Libravatar smitsohu2018-06-12
|
* fix indentationLibravatar smitsohu2018-06-12
|
* additional mount hardening (pulseaudio, Xauthority)Libravatar smitsohu2018-06-12
|
* removed CFG_CHROOT_DESKTOP config optionLibravatar netblue302018-06-11
|
* wireless supportLibravatar netblue302018-06-09
|
* glibc missing O_PATH definition on Debian 7Libravatar netblue302018-06-09
|
* support wireless interfaces for --netLibravatar netblue302018-06-09
|
* fnet fix (merge from LTS branch)Libravatar startx20172018-06-05
|
* evaluate UID_MIN/GID_MID at runtime, remove compile time evaluation - fixes ↵Libravatar netblue302018-06-04
| | | | #1964
* add private-cache optionLibravatar smitsohu2018-06-04
| | | | implementation is based on an idea of James Henstridge, Canonical
* add engrampa to firecfg listLibravatar netblue302018-06-03
|
* Add a profile alias for firefox-waylandLibravatar Tad2018-05-29
| | | | | | | firefox-wayland is a new wrapper script included with Firefox on Fedora 28 it has firefox hardcoded as /usr/bin/firefox + some minor fixes in other profiles
* globbing support in private-libLibravatar netblue302018-05-25
|
* little x11_xorg cleanupLibravatar smitsohu2018-05-25
|
* Fixup Discord profilesLibravatar Tad2018-05-21
| | | | Packagers seem to be all using different names
* private-lib cleanupLibravatar netblue302018-05-20
|
* reverted commit 5a3eefa6e70e824f545add9169202f788a9ce14d, issue #1948Libravatar netblue302018-05-20
|
* tentative fix for issue #1948Libravatar netblue302018-05-19
|
* x11 cleanup (remove superfluous set_perms)Libravatar smitsohu2018-05-16
|
* 0.9.54 testing0.9.54Libravatar netblue302018-05-16
|
* fix --dnsLibravatar netblue302018-05-15
|
* remove unused filesLibravatar startx20172018-05-14
|
* merges0.9.54-rc2Libravatar netblue302018-05-12
|
* Merge pull request #1932 from RDProjekt/modulesLibravatar netblue302018-05-12
|\ | | | | Fixes to make Blender with AMD GPU work under firejail (#1931)
| * Allow accessing /sys/module directoryLibravatar RD Projekt2018-05-09
| | | | | | | | | | | | | | | | | | | | It is required for example by Blender, which Firejail supports. Blender needs read-only access to /sys/module/amdgpu in order to use AMD card with OpenCL. Now user can allow such access by specifying: noblacklist /sys/module whitelist /sys/module/amdgpu read-only /sys/module/amdgpu
* | Misc fixesLibravatar Tad2018-05-12
| |