aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAge
* Merge pull request #6109 from kmk3/netfilter-expand-macrosLibravatar netblue302023-12-04
|\ | | | | feature: expand simple macros in more commands
| * feature: expand simple macros in more commandsLibravatar Kelvin M. Klann2023-11-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This includes macros such as `${HOME}` and `${RUNUSER}`. Commands: * --chroot= * --netfilter= * --netfilter6= * --trace= Closes #6032. Reported-by: @michelesr
* | Merge pull request #5876 from kmk3/firecfg-add-confdir-ignoreLibravatar netblue302023-12-04
|\ \ | |/ |/| feature: firecfg: add firecfg.d & add ignore command
| * firecfg: add ignore command and docsLibravatar Kelvin M. Klann2023-08-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add ignore command (`!PROGRAM`), as suggested by @WhyNotHugo[1]. It prevents firecfg from creating a symlink for the given program. Also, document the paths used and the config file syntax. Note that `/etc/firejail/firecfg.d/*.conf` files are parsed before /etc/firejail/firecfg.config, so the former can ignore/override any item in the latter. Closes #2097. [1] https://github.com/netblue30/firejail/issues/2097#issuecomment-1179160459
| * firecfg: parse config files in /etc/firejail/firecfg.dLibravatar Kelvin M. Klann2023-08-04
| | | | | | | | | | | | As suggested by @WhyNotHugo[1]. [1] https://github.com/netblue30/firejail/issues/2097#issuecomment-1179160459
| * firecfg: turn constant strings into constantsLibravatar Kelvin M. Klann2023-08-04
| | | | | | | | | | | | Instead of using asprintf + free. Also, use LIBDIR instead of hardcoded "/usr/lib" for fzenity.
| * firecfg: fix missing free and formattingLibravatar Kelvin M. Klann2023-08-04
| | | | | | | | | | | | | | Changes: * fix inconsistent indentation/braces * add missing free
* | mergesLibravatar netblue302023-11-24
| |
* | Merge pull request #6087 from chestnykh/issue-6006Libravatar netblue302023-11-24
|\ \ | | | | | | Lookup xauth in PATH.
| * | Lookup xauth in PATH.Libravatar Dmitry Chestnykh2023-11-19
| | | | | | | | | | | | | | | | | | | | | Don't use hardcoded `/usr/bin/xauth`, iterate over directories inside PATH instead. This fixes https://github.com/netblue30/firejail/issues/6006
* | | Merge pull request #5957 from gerasiov/fcopy-fix-size-calculationLibravatar netblue302023-11-24
|\ \ \ | | | | | | | | fcopy: Use lstat when copy directory.
| * | | fcopy: Use lstat when copy directory.Libravatar Alexander Gerasiov2023-08-14
| | | | | | | | | | | | | | | | When copying directories use lstat when reading info about source files.
* | | | Fix displaying of large file sizes. (#6086)Libravatar Dmitriy Chestnykh2023-11-24
| |/ / |/| | | | | | | | | | | The most generic way is to use `intmax_t` because we dont't know what is the "parent" type of `off_t`. This fixes https://github.com/netblue30/firejail/issues/5982 .
* | | New profile: tiny-rdm (#6083)Libravatar glitsj162023-11-11
| | | | | | | | | | | | | | | | | | | | | * disable-programs.inc: add support for tiny-rdm * Create tiny-rdm.profile * firecfg.config: add support for tiny-rdm
* | | enabled nettraces by default in the main build - you would need to be root ↵landlock-splitLibravatar netblue302023-10-24
| | | | | | | | | | | | to run these options
* | | profiles: exchange private-opt with a whitelist (#6021)Libravatar glitsj162023-10-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * profiles: drop private-opt (existing whitelist) * profiles: replace private-opt with whitelist In most profiles. Kept private-opt for enpass (~85MB), mate-dictionary (<20MB), minecraft-launcher (~1.6MB) and ppsspp (~44MB). The only app I couldn't check: xmr-stak. * docs: note potential issues with private-opt
* | | New profile: termshark (#6039)Libravatar glitsj162023-10-07
| | | | | | | | | | | | | | | | | | | | | * Create termshark.profile * firecfg.config: add termshark support * termshark: CLI hardening
* | | Merge pull request #6009 from jtrv/tidal-hifiLibravatar netblue302023-10-05
|\ \ \ | | | | | | | | New profile: tidal-hifi
| * | | New profile: tidal-hifi (#6008)Libravatar jtrv2023-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | modified src/firecfg/firecfg.config to add tidal-hifi created etc/profile-m-z/tidal-hifi.profile closes: #6008 Apply suggestions from code review Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | | | New profile: lettura (#6027)Libravatar glitsj162023-10-03
|/ / / | | | | | | | | | | | | | | | | | | * disable-programs.inc: add lettura support * Create lettura.profile * firecfg.config: add lettura
* | | create fluffychat.profile (#6007)Libravatar pirate4867431862023-09-23
| | | | | | | | | Co-authored-by: pirate486743186 <>
* | | Merge pull request #5993 from kmk3/modif-keep-pipewire-groupLibravatar Kelvin M. Klann2023-09-20
|\ \ \ | | | | | | | | modif: keep pipewire group unless nosound is used
| * | | modif: keep pipewire group unless nosound is usedLibravatar Kelvin M. Klann2023-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This group is apparently used on Gentoo[1]. Currently only the "audio" supplementary group is kept. Fixes #5992. See also commit f32938669 ("Keep vglusers group unless no3d is used (virtualgl)", 2022-01-07) / PR #4851. [1] https://wiki.gentoo.org/wiki/PipeWire Reported-by: @amano-kenji
* | | | Add blender-3.6 redirect (#6013)Libravatar Frostbyte46642023-09-18
| | | |
* | | | speed up blacklistsLibravatar netblue302023-09-12
|/ / /
* | | build: add missing dbus/x11 commands to arg1 listLibravatar Kelvin M. Klann2023-09-06
| | | | | | | | | | | | | | | | | | Fix the list generation and run `make syntax`. Relates to #5627.
* | | Fix wrong syscall names for s390_pci_mmio_{read,write}Libravatar Topi Miettinen2023-08-26
| | | | | | | | | | | | Closes #5965
* | | update disable-devel.incLibravatar netblue302023-08-22
| | |
* | | more appimage fixesLibravatar netblue302023-08-22
| | |
* | | more domains for static-ip-mapLibravatar netblue302023-08-20
| | |
* | | appimage fixesLibravatar netblue302023-08-20
|/ /
* | build: fix wrong man page pathsLibravatar Kelvin M. Klann2023-08-12
| | | | | | | | | | | | | | Change the old .txt paths into the new .in paths. This amends commit 76bd5ad0f ("build: simplify code related to man pages", 2023-07-12) / PR #5898.
* | build: fix codespell errorsLibravatar Kelvin M. Klann2023-08-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes the following errors: $ make codespell [...] codespell --ignore-regex "UE|creat|doas|shotcut|ether" src test src/firemon/procevent.c:188: duble ==> double src/fnettrace/main.c:30: postive ==> positive src/fnettrace/main.c:30: defiend ==> defined src/fnettrace/main.c:482: isplay ==> display make: *** [Makefile:371: codespell] Error 65 $ codespell --version 2.2.5 Added in the following commits: * bef5d86a1 ("increase socket buffer size for firemon, bug #2700", 2019-09-29) * c4962789f ("nettrace stats", 2023-08-08)
* | small nettrace updateLibravatar netblue302023-08-11
| |
* | Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-08-11
|\ \
| * | New profile: clac (#5947)Libravatar glitsj162023-08-10
| | | | | | | | | | | | | | | * firecfg.config: add support for clac * Create clac.profile
| * | New profile: journal-viewer (#5943)Libravatar glitsj162023-08-10
| | |
| * | build: use ASCII sort on firecfg and check for duplicatesLibravatar Kelvin M. Klann2023-08-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently the CI check does not consider certain special characters (such as `-`) when sorting due to `sort -d`. So remove `-d`, sort firecfg using `LC_ALL=C` and enforce that order. Also add `sort -u` to check for duplicates. This also allows the CI check to ignore normal comments (lines starting with `# `) anywhere in the file. Relates to #4643.
| * | build: improve comments in firecfg.configLibravatar Kelvin M. Klann2023-08-05
| |/ | | | | | | | | | | | | | | | | | | | | | | Remove the space after `#` for commented code and use `#` instead of `-` for comments at the end of the line. Commands used to search and replace: $ f=src/firecfg/firecfg.config; printf '%s\n' "$(sed -E \ -e '3,9999s/^# /#/' \ -e '3,9999s/^#([^ ]+) --? /#\1 # /' \ "$f")" >"$f"
| * New profile: reader (#5934)Libravatar glitsj162023-08-02
| | | | | | | | | | | | | | | | | | | | | | | | * Create reader.profile * firecfg.config: add reader support * reader: integrate review suggestions - blacklist whole ${RUNUSER} - drop x11 none * reader: fix 'x11 none'
| * New profile: daisy (#5935)Libravatar glitsj162023-08-02
| | | | | | | | | | * firecfg.config: add daisy support * Create daisy.profile
* | nettrace statsLibravatar netblue302023-08-08
|/
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-07-27
|\
| * fnetlock: fix unused bw variable warningLibravatar Kelvin M. Klann2023-07-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is breaking build-clang on CI[1]: make -C src/fnetlock/ make[1]: Entering directory '/home/runner/work/firejail/firejail/src/fnetlock' clang-14 [...] -c main.c -o main.o main.c:97:11: error: variable 'bw' set but not used [-Werror,-Wunused-but-set-variable] unsigned bw = 0; // bandwidth calculations ^ 1 error generated. make[1]: *** [../../src/prog.mk:16: main.o] Error 1 make: *** [Makefile:58: src/fnetlock/fnetlock] Error 2 Added on commit 8e4b847cd ("split nettrace executable ^Cto netrace and netlock", 2023-07-25). [1]: https://github.com/netblue30/firejail/actions/runs/5669072674/job/15361026508 Cc: @netblue30
* | cleanupLibravatar netblue302023-07-27
|/
* Merge branch 'master' of ssh://github.com/netblue30/firejailLibravatar netblue302023-07-26
|\
| * New profile: sniffnet (#5920)Libravatar glitsj162023-07-25
| | | | | | | | | | | | | | * disable-programs.inc: add sniffnet support * Create sniffnet.profile * firecfg.config: add sniffnet support
* | netlock/nettrace cleanupLibravatar netblue302023-07-26
| |
* | split nettrace executable ^Cto netrace and netlockLibravatar netblue302023-07-25
| |
* | cleanupLibravatar netblue302023-07-25
|/
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-03 21:18:07 +0000