From 25b0bf9f95ccd1189be4bd594d16134ebf3b38d8 Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Thu, 18 Jul 2019 23:26:09 +0200 Subject: merges --- .github/pull_request_template.md | 2 +- README | 25 ++++++++++++++++++++++++- README.md | 3 +-- RELNOTES | 6 ++++++ 4 files changed, 32 insertions(+), 4 deletions(-) diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md index 28ee1c436..f0e4dd416 100644 --- a/.github/pull_request_template.md +++ b/.github/pull_request_template.md @@ -3,7 +3,7 @@ If you make a PR for new profiles or changeing profiles please do the following: Hint: The profile-template is very new, if you install firejail with your package-manager, it maybe missing, therefore, and to follow the latest rules, it is recommended to use the template from the repository. - Order the arguments of options alphabetical, you can easy do this with the [sort.py](https://github.com/netblue30/firejail/tree/master/contrib/sort.py). The path to it depends on your distro: - + | Distro | Path | | ------ | ---- | | Arch/Fedora | `/lib64/firejail/sort.py` | diff --git a/README b/README index 5e7541903..ca6119c81 100644 --- a/README +++ b/README @@ -121,6 +121,8 @@ avoidr (https://github.com/avoidr) - various other fixes Bader Zaidan (https://github.com/BaderSZ) - Telegram profile +Bandie (https://github.com/Bandie) + - fixed riot-desktop Benjamin Kampmann (https://github.com/ligthyear) - Forward exit code from child process bitfreak25 (https://github.com/bitfreak25) @@ -183,6 +185,7 @@ curiosity-seeker (https://github.com/curiosity-seeker) - added freeoffice-textmaker, freeoffice-presentations profiles - added cantata profile - updated keypassxc profile + - added syscalls.sh, which determine the necessary syscalls for a program da2x (https://github.com/da2x) - matched RPM license tag Daan Bakker (https://github.com/dbakker) @@ -205,12 +208,17 @@ dewbasaur (https://github.com/dewbasaur) - Steam profile DiGitHubCap (https://github.com/DiGitHubCap) - deluge profile fix +Disconnect3d (https://github.com/disconnect3d) + - code cleanup dshmgh (https://github.com/dshmgh) - overlayfs fix for systems with /home mounted on a separate partition Duncan Overbruck (https://github.com/Duncaen) - musl libc fix - utmp fix - fix install for --disable-seccomp software configurations +Eduard Tolosa (https://github.com/Edu4rdSHL) + - fixed and hardened qpdfview.profile + - fixed gajim.profile emacsomancer (https://github.com/emacsomancer) - added profile for Conkeror browser eventyrer (https://github.com/eventyrer) @@ -365,6 +373,8 @@ Jean Lucas (https://github.com/flacks) - add Beaker profile - fixes for gnome-music - allow reading of system-wide Flatpak locale in gajim profile +Jean-Philippe Eisenbarth (https://github.com/jpeisenbarth) + - fixed spotify.profile Jericho (https://github.com/attritionorg) - spelling Jesse Smith (https://github.com/slicer69) @@ -385,6 +395,10 @@ Jose Riha (https://github.com/jose1711) - created qgis, links, xlinks profiles - extended profile.template with comments - some typo and comment fixes in profile.template + - Make it possible for cheese app to save pictures too + - Add davfs2 secrets file to blacklist + - Add profile for udiskie + - fix udiskie.profile jrabe (https://github.com/jrabe) - disallow access to kdbx files - Epiphany profile @@ -457,6 +471,8 @@ Michael Haas (https://github.com/mhaas) - bugfixes Mike Frysinger (vapier@gentoo.org) - Gentoo compile patch +mirabellette (https://github.com/mirabellette) + - add comment to thunderbird.profile to allow Firefox to load profiles mjudtmann (https://github.com/mjudtmann) - lock firejail configuration in disable-mgmt.inc mustaqimM (https://github.com/mustaqimM) @@ -466,6 +482,7 @@ n1trux (https://github.com/n1trux) Nick Fox (https://github.com/njfox) - add a profile alias for code-oss - add code-oss config directory + - fix wire-desktop.profile on arch NickMolloy (https://github.com/NickMolloy) - ARP address length fix Niklas Haas (https://github.com/haasn) @@ -575,21 +592,25 @@ rusty-snake (https://github.com/rusty-snake) - added profiles: ktouch, yelp, klatexformula, klatexformula_cmdl - added profiles: pandoc, gnome-sound-recorder, godot, newsbeuter - added profiles: keepassxc-cli, keepassxc-proxy, rhythmbox-client - - added profiles: zeal + - added profiles: zeal, gnome-characters, gnome-character-map - many profile fixing and hardening - some typo fixes - added profile templates + - added sort.py to contrib Salvo 'LtWorf' Tomaselli (https://github.com/ltworf) - fixed ktorrent profile sarneaud (https://github.com/sarneaud) - rewrite globbing code to fix various minor issues - added noblacklist command for profile files - various enhancements and bug fixes +Sebastian Hafner (https://github.com/DropNib) + - profile support for allow-debuggers Senemu (https://github.com/Senemu) - protection for .pythonrc.py - fixed evince Sergey Alirzaev (https://github.com/l29ah) - firejail.h enum fix + - firefox-common-addons.inc: + tridactyl Tobias Schmidl (https://github.com/schtobia) - added profile for webui-aria2 Simon Peter (https://github.com/probonopd) @@ -686,6 +707,8 @@ startx2017 (https://github.com/startx2017) - handbrake profile - mplayer and smplayer profiles - kwrite and geary profiles +StelFux (https://github.com/StelFux) + - Fix youtube video in totem thewisenerd (https://github.com/thewisenerd) - allow multiple private-home commands - use $SHELL variable if the shell is not specified diff --git a/README.md b/README.md index 4455402e4..dbba09b43 100644 --- a/README.md +++ b/README.md @@ -116,5 +116,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe ## New profiles: -gnome-sound-recorder, godot, jerry, keepassxc-cli, keepassxc-proxy, klatexformula, klatexformula_cmdl, links, newsbeuter, OpenArena, pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, -mpg123, +gnome-sound-recorder, godot, jerry, keepassxc-cli, keepassxc-proxy, klatexformula, klatexformula_cmdl, links, newsbeuter, OpenArena, pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, mpg123, conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss, mpg123-portaudio, mpg123-pulse, mpg123-strip, out123, pavucontrol-qt, gnome-characters, gnome-character-map diff --git a/RELNOTES b/RELNOTES index d5baa3bc4..fa8094f5b 100644 --- a/RELNOTES +++ b/RELNOTES @@ -2,10 +2,16 @@ firejail (0.9.61) baseline; urgency=low * work in progress * added file-copy-limit in /etc/firejail/firejail.config * profile templates + * allow-debuggers support in profiles + * new scripts in conrib: gdb-firejail.sh and sort.py * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123 + * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123 + * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss + * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt + * new profiles: gnome-characters, gnome-character-map -- netblue30 Sat, 1 Jun 2019 08:00:00 -0500 firejail (0.9.60) baseline; urgency=low -- cgit v1.2.3-70-g09d2