From 514667d25d5e3044d04bddda14046abb50605b62 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sat, 12 May 2018 10:13:47 -0400 Subject: merges --- README | 5 +++++ RELNOTES | 2 ++ src/man/firejail-profile.txt | 2 +- src/man/firejail.txt | 2 +- 4 files changed, 9 insertions(+), 2 deletions(-) diff --git a/README b/README index 368feb827..fcebecc31 100644 --- a/README +++ b/README @@ -436,6 +436,7 @@ PizzaDude (https://github.com/pizzadude) - add mpv support to smplayer - added profile for torbrowser-launcher - added profile for sayonara and qmmp + - remove tracelog from Firefox profile probonopd (https://github.com/probonopd) - automatic build on Travis CI pshpsh (https://github.com/pshpsh) @@ -470,6 +471,10 @@ Reiner Herrmann (https://github.com/reinerh) Remco Verhoef (https://github.com/nl5887) - add overlay configuration to profiles - prevent running shells recursively +RD PROJEKT (https://github.com/RDProjekt) + - noblacklist support for /sys/module directory + - whitelist support for /sys/module directory + - support AMD GPU by OpenCL in Blender rogshdo (https://github.com/rogshdo) - BitlBee profile Ruan (https://github.com/ruany) diff --git a/RELNOTES b/RELNOTES index f73793740..37526e9bd 100644 --- a/RELNOTES +++ b/RELNOTES @@ -35,6 +35,8 @@ firejail (0.9.54~rc1) baseline; urgency=low * private-tmp support for overlay and chroot sandboxes * added sandbox name support in firemon * firemon/prctl enhancements + * noblacklist support for /sys/module directory + * whitelist support for /sys/module directory * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed, * new profiles: discord-canary, pycharm-community, pycharm-professional, * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine, diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index f136be510..7bfa3a019 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt @@ -267,7 +267,7 @@ Blacklist violations logged to syslog. Whitelist directory or file. A temporary file system is mounted on the top directory, and the whitelisted files are mount-binded inside. Modifications to whitelisted files are persistent, everything else is discarded when the sandbox is closed. The top directory could be -user home, /dev, /media, /mnt, /opt, /srv, /var, and /tmp. +user home, /dev, /etc, /media, /mnt, /opt, /srv, /sys/module, /usr/share, /var, and /tmp. .br .br diff --git a/src/man/firejail.txt b/src/man/firejail.txt index af9fe4b90..1a90f403c 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -2091,7 +2091,7 @@ $ firejail \-\-net=br0 --veth-name=if0 Whitelist directory or file. A temporary file system is mounted on the top directory, and the whitelisted files are mount-binded inside. Modifications to whitelisted files are persistent, everything else is discarded when the sandbox is closed. The top directory could be -user home, /dev, /media, /mnt, /opt, /srv, /var, and /tmp. +user home, /dev, /etc, /media, /mnt, /opt, /srv, /sys/module, /usr/share, /var, and /tmp. .br .br -- cgit v1.2.3-54-g00ecf