Tad
|
82a0cd2e71
|
Cleanup descriptions
|
2018-08-13 22:35:05 -04:00 |
|
Tad
|
40330b246d
|
Add descriptions to profiles, pulled from Ubuntu 18.04
|
2018-08-13 21:48:41 -04:00 |
|
Tad
|
b885aec301
|
Add private-cache to many profiles
grep "cache" -L $(grep "redirect" -iL $(grep "whitelist" -RL))
|
2018-06-14 17:28:34 -04:00 |
|
Fred-Barclay
|
eb4b505ac2
|
Consistent home directory nomenclature
|
2017-11-17 12:32:32 -06:00 |
|
netblue30
|
9d4f2784b3
|
--writable-run-user, solving ssh/gnupg authentication problems for smarcards
|
2017-09-14 08:50:01 -04:00 |
|
netblue30
|
1aeed8fb12
|
ssh fix: #1543
|
2017-09-14 07:15:33 -04:00 |
|
Tad
|
104dde49c0
|
Fix nodvd placement
|
2017-08-13 15:53:04 -04:00 |
|
netblue30
|
647b6a220e
|
added nodvd to most profiles
|
2017-08-13 07:36:06 -04:00 |
|
Tad
|
71f838b5ba
|
Fix notv placement
|
2017-08-11 21:03:13 -04:00 |
|
netblue30
|
b97ca53e7b
|
added notv to most profiles
|
2017-08-11 10:21:18 -04:00 |
|
Tad
|
00ea93e518
|
Fix comments in 88 profiles
There may actually be some other comments that were removed, but the bulk have been restored
|
2017-08-07 01:26:34 -04:00 |
|
Tad
|
9e3ba319be
|
Unify all profiles
|
2017-08-07 01:22:08 -04:00 |
|
Tad
|
b18f42ab02
|
Initial adding of memory-deny-write-execute to profiles
- mdwe breaks most vm-based languages so python/java/javascript and some mono programs are not compatible
- mdwe also breaks most 3d accelerated programs such as 3d games
- mdwe is similar to PaX's mprotect meaning PaX flag managers can be used as reference
-- See https://github.com/copperhead/paxd-archive/blob/master/paxd.conf
-- See https://github.com/nning/linux-pax-flags
|
2017-08-02 00:13:42 -04:00 |
|
netblue30
|
b53d02259e
|
fix quiet in profiles
|
2017-06-08 15:00:27 -04:00 |
|
netblue30
|
dce9b9b9eb
|
added /etc/firejail/globals.local for global customizations
|
2017-05-23 12:02:22 -04:00 |
|
Tad
|
4f238b75de
|
Harden more profiles
|
2017-04-17 17:11:24 -04:00 |
|
Tad
|
b5f29f9c21
|
Harden 9 more profiles
|
2017-04-16 08:12:31 -04:00 |
|
netblue30
|
975c6f327f
|
persistent support for all profile files
|
2017-02-09 10:53:33 -05:00 |
|
netblue30
|
eb01b2602c
|
ssh fix
|
2016-11-24 08:36:30 -05:00 |
|
Dara Adib
|
ea01effe46
|
Quiet SSH config
firejail output in ssh client breaks git+ssh for me, e.g.,
$ git clone git@github.com:netblue30/firejail.git
Cloning into 'firejail'...
Reading profile /etc/firejail/ssh.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
fatal: protocol error: bad line length character: Pare
The "Pare" comes from "Parent pid x, child pid y".
|
2016-09-19 22:45:59 -04:00 |
|
netblue30
|
e93fbf3bd2
|
disable ssh-agent sockets in disable-programs.inc
|
2016-08-21 19:37:04 -04:00 |
|
netblue30
|
3597df9bc0
|
merged Various #542 pull request from Fred-Barclay
|
2016-05-31 21:40:55 -04:00 |
|
The Fox in the Shell
|
845bd06665
|
profiles: Add nonewprivs where sensible
|
2016-05-25 15:01:13 +02:00 |
|
avoidr
|
1a42221c62
|
delete blacklist wine from profiles
|
2016-04-12 22:29:33 +02:00 |
|
netblue30
|
ec34ed78af
|
introducing disable-passwdmgr.inc
|
2016-03-28 12:05:15 -04:00 |
|
netblue30
|
570f845a01
|
consolidated disable-terminals into disable-common
|
2016-03-27 09:13:22 -04:00 |
|
netblue30
|
1c56e0bdfa
|
consolidating disable-mgmt and disable-sercret into disable-common
|
2016-03-26 21:16:48 -04:00 |
|
netblue30
|
f841cc971e
|
profile work
|
2016-03-26 20:39:16 -04:00 |
|