Commit graph

28 commits

Author SHA1 Message Date
Tad
82a0cd2e71 Cleanup descriptions 2018-08-13 22:35:05 -04:00
Tad
40330b246d Add descriptions to profiles, pulled from Ubuntu 18.04 2018-08-13 21:48:41 -04:00
Tad
b885aec301 Add private-cache to many profiles
grep "cache" -L $(grep "redirect" -iL $(grep "whitelist" -RL))
2018-06-14 17:28:34 -04:00
Fred-Barclay
eb4b505ac2 Consistent home directory nomenclature 2017-11-17 12:32:32 -06:00
netblue30
9d4f2784b3 --writable-run-user, solving ssh/gnupg authentication problems for smarcards 2017-09-14 08:50:01 -04:00
netblue30
1aeed8fb12 ssh fix: #1543 2017-09-14 07:15:33 -04:00
Tad
104dde49c0 Fix nodvd placement 2017-08-13 15:53:04 -04:00
netblue30
647b6a220e added nodvd to most profiles 2017-08-13 07:36:06 -04:00
Tad
71f838b5ba Fix notv placement 2017-08-11 21:03:13 -04:00
netblue30
b97ca53e7b added notv to most profiles 2017-08-11 10:21:18 -04:00
Tad
00ea93e518 Fix comments in 88 profiles
There may actually be some other comments that were removed, but the bulk have been restored
2017-08-07 01:26:34 -04:00
Tad
9e3ba319be Unify all profiles 2017-08-07 01:22:08 -04:00
Tad
b18f42ab02 Initial adding of memory-deny-write-execute to profiles
- mdwe breaks most vm-based languages so python/java/javascript and some mono programs are not compatible
- mdwe also breaks most 3d accelerated programs such as 3d games
- mdwe is similar to PaX's mprotect meaning PaX flag managers can be used as reference
-- See https://github.com/copperhead/paxd-archive/blob/master/paxd.conf
-- See https://github.com/nning/linux-pax-flags
2017-08-02 00:13:42 -04:00
netblue30
b53d02259e fix quiet in profiles 2017-06-08 15:00:27 -04:00
netblue30
dce9b9b9eb added /etc/firejail/globals.local for global customizations 2017-05-23 12:02:22 -04:00
Tad
4f238b75de Harden more profiles 2017-04-17 17:11:24 -04:00
Tad
b5f29f9c21 Harden 9 more profiles 2017-04-16 08:12:31 -04:00
netblue30
975c6f327f persistent support for all profile files 2017-02-09 10:53:33 -05:00
netblue30
eb01b2602c ssh fix 2016-11-24 08:36:30 -05:00
Dara Adib
ea01effe46 Quiet SSH config
firejail output in ssh client breaks git+ssh for me, e.g.,

    $ git clone git@github.com:netblue30/firejail.git
    Cloning into 'firejail'...
    Reading profile /etc/firejail/ssh.profile
    Reading profile /etc/firejail/disable-common.inc
    Reading profile /etc/firejail/disable-programs.inc
    Reading profile /etc/firejail/disable-passwdmgr.inc
    fatal: protocol error: bad line length character: Pare

The "Pare" comes from "Parent pid x, child pid y".
2016-09-19 22:45:59 -04:00
netblue30
e93fbf3bd2 disable ssh-agent sockets in disable-programs.inc 2016-08-21 19:37:04 -04:00
netblue30
3597df9bc0 merged Various #542 pull request from Fred-Barclay 2016-05-31 21:40:55 -04:00
The Fox in the Shell
845bd06665 profiles: Add nonewprivs where sensible 2016-05-25 15:01:13 +02:00
avoidr
1a42221c62 delete blacklist wine from profiles 2016-04-12 22:29:33 +02:00
netblue30
ec34ed78af introducing disable-passwdmgr.inc 2016-03-28 12:05:15 -04:00
netblue30
570f845a01 consolidated disable-terminals into disable-common 2016-03-27 09:13:22 -04:00
netblue30
1c56e0bdfa consolidating disable-mgmt and disable-sercret into disable-common 2016-03-26 21:16:48 -04:00
netblue30
f841cc971e profile work 2016-03-26 20:39:16 -04:00