glitsj16
6ee5afa31b
don't include globals.local twice (take two) ( #2010 )
...
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
2018-06-24 16:20:32 +00:00
smitsohu
7a37dc31ab
recalibrate dbus access, deploy nodbus option
...
see #1822 and #1825 . also systematically replaces
'blacklist /run/user/*/bus' with 'nodbus'.
with contributions from @Fred-Barclay
2018-03-28 03:23:59 +02:00
smitsohu
55938d07a5
disable non-abstract session bus address
...
systematically blacklist /run/user/*/bus in all profiles with
'net none'. targets distros like Fedora
2017-10-22 11:34:51 +02:00
netblue30
f25fa5cbc2
added private-lib to eog, eom, file, gpicview, less, strings, and tar
2017-10-16 08:58:30 -04:00
netblue30
5bd8046908
make deb; fixed strings profile
2017-08-23 07:15:02 -04:00
Fred Barclay
ea8312bf0a
Merge pull request #1466 from SpotComms/fixnd
...
Fix nodvd placement
2017-08-13 15:07:29 -05:00
Tad
104dde49c0
Fix nodvd placement
2017-08-13 15:53:04 -04:00
Tad
8d0bde2b85
Harden 17 profiles using private-bin
2017-08-13 15:32:14 -04:00
netblue30
647b6a220e
added nodvd to most profiles
2017-08-13 07:36:06 -04:00
Tad
71f838b5ba
Fix notv placement
2017-08-11 21:03:13 -04:00
netblue30
b97ca53e7b
added notv to most profiles
2017-08-11 10:21:18 -04:00
Tad
9e3ba319be
Unify all profiles
2017-08-07 01:22:08 -04:00
Tad
b18f42ab02
Initial adding of memory-deny-write-execute to profiles
...
- mdwe breaks most vm-based languages so python/java/javascript and some mono programs are not compatible
- mdwe also breaks most 3d accelerated programs such as 3d games
- mdwe is similar to PaX's mprotect meaning PaX flag managers can be used as reference
-- See https://github.com/copperhead/paxd-archive/blob/master/paxd.conf
-- See https://github.com/nning/linux-pax-flags
2017-08-02 00:13:42 -04:00
Tad
5354f20012
Harden 50 profiles
...
Hardened many profiles using disable-mnt and novideo
Fixed gnome-font-viewer
2017-07-04 11:35:29 -04:00
netblue30
b53d02259e
fix quiet in profiles
2017-06-08 15:00:27 -04:00
netblue30
dce9b9b9eb
added /etc/firejail/globals.local for global customizations
2017-05-23 12:02:22 -04:00
netblue30
975c6f327f
persistent support for all profile files
2017-02-09 10:53:33 -05:00
valoq
29ab333108
hardened various profiles
2016-12-21 10:29:14 +01:00
netblue30
5dd8b1f19e
quiet fix
2016-11-29 11:23:33 -05:00
Fred-Barclay
88972056f4
squash attempt 2
2016-10-24 15:33:54 -05:00
netblue30
ae4e4fa1e0
removed private-tmp from sysutils
2016-10-03 16:34:46 -04:00
netblue30
277a06d1f2
added back strings profile
2016-08-25 09:22:58 -04:00
netblue30
28ae6fa41b
removed strings profile
2016-08-11 07:43:17 -04:00
netblue30
19a9166bd3
added quiet profile command
2016-08-01 09:55:12 -04:00
netblue30
442655366f
nosound
2016-07-08 09:00:27 -04:00
netblue30
4ece607b8f
sysutils
2016-06-28 07:58:20 -04:00
netblue30
fdaab24ae0
cpio, gzip, strings, xzdec
2016-06-27 09:03:06 -04:00
netblue30
e34051c203
strings, cpio, gzip, xz profiles
2016-06-26 21:40:19 -04:00