github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6
10974 commits 10 branches 71 tags 33 MiB
Commit graph

249 commits

Author SHA1 Message Date
startx2017
d1acb31c97 compile time: enable LTS 2021-02-28 10:26:08 -05:00
startx2017
72ba0b7e5e compile time: disable --output 2021-02-28 07:49:20 -05:00
netblue30
42e2db1275 jaitest - simple sandbox testing utility program 2021-02-20 10:06:58 -05:00
rusty-snake
3eac07647a
Merge pull request #3864 from haraldkubota/master 
Add first version of zsh completion
 2021-02-13 20:14:28 +00:00
Harald Kubota
a37ffc3374 Add first version of zsh completion 
Don't have duplicate descriptions and put = signs where they belong to

zsh completion function now dynamically adjusts for options (e.g. no --apparmor option without AppArmor configured)

No EXTRA_CFLAGS for cpp

Found main.c which does the argument processing. Moved some arguments into the correct #ifdef blocks

Profile selection now much better

Not more cpp. Using preproc.awk instead.

Updated bash firejail command completion to add profiles

ignore bash and zsh dynamically created completion scripts

Moved bash/zsh completions out of ALL_ITEMS to fix make install

Cleanup
 2021-02-12 21:39:44 +09:00
Kelvin M. Klann
5a5e603cd8 configure*: fix typo of HAVE_USERTMPFS 
Added on commit 64a8d6a7f ("compile time option to disable
--private-cache and --tmpfs for regular user").

These are the only occurrences:

    $ git ls-files -z | xargs -0 grep -Fin USERTMPS
    configure:3542:HAVE_USERTMPS=""
    configure.ac:80:HAVE_USERTMPS=""
 2021-02-09 16:38:59 -03:00
netblue30
fb9f2a5fb3 disabled overlayfs, fixes pending; added video channels to README* files 2021-02-06 09:05:57 -05:00
netblue30
c65adb71b5 back to 0.9.65; rel 0.9.64.2 moved on a different branch, out in the next two days 2021-01-27 14:07:50 -05:00
netblue30
48630b151c release 0.9.64.2 testing 2021-01-26 07:20:10 -05:00
netblue30
64a8d6a7f7 compile time option to disable --private-cache and --tmpfs for regular user 2020-10-27 09:35:41 -04:00
Reiner Herrmann
cd752585e0 refactor test targets and let build fail on test errors 2020-10-24 20:15:46 +02:00
Reiner Herrmann
e71289d546 bump version to new development version 0.9.65 2020-10-24 19:05:34 +02:00
netblue30
87062d8a10 0.9.64 testing 2020-10-21 07:50:19 -04:00
Reiner Herrmann
7fb7e4227e build: check for presence of gawk when manpages will be built 
Fixes: #3661
 2020-10-10 21:07:11 +02:00
netblue30
f584086bd6 set as 0.9.64rc2 for development until we release the real one 2020-10-05 09:36:43 -04:00
netblue30
98e42dc6da testing 0.9.64rc1 2020-10-04 09:08:27 -04:00
netblue30
228be74d59 replaced --enable-man with --disable-man in ./configure 2020-10-03 09:25:04 -04:00
netblue30
21337a0dc8 compile support for GCC static analyzer (--enable-analyzer) 2020-09-28 08:22:25 -04:00
netblue30
833db940c6 disable dbus proxy at compile time (default enabled) - part 1 2020-09-09 08:30:24 -04:00
startx2017
f624e289c5 preprocessor for man pages 2020-09-01 13:16:24 -04:00
startx2017
a5c62dfa59 removed --disable-seccomp from ./configure 2020-09-01 09:54:26 -04:00
Topi Miettinen
87e7b31399 Configure Debian package with AA and SELinux options 
Configure Debian package with AA and SELinux options if they are
enabled.
 2020-05-14 13:10:14 +00:00
netblue30
61295cefe4 profile stats 2020-03-19 08:28:58 -04:00
Topi Miettinen
1ad2d54c01 Add support for SELinux labeling 
Running `firejail --noprofile --private-bin=bash,ls ls -1Za /usr/bin`
shows that the SELinux labels are not correct:
```
user_u:object_r:user_tmpfs_t:s0 .
     system_u:object_r:usr_t:s0 ..
user_u:object_r:user_tmpfs_t:s0 bash
user_u:object_r:user_tmpfs_t:s0 ls
```

After fixing this:
```
       system_u:object_r:bin_t:s0 .
       system_u:object_r:usr_t:s0 ..
system_u:object_r:shell_exec_t:s0 bash
       system_u:object_r:bin_t:s0 ls
```

Most copied files and created directories should now have correct
labels (bind mounted objects keep their labels). This is useful to
avoid having to change the SELinux rules when using Firejail.
 2020-02-22 08:27:24 +00:00
netblue30
acd14b8f4f mainline moving to 0.9.63 for new development; release 0.9.62 is handled on release-0.9.62 branch 2019-12-06 08:18:13 -05:00
netblue30
37b23e8d53 testing for -fstack-clash-protection and -fstack-protector-strong compile flags 2019-06-26 10:24:28 -04:00
netblue30
7a181426c5 disable firetunnel at config time (#2793) 2019-06-24 09:22:57 -04:00
Reiner Herrmann
275978c507 use pkg-config macro to locate apparmor and flags 2019-06-21 14:54:59 +02:00
Reiner Herrmann
2c64d1fdd3 use AX_CHECK_COMPILE_FLAG to check for spectre flags 
Fixes #2661
 2019-06-21 14:54:58 +02:00
netblue30
d8bc575f43 0.9.60 is out, movin to 0.9.61 2019-05-27 10:55:06 -04:00
netblue30
b14f223a62 0.9.60 testing 2019-05-26 11:25:38 -04:00
netblue30
93c6842f3a moving to rc2 2019-04-21 10:46:19 -04:00
netblue30
98f5f5d634 0.9.60-rc1 testing 2019-04-21 10:13:38 -04:00
netblue30
21eec386ae 0.9.58.2 is out, moving back to 0.9.59 2019-02-08 15:21:50 -05:00
netblue30
036cd1f6de 0.9.58.2 testing 2019-02-08 09:20:56 -05:00
netblue30
7b94018634 moving to 0.9.59 2019-01-27 09:52:44 -05:00
netblue30
968940cf17 release 0.9.58 testing 2019-01-26 10:43:46 -05:00
netblue30
2a8c99896e release 0.9.58-rc1 2019-01-21 07:52:24 -05:00
netblue30
181b1257b8 reverting to 0.9.57 2018-10-21 12:01:32 -04:00
netblue30
caec31e7af 0.9.56.1 - bugfix release 2018-10-11 09:20:04 -04:00
Reiner Herrmann
0bac0c67e8 configure.ac: set sysconfdir only if none was specified manually 
Fixes #2125
 2018-10-03 13:25:47 +02:00
netblue30
2a0f17d94e --version 0.9.57 2018-09-19 18:37:28 -04:00
netblue30
d8b179d088 0.9.56 released 2018-09-18 10:39:26 -04:00
startx2017
ddd307e344 removed --disable-bind configuration option; some ohter minor cleanup 2018-08-22 08:32:01 -04:00
netblue30
a535609f5b release 0.9.56~rc1 testing 2018-08-11 08:53:05 -04:00
Tad
5c19c42399 Replace all possible HTTP links with HTTPS 2018-08-08 19:57:48 -04:00
startx2017
45d5fe7c2a removed compile time --enable-network=restricted, --net=none allowed even if networking was disabled at compile time or at run time, fixed issue #2061 2018-07-26 09:58:50 -04:00
netblue30
7b2b00d83e 0.9.55 2018-05-16 10:27:46 -04:00
netblue30
1ed6afad0c 0.9.54 testing 2018-05-16 08:16:28 -04:00
netblue30
47bc443ae1 moving to 0.9.54~rc3 2018-05-13 10:52:55 -04:00