github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6
10974 commits 10 branches 71 tags 33 MiB
Commit graph

47 commits

Author SHA1 Message Date
Kelvin M. Klann
f571fb5c70 tests: compile: remove leftover --disable-man test 
The `--disable-man` test was added twice on commit 5c7c58f6e and only
one instance was removed on commit a655b7d1b.

Related commits:

* 5c7c58f6e ("rework make test-compile", 2026-01-20)
* a655b7d1b ("removed ./configure --disable-man option", 2026-01-21).
 2026-01-25 04:39:34 -03:00
netblue30
b214d080e0 removed ./configure --disable-usertmpfs option 2026-01-21 15:07:43 -05:00
netblue30
a655b7d1ba removed ./configure --disable-man option 2026-01-21 14:14:40 -05:00
netblue30
5c7c58f6e6 rework make test-compile 2026-01-20 12:09:35 -05:00
netblue30
2a5062c800 copyright 2014-2026 all over the place 2025-12-30 08:20:44 -05:00
Kelvin M. Klann
e4294defd8 build: remove remnants of overlayfs/--overlay 
Remove what remains of the overlayfs support, `--overlay` commands and
the `--enable-overlayfs` configure option.

Commands:

* `--overlay`
* `--overlay-named=`
* `--overlay-clean`
* `--overlay-tmpfs`

firejail.config:

* `overlayfs`

Related commits:

* 489cc25c2 ("cleaned up old overlayfs code; the feature was disabled by
  default in 2021 because of security problems", 2025-12-16).
* b537aa57b ("fixed /sys mounting broken during overlayfs cleanup",
  2025-12-18)

Relates to #6994.

Note: Code with `RUN_OVERLAY_ROOT` / `oroot` is left as is, since it
seems to also be used by `--chroot`:

    $ git grep -E '[^n]oroot'
    etc/apparmor/firejail-default:# Line starting with /run/firejail/mnt/oroot deal with --overlay sandboxes.
    etc/apparmor/firejail-default:/{,run/firejail/mnt/oroot/}{dev,etc,home,media,mnt,root,srv,tmp,var}/** w,
    etc/apparmor/firejail-default:# to run programs from your home directory, add "/{,run/firejail/mnt/oroot/}home/** ix,"
    etc/apparmor/firejail-default:/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}bin/** ix,
    etc/apparmor/firejail-default:/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}sbin/** ix,
    etc/apparmor/firejail-default:/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}games/** ix,
    etc/apparmor/firejail-default:/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}lib{,32,64,exec}/** ix,
    etc/apparmor/firejail-default:/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}opt/** ix,
    etc/apparmor/firejail-default:#/{,run/firejail/mnt/oroot/}home/** ix,
    etc/apparmor/firejail-default:/{,run/firejail/mnt/oroot/}{,var/}run/firejail/appimage/** ix,
    src/firejail/chroot.c:  // create /run/firejail/mnt/oroot
    src/firejail/chroot.c:  char *oroot = RUN_OVERLAY_ROOT;
    src/firejail/chroot.c:  if (mkdir(oroot, 0755) == -1)
    src/firejail/chroot.c:  // mount the chroot dir on top of /run/firejail/mnt/oroot in order to reuse the apparmor rules for overlay
    src/firejail/chroot.c:  if (bind_mount_fd_to_path(parentfd, oroot))
    src/firejail/chroot.c:          errExit("mounting rootdir oroot");
    src/firejail/chroot.c:  if (chroot(oroot) < 0)
    src/include/rundefs.h:#define RUN_OVERLAY_ROOT          RUN_MNT_DIR "/oroot"
 2025-12-19 16:35:02 -03:00
Kelvin M. Klann
381c3cf1a3 build: remove remnants of IDS/fids 
Remove what remains of the Intrusion Detection System (IDS)/fids,
`--ids` commands and the `--enable-ids` configure option.

Commands:

* `--ids-check`
* `--ids-init`

Related commits:

* 5e962ff78 ("removed IDS feature, it was never enabled by default in
  our builds", 2025-12-17)

Relates to #6995.
 2025-12-19 15:24:37 -03:00
Kelvin M. Klann
8d927220b5 build: remove remnants of --disable-globalcfg 2 
This amends commit 901ba4fc9 ("build: remove remnants of
--disable-globalcfg", 2025-12-05).

Relates to #6984.
 2025-12-19 15:24:37 -03:00
Kelvin M. Klann
901ba4fc9e build: remove remnants of --disable-globalcfg 
Related commits:

* ee879a2f2 ("fix arg-max-count and arg-max-len options in
  firejail.config", 2025-11-30)
* 65571c3cc ("remove --enable-globalcfg software config option",
  2025-11-30)

Relates to #6984.
 2025-12-05 08:49:05 -03:00
netblue30
212ac3cb19 update copyright 2025-01-12 19:26:24 -05:00
Kelvin M. Klann
2301ab2348 build: standardize ./configure arguments 
For consistency and to make it clearer where jobs differ (for example,
to see where `--enable-analyzer` is used).

Changes:

* Always use --prefix=/usr and --enable-fatal-warnings (except in the
  Alpine job due to current warnings; see #6224)
* Use the same argument order

Note: mkdeb.sh and platform/rpm/mkrpm.sh already pass `--prefix=/usr` to
./configure.
 2024-02-29 08:52:25 -03:00
Kelvin M. Klann
93a5d7a2f5 build: standardize parallel make arguments 
Currently the number of make jobs used for the default build target are
hardcoded and the value used varies across files.

For consistency (and potentially better performance), use
`make -j "$(nproc)"` everywhere that `make -j` is currently used.

Kind of relates to commit 500d8f2d6 ("ci: run make in parallel where
applicable", 2023-08-14) / PR #5960.
 2024-02-29 08:52:25 -03:00
netblue30
ae8f62dba0 update copyright 2024 2024-01-12 11:23:22 -05:00
Kelvin M. Klann
6767f30660 build: fix TARNAME/VERSION variables in compile.sh 
This fixes the following errors:

    $ make clean
    [...]
    cd test/compile; ./compile.sh --clean; cd ../..
    ./compile.sh: line 55: TARNAME: command not found
    ./compile.sh: line 55: VERSION: command not found

This amends commit 200f389ed ("build: use config.sh in more scripts",
2023-07-28) / PR #5927.
 2023-08-12 05:17:40 -03:00
Kelvin M. Klann
200f389ed0 build: use config.sh in more scripts 
This removes the need to manually pass variables such as `$(TARNAME)`
and `$(VERSION)` to shell scripts in the root Makefile.

Relates to #5140.
 2023-07-28 14:10:31 -03:00
Kelvin M. Klann
59ed39ec46 build: fix shellcheck issues in mkrpm.sh/compile.sh 2023-07-28 14:08:01 -03:00
David Fetter
2dc16cc247
Update copyright to 2023 (#5664) 2023-02-15 18:57:44 +00:00
a1346054
7a5c2b205e
tests: use bash-style [[...]] instead of [...] 2022-09-13 22:37:20 +00:00
a1346054
270f0d95e3
tests: stop mixing tabs and spaces 2022-09-13 22:37:20 +00:00
a1346054
c47ad8b82a
tests: fix underquoting 2022-09-13 22:37:19 +00:00
a1346054
4157640007
tests: fix unintentional overwriting of array value 2022-09-13 20:19:13 +00:00
netblue30
880f2c98a1 Removed IDS feature from the default build. To enable it, use --enable-ids at compile time. 2022-05-25 07:36:42 -04:00
netblue30
121749f0ca 2022 copyright update 2022-01-07 12:23:47 -05:00
startx2017
2609e5cf0b copyright update 2021-02-15 08:33:05 -05:00
netblue30
848aac1e6d rel 0.9.64.2 testing - make test-compile 2021-01-26 09:13:39 -05:00
netblue30
2357d2d129 make test-compile for disable manpages 2020-10-03 09:40:52 -04:00
netblue30
5ad6f4c710 disable dbus proxy at compile time (default enabled) - part 2 2020-09-09 09:33:47 -04:00
startx2017
0ce2595ffe fix make test-compile - cleanup 2020-09-01 09:58:20 -04:00
startx2017
a5c62dfa59 removed --disable-seccomp from ./configure 2020-09-01 09:54:26 -04:00
netblue30
0dc883bfcb compile cleanup 2020-04-05 09:57:34 -04:00
glitsj16
6f3867fdb8
move copyright to 2020 (part 2) (#3181) 
* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020

* move copyright statement to 2020
 2020-01-24 22:46:30 +00:00
netblue30
7a181426c5 disable firetunnel at config time (#2793) 2019-06-24 09:22:57 -04:00
startx2017
ddd307e344 removed --disable-bind configuration option; some ohter minor cleanup 2018-08-22 08:32:01 -04:00
startx2017
45d5fe7c2a removed compile time --enable-network=restricted, --net=none allowed even if networking was disabled at compile time or at run time, fixed issue #2061 2018-07-26 09:58:50 -04:00
Fred Barclay
997a93efbd
strip trailing whitespace from test/ 2017-05-24 14:38:01 -05:00
netblue30
fa424ad84d compile cleanup 2016-09-06 10:13:11 -04:00
netblue30
01b80e1d26 testing 2016-08-20 08:15:59 -04:00
netblue30
8da2daba9d removed github-compile make target 2016-08-10 09:30:45 -04:00
netblue30
d90ab98825 removed sudo from make dist-compile and make github-compile 2016-04-28 08:57:21 -04:00
root
c92dc59bef fixed interface/defaultgw problem 2016-04-25 09:54:17 -04:00
netblue30
0da2d6f538 x11 fixes 2016-04-03 08:20:16 -04:00
netblue30
36b5d2a900 compile test 2016-03-12 08:34:57 -05:00
netblue30
abe50f280d ./configure --enable-network=restricted 2016-02-24 09:03:11 -05:00
netblue30
3212101227 x11 work 2016-02-23 09:53:54 -05:00
netblue30
2e7e0e2d34 testing 2016-01-25 10:55:15 -05:00
netblue30
71cea4d4c2 fixed --disable-chroot compilation 2015-12-12 09:40:12 -05:00
netblue30
d9efe384aa compile test 2015-12-12 09:11:52 -05:00