github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1
9592 commits 10 branches 71 tags 33 MiB
Commit graph

9592 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kelvin M. Klann
2300980849 build: fix codespell errors 
This fixes the following errors:

    $ make codespell
    [...]
    codespell --ignore-regex "UE|creat|doas|shotcut|ether" src test
    src/firemon/procevent.c:188: duble ==> double
    src/fnettrace/main.c:30: postive ==> positive
    src/fnettrace/main.c:30: defiend ==> defined
    src/fnettrace/main.c:482: isplay ==> display
    make: *** [Makefile:371: codespell] Error 65
    $ codespell --version
    2.2.5

Added in the following commits:

* bef5d86a1 ("increase socket buffer size for firemon, bug #2700",
  2019-09-29)
* c4962789f ("nettrace stats", 2023-08-08)
 2023-08-12 03:36:53 -03:00
netblue30
009434f922 small nettrace update 2023-08-11 17:37:42 -04:00
netblue30
0e11f39bcb Merge branch 'master' of ssh://github.com/netblue30/firejail 2023-08-11 17:37:00 -04:00
glitsj16
a3a41b8fff
profiles: improvements to profiles using private (#5946) 
Changes:

* comment `include whitelist-common.inc` when using `private`
* drop `private` on profiles that access files in `${HOME}`
* use `#` in comments

Relates to #903.
 2023-08-11 03:54:39 +00:00
leukimi
f17d2172c1
0ad.profile: fix libmozjs error on OpenSUSE Tumbleweed (#5944) 
This fixes 0ad not opening on OpenSUSE Tumbleweed due to a "Permission
denied" error when trying to open "libmozjs-78.so.0".

See this issue that describes it all:
https://github.com/netblue30/firejail/issues/5938#issue-1833607321
 2023-08-11 03:36:10 +00:00
glitsj16
f106c33e0c
New profile: clac (#5947) 
* firecfg.config: add support for clac

* Create clac.profile
 2023-08-10 09:11:29 +00:00
glitsj16
3a088f1e69
New profile: journal-viewer (#5943) 2023-08-10 09:09:53 +00:00
netblue30
c4962789fc nettrace stats 2023-08-08 16:27:18 -04:00
Kelvin M. Klann
9f648994e1
Merge pull request #5942 from kmk3/build-firecfg-improvements 
build: firecfg.config sorting improvements
 2023-08-06 19:27:36 +00:00
Kelvin M. Klann
fb39e08da1
Merge pull request #5941 from kmk3/mpv-add-cache 
mpv.profile: add XDG_CACHE_HOME & missing paths
 2023-08-06 19:27:20 +00:00
Kelvin M. Klann
ac2bd3211d build: use ASCII sort on firecfg and check for duplicates 
Currently the CI check does not consider certain special characters
(such as `-`) when sorting due to `sort -d`.

So remove `-d`, sort firecfg using `LC_ALL=C` and enforce that order.

Also add `sort -u` to check for duplicates.

This also allows the CI check to ignore normal comments (lines starting
with `# `) anywhere in the file.

Relates to #4643.
 2023-08-05 17:17:15 -03:00
Kelvin M. Klann
30f9ad908e build: improve comments in firecfg.config 
Remove the space after `#` for commented code and use `#` instead of `-`
for comments at the end of the line.

Commands used to search and replace:

    $ f=src/firecfg/firecfg.config; printf '%s\n' "$(sed -E \
      -e '3,9999s/^# /#/' \
      -e '3,9999s/^#([^ ]+) --? /#\1 # /' \
      "$f")" >"$f"
 2023-08-05 17:13:54 -03:00
Kelvin M. Klann
d765b69e1d profiles: add cache/state paths for mpv 
On the profiles that allow ~/.config/mpv.

Relates to #5936.
 2023-08-03 10:16:42 -03:00
Kelvin M. Klann
f703bf6235 mpsyt.profile: stop creating config paths for mpv/youtube-dl 
The programs in question do not create these files; they have to be
created manually.
 2023-08-03 10:14:13 -03:00
Kelvin M. Klann
ff04543e93 mpv.profile: add new XDG_CACHE_HOME path 
mpv v0.36.0 uses ~/.cache/mpv[1] [2]:

Relates to #2838 #5936.

[1] https://github.com/mpv-player/mpv/releases/tag/v0.36.0
[2] https://github.com/mpv-player/mpv/pull/10838
 2023-08-03 09:51:23 -03:00
CodeWithMa
5e0f35b0cb mpv.profile: add new XDG_STATE_HOME path 
The new version of mpv changed the path of the watch_later folder to
~/.local/state/mpv/watch_later.

See https://github.com/mpv-player/mpv/pull/10838
 2023-08-03 09:17:21 -03:00
glitsj16
61351c0d06
New profile: reader (#5934) 
* Create reader.profile

* firecfg.config: add reader support

* reader: integrate review suggestions

- blacklist whole ${RUNUSER}
- drop x11 none

* reader: fix 'x11 none'
 2023-08-02 19:54:29 +00:00
glitsj16
b76dc25f1b
New profile: daisy (#5935) 
* firecfg.config: add daisy support

* Create daisy.profile
 2023-08-02 19:53:00 +00:00
glitsj16
95184d8c2e
gramps: bring in new config directory (#5933) 
* disable-programs.inc: add new gramps dir

* gramps: add new config dir
 2023-07-31 11:23:19 +00:00
glitsj16
a7d92e1d8b
thunderbird: D-Bus hardening (#5913) 2023-07-31 11:22:31 +00:00
dependabot[bot]
5986fe1ae4 build(deps): bump github/codeql-action from 2.21.0 to 2.21.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.0 to 2.21.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](1813ca74c3...0ba4244466)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-31 11:08:25 +00:00
dependabot[bot]
b4cef6dfbd build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](55d479fb1c...cba0d00b1f)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-31 11:08:20 +00:00
Kelvin M. Klann
c9666ebd08 RELNOTES: add build items 
Relates to #5916 #5927.
 2023-07-29 21:57:17 -03:00
Kelvin M. Klann
4a26d91ae2
Merge pull request #5927 from kmk3/build-use-config-sh 
build: fix some shellcheck issues & use config.sh in more scripts
 2023-07-30 00:54:04 +00:00
Kelvin M. Klann
200f389ed0 build: use config.sh in more scripts 
This removes the need to manually pass variables such as `$(TARNAME)`
and `$(VERSION)` to shell scripts in the root Makefile.

Relates to #5140.
 2023-07-28 14:10:31 -03:00
Kelvin M. Klann
59ed39ec46 build: fix shellcheck issues in mkrpm.sh/compile.sh 2023-07-28 14:08:01 -03:00
netblue30
bf8229dde7 Merge branch 'master' of ssh://github.com/netblue30/firejail 2023-07-27 19:47:37 -04:00
netblue30
f1d4cf9bfd cleanup 2023-07-27 19:47:24 -04:00
Kelvin M. Klann
701c0282b8
Merge pull request #5916 from kmk3/build-improve-dist 
build: dist and asc improvements
 2023-07-27 12:48:15 +00:00
Kelvin M. Klann
e0e597ab55 build: make asc use config.sh 
Similarly to mkdeb.sh.

Relates to #5140.
 2023-07-27 09:33:23 -03:00
Kelvin M. Klann
640bb303d1 build: make dist depend on just clean 
The clean target is currently enough to remove all generated files other
than the ones directly in the root directory, so to simplify the dist
target, make it depend on clean instead of distclean.

See commit 5f2785290 ("build: remove unnecessary distclean targets",
2023-07-15) / PR #5911.

Relates to #5142 #5182.
 2023-07-27 09:33:23 -03:00
Kelvin M. Klann
16dc7448ca fnetlock: fix unused bw variable warning 
This is breaking build-clang on CI[1]:

    make -C src/fnetlock/
    make[1]: Entering directory '/home/runner/work/firejail/firejail/src/fnetlock'
    clang-14 [...] -c main.c -o main.o
    main.c:97:11: error: variable 'bw' set but not used [-Werror,-Wunused-but-set-variable]
            unsigned bw = 0; // bandwidth calculations
                     ^
    1 error generated.
    make[1]: *** [../../src/prog.mk:16: main.o] Error 1
    make: *** [Makefile:58: src/fnetlock/fnetlock] Error 2

Added on commit 8e4b847cd ("split nettrace executable ^Cto netrace and
netlock", 2023-07-25).

[1]: https://github.com/netblue30/firejail/actions/runs/5669072674/job/15361026508

Cc: @netblue30
 2023-07-27 08:49:36 -03:00
netblue30
6d4bb95948 Merge branch 'master' of ssh://github.com/netblue30/firejail 2023-07-26 08:59:33 -04:00
netblue30
1d69791e80 netlock/nettrace cleanup 2023-07-26 08:59:18 -04:00
glitsj16
1c233b5360
spotify: D-Bus hardening (#5923) 2023-07-25 19:42:22 +00:00
glitsj16
5bcacba812
audacious: D-Bus hardening (#5922) 
* audacious: D-Bus hardening

* audacious: add noprinters
 2023-07-25 19:40:36 +00:00
glitsj16
142a2130f7
New profile: sniffnet (#5920) 
* disable-programs.inc: add sniffnet support

* Create sniffnet.profile

* firecfg.config: add sniffnet support
 2023-07-25 19:39:21 +00:00
glitsj16
a95a742727
profiles: fixes and cleanups for opening links with firefox (#5919) 2023-07-25 19:36:31 +00:00
glitsj16
63b306179f
profiles: Miscellaneous cleanups (#5918) 2023-07-25 19:32:12 +00:00
glitsj16
67f5ae8a4f
firefox(-based) profiles: refactor wusc (#5914) 2023-07-25 19:30:19 +00:00
pirate486743186
e71f226128
update mov-cli (#5924) 
Co-authored-by: pirate486743186 <>
 2023-07-25 19:28:17 +00:00
netblue30
8e4b847cdd split nettrace executable ^Cto netrace and netlock 2023-07-25 10:22:59 -04:00
netblue30
97d6993f35 cleanup 2023-07-25 08:00:57 -04:00
netblue30
c95bdcf41b Merge branch 'master' of ssh://github.com/netblue30/firejail 2023-07-24 17:55:23 -04:00
netblue30
c4b6af8f1c integrating nettrace dnstrace and snitrace 2023-07-24 17:55:16 -04:00
Kelvin M. Klann
ce21a299aa build: remove remaining svn-related code 
The only other svn-related code seems to have been removed on commit
7e1c057ae ("make testing", 2016-04-23).
 2023-07-24 13:18:43 -03:00
Kelvin M. Klann
64c5ebaf0b build: sort DISTFILES_TEST 2023-07-24 13:18:43 -03:00
Kelvin M. Klann
de84b4d1cf build: format DISTFILES / DISTFILES_TEST 2023-07-24 13:18:43 -03:00
dependabot[bot]
6fd85f4e58 build(deps): bump github/codeql-action from 2.20.4 to 2.21.0 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.20.4 to 2.21.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](489225d82a...1813ca74c3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-24 13:57:20 +00:00
netblue30
b093b66047 fnettrace: trace ICPM ECHO (ping) traffic 2023-07-23 10:30:50 -04:00