800 commits

Author	SHA1	Message	Date
netblue30	0998edfdfe	bugfix: --private=dir where dir is the user home directory	2016-11-12 08:46:20 -05:00
netblue30	3e3fbccdd2	bug: mkdir and mkfile are not applied to private directories	2016-11-10 08:28:30 -05:00
netblue30	18f6e9dc9b	security enhancements	2016-11-07 20:46:08 -05:00
netblue30	e847207df2	security: invalid environment	2016-11-03 11:11:16 -04:00
netblue30	8b5b444c76	security: TOCTOU exploit for --get and --put	2016-11-02 14:40:25 -04:00
netblue30	981ba13ec0	0.9.44 testing	2016-10-21 09:44:58 -04:00
Aleksey Manevich	4ac74f0621	add missing include	2016-10-20 01:23:26 +03:00
Aleksey Manevich	9b693b4a07	add missing include	2016-10-20 00:29:58 +03:00
netblue30	eddb941946	replaced exit with _exit in forked child	2016-10-19 14:30:30 -04:00
netblue30	24f53cde1d	replaced exit with _exit in forked child	2016-10-19 12:27:18 -04:00
netblue30	b11e3ad815	eog and evolution profiles	2016-10-18 14:34:41 -04:00
netblue30	99abcd61b0	flowblade profile	2016-10-17 13:44:41 -04:00
netblue30	dbec13243b	openshot profile	2016-10-17 13:36:54 -04:00
netblue30	a35b70acbd	virtualbox profile	2016-10-17 13:14:26 -04:00
netblue30	bb6c744fd4	allow user access to /sys/fs (--noblacklist=/sys/fs)	2016-10-17 08:41:39 -04:00
netblue30	f88f8c638f	merges	2016-10-16 08:51:52 -04:00
valoq	4542921552	added /srv in whitelist option	2016-10-15 22:56:45 +02:00
netblue30	b88cef5db1	testing	2016-10-13 16:45:28 -04:00
netblue30	84cb3ef420	0.9.44~rc1 testing	2016-10-13 12:27:13 -04:00
netblue30	a2fb272b3e	xpdf profile	2016-10-12 16:20:18 -04:00
netblue30	31d271a5a8	appimage umount fix	2016-10-09 11:29:02 -04:00
netblue30	e0f28ab1a1	cleanup	2016-10-09 11:20:41 -04:00
netblue30	223543a7e5	moving appimage mount point from /tmp to /run - fixing --private-tmp	2016-10-09 11:12:34 -04:00
netblue30	5a90ef30ae	moving appimage mount point from /tmp to /run	2016-10-09 11:05:12 -04:00
netblue30	fe47611efe	user name globbing for restricted shell	2016-10-09 08:53:12 -04:00
netblue30	40ed53c20b	nvidia fix	2016-10-08 08:33:42 -04:00
netblue30	dfa0256367	keepass, keepassx, 7z profiles	2016-10-03 11:33:22 -04:00
netblue30	0579100e2d	--x11=xorg	2016-10-03 10:15:14 -04:00
netblue30	f9b1722032	renamed --x11=block to --x11=none, brought back the requirement for network namespaces for x11 sandboxing	2016-10-02 10:24:14 -04:00
netblue30	b7d5d68ae4	renamed --x11=block to --x11=none, brought back the requirement for network namespaces for x11 sandboxing	2016-10-02 10:23:29 -04:00
Reiner Herrmann	89ce7a2091	Fix typos found by lintian	2016-10-02 16:04:57 +02:00
vismir2	7c07a5ccb1	Fixed spacing	2016-10-02 09:25:00 +02:00
vismir2	7fe740bfbf	Fixed alphabetical order	2016-10-02 09:24:17 +02:00
vismir2	756ef53c29	Update firecfg.config ... Added feh, ranger and zathura to list of supported programs	2016-10-02 09:14:21 +02:00
netblue30	2cfa7e461b	dropping requirement for network namespace when using --x11	2016-10-01 16:38:07 -04:00
netblue30	6d2eaf548d	moved libx11 to libconnect	2016-10-01 16:25:36 -04:00
netblue30	27bffbfeb2	disable x11 abstract socket for --x11=block	2016-10-01 13:50:58 -04:00
netblue30	a14f20736b	x11 detection support for --audit	2016-10-01 09:42:31 -04:00
netblue30	74ad73c808	x11 detection support for --audit	2016-10-01 09:36:22 -04:00
netblue30	b806f35192	gimp and inkscape profiles	2016-09-30 10:13:00 -04:00
netblue30	e90a8025a8	added luminance-hdr and synfigstudio profiles	2016-09-30 09:33:45 -04:00
Aleksey Manevich	7671983267	if .Xauthority is symlink, skip and warn	2016-09-29 00:41:29 +03:00
netblue30	d50b3b3db2	--veth-name option	2016-09-28 13:23:09 -04:00
netblue30	79a014e0e6	--no3d - disable 3D hardware acceleration	2016-09-28 10:13:17 -04:00
netblue30	28c2ace5fd	private-dev fix	2016-09-28 09:07:00 -04:00
netblue30	19a67bebb4	debug	2016-09-27 15:52:21 -04:00
netblue30	46dc2b34f1	CVE-2016-7545	2016-09-27 15:12:11 -04:00
netblue30	78e772fe13	allow-debuggers fix	2016-09-27 13:29:39 -04:00
netblue30	ed31d22389	mupdf and qpdfview profiles	2016-09-27 11:32:59 -04:00
netblue30	ae0e5b667d	CVE-2016-7545	2016-09-27 10:38:21 -04:00