Commit graph

10657 commits

Author SHA1 Message Date
Kelvin M. Klann
381c3cf1a3 build: remove remnants of IDS/fids
Remove what remains of the Intrusion Detection System (IDS)/fids,
`--ids` commands and the `--enable-ids` configure option.

Commands:

* `--ids-check`
* `--ids-init`

Related commits:

* 5e962ff78 ("removed IDS feature, it was never enabled by default in
  our builds", 2025-12-17)

Relates to #6995.
2025-12-19 15:24:37 -03:00
Kelvin M. Klann
8d927220b5 build: remove remnants of --disable-globalcfg 2
This amends commit 901ba4fc9 ("build: remove remnants of
--disable-globalcfg", 2025-12-05).

Relates to #6984.
2025-12-19 15:24:37 -03:00
Kelvin M. Klann
6804120894 ci: run sort.py to fix ci
Command used:

    $ ./ci/check/profiles/sort.py etc/inc/*.inc etc/profile-*/*.profile

Related commits:

* 411b97fdc ("profile fixes: allow bwrap inside the sandbox",
  2025-12-18)
* bb5c1391c ("added gnome-text-editor profile", 2025-12-19)
2025-12-19 15:23:17 -03:00
netblue30
b00ff53fe0 gnome-text-editor 2025-12-19 10:29:02 -05:00
netblue30
bb5c1391cd added gnome-text-editor profile 2025-12-19 10:26:10 -05:00
netblue30
61870e35dc remove warning cannot find /var/log/utmp file 2025-12-19 08:03:22 -05:00
netblue30
05b9d88da8 bwrap replacement - part5 2025-12-18 20:34:36 -05:00
netblue30
180e3f4640 bwrap replacement - part4 2025-12-18 20:22:06 -05:00
netblue30
582036ba07 update gimp profile 2025-12-18 20:03:44 -05:00
netblue30
8c14d83f38 bwrap replacement - part3 2025-12-18 19:56:22 -05:00
netblue30
b537aa57b9 fixed /sys mounting broken during overlayfs cleanup 2025-12-18 11:46:14 -05:00
netblue30
890b578bfd bwrap replacement - part2 2025-12-18 11:28:58 -05:00
netblue30
33d07c2320 bwrap replacement - part 1 2025-12-18 08:04:12 -05:00
netblue30
411b97fdc9 profile fixes: allow bwrap inside the sandbox 2025-12-18 07:59:07 -05:00
netblue30
5e962ff78e removed IDS feature, it was never enabled by default in our builds 2025-12-17 09:09:44 -05:00
netblue30
489cc25c2f cleaned up old overlayfs code; the feature was disabled by default in 2021 because of security problems 2025-12-16 20:28:28 -05:00
netblue30
f061dbd549 fix lincity-ng profile 2025-12-15 21:07:04 -05:00
Kelvin M. Klann
e92d25656a docs: github: specify the supported version directly
Bug reports were opened by multiple users with the item checked even
when using version 0.9.74 or earlier.

So be explicit and write "0.9.76 or later" in the item, which should
help clarify that earlier versions are not supported.

This amends commit be065d130 ("docs: clarify that only latest and dev
versions are supported (#6965)", 2025-11-15).
2025-12-15 09:59:24 -03:00
Kelvin M. Klann
31b662d7b3 profiles: youtube-music-desktop-app: re-comment globals include
globals.local is already included by etc/profile-m-z/ytmdesktop.profile.

This amends commit 62492e3eb ("profile updates", 2025-12-06).
2025-12-14 09:20:05 -03:00
Kelvin M. Klann
7313b7ca1a ci: run sort.py to fix ci
Command used:

    $ ./ci/check/profiles/sort.py etc/inc/*.inc etc/profile-*/*.profile

This amends commit 62492e3eb ("profile updates", 2025-12-06).
2025-12-14 09:17:18 -03:00
Kelvin M. Klann
3106e1cce0 Revert "electrum.profile add noblacklist /usr/share/fonts"
This reverts commit 74fab15f97.

This path is not blacklisted anywhere.

Relates to #6985.
2025-12-14 09:10:18 -03:00
netblue30
be92d316f6 merges 2025-12-12 08:57:18 -05:00
netblue30
817efb9724
Merge pull request #6985 from ipaqmaster/master
electrum.profile add noblacklist /usr/share/fonts
2025-12-12 08:25:40 -05:00
netblue30
fcbb6d6044 profiles update 2025-12-12 07:34:15 -05:00
netblue30
a264d17ce0 remove warning fcopy warning, more etc-groups fixing 2025-12-07 12:01:46 -05:00
Jared J
74fab15f97 electrum.profile add noblacklist /usr/share/fonts 2025-12-07 11:40:42 +11:00
netblue30
62492e3eb6 profile updates 2025-12-06 15:19:21 -05:00
netblue30
75bd4b410a firecfg updates and fixes 2025-12-06 15:18:04 -05:00
netblue30
918ffa8471 profstats fixes 2025-12-06 15:17:26 -05:00
netblue30
54dffdbd3a private-etc updates 2025-12-06 15:16:52 -05:00
netblue30
4797000ba7 merges 2025-12-05 09:14:47 -05:00
netblue30
d5a64700b2
Merge pull request #6972 from kmk3/check-version-init
modif: check for --version during early init
2025-12-05 09:11:47 -05:00
netblue30
76322d1bb8
Merge pull request #6888 from hlein/hashcat-profile
profiles: hashcat: fix runtime errors
2025-12-05 09:10:00 -05:00
Kelvin M. Klann
901ba4fc9e build: remove remnants of --disable-globalcfg
Related commits:

* ee879a2f2 ("fix arg-max-count and arg-max-len options in
  firejail.config", 2025-11-30)
* 65571c3cc ("remove --enable-globalcfg software config option",
  2025-11-30)

Relates to #6984.
2025-12-05 08:49:05 -03:00
Kelvin M. Klann
93a15c840d profiles: seahorse: sort whitelist
Misc: The relevant entries were added on commit 4747e0ed7 ("Whitelist
runuser common (#3286)", 2020-03-31).

This is a follow-up to #6975.
2025-12-05 06:18:20 -03:00
netblue30
220cce6483 still fighting firejail config file not found! Removed the earlier pull request: sandbox check before checkcfg() 2025-12-04 19:16:25 -05:00
netblue30
7cd2c208fe merges 2025-12-04 08:03:12 -05:00
netblue30
a04ab09ab6
Merge pull request #6980 from amano-kenji/master
Add mpris support to brave.profile
2025-12-04 08:00:26 -05:00
netblue30
36b0af374c
Merge pull request #6975 from redrampage/master
ssh: add `${RUNUSER}/openssh_agent` socket path
2025-12-04 07:57:10 -05:00
netblue30
57e16df572
Merge pull request #6971 from kmk3/fix-sandbox-check-before-checkcfg
bugfix: do sandbox check before checkcfg()
2025-12-04 07:54:44 -05:00
netblue30
af57dec211
Merge pull request #6961 from pierretom/patch4
update and add system calls for several architectures
2025-12-04 07:44:43 -05:00
netblue30
4125cf04b5
Merge pull request #6960 from pierretom/patch3
build: add script to generate syscall headers
2025-12-04 07:42:07 -05:00
amano.kenji
6ea5eba991
Add mpris support to brave.profile 2025-12-03 13:42:31 +00:00
netblue30
163c8a0d9e fix landlock setting in software config script 2025-12-02 19:08:52 -05:00
RedRampage
b2d5d173cb profiles: Add socket-activated ssh-agent socket
Added another default ssh-agent socket path, that is used in Debian for
socket-activated agent.
2025-12-02 00:15:52 +03:00
dependabot[bot]
599960144d build(deps): bump step-security/harden-runner from 2.13.1 to 2.13.2
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.1 to 2.13.2.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](f4a75cfd61...95d9a5deda)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 16:13:03 +00:00
dependabot[bot]
48035653de build(deps): bump github/codeql-action from 4.31.2 to 4.31.5
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.2 to 4.31.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](0499de31b9...fdbfb4d275)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 16:12:55 +00:00
dependabot[bot]
2891fc6956 build(deps): bump actions/checkout from 5.0.0 to 6.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](08c6903cd8...1af3b93b68)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 16:12:45 +00:00
netblue30
5935c370ea private-etc updates, qbittorrent profile fixes 2025-12-01 08:20:33 -05:00
netblue30
65571c3cc1 remove --enable-globalcfg software config option 2025-11-30 08:34:05 -05:00