Commit graph

140 commits

Author SHA1 Message Date
netblue30
539106a68c fixed transmission-qt profile 2015-10-08 08:08:25 -04:00
netblue30
97d865e5e5 --mtu, spotify etc. 2015-10-08 07:43:10 -04:00
netblue30
e4d4b48419 Merge pull request #73 from greigdp/spotify-profile
Add a profile for Spotify
2015-10-07 14:15:14 -04:00
netblue30
d8c437fead adding --mtu option 2015-10-07 10:33:59 -04:00
greigdp
7071bfdf8a Add a profile for Spotify 2015-10-07 09:47:33 +01:00
netblue
fbfc4c83e8 main page 2015-09-30 13:22:18 -04:00
netblue
ef9ad62b6c main page 2015-09-30 13:19:41 -04:00
netblue
72ff7f3291 main page 2015-09-30 13:14:55 -04:00
netblue
30a0b1d808 main page 2015-09-30 13:13:46 -04:00
netblue
6278906f55 pulseaudio bug 2015-09-30 13:11:14 -04:00
netblue30
eb72a896b9 blacklist sockets in /run 2015-09-27 13:07:45 -04:00
netblue30
200b205b69 seccomp errno testing 2015-09-27 08:00:06 -04:00
netblue30
1eb1db186a seccomp errno: man page and usage 2015-09-27 07:24:57 -04:00
netblue30
7c254e3251 seccomp.errno manpage example 2015-09-26 10:54:28 -04:00
netblue30
444207531c seccomp testing 2015-09-26 09:54:55 -04:00
netblue30
d349f2e744 ./configure --enable-fatal-warnings 2015-09-26 09:45:51 -04:00
netblue30
f917c4102c seccomp errno - compile on Debian wheezy 2015-09-26 09:36:37 -04:00
netblue30
98cbf1ef2f Merge pull request #66 from wader/seccomp-errno
Add seccomp errno filter support
2015-09-26 09:28:11 -04:00
netblue30
9d3e1e24db disabled Wine and VirtualBox in default profiles 2015-09-24 08:25:27 -04:00
netblue30
abcc150ae3 fixes 2015-09-24 08:13:07 -04:00
netblue30
4f36b7246a security profile work 2015-09-24 08:03:57 -04:00
Matias Wadman
081d1fbf2a Add seccomp errno filter support 2015-09-23 22:44:48 +02:00
netblue30
5db7520b29 profile work 2015-09-22 08:49:58 -04:00
netblue30
56bf7c836e added --interface option 2015-09-22 08:18:56 -04:00
netblue30
10c68bfb96 fixed macvlan problem 2015-09-18 20:04:50 -04:00
netblue30
e86168336c fix for issue #64 2015-09-16 18:08:20 -04:00
netblue30
1265803f63 Default profiles work 2015-09-16 07:33:08 -04:00
netblue30
4d4ef74041 release 0.9.30 2015-09-14 09:50:12 -04:00
netblue30
491b8f2390 coverity scan 2015-09-11 10:51:42 -04:00
netblue30
0215cbc02b make install, make install-strip 2015-09-11 07:58:34 -04:00
netblue30
e5a4b41020 Merge pull request #60 from pstn/master
added install-strip, make install now without strip.
2015-09-11 07:15:44 -04:00
netblue30
d9dd0b3f28 0.9.30-rc2 development start 2015-09-10 11:17:19 -04:00
netblue30
79db355e0a 0.9.30-rc1 2015-09-10 08:15:42 -04:00
Philipp Steinpass
099925e186 added install-strip, make install now without strip. 2015-09-10 12:05:21 +02:00
netblue30
482782e229 implemented --whitelist option 2015-09-07 20:14:06 -04:00
netblue30
65a1e6eeb6 Merge pull request #55 from sarneaud/globbing
Stop blacklisting from traversing . and .. after a glob
2015-09-05 06:29:14 -04:00
netblue30
42421564e0 cleanup and small fixes 2015-09-05 06:28:38 -04:00
sarneaud
87989a94ac Stop blacklisting from traversing . and .. after a glob 2015-09-04 11:51:51 +10:00
netblue30
83781d0de5 testing, admin work 2015-09-01 11:45:23 -04:00
netblue30
38f13e822b Merge pull request #53 from sarneaud/noblacklist
Noblacklist
2015-09-01 08:27:02 -04:00
netblue30
102611082d Merge pull request #51 from sarneaud/gitignore
Add tags file and vim temporary files to .gitignore
2015-09-01 08:25:32 -04:00
netblue30
140755793f Merge pull request #52 from sarneaud/strncmp
Clean up some fragile uses of strncmp.
2015-09-01 08:25:16 -04:00
netblue30
acc124fb8a cleanup 2015-09-01 08:25:06 -04:00
sarneaud
2aa7ec97db Add noblacklist command to firejail.
* Basic implementation
* Updates to standard profiles
* Update to firejail-profile manpage
2015-09-01 15:23:26 +10:00
sarneaud
91e11d1554 Update profiles to use the new noblacklist command. 2015-09-01 15:23:26 +10:00
sarneaud
829d9e0c4c Simple implementation of noblacklist command. 2015-09-01 15:21:44 +10:00
sarneaud
78fd72058f Clean up some fragile uses of strncmp.
In some places the code compares the first n characters of a string and
then assumes a valid string starts from the n+2th character.  I didn't
find any places where this wasn't justifiable, but I think it's better
to stick to safer patterns, especially in SUID code.
2015-09-01 10:55:40 +10:00
sarneaud
03051f7a4d Add tags file and vim temporary files to .gitignore 2015-09-01 09:09:29 +10:00
netblue30
c400b75a70 using /etc/firejail/server.profile as default profile if the sandbox is started by root 2015-08-31 06:46:57 -04:00
netblue30
b77a28737e admin work 2015-08-30 07:02:53 -04:00