Commit graph

8743 commits

Author SHA1 Message Date
glitsj16
669c18c606
Harden qutebrowser 2022-10-03 18:32:54 +00:00
glitsj16
f2ba0b4a22
Fix D-Bus mpris support 2022-10-02 06:01:09 +00:00
glitsj16
8685f25445
unbreak D-Bus mpris support 2022-10-02 05:55:46 +00:00
glitsj16
2297257745
Harden qutebrowser profile 2022-10-01 19:23:19 +00:00
Hugo
393c5beff2
mpv: whitelist mpv-mpris (#5386)
This is an mpv plugin for MPRIS integration.

See: https://github.com/hoyon/mpv-mpris
2022-10-01 14:39:50 +00:00
netblue30
b30f4da5b3 Merge branch 'master' of ssh://github.com/netblue30/firejail 2022-09-27 12:12:57 -04:00
netblue30
1ac8ca3c6f ICMP support in --nettrace 2022-09-27 12:12:43 -04:00
Kelvin M. Klann
ce92f82ebd RELNOTES: add build/ci items
Relates to #5275 #5357 #5370.
2022-09-26 18:18:10 -03:00
netblue30
4bbc968083 Merge branch 'master' of ssh://github.com/netblue30/firejail 2022-09-26 10:56:19 -04:00
netblue30
5b4c5211e6 merges 2022-09-26 10:56:03 -04:00
netblue30
445d6b525d
Merge pull request #5360 from glitsj16/ff-dbus
Streamline Firefoxes D-Bus filtering
2022-09-26 10:43:13 -04:00
netblue30
9c3f967ba8
Merge pull request #5370 from a1346054/fixes
Remove deprecated syntax and modernize shell test scripts
2022-09-26 10:26:18 -04:00
netblue30
6a19625e47
Merge pull request #5371 from kmk3/profiles-allow-exiftool
profiles: allow perl/exiftool on the relevant profiles
2022-09-26 10:24:44 -04:00
netblue30
cca5db8336
Merge pull request #5374 from kmk3/profiles-fix-arduino
arduino.profile: allow devel paths
2022-09-26 10:24:05 -04:00
netblue30
b17ba76c18
Merge pull request #5382 from netblue30/dependabot/github_actions/github/codeql-action-2.1.25
build(deps): bump github/codeql-action from 2.1.24 to 2.1.25
2022-09-26 10:23:16 -04:00
netblue30
93d01b63b6
Merge pull request #5376 from kmk3/git-blame-ignore-landlock
.git-blame-ignore-revs: change format and add Landlock v1
2022-09-26 10:22:29 -04:00
netblue30
1cc9cf9950
Merge pull request #5377 from kmk3/relnotes-dedup-reword-sort-add
RELNOTES: dedup/reword/sort/add
2022-09-26 10:21:32 -04:00
netblue30
8040833d74 fix --netlock (#5312) 2022-09-26 09:32:13 -04:00
netblue30
1cc0523fbf update ip addr list for --nettrace 2022-09-26 08:42:43 -04:00
netblue30
9235754aea join network/filesystem fixes 2022-09-26 08:40:49 -04:00
dependabot[bot]
126a715326
build(deps): bump github/codeql-action from 2.1.24 to 2.1.25
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.24 to 2.1.25.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](904260d7d9...86f3159a69)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-26 06:12:40 +00:00
dependabot[bot]
bfca070461 build(deps): bump github/codeql-action from 2.1.22 to 2.1.24
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.22 to 2.1.24.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b398f525a5...904260d7d9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-21 18:03:25 +00:00
Kelvin M. Klann
8ed0dc7d9c RELNOTES: add docs
Relates to #5344 #5361 #5366.
2022-09-19 15:11:52 -03:00
Kelvin M. Klann
8a61ea04f7 RELNOTES: sort items by category then date added
Put features before modifs, to match the relnotes of 0.9.68 and
0.9.70.
2022-09-19 15:11:52 -03:00
Kelvin M. Klann
12e32ec8ad RELNOTES: reword modif items for clarity
And add the missing issue/PR references.

Misc: The items in question were added on commit 6d740d7dc ("RELNOTES
and README.md - existing functionality modified for the next version",
2022-08-29).

Relates to #5190 #5196 #5200 #5209 #5216.
2022-09-19 15:11:52 -03:00
Kelvin M. Klann
dfc5593129 README.md: remove items duplicated from RELNOTES
Added on commit 6d740d7dc ("RELNOTES and README.md - existing
functionality modified for the next version", 2022-08-29).

The duplication makes it harder to maintain the RELNOTES, especially
because the contents are prone to diverge between each file.

For example, even though the commit in question (6d740d7dc) added the
same items to both files, the additions to RELNOTES had two typos, while
the additions to README.md had one typo.

The typos in RELNOTES were fixed by commit c5e8d5d1f ("typo fixes for
RELNOTES", 2022-08-29), and the typo in README.md was fixed by commit
2ac8a93fd ("typo fix for README.md", 2022-08-29), both from PR #5349.
2022-09-19 15:11:43 -03:00
Kelvin M. Klann
9c7908624a .git-blame-ignore-revs: add Landlock v1 commits
Commands used to find and print the relevant commits:

    $ TZ=UTC0 git log --date='format-local:%Y-%m-%d' \
      --pretty='%H # %cd | %s' 60db9f785~1..60db9f785 |
      grep 'Revert "';
      git log --reverse --pretty=%b 60db9f785~1..60db9f785 |
      sed -E -n 's/^This reverts commit ([0-9a-z]+).*/\1/p' |
      TZ=UTC0 xargs git show --date='format-local:%Y-%m-%d' \
      --pretty='%H # %cd | %s' -s | grep -v 'Merge pull request';
      TZ=UTC0 git log --no-merges --date='format-local:%Y-%m-%d' \
      --pretty='%H # %cd | %s' 54cb3e741~1..54cb3e741

Explanation: The first `git log` basically takes the revision range from
one commit before a given merge commit until the merge commit itself and
prints the commits in that range (which should usually mean all commits
that were in the branch that was merged).  In this case, it's the
commits that do the revert.

The second `git log` finds the hash of all commits that were reverted
and prints them.

The `grep -v` and third `git log` are only needed because the merge
commit of the original branch was reverted directly (on commit
97874c3bf), rather than reverting each individual commit on that branch.
So these commands are used to print all of the commits in the original
branch.

Relates to #5315 #5347.
2022-09-19 11:56:41 -03:00
Kelvin M. Klann
7178981bcf .git-blame-ignore-revs: change format to hash then info
Command used to generate the entries in the new format:

    $ TZ=UTC0 git show --date='format-local:%Y-%m-%d' \
      --pretty='%H # %cd | %s' -s f43382f1e fe0f975f4

Put the committer date ("%cd") and commit message subject ("%s") as a
comment right after the commit hash ("%H").  The pipe ("|") is intended
to improve readability.

This format looks more similar to the output of `git log --oneline` and
should make it easier to visually parse long lists.  It also allows more
hashes to fit into the same amount of lines (at the cost of longer
lines).

Use committer date ("%cd") instead of author date ("%ad") as the former
tells when a commit actually landed on master.  This usually matches the
topological order, which should make it easier to verify that all of the
relevant commits are listed (and that there are no extraneous commits).

Use --date + "%cd" instead of just "%ci" because the former can be used
to ensure that the date is always printed in the same timezone (UTC).
2022-09-19 11:54:26 -03:00
Kelvin M. Klann
9ffef729c0 .git-blame-ignore-revs: put more recent commits first
This is more similar to the default `git log` output and should result
in the matches happening earlier for more recent commits.
2022-09-19 10:47:20 -03:00
Kelvin M. Klann
b6a21daad9 arduino.profile: allow devel paths
As mentioned in its description, this profile is intended for an IDE, so
allow paths used for development and stop including the following
profiles:

* disable-devel.inc
* disable-exec.inc
* disable-interpreters.inc

Fixes #5292.
2022-09-17 10:58:59 -03:00
Kelvin M. Klann
2aa9bbb4e5 profiles: allow perl/exiftool on the relevant profiles
Programs that seem to support exiftool:

    $ LC_ALL=C pacman -Sii perl-image-exiftool |
      grep -e '^Version' -e '^Required' -e '^Optional For' | head -n 3
    Version         : 12.42-1
    Required By     : digikam  geotag  gitlab-workhorse  mat2  rapid-photo-downloader
    Optional For    : darktable  geeqie  gpsprune  hugin  jpeg-archive  ranger  recoll  shutter

Environment: Artix Linux.

Note for hugin.profile: Does not currently work with private-bin on
Arch/Artix; see the private-bin comment on
etc/profile-a-l/exiftool.profile.

Relates to #5365.
2022-09-17 09:32:08 -03:00
glitsj16
c7cf0dd85e
docs: man: Note that some commands can be disabled in firejail.config (#5366)
* [man firejail] Make it explicit that some options are disabled by default in firejail.config

* Reword firejail.config notes

* Only add relevant firejail.config option in notes

* move firejail.config notes to the end of each section

* fix tracelog note

* fix erroneous line break

* really fix erroneous line break

Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
2022-09-14 19:05:38 +00:00
glitsj16
3e7b65da2e
discord: fix issues with command-line usage (#5368)
* use both capitalized and regular discord commands to private-bin

* use both capitalized and regular discord commands to private-bin

* add awk and which to private-bin for better xdg-open support

* use both capitalized and regular discord commands to private-bin

* use both capitalized and regular discord commands to private-bin

* refactor CamelCased discord profiles

* refactor CamelCased discord profiles

* fix private-{bin,opt} sorting

* fix private-{bin,opt} sorting

* unfuck private-{bin,opt} sorting

* unfuck private-{bin,opt} sorting

* fix sorting once more for CI

* fix sorting once again for CI
2022-09-14 17:36:01 +00:00
a1346054
65a6b84f09
tests: remove stray ; 2022-09-13 22:37:21 +00:00
a1346054
4d1fb9af6e
tests: use bash-builtin instead of external seq 2022-09-13 22:37:20 +00:00
a1346054
7a5c2b205e
tests: use bash-style [[...]] instead of [...] 2022-09-13 22:37:20 +00:00
a1346054
270f0d95e3
tests: stop mixing tabs and spaces 2022-09-13 22:37:20 +00:00
a1346054
77d1ad3837
tests: add missing final newline 2022-09-13 22:37:19 +00:00
a1346054
c47ad8b82a
tests: fix underquoting 2022-09-13 22:37:19 +00:00
a1346054
d7826c2384
tests: use an array 2022-09-13 22:37:18 +00:00
a1346054
e04d6b7bf5
tests: directly test for presence of command
Test directly for presence of command instead of indirectly testing
the return code.

Additionally:

* uses a shell builtin `command -v` instead of external `which`
* `command -v` is the standardized version of `which`
2022-09-13 22:37:18 +00:00
a1346054
4157640007
tests: fix unintentional overwriting of array value 2022-09-13 20:19:13 +00:00
godbless
2cfe3ea9d0
Fix Firefox 'Profile not found' for psd (v6.45) (#5348)
* Fix Firefox 'Profile not found' for psd (v6.45)

code change: `whitelist ${RUNUSER}/psd/*firefox*`

fixes: #4568

* Whitelist ${RUNUSER}/psd/*firefox*

* Fix workflow for github
2022-09-08 19:15:58 +00:00
dependabot[bot]
3e277aaf71 build(deps): bump github/codeql-action from 2.1.21 to 2.1.22
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.21 to 2.1.22.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](c7f292ea4f...b398f525a5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-07 16:21:58 +00:00
Kelvin M. Klann
160ccd3d9e docs: change /foo to /bar in symlink handling example
As suggested by @birdie-github[1].

This amends commit c78c2b4ec ("docs: note that blacklist/whitelist
follow symlinks", 2022-08-28) / PR #5344.

[1] https://github.com/netblue30/firejail/pull/5344#issuecomment-1229903967
2022-09-06 08:47:36 -03:00
Kelvin M. Klann
60db9f7851
Merge pull request #5347 from kmk3/revert-landlock
Revert "Add Landlock support to Firejail"
2022-09-06 11:20:55 +00:00
glitsj16
7bc7887aae
De-complicate D-Bus naming schemes
Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
2022-09-05 17:14:57 +00:00
glitsj16
eacf8b153f
De-complicate D-Bus naming schemes
Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
2022-09-05 17:11:39 +00:00
glitsj16
0190529d84
De-complicate D-Bus naming schemes
Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
2022-09-05 17:07:30 +00:00
glitsj16
d165194297
De-complicate D-Bus naming schemes
Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
2022-09-05 17:06:03 +00:00