32 commits

Author	SHA1	Message	Date
netblue30	6b5ee43567	Merge pull request #89 from g4jc/master ... add a few new items to blacklist	2015-10-24 09:07:06 -04:00
Gaming4JC	2b212d4c09	add a few new items to blacklist	2015-10-23 09:10:48 -04:00
andrew160	ec45d1f8a3	Update pidgin.profile ... Pidgin's data directory is blacklisted in disable-common.inc, so it couldn't access it.	2015-10-23 10:58:04 +00:00
netblue30	0021c29f7f	fixed join/shutdown problem, moving browsers and mail clients to a --shell=none default in profile files	2015-10-19 14:46:24 -04:00
netblue30	f4171a9141	--private-bin	2015-10-11 11:24:02 -04:00
netblue30	19fd5f41b9	added shell none in firefox profile	2015-10-10 11:16:12 -04:00
netblue30	8c5254162b	fixed transmission-qt.profile	2015-10-08 08:40:58 -04:00
netblue30	539106a68c	fixed transmission-qt profile	2015-10-08 08:08:25 -04:00
greigdp	7071bfdf8a	Add a profile for Spotify	2015-10-07 09:47:33 +01:00
netblue30	eb72a896b9	blacklist sockets in /run	2015-09-27 13:07:45 -04:00
netblue30	9d3e1e24db	disabled Wine and VirtualBox in default profiles	2015-09-24 08:25:27 -04:00
netblue30	abcc150ae3	fixes	2015-09-24 08:13:07 -04:00
netblue30	4f36b7246a	security profile work	2015-09-24 08:03:57 -04:00
netblue30	5db7520b29	profile work	2015-09-22 08:49:58 -04:00
netblue30	1265803f63	Default profiles work	2015-09-16 07:33:08 -04:00
netblue30	42421564e0	cleanup and small fixes	2015-09-05 06:28:38 -04:00
netblue30	83781d0de5	testing, admin work	2015-09-01 11:45:23 -04:00
netblue30	38f13e822b	Merge pull request #53 from sarneaud/noblacklist ... Noblacklist	2015-09-01 08:27:02 -04:00
netblue30	acc124fb8a	cleanup	2015-09-01 08:25:06 -04:00
sarneaud	91e11d1554	Update profiles to use the new noblacklist command.	2015-09-01 15:23:26 +10:00
netblue30	c400b75a70	using /etc/firejail/server.profile as default profile if the sandbox is started by root	2015-08-31 06:46:57 -04:00
sarneaud	7415d03df0	Rewrite globbing code to fix various minor issues ... * Plug a memory leak. * Remove the short-circuit. (This breaks when someone uses [] or ? patterns without using *. I figure it's best to use the principle of least surprise and just let the system glob() implementation do what it does.) * Stop sorting results. I've also replaced a lot of disable-history.inc with a glob pattern. Now it catches files like .sqlite_history and whatever the user runs under rlwrap.	2015-08-29 09:47:46 +10:00
netblue30	a0666fa722	fixed thunderbird profile to allow a browser to start	2015-08-28 07:32:41 -04:00
netblue30	746b6aa3b8	testing	2015-08-27 12:37:57 -04:00
netblue30	7f84ed7a38	support net none in profile files	2015-08-22 07:21:50 -04:00
netblue30	ea133564a7	moved bash completion files under src	2015-08-18 16:27:57 -04:00
mjudtmann	b77af9bad3	Update disable-mgmt.inc ... Jailed applications should not be able to change the configuration of firejail.	2015-08-17 15:20:47 +02:00
netblue30	dcc9579e91	Merge pull request #17 from dewbasaur/master ... A bit more for CVE-2015-4495	2015-08-14 07:36:00 -04:00
dewbasaur	ac25ecd5d9	A bit more for CVE-2015-4495	2015-08-12 21:36:55 -04:00
netblue30	8de115abba	disable-history.inc integration - included in all profile files	2015-08-12 20:28:46 -04:00
dewbasaur	dd44324619	Block access to history files	2015-08-12 15:16:28 -04:00
netblue30	1379851360	Baseline firejail 0.9.28	2015-08-08 19:12:30 -04:00