Commit graph

93 commits

Author SHA1 Message Date
netblue30
acc124fb8a cleanup 2015-09-01 08:25:06 -04:00
netblue30
c400b75a70 using /etc/firejail/server.profile as default profile if the sandbox is started by root 2015-08-31 06:46:57 -04:00
netblue30
b77a28737e admin work 2015-08-30 07:02:53 -04:00
netblue30
cad73e6df6 Merge pull request #48 from sarneaud/glob
Rewrite globbing code to fix various minor issues
2015-08-30 06:45:17 -04:00
netblue30
eafb460d94 fixing manpages 2015-08-30 06:25:07 -04:00
sarneaud
7415d03df0 Rewrite globbing code to fix various minor issues
* Plug a memory leak.
* Remove the short-circuit.  (This breaks when someone uses [] or ?
  patterns without using *.  I figure it's best to use the principle of
  least surprise and just let the system glob() implementation do what
  it does.)
* Stop sorting results.

I've also replaced a lot of disable-history.inc with a glob pattern.
Now it catches files like .sqlite_history and whatever the user runs
under rlwrap.
2015-08-29 09:47:46 +10:00
netblue30
6576b9ee6d more fixes for blacklist on Arch systems 2015-08-28 14:13:15 -04:00
netblue30
7e30149e2e don't blacklist directory links, print a warning 2015-08-28 12:38:03 -04:00
netblue30
eb08fa57fe fix firejail-in-firejail again 2015-08-28 11:27:19 -04:00
netblue30
2c0adbb7c9 cleanup unfinished features 2015-08-28 10:51:37 -04:00
netblue30
01194ad1e5 testing default.profile 2015-08-28 10:34:38 -04:00
netblue30
a0666fa722 fixed thunderbird profile to allow a browser to start 2015-08-28 07:32:41 -04:00
netblue30
f5b9be2a61 firejail-in-firejail fixes 2015-08-28 07:23:19 -04:00
netblue30
ce8729c360 fixes 2015-08-27 15:00:23 -04:00
netblue30
53fd3c71ab cleanup 2015-08-27 14:52:51 -04:00
netblue30
746b6aa3b8 testing 2015-08-27 12:37:57 -04:00
netblue30
a83a7fc106 Merge pull request #46 from iiotx/master
Use generic.profile by default
2015-08-27 11:30:07 -04:00
iiotx
7ced6a935c Use generic.profile by default: fixes 2015-08-27 06:52:57 -04:00
iiotx
a9ade4123b Use generic.profile by default 2015-08-26 22:31:58 -04:00
netblue30
db39545258 Merge branch 'master' of https://github.com/netblue30/firejail 2015-08-26 08:21:13 -04:00
netblue30
2fbddd9bf3 Fixed overlay on Arch linux; minor cleanups 2015-08-26 08:20:03 -04:00
netblue30
f4dceaa53a Merge pull request #43 from pmillerchip/master
Fix typo in usage.c
2015-08-24 12:21:37 -04:00
Peter Millerchip
d4f8a4c299 Fix typo in usage.c 2015-08-24 14:48:15 +01:00
netblue30
820de6829f added --env option 2015-08-24 09:05:18 -04:00
netblue30
ef1d3bdf44 private-home testing 2015-08-23 08:03:47 -04:00
netblue30
9b626d6c83 Merge pull request #42 from pmillerchip/expand-home
Implement the expand_home util function
2015-08-23 07:18:15 -04:00
netblue30
2c944f3bb2 Merge pull request #41 from pmillerchip/fatal-warnings
Support --enable-fatal-warnings in all Makefiles
2015-08-23 07:17:51 -04:00
netblue30
73c5236e19 if a sandbox is already running, the program is started directly 2015-08-23 07:17:30 -04:00
Peter Millerchip
d798c507fa Implement the expand_home util function 2015-08-22 15:01:56 +01:00
netblue30
7f84ed7a38 support net none in profile files 2015-08-22 07:21:50 -04:00
Peter Millerchip
a956dd47b1 Support --enable-fatal-warnings in all Makefiles 2015-08-22 12:21:18 +01:00
netblue30
9d91a26a15 added --enable-fatal-warnings 2015-08-21 08:16:06 -04:00
netblue30
c4c6bbbdce Merge pull request #38 from pmillerchip/shell-none-args
Fix arguments passed to child process during execvp in --shell=none mode
2015-08-21 07:07:45 -04:00
Peter Millerchip
6277509c3a Fix arguments passed to child process during execvp in --shell=none mode 2015-08-20 23:07:36 +01:00
netblue30
fb90abb4c1 remove warnings form src/lib/Makefile.in 2015-08-20 10:10:44 -04:00
netblue30
5c0edb3435 Merge pull request #35 from pmillerchip/warnings-cleanup
Compile with -W -Wall -Werror
2015-08-20 10:00:28 -04:00
Peter Millerchip
48af0110f8 Compile with -W -Wall -Werror 2015-08-20 14:38:44 +01:00
netblue30
cb585cc82a testing 2015-08-20 09:06:07 -04:00
netblue30
1d9760068a Merge pull request #34 from pmillerchip/make-install
Fix the 'make install' command for new bash completion location
2015-08-20 06:50:42 -04:00
Peter Millerchip
e0a47e9d26 Fix the 'make install' command for new bash completion location 2015-08-20 08:54:54 +01:00
netblue30
d291b52fe4 Merge pull request #33 from pmillerchip/filenames-with-spaces
Support filenames with spaces in the blacklist option
2015-08-19 18:30:51 -04:00
Peter Millerchip
d81fc1424a Support filenames with spaces in the blacklist option 2015-08-19 00:12:42 +01:00
netblue30
ea133564a7 moved bash completion files under src 2015-08-18 16:27:57 -04:00
netblue30
85273ce7d1 Merge pull request #32 from pmillerchip/tilde-support
Support ~ in blacklist and profile includes
2015-08-18 12:16:45 -04:00
Peter Millerchip
c351e194f9 Support ~ in blacklist and profile includes 2015-08-18 09:56:44 +01:00
netblue30
cb633cdb35 admin work 2015-08-17 20:04:17 -04:00
netblue30
b90534c7f1 Merge pull request #30 from mjudtmann/patch-1
Update disable-mgmt.inc
2015-08-17 20:00:22 -04:00
mjudtmann
b77af9bad3 Update disable-mgmt.inc
Jailed applications should not be able to change the configuration of firejail.
2015-08-17 15:20:47 +02:00
netblue30
3bfb00f627 removed mknod from default seccomp filter, some software packages are using named pipes created with mknod 2015-08-16 15:43:50 -04:00
netblue30
8f676d5999 moved warning under --debug option 2015-08-16 15:34:16 -04:00