Commit graph

2294 commits

Author SHA1 Message Date
curiosity-seeker
c545262e3b
cantata.profile
The private-etc entries were added by firejail --build but are not complete.
2019-05-12 17:30:21 +02:00
rusty-snake
da2a3fd0d1
harden & fix xiphos.profile 2019-05-12 12:53:46 +02:00
curiosity-seeker
81a6e7aaa8 Update keepassxc.profile (#2687)
Adding `keepassxc-proxy` to `private-bin`as without it there is a related error message in Settings->Browser Integration (via the Keepassxc-Browser add-on).
2019-05-10 11:52:21 +00:00
Vincent Brillault
d6c38cf5cb
Mumble: add new path for client data
Since Mumble 1.3, client data was moved from
$HOME/.local/share/data/Mumble to $HOME/.local/share/Mumble.
See https://wiki.mumble.info/wiki/Client_Settings
2019-05-06 10:56:31 +02:00
rusty-snake
75cd6d2f39
Update gajim.profile 2019-05-03 15:03:40 +02:00
glitsj16
99ff21aec0
Drop noblacklist ${DOWNLOADS} in bitwarden.profile (#2677) 2019-05-02 17:53:57 +00:00
glitsj16
ad31bb726b
Refactor min as chromium redirect profile (#2676) 2019-05-02 06:17:33 +00:00
glitsj16
c813294e47
Add Bitwarden profile (#2673)
* Add bitwarden to firecfg

* Add support for bitwarden in disable-programs.inc

* Create bitwarden.profile

* Fix whitelisting and no3d in bitwarden
2019-05-02 00:48:21 +00:00
glitsj16
7734a60d6f
Support Enpass v6 (#2672)
* Refactor enpass profile

Upstream enpass version 6 needs profile adjustments. These are integrated into the refactored profile without dropping support for older versions.

* Support newer Enpass in disable-programs.inc

* Re-add no3d and move whitelist lines in enpass.profile
2019-05-02 00:15:12 +00:00
glitsj16
84491563e5
Comment fixes (#2674)
* Fix comments in eom.profile

* Fix comments in eog.profile

* Fix comments in gnome-system-log.profile

* Fix comments in gnome-logs.profile
2019-05-02 00:14:26 +00:00
rusty-snake
3c51893da2
Update thunderbird.profile
typo
2019-04-27 07:42:31 +00:00
rusty-snake
bee979d381
some little profile fixes 2019-04-26 18:20:16 +02:00
Tad
590f661715 Revert "Merge branch 'master' of github.com:netblue30/firejail"
This reverts commit 0d42e12f11, reversing
changes made to 63efb454a4.
2019-04-24 12:25:36 -04:00
rusty-snake
0d42e12f11
Merge branch 'master' of github.com:netblue30/firejail 2019-04-24 13:15:07 +02:00
rusty-snake
63efb454a4
blacklist .git-credentials & .config/git (#2663) …
and noblacklist they in all profiles with
noblacklist .gitconfig
2019-04-24 13:06:59 +02:00
rusty-snake
6e8ba04dab
blacklist .git-credential & .config/git (#2663) …
and noblacklist they in all profiles with
noblacklist .gitconfig
2019-04-24 12:54:40 +02:00
netblue30
bb5e52040c Arch Linux fixes 2019-04-23 11:55:39 -04:00
Vincent43
78f1e3a035
proper fix for starting gajim if system-wide Flatpak locale exist
Commit 7fe1da929c made whole /var empty in sandbox which accidentally fixed issue even if it worked differently than its description. This commit fixes the issue in similar way but makes clear the way it's done. It also prevents potential regressions by allowing access to some common dirs under /var.
2019-04-23 10:46:14 +00:00
Jean Lucas
7fe1da929c Gajim: Allow reading of system-wide Flatpak locale (#2660)
Gajim will not start without being able to read this file, even if it
doesn't exist.
2019-04-22 19:08:55 +00:00
grizzlyuser
835f05c7c4 smplayer: Add support for youtube-dl 2019-04-22 15:53:14 +00:00
rusty-snake
3f11da3996
Update code.profile 2019-04-18 17:33:16 +00:00
rusty-snake
f9d29eb99f
Update authenticator.profile 2019-04-18 17:32:37 +00:00
Fred Barclay
5f7f3a5e26 Merge branch 'master' of https://github.com/netblue30/firejail 2019-04-18 11:15:33 -05:00
Fred Barclay
32e5b363c5
Allow access to .pythonrc.py -- see #2651 2019-04-18 11:14:52 -05:00
netblue30
739021d10a
Merge pull request #2641 from rusty-snake/add-cheese
Add cheese.profile
2019-04-18 07:57:06 -05:00
netblue30
50cec08c1d
Merge pull request #2649 from SkewedZeppelin/drm-noexec
Add a conditional to control DRM/noexec exception for browsers
2019-04-18 07:56:11 -05:00
rusty-snake
a9c921c0ec
Update gajim.profile and mpv.profile 2019-04-18 10:42:56 +02:00
rusty-snake
adea6f050f
fix network in freeoffice 2019-04-17 10:38:52 +02:00
rusty-snake
a0b8f809c8
remove blank lines at end of file 2019-04-17 09:04:55 +02:00
curiosity-seeker
11edb11c0d Profiles for gramps, newsboat and freeoffice (#2652)
* Update firecfg.config

* Create gramps.profile

* Update disable-programs.inc

* Create newsboat.profile

* Update disable-programs.inc

* Update firecfg.config

* Create freeoffice-planmaker

* Create freeoffice-textmaker

* Create freeoffice-presentations

* Update disable-programs.inc

* Update firecfg.config

* Update newsboat.profile

* Update newsboat.profile

* Update gramps.profile

* Update freeoffice-textmaker

* Update freeoffice-planmaker

* Update freeoffice-presentations

* Update freeoffice-planmaker

* Update freeoffice-presentations

* Update freeoffice-textmaker

* Rename freeoffice-planmaker to freeoffice-planmaker.profile

* Rename freeoffice-presentations to freeoffice-presentations.profile

* Rename freeoffice-textmaker to freeoffice-textmaker.profile

* Update gramps.profile

* Update freeoffice-planmaker.profile

* Update freeoffice-presentations.profile

* Update freeoffice-textmaker.profile

* Update freeoffice-textmaker.profile

* Update freeoffice-presentations.profile

* Update newsboat.profile

* Update gramps.profile

* Update freeoffice-planmaker.profile

* Update freeoffice-presentations.profile

* Update freeoffice-textmaker.profile
2019-04-17 07:00:13 +00:00
Senemu
f21561f89f Fix PostScript files opening in Evince (#2656) 2019-04-17 04:41:23 +00:00
glitsj16
9c5619151d
Follow upstream changes in authenticator.profile (#2654)
* Add authenticator cache to disable-programs.inc

* Update authenticator.profile

Follow upstream changes in authenticator.profile
2019-04-16 02:09:53 +00:00
Senemu
d3652e2e91 Add .pythonrc.py to disable-common.inc (#2651)
* Add .pythonrc.py to disable-common.inc

* Move .pythonrc.py to more appropriate section
2019-04-14 13:34:12 -05:00
veloute
a20c91ee29 fixed electrum not resolving domains 2019-04-14 20:06:36 +10:00
rusty-snake
9526f9e1bd
Add mp3splt, mp3wrap, oggsplt, flacsplt 2019-04-14 11:22:59 +02:00
Tad
ab78a250db Add a conditional to control DRM/noexec exception for browsers 2019-04-13 14:37:02 -04:00
rusty-snake
251cc423bf
Merge branch 'master' into add-cheese 2019-04-13 11:43:08 +00:00
glitsj16
a1fe101aca
Fixes https://github.com/netblue30/firejail/issues/2547 (#2648) 2019-04-13 11:00:32 +00:00
rusty-snake
947337b257
More disable-exec and hardening 2019-04-13 12:23:22 +02:00
glitsj16
dc4bb4c592
More disable-exec stuff (#2647)
* Add disable-exec to midori

* Fix disable-exec in min
2019-04-13 10:21:34 +00:00
rusty-snake
1df7f25c7f
Add disable-exec to whois 2019-04-13 10:43:08 +02:00
glitsj16
f27024f7c6
Fix networking for transmission-show and transmission-remote (#2646)
* Fix networking for transmission-remote

* Fix networking for transmission-show
2019-04-13 02:54:46 +00:00
rusty-snake
53dff25d69
Harden bibletime.profile 2019-04-12 19:01:38 +02:00
netblue30
b9c8a94590 adding disable-exec.inc to the remaining profiles 2019-04-12 11:53:09 -04:00
rusty-snake
e389718c58
Merge branch 'master' of github.com:netblue30/firejail 2019-04-12 12:27:25 +02:00
rusty-snake
d940c02544
Fix klavaro.profile
* mdwe break with newer firejail versions
 * alphabetical order private-bin and add sh (bash is already there)
2019-04-12 12:21:50 +02:00
netblue30
b5d2a56ace zsh on private-bin for #2633 2019-04-10 18:51:49 -04:00
netblue30
cab679f3b8
Merge pull request #2633 from veloute/filezilla-fix
private-bin breaks --join for filezilla
2019-04-10 17:49:25 -05:00
rusty-snake
f6df6db285
Add utox.profile
Requested by @nyancat18 in
https://github.com/netblue30/firejail/issues/1139#issuecomment-314527143
2019-04-10 20:39:27 +02:00
rusty-snake
a4635906bb
in addition to bd976150 -- Temp fix firecfg (#2634) 2019-04-10 14:51:07 +02:00