github-starred/firejail
Watch
2
0
Fork
You've already forked firejail
 0
mirror of https://github.com/netblue30/firejail.git synced 2026-10-05 22:02:04 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 2
8,264 commits 10 branches 71 tags 39 MiB
Commit graph

8,264 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kelvin M. Klann
f0bfaf9c1f RELNOTES: add warning about allow-tray 
Relates to #4946.
 2022-03-09 15:53:48 -03:00
Kelvin M. Klann
f4b445667e RELNOTES: sort items by category 
Put it in a similar order to 0.9.68: features, modifs/reworks, bugfixes,
ci, docs, new profiles.

See commit 5fbc1cd50 ("RELNOTES: sort items by category", 2022-02-05).
Misc: The last paragraph of that commit message is wrong; just ignore
it.
 2022-03-09 15:51:37 -03:00
Kelvin M. Klann
97ea8de33b RELNOTES: add missing PR references; fix typo 
This amends commit 481321881 ("merges", 2022-03-05).

Relates to #4985 #4990 #5011.
 2022-03-09 15:44:27 -03:00
smitsohu
2286ad0e3c
 		Merge pull request #5026 from smitsohu/electron 
Electron app fixes
 2022-03-09 17:52:37 +01:00
smitsohu
240f972572 fbuilder: fix suggested profile 
follow-up to fdee4dc132
 2022-03-09 17:50:06 +01:00
smitsohu
fdee4dc132 build option: support chromium/electron apps most of the time 2022-03-09 15:38:53 +01:00
smitsohu
593a91d3bf xdg dir translation cleanup 
remove all duplicate entries
 2022-03-09 15:34:16 +01:00
smitsohu
93e0c25887 skypeforlinux cleanup 2022-03-09 14:52:02 +01:00
smitsohu
06dc66c8e3 fix Electron app profiles (#5012) 2022-03-09 14:50:24 +01:00
dependabot[bot]
bf6f98153a Bump actions/checkout from 2.4.0 to 3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.4.0 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](ec3a7ce113...a12a3943b4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-08 20:12:45 +00:00
netblue30
36f9b50b7e Merge branch 'master' of ssh://github.com/netblue30/firejail 2022-03-05 07:36:41 -05:00
netblue30
4813218810 merges 2022-03-05 07:36:10 -05:00
netblue30
a286def84d
 		Merge pull request #5009 from glitsj16/chromium-based 
drop redundant ignore in chromium-based browsers
 2022-03-05 07:32:42 -05:00
netblue30
a19fb8f4a3
 		Merge pull request #4985 from smitsohu/whitelist 
whitelist restructuring
 2022-03-05 07:31:37 -05:00
netblue30
baeec77b76
 		Merge pull request #4990 from chestnykh/user_profiles 
Add ability to disable user profiles at compile time.
 2022-03-05 07:31:11 -05:00
glitsj16
68fdeced34
 		drop redundant ignore 2022-03-04 20:54:23 +00:00
glitsj16
ce3e3e86bf
 		drop redundant ignore 2022-03-04 20:52:45 +00:00
glitsj16
5bdf006512
 		drop redundant ignore 2022-03-04 20:50:26 +00:00
glitsj16
ee000ec390
 		drop redundant ignore 2022-03-04 20:48:21 +00:00
glitsj16
642db56523
 		drop redundant ignore 2022-03-04 20:25:33 +00:00
glitsj16
1bfc768e2d
 		drop redundant ignore 2022-03-04 20:24:07 +00:00
glitsj16
a59187748e
 		drop redundant ignore 2022-03-04 20:22:45 +00:00
glitsj16
17e99439d4
 		drop redundant ignore 2022-03-04 20:20:56 +00:00
glitsj16
449a6a9377
 		drop redundant ignore 2022-03-04 20:19:04 +00:00
glitsj16
dfd335b9f2
 		whitelist /usr/share/gnupg2 for consistency (#5007) 2022-03-04 17:31:33 +00:00
smitsohu
11af0293d4 xdg macros: add Italian, Spanish, Portuguese, German 2022-03-04 00:53:12 +01:00
smitsohu
a146a985b9 xdg macros: don't fall through if directory not found (#4994) 2022-03-04 00:36:06 +01:00
glitsj16
8b440e0f92
 		drop redundant whitelisting (#5005) 2022-03-03 18:27:27 +00:00
glitsj16
8dd5138f8f
 		fix sylpheed (#5003) 2022-03-03 17:17:27 +00:00
glitsj16
fa0165fecf
 		more fixes for opera-beta (#5002) 2022-03-03 17:16:38 +00:00
glitsj16
f35a4e1a13
 		add opera-developer.profile (#5001) 
* add opera-developer to firecfg

* add opera-developer

* fix typo

* add configs for opera-developer

* Create opera-developer.profile

* fixes for opera-developer

* fix for opera-developer
 2022-03-03 17:15:36 +00:00
glitsj16
004bc8c6c9
 		opera fixes/hardening (#4999) 
* harden opera-beta

* harden opera
 2022-03-03 02:44:57 +00:00
glitsj16
4bb590f041
 		geary fixes (#4992) 
* geary fixes

* comment ipc-namespace
 2022-03-01 23:09:23 +00:00
smitsohu
cc23a01bd5 whitelist: avoid nested whitelist mounts 
Check mountids while creating path of a new mount target.
If the mountid differs from the top level directory (tmpfs)
mountid, this proves an earlier whitelist command.

It is important to note though that this check is not exhaustive,
as besides nested whitelist commands there are also nested
top level directories. So a user could run:
firejail --whitelist=/a/b --whitelist=/a/b/c where both
a and b are (whitelist) top level directories. Such a command
may result in b and c sharing the filesystem and hence mountid.
In this case the nested nature of the whitelist commands
will go unnoticed.

A more rigorous version will probably need to apply some
sorting to the whitelist command, possibly by means of
glob(3).
 2022-03-01 01:39:27 +01:00
smitsohu
f60dbcda4d whitelist: minor restructuring 
some cleanup, simplify extending the code (for example adding additional members to the TopDir struct)
 2022-03-01 01:37:45 +01:00
Dmitry Chestnykh
c238147fc1 Add ability to disable user profiles at compile time. 2022-02-28 23:26:36 +03:00
dependabot[bot]
8b261b47aa Bump github/codeql-action from 1.1.2 to 1.1.3 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.2 to 1.1.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](d39d5d5c97...75f07e7ab2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-28 15:23:46 +00:00
smitsohu
6dfab9e2be mount id: drop effective user id assertions 
as functions operate on a file descriptor
it should be safe to remove them; this
sets the stage for improvements to the
whitelist code
 2022-02-25 19:49:55 +01:00
glitsj16
e883473888
 		fix mupdf redirect profiles (#4977) 2022-02-25 09:33:30 +00:00
glitsj16
922f2a9143
 		gconf-editor fix (#4976) 2022-02-24 21:40:50 +00:00
smitsohu
9f6bc286e6 update noprofile.profile 2022-02-24 19:47:44 +01:00
smitsohu
4b41e0c27b fix --whitelist=/run/* 2022-02-24 19:29:19 +01:00
glitsj16
0d5d2e1929
 		hardening zeal.profile (#4970) 2022-02-23 11:17:26 +00:00
netblue30
30e5c12407 evince fix 2022-02-22 09:43:51 -05:00
netblue30
bb334a8fd4 openSUSE Leap - whitelist-run-common.inc (#4954) 2022-02-22 09:32:46 -05:00
netblue30
f347e88cc7 allow printing in evince 2022-02-22 09:22:11 -05:00
avallach2000
a74f48fe9a
 		Add support for changing appearance of the Qt6 apps with qt6ct (#4966) 
* Add support for changing appearance of the Qt6 apps with qt6ct

* Remove qt5ct artifact from zeal.profile

* Remove qt5ct artifact from bibletime.profile
 2022-02-21 19:04:43 +00:00
dependabot[bot]
751f2c7de9 Bump github/codeql-action from 1.1.0 to 1.1.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.0 to 1.1.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](474bbf07f9...d39d5d5c97)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-21 12:08:24 +00:00
netblue30
070e78a889 Merge branch 'master' of ssh://github.com/netblue30/firejail 2022-02-20 08:20:59 -05:00
netblue30
ddd7e6fec6 merges 2022-02-20 08:20:45 -05:00