github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-07-20 16:27:42 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 4
4516 commits 10 branches 71 tags 36 MiB
Commit graph

1764 commits

Author SHA1 Message Date
luz.paz
681e074681 Misc. typos 
Found using `codespell -q 3 -L shotcut,objext,als,ans,creat,varius,chage,tthe`
 2018-11-19 10:07:39 -05:00
Glenn Washburn
d9895d33e9 Remove -c from usage completely. 2018-11-18 12:53:54 -06:00
Glenn Washburn
c895eee170 Add better documentation for "-c" option. 2018-11-18 12:53:54 -06:00
netblue30
b44858bd72
Merge pull request #2255 from crass/fix-profile-name-handling 
Allow prefixing colon to profile argument of --profile to for a profile search
 2018-11-14 11:35:12 -05:00
smitsohu
ac93f86843 still fixing indentation 
my editor is weird sometimes
 2018-11-13 17:35:40 +01:00
smitsohu
f862c7d8dc
identation fix 2018-11-13 17:01:59 +01:00
smitsohu
a0f6b2e900 misc small adjustments 2018-11-13 16:42:10 +01:00
smitsohu
fed26d4fb7 user database: improve error strings and checks 2018-11-11 16:28:14 +01:00
smitsohu
8b29ec4f1e fix the fix: ff6612fac8 2018-11-10 16:17:55 +01:00
smitsohu
8f707a5f23 Merge branch 'master' of https://github.com/netblue30/firejail 2018-11-10 15:07:12 +01:00
smitsohu
ff6612fac8 unreadable firejail.users database fixes 
run firecfg with umask 022 and print a diagnostic message if
the database is not readable.

closes #2225
 2018-11-10 14:57:26 +01:00
Glenn Washburn
49fef2fda9 Allow prefixing colon to profile argument of --profile to for a profile search, and disallow a directory to match as a profile file. 2018-11-09 09:38:51 -06:00
Glenn Washburn
cad5333651 Have appimage handling be the same with or with out special -- argument. 2018-11-08 13:52:33 -06:00
netblue30
360ca718df fix compile 2018-11-08 11:30:11 -05:00
netblue30
2acc910daf profile parser testing 2018-11-08 10:49:44 -05:00
netblue30
0fc095bf36
Merge pull request #2247 from SkewedZeppelin/u2f_cond 
Add new config option to disable U2F in browsers, enabled by default
 2018-11-07 08:04:49 -05:00
Fred-Barclay
a41b2019e9
Fixes for brave browser 2018-11-05 19:47:31 -06:00
Tad
1a03225b44 Add new config option to disable U2F in browsers, enabled by default 2018-11-05 18:38:16 -05:00
netblue30
fe1b27aa7f fix --bandwidth command 2018-11-05 07:33:37 -05:00
smitsohu
35d2aec567 recursive remounts: add fallback for old kernels, some improvements 
* vanilla kernels before 3.15 don't expose a mount id in /proc/pid/fdinfo files.
  This is still relevant on Ubuntu 14.04 with 3.13 kernel, CentOS 7 doesn't
  have this problem. In this case fall back to simple a remount and print
  a warning.
* drop euid switching as it doesn't really serve a purpose here (paths are not opened
  in reading or writing mode, and we are not doing anything with it) and potentially
  causes problems when suid programs are sandboxed
* more rigorous error handling
 2018-11-04 19:03:49 +01:00
smitsohu
c1b2509c72 mount appimages nodev,nosuid 2018-11-04 18:11:07 +01:00
smitsohu
97eed29370 fs_whitelist: minor mountinfo check improvement, cleanup 2018-11-04 17:14:45 +01:00
Fred-Barclay
ed74dadd85
Add Mendeley profile 2018-11-02 18:00:55 -05:00
netblue30
f402d2c683 adding --net.print command line option 2018-10-29 09:37:03 -04:00
netblue30
b729c5b5e3 aisleriot 2018-10-28 14:29:03 -04:00
smitsohu
922c4a10ab little tweaks, cosmetic changes 2018-10-26 22:47:48 +02:00
smitsohu
ccb5f36da0 fix: return with euid 0 2018-10-25 23:09:54 +02:00
smitsohu
a7164cb381 experimental: remounts child mount points as well (read-only, read-write, noexec) 2018-10-25 22:07:19 +02:00
Fred-Barclay
7c481eb43c
Add QOwnNotes profile 2018-10-20 22:13:13 -05:00
smitsohu
d0a8395d40 improve some error messages 2018-10-17 18:50:09 +02:00
smitsohu
520c94af9a improve clean_pathname function 2018-10-17 18:18:09 +02:00
smitsohu
438fdd3d90 fs_whitelist: cache length of home directory string 2018-10-17 18:10:04 +02:00
netblue30
7ef3560b00 fix #2197 2018-10-17 09:20:32 -04:00
netblue30
1143be758d
Merge pull request #2199 from crass/fix-2142-firefox-sandbox-appimage 
Fix #2142: Firefox appimage fails because it needs non-default seccomp
 2018-10-17 08:03:37 -05:00
Glenn Washburn
427468be27 Fix doc: A more accurate example of profile loading by profile name. 2018-10-17 01:39:00 -05:00
Glenn Washburn
557709b4e5 Fix docs on default seccomp list: change mfsservctl -> nfsservctl and reorder, add ni_syscall, remove duplicate process_vm_writev, add sys_debug_setcontext. 2018-10-17 01:09:00 -05:00
Glenn Washburn
b343481c8f Update profile manpage to detail added "include" functionality. 2018-10-17 00:33:03 -05:00
Glenn Washburn
07a01b1f45 Allow include to search userdir then systemdir for "bare" profile file names. 2018-10-17 00:33:03 -05:00
crass
b26d21e586
Merge pull request #2158 from crass/profile_conditional 
#2158: Add support for rudimentary conditionals in profiles
 2018-10-17 00:20:09 -05:00
Vincent43
70b227d582
manpages: update disable-mnt description 
This will better match current code.
 2018-10-16 15:15:46 +01:00
Glenn Washburn
b9e74120dd Update documentation for profile conditionals. 2018-10-16 03:24:54 -05:00
Glenn Washburn
dbf8d44df8 Add support for rudimentary conditionals in profiles, currently only the HAS_APPIMAGE conditional is supported. 2018-10-16 03:24:54 -05:00
Glenn Washburn
f74fa71cf9 Do not override user provided seccomp lists when in chroot/overlay/appimage, but to use the default if none is provided. 2018-10-16 01:42:55 -05:00
Glenn Washburn
eb42779f95 Update man pages and usage to reflect --profile enhancement. 2018-10-15 23:47:44 -05:00
Glenn Washburn
ffd51a5c78 Allow specifying a profile "name" with the profile option (eg. --profile=firefox). 2018-10-15 23:47:44 -05:00
Glenn Washburn
fd79cb3be6 rename expand_home -> expand_macros to better reflect usage and remove unneeded homedir argument. 2018-10-15 23:39:34 -05:00
smitsohu
be1e3b02bf tentative fix: automatically mount libdir in chroot - #2176 2018-10-15 18:09:49 +02:00
startx2017
beed80cac0
Merge pull request #2192 from crass/fix-ld.so.preload-path 
The path in ld.so.preload should point to RUN_FIREJAIL_LIB_DIR, as LIBDIR may not exist.
 2018-10-14 18:54:26 -04:00
Paweł
1650db5c78 Make --join return exit code of the invoked program 2018-10-14 13:50:47 +02:00
Glenn Washburn
2ec608c1c8 The path in ld.so.preload should point to RUN_FIREJAIL_LIB_DIR, as LIBDIR may not exist. 2018-10-13 15:00:02 -05:00