Commit graph

10713 commits

Author SHA1 Message Date
Kelvin M. Klann
35d61001e0 RELNOTES: clarify fbwrap item
Relates to #6906 #7009.
2026-01-03 01:06:12 -03:00
Kelvin M. Klann
e02d8f0058 docs: update supported version to 0.9.78
Relates to #6965.
2026-01-03 00:52:56 -03:00
Kelvin M. Klann
04a2110714 RELNOTES: add build and ci items (0.9.78)
Relates to #7003 #7004.
2026-01-03 00:32:51 -03:00
Kelvin M. Klann
48bcae9009 README: reword new profile items and copy to RELNOTES (0.9.78)
This amends commit 06bc34547 ("README update", 2026-01-02).

Relates to #7005 #7010 #7014.
2026-01-03 00:32:43 -03:00
Kelvin M. Klann
0963b9ef00 docs: README.md: improve formatting of 0.9.78 section
Related commits:

* 36df4e61c ("0.9.78 is out", 2026-01-02)
* 524d67aa7 ("main page", 2026-01-02)
* bf05f54f1 ("main page", 2026-01-02)
2026-01-03 00:23:48 -03:00
Kelvin M. Klann
0438a18f44 Merge remote-tracking branch 'origin/master' 2026-01-03 00:19:09 -03:00
netblue30
bf05f54f12 main page 2026-01-02 19:23:39 -05:00
netblue30
524d67aa77 main page 2026-01-02 19:22:19 -05:00
netblue30
8306948224 Merge branch 'master' of ssh://github.com/netblue30/firejail 2026-01-02 19:08:27 -05:00
netblue30
36df4e61c1 0.9.78 is out 2026-01-02 19:08:16 -05:00
netblue30
06bc34547c README update 2026-01-02 18:52:38 -05:00
StellariusOrion592
196de37df4
new profile: quakespasm (#7014)
QuakeSpasm is a modern multi-platform Quake source port designed as an
improved successor to GLQuake and FitzQuake. It aims to preserve the
classic gameplay and graphics while enhancing compatibility and
modernization.

https://sourceforge.net/projects/quakespasm
2026-01-02 18:19:03 +00:00
dependabot[bot]
7131f4c5ea build(deps): bump actions/checkout from 6.0.0 to 6.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](1af3b93b68...8e8c483db8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-01 13:21:52 +00:00
dependabot[bot]
e2d6a1b5f0 build(deps): bump step-security/harden-runner from 2.13.2 to 2.14.0
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.2 to 2.14.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](95d9a5deda...20cf305ff2)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-01 13:16:49 +00:00
dependabot[bot]
f47084ee46 build(deps): bump github/codeql-action from 4.31.5 to 4.31.9
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.5 to 4.31.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](fdbfb4d275...5d4e8d1aca)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-01 13:16:40 +00:00
Kelvin M. Klann
09365e5e3e
Merge pull request #7004 from kmk3/build-add-sort-profiles
build: add sort-profiles target for sort.py
2026-01-01 13:15:04 +00:00
StellariusOrion592
fd76695fa4
new profile: gzdoom (#7010)
One of the profile requests lists GZDoom.

So create profiles for GZDoom and its variants: UZDoom and LZDoom.

GZDoom served as the primary port for several years after ZDoom was
discontinued.

UZDoom has now become the latest version targeting systems with modern
graphics hardware.

LZDoom is geared towards systems with legacy hardware.

All three profiles work.

https://zdoom.org
2025-12-31 19:34:10 +00:00
StellariusOrion592
7a52945182
new profile: openra (#7005)
OpenRA is an open source project that recreates and modernizes classic
real time strategy games, like Red Alert, Command & Conquer, and Dune
2000.

This profile works for all three AppImage editions of Openra: Red Alert,
Tiberium Dawn, and Dune 2000.

https://www.openra.net
2025-12-30 20:14:57 +00:00
Kelvin M. Klann
27cde7ebe2 arg-max-count: restore check for value < 0
As with `env-max-count`, this allows using a negative number to set the
key to the maximum allowed value.

Example:

    arg-max-count -1

This would set `arg-max-count` to whatever `ARG_MAX` happens to be
(likely 4096).

Related commits:

* d1aeeb4fa ("feature: add arg-max-count and arg-max-len options to
  firejail.config (#6878)", 2025-10-30)
* f5d82cc58 ("feature: add env-max-count / env-max-len to
  firejail.config (#6951)", 2025-11-01)
* ee879a2f2 ("fix arg-max-count and arg-max-len options in
  firejail.config", 2025-11-30).
2025-12-30 17:02:36 -03:00
Kelvin M. Klann
d37bb56ed0 env-max-count: fix max check
Only print a message and change it to `INT_MAX` if it is actually larger
than `INT_MAX` (or smaller than 0).

Related commits:

* d1aeeb4fa ("feature: add arg-max-count and arg-max-len options to
  firejail.config (#6878)", 2025-10-30)
* f5d82cc58 ("feature: add env-max-count / env-max-len to
  firejail.config (#6951)", 2025-11-01)
* ee879a2f2 ("fix arg-max-count and arg-max-len options in
  firejail.config", 2025-11-30)
2025-12-30 16:58:39 -03:00
Kelvin M. Klann
e8ffcc962b tests: appimage: fix whitespace
This amends commit ed89f7c32 ("update make test-appimage - the test
script doesn't work anymore on Debian version 13; I had to replace the
program packaged, and generate a new appimage", 2025-12-29).

Relates to #7007.
2025-12-30 15:08:13 -03:00
Kelvin M. Klann
1a96bb70fc preproc.awk: fix inconsistent copyright header
Related commits:

* 212ac3cb1 ("update copyright", 2025-01-12)
* 2a5062c80 ("copyright 2014-2026 all over the place", 2025-12-30)
2025-12-30 14:59:12 -03:00
Kelvin M. Klann
9c034a6b1d gen-syscalls.sh: fix inconsistent copyright etc headers
Related commits:

* 519a4c5cc ("add a Bash script to generate system calls for several
  architectures", 2025-11-10) / PR #6960
* 2a5062c80 ("copyright 2014-2026 all over the place", 2025-12-30)
2025-12-30 14:59:12 -03:00
Kelvin M. Klann
19853d76e8 RELNOTES: merge/improve/move items and fix release year
This amends commit 1d7034043 ("pre-release: RELNOTES", 2025-12-30).

Relates to #6906 #7007 #7008 #7009.
2025-12-30 14:57:37 -03:00
netblue30
1d70340435 pre-release: RELNOTES 2025-12-30 09:50:40 -05:00
netblue30
ea6b3d5a2d pre-release testing: 0.9.78 due to be released Saturday Jan 3, 2026 2025-12-30 09:02:18 -05:00
netblue30
2a5062c800 copyright 2014-2026 all over the place 2025-12-30 08:20:44 -05:00
netblue30
ed89f7c325 update make test-appimage - the test script doesn't work anymore on Debian version 13; I had to replace the program packaged, and generate a new appimage 2025-12-29 14:55:45 -05:00
netblue30
ffe6dc6fc6 Merge branch 'master' of ssh://github.com/netblue30/firejail 2025-12-29 13:57:58 -05:00
netblue30
27c5724d33 bwrap replacement - part 9 - allow-bwrap profile command 2025-12-29 13:56:35 -05:00
Kelvin M. Klann
4fa7a64f18 build: add sort-profiles target for sort.py
And use it in CI.

Note: The target currently always runs sort.py for all profiles.

Before:

    $ ./ci/check/profiles/sort.py etc/inc/*.inc etc/profile*/*.profile

After:

    $ make sort-profiles
2025-12-28 19:15:34 -03:00
Kelvin M. Klann
92d049cdf9 build: use variables for profiles 2025-12-28 18:27:55 -03:00
Kelvin M. Klann
f9769ecbde build: use simpler shell wildcards for profiles 2025-12-28 18:27:55 -03:00
Kelvin M. Klann
d692ddea70
ci: codeql-cpp: print config.log if configure fails (#7003)
For consistency with the other `./configure` invocations.

This amends commit 500d8f2d6 ("ci: run make in parallel where
applicable", 2023-08-14) / PR #5960.

See also commit dc826cba3 ("ci: print config.log if configure fails",
2023-05-05) / PR #5857.
2025-12-28 21:27:04 +00:00
Kelvin M. Klann
751b7c9b86 RELNOTES: add modif, removal, bugfix and build items
Relates to #6960 #6969 #6972 #6984 #6990 #6994 #6995.
2025-12-28 17:29:00 -03:00
Kelvin M. Klann
c5c7af86ba README: reword many items and copy to RELNOTES
Related commits:

* 7cd2c208f ("merges", 2025-12-04)
* 4797000ba ("merges", 2025-12-05)

Relates to #6364 #6888 #6956 #6960 #6961 #6975 #6980.
2025-12-28 17:04:11 -03:00
Kelvin M. Klann
062fa35266 fix misc whitespace
Found with `git diff --check`.

Related commits:

* e4f9f36a4 ("random hostname by default; fix --hostname and --hosts-file", 2023-02-27)
* b50812ff5 ("appimage testing", 2023-03-01)
* 1bab42a72 ("test apparmor", 2023-03-04)
* a12601f02 ("testing", 2023-03-07)
* aa0194eae ("testing", 2023-03-08)
* f3774678f ("compress static ip map for fnettrace at compile time", 2023-07-06)
* f3e428e6f ("feature: stats support for --nettrace", 2023-07-16)
* e108976f5 ("added signature to release 0.9.76, updated main page, small modifs for mkasc.sh", 2025-08-17)
2025-12-28 11:44:38 -03:00
Kelvin M. Klann
6b379d11cb fix whitespace in main.c (checkcfg)
Found with `git diff --check`.

Related commits:

* ee879a2f2 ("fix arg-max-count and arg-max-len options in
  firejail.config", 2025-11-30)

Relates to #6878.
2025-12-28 11:44:37 -03:00
Kelvin M. Klann
3ae2b5a5cd fix whitespace (fbwrap)
Found with `git diff --check`.

Related commits:

* 33d07c232 ("bwrap replacement - part 1", 2025-12-18)
* 8c14d83f3 ("bwrap replacement - part3", 2025-12-18)
* 180e3f464 ("bwrap replacement - part4", 2025-12-18)
* a723510c2 ("bwrap replacement - part 7 - --allow-bwrap option", 2025-12-22)
* 6cf8a5454 ("bwrap replacement - part 8 - fixes", 2025-12-22)
2025-12-28 11:44:32 -03:00
Kelvin M. Klann
170519d83d profiles: libreoffice: sort noblacklist section
This amends commit 4ce422bfd ("libreoffice.profile update", 2025-12-27).
2025-12-28 09:14:43 -03:00
Kelvin M. Klann
b75e721c8b firecfg: restore removed messages but make them debug
They are useful for debugging during development, especially the
`removed` message.

The `GLOB_NOMATCH` message should never happen with the current code,
which could be used to check for regressions.  It is also consistent
with the other checks for `GLOB_NOMATCH` and should be useful if
user-supplied globs are later supported.

This amends commit 4124e76b4 ("firecfg: Ubuntu snap integration",
2025-12-27).
2025-12-28 09:11:47 -03:00
Kelvin M. Klann
f89083f102 firecfg: fix whitespace
This amends commit 4124e76b4 ("firecfg: Ubuntu snap integration",
2025-12-27).
2025-12-28 08:54:28 -03:00
netblue30
4124e76b4a firecfg: Ubuntu snap integration 2025-12-27 13:13:52 -05:00
netblue30
4ce422bfdb libreoffice.profile update 2025-12-27 10:26:49 -05:00
netblue30
e891255038
Merge pull request #6990 from pierretom/patch5
build: update gen-syscalls.sh
2025-12-26 10:45:23 -05:00
Kelvin M. Klann
9d5575fc62 RELNOTES: move new bugfix item last
This amends commit 1e6158d1b ("update RELNOTES", 2025-12-23).

Relates to #6882.
2025-12-26 11:51:48 -03:00
netblue30
1e6158d1b1 update RELNOTES 2025-12-23 11:00:07 -05:00
netblue30
46b4c12b23 --allow-debuggers fix (#6882) 2025-12-23 10:58:48 -05:00
netblue30
6cf8a54548 bwrap replacement - part 8 - fixes 2025-12-22 12:26:18 -05:00
netblue30
a723510c2d bwrap replacement - part 7 - --allow-bwrap option 2025-12-22 12:01:01 -05:00