Commit graph

  • 476a1c0ae7
    Merge f09d7403b9 into 18f5d335f2 Mio 2026-06-29 22:13:26 +08:00
  • a38173e762
    Merge c86ef3be17 into 18f5d335f2 Pranaov S 2026-06-29 21:14:23 +08:00
  • 18f5d335f2 test/apps: fix wrong program names in messages master Kelvin M. Klann 2026-06-29 03:16:07 -03:00
  • e6943245ac profiles: disable-common: fix dpkg comment Kelvin M. Klann 2026-06-29 03:05:18 -03:00
  • a7a30c4181
    Merge 7542cc4b04 into 1c54aadb6f Alpha 2026-06-29 13:13:41 +08:00
  • 1c54aadb6f testing netblue30 2026-06-28 19:34:28 -04:00
  • 01ac6260f7 profile fixes (Arch) netblue30 2026-06-28 10:02:00 -04:00
  • 844a3438ae
    Merge 2ae40641a5 into 8baad2bebf Dušan Maliarik 2026-06-25 13:08:40 +03:00
  • 48e83c2e9e
    Merge 35a8a53612 into 8baad2bebf Brian Allen Vanderburg II 2026-06-25 08:13:23 +00:00
  • ac8cc117be
    Merge 79c43a5381 into 8baad2bebf Kelvin M. Klann 2026-06-25 05:35:39 +00:00
  • 09b0f0a2a2
    Merge bac991feb0 into 8baad2bebf Alberto Mardegan 2026-06-25 05:35:29 +00:00
  • 2c70ace5c6
    Merge dd2e4be3bc into 8baad2bebf cobratbq 2026-06-25 05:34:47 +00:00
  • bc3c6b2474
    Merge fe81265ec1 into 8baad2bebf sofoxe1 2026-06-25 05:34:02 +00:00
  • 401b8aeb59
    Merge 03a3c96653 into 8baad2bebf cobratbq 2026-06-25 05:33:27 +00:00
  • c93a7831be
    Merge 46baf4ab3c into 8baad2bebf cobratbq 2026-06-25 05:22:51 +00:00
  • 7161261cdf
    Merge c854ec0762 into 8baad2bebf cobratbq 2026-06-25 05:19:51 +00:00
  • 8baad2bebf profiles: profile.template: fix leading comments Kelvin M. Klann 2026-06-24 19:23:06 -03:00
  • 6c0ec7cce0 remove dpkg blacklist from disable-common.inc netblue30 2026-06-24 06:18:13 -04:00
  • a0f31ffe15
    Merge pull request #7172 from kmk3/profile-template-improve-rules netblue30 2026-06-24 06:08:36 -04:00
  • 925bba49ae
    Merge branch 'master' into profile-template-improve-rules netblue30 2026-06-24 06:07:44 -04:00
  • 1527c3042e
    Merge pull request #7186 from netblue30/fix-metachars netblue30 2026-06-24 06:05:42 -04:00
  • 2b122d1947 remove the --color option in gen-syscalls.sh pierretom 2026-06-19 16:22:28 +02:00
  • ad968e7ebf common.c: add more metachars in reject_meta_chars() Kelvin M. Klann 2026-06-16 14:44:39 -03:00
  • 76d9dd7037 common.c: deduplicate metachar strings in reject_meta_chars() Kelvin M. Klann 2026-06-16 14:41:25 -03:00
  • 3725c08b2a add allow-bwrap in profile.template pierretom 2026-06-17 17:04:20 +02:00
  • abe7313d29 common.c: sort metachar strings in reject_meta_chars() Kelvin M. Klann 2026-06-16 14:19:12 -03:00
  • ad655fe79f
    bugfix: add missing backtick in reject_meta_chars() (#7183) Devon Kirk 2026-06-16 12:54:47 -04:00
  • 4e80550beb
    profiles: lutris: fix proton compatibility (#7181) sofoxe1 2026-06-16 16:25:17 +02:00
  • b3407c6cd0 profiles: inkscape: format comment Kelvin M. Klann 2026-06-16 09:45:22 -03:00
  • bcf20326c9 Close TOCTOU race conditions in fs, fs_var, and restrict_users Devon Kirk 2026-06-14 19:16:13 -04:00
  • f02ba6f3b7 Fix missing O_NOFOLLOW in sbox helper exec Devon Kirk 2026-06-14 19:15:25 -04:00
  • 5040180f8e Fix missing backtick in reject_meta_chars() Devon Kirk 2026-06-14 19:13:09 -04:00
  • 26747dc869 Fix FUSE symlink following in disable_file() Devon Kirk 2026-06-14 19:11:29 -04:00
  • 02a81c2f1c gimp, inkscape profile fixes (Arch) netblue30 2026-06-12 15:52:07 -04:00
  • 5ae062544b profiles: lutris: fix proton compatibility sofoxe1 2026-06-11 05:07:51 +02:00
  • 0447f1eeec reverting: firecfg: add and use firejail-symlink wrapper Most programs run fine, but I'm running into problems with a small number of them. Among them firefox and libreoffice. I'll bring it back after I figure out what's going on. netblue30 2026-06-10 12:40:11 -04:00
  • ac36bb9e8b build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.4 dependabot[bot] 2026-06-01 21:16:36 +00:00
  • a60f1504a0 build(deps): bump github/codeql-action from 4.35.2 to 4.36.0 dependabot[bot] 2026-06-01 21:16:30 +00:00
  • 422e7ce7fc
    build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.4 dependabot[bot] 2026-06-01 21:16:36 +00:00
  • 2148da8d9e
    build(deps): bump github/codeql-action from 4.35.2 to 4.36.0 dependabot[bot] 2026-06-01 21:16:30 +00:00
  • d5f761f0c4 fix add and use firejail-symlink wrapper - added support for make uninstall netblue30 2026-06-01 12:27:26 -04:00
  • 1e02263e35
    Merge pull request #7142 from kmk3/add-firejail-symlink-exec netblue30 2026-06-01 09:43:32 -04:00
  • ec996e7b7d
    Merge pull request #7148 from kmk3/build-remove-etc-fixes netblue30 2026-06-01 09:42:11 -04:00
  • d545e38dfe
    Merge pull request #7131 from hlein/profile-man netblue30 2026-06-01 09:41:07 -04:00
  • 31eae2148f profiles: profile.template: improve rules section Kelvin M. Klann 2026-05-17 16:01:41 -03:00
  • fed9405b73 profiles: templates: improve formatting Kelvin M. Klann 2026-05-17 13:53:52 -03:00
  • 37f96718f9 profiles: profile.template: fix inconsistent list indentation Kelvin M. Klann 2026-05-17 14:04:46 -03:00
  • 494846aa33 profiles: profile.template: join lines from header Kelvin M. Klann 2026-05-17 07:40:32 -03:00
  • 6d95046e9c profiles: templates: improve leading comments Kelvin M. Klann 2026-05-17 07:30:55 -03:00
  • 060b839387
    new profile: claude (#7169) Amin Vakil 2026-05-22 18:59:23 +03:30
  • 77ca77e0b5
    Merge branch 'master' into claude_profile Kelvin M. Klann 2026-05-22 15:25:21 +00:00
  • 7eda434483 RELNOTES: add feature, build, test, ci and profile items Kelvin M. Klann 2026-05-22 12:05:37 -03:00
  • cccf4c46b5 RELNOTES: reword test item Kelvin M. Klann 2026-05-22 12:12:23 -03:00
  • 8c60e29c39
    new profile: tldr (#7166) Fidel Ramos 2026-05-18 16:02:46 +01:00
  • 0e9e222a12
    profiles: tldr: remove non-existing group from private-etc Kelvin M. Klann 2026-05-18 15:00:02 +00:00
  • bfb960f62d
    profiles: tldr: remove redundant blacklist Kelvin M. Klann 2026-05-18 14:58:46 +00:00
  • 69e995ee87
    profile: tldr: private-etc groups Fidel Ramos 2026-05-17 22:35:13 +01:00
  • 772b81809c profiles: gemini: add mkdir ~/.gemini in whitelist comment Kelvin M. Klann 2026-05-17 16:02:06 -03:00
  • f58990646e
    test/fs: support and use XDG user dir env vars (#7167) Kelvin M. Klann 2026-05-17 19:04:04 +00:00
  • 631795d410
    profile: claude Amin Vakil 2026-05-17 20:16:06 +03:30
  • 7a3146190b
    profile: tldr: fix private-etc Fidel Ramos 2026-05-17 08:30:15 +01:00
  • cae1c46b66 test/fs: support and use XDG user dir env vars Kelvin M. Klann 2026-05-10 12:02:10 -03:00
  • 34f12c442e
    feature: add ${PUBLICSHARE} and ${TEMPLATES} macros (#7164) Kelvin M. Klann 2026-05-15 13:11:54 +00:00
  • 7462f375e4
    profile: tldr: fix sorting Fidel Ramos 2026-05-15 10:42:46 +01:00
  • 3bfbc15770
    new profile: tldr Fidel Ramos 2026-05-14 17:09:52 +01:00
  • 0250e64be7 feature: add ${PUBLICSHARE} and ${TEMPLATES} macros Kelvin M. Klann 2026-05-09 15:52:10 -03:00
  • c854ec0762 profile: chromium: netlink provides unnecessary access, comment on possibility for memory-deny-write-execute Danny van Heumen 2026-05-13 17:42:40 +02:00
  • 2f722c85da profiles: sort macros in profile.template Kelvin M. Klann 2026-05-09 15:39:28 -03:00
  • ad89817c08
    test/fs: deduplicate xdg dirs in macro tests (#7163) Kelvin M. Klann 2026-05-13 14:14:31 +00:00
  • 5b5952573f
    build: netfilter.c: replace system() with execv() (#7159) orbisai0security 2026-05-13 19:18:27 +05:30
  • e323bf09db
    netfilter.c: change pointer to array Kelvin M. Klann 2026-05-13 12:25:54 +00:00
  • 32d8fb074e test/fs: deduplicate xdg dirs in macro tests Kelvin M. Klann 2026-05-10 10:07:02 -03:00
  • f2df11ae37
    ci: make all main make steps parallel and sync output (#7162) Kelvin M. Klann 2026-05-11 14:33:36 +00:00
  • fce18b90f3 test/fs/fs.sh: fix typo of "root" Kelvin M. Klann 2026-05-11 08:47:31 -03:00
  • 98fe3af8ba test/fs/macro-subpath.exp: fix permissions (644 -> 755) Kelvin M. Klann 2026-05-10 12:28:53 -03:00
  • 9426ba79a2 test/fs/macro-subpath.exp: fix ls -> find Kelvin M. Klann 2026-05-10 12:34:01 -03:00
  • 0298a7eba7
    profiles: use xdg macros with subpaths (#7160) Kelvin M. Klann 2026-05-11 14:07:42 +00:00
  • 52be5b47cc ci: make all main make steps parallel and sync output Kelvin M. Klann 2026-04-27 12:39:25 -03:00
  • 11194003d1
    netfilter.c: remove const Kelvin M. Klann 2026-05-09 18:12:24 +00:00
  • 7f9a71a1ff
    netfilter.c: add const Kelvin M. Klann 2026-05-09 18:04:05 +00:00
  • 75fdd3d87b
    netfilter.c: remove redundant asprintf Kelvin M. Klann 2026-05-09 18:02:07 +00:00
  • e6d108f91a profiles: use xdg macros with subpaths Kelvin M. Klann 2026-04-22 05:53:00 -03:00
  • 3664750f8f profiles: zoom: sort noblacklist/whitelist sections Kelvin M. Klann 2026-04-22 06:05:32 -03:00
  • 85962902a8 profiles: keepassxc: sort noblacklist section Kelvin M. Klann 2026-04-22 06:05:20 -03:00
  • 5abf0577a7
    feature: add ${PROJECTS} macro (#7157) Kelvin M. Klann 2026-05-09 13:19:42 +00:00
  • c591897a9b fix: V-004 security vulnerability orbisai0security 2026-05-09 13:19:39 +00:00
  • a86da57d33 feature: add ${PROJECTS} macro Kelvin M. Klann 2026-05-05 11:02:06 -03:00
  • f4170dd82e profiles: move llm-agent-common.inc to llm-agent-common.profile Kelvin M. Klann 2026-05-09 09:16:46 -03:00
  • 0959f0f653 profiles: nodejs-common: sort whitelist section Kelvin M. Klann 2026-05-08 12:58:39 -03:00
  • 8391ff7cbb profiles: yarn: fix comment header Kelvin M. Klann 2026-05-08 13:09:15 -03:00
  • c81777164c
    profiles: add llm-agent-common.inc (#7158) Amin Vakil 2026-05-08 14:38:49 +03:30
  • 937a11e430
    profiles: llm-agent-common: fix whitespace Kelvin M. Klann 2026-05-08 11:07:41 +00:00
  • 03204dc807
    Move env NO_BROWSER=true to llm-agent-common.inc Amin Vakil 2026-05-07 18:07:36 +03:30
  • dbca1ec432
    Fix RELNOTES Amin Vakil 2026-05-07 18:05:53 +03:30
  • c28e5021ef
    Add redirect comments Amin Vakil 2026-05-07 18:04:56 +03:30
  • 534a6461a6
    Add missing things at the top Amin Vakil 2026-05-07 18:02:57 +03:30
  • a7808abd22
    Fix README Amin Vakil 2026-05-07 18:05:09 +03:30
  • 37e802242f
    Change README, RELNOTES Amin Vakil 2026-05-05 22:22:24 +03:30
  • 0038043885
    profiles: add common LLM agent include Amin Vakil 2026-05-05 22:12:46 +03:30
  • 46a111166e test/fs: simplify error messages in macro tests Kelvin M. Klann 2026-05-05 04:46:59 -03:00