Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

luarocks #1

Closed
wants to merge 1,570 commits into from
Closed
Changes from 1 commit
Commits
Show all changes
1570 commits
Select commit Hold shift + click to select a range
f6e5a58
appimage fix
netblue30 Jun 17, 2021
31557e9
gcov: add missing gcov.h includes
kmk3 Jun 3, 2021
b71fd92
Merge pull request #4360 from kmk3/gcov-add-missing-includes
netblue30 Jun 19, 2021
7b78bf7
jailcheck: networking support
netblue30 Jun 19, 2021
f46f514
Fix #4363 -- minecraft-launcher not running with firejail
rusty-snake Jun 19, 2021
1da3f20
fixing broken build
netblue30 Jun 19, 2021
447e30e
Merge branch 'master' of ssh:https://github.com/netblue30/firejail
netblue30 Jun 19, 2021
70640cf
Add sndio support
nullenvk Jun 19, 2021
271dc51
grammar issues and fixing test cases for rlimit
kuesji Jun 11, 2021
3973537
Remove a /tmp/ whitelist, move sndio whitelist to common in whitelist…
nullenvk Jun 20, 2021
e6f573b
Update etc/inc/whitelist-common.inc
nullenvk Jun 20, 2021
64d1ef4
Whitelist /tmp/sndio in private-tmp
nullenvk Jun 20, 2021
533242a
augment seccomp lists in firejail.config
smitsohu Jun 20, 2021
e0ed633
Convert spaces to tabs in firejail/fs.c
nullenvk Jun 20, 2021
9c071c8
cleanup
smitsohu Jun 20, 2021
435d739
tmpfs option enhancements
smitsohu Jun 20, 2021
1a66c8b
testing
smitsohu Jun 21, 2021
1ca9046
creating alpine.profile (#4350)
Jun 21, 2021
ee1ea7d
style: grammer and codestyle improvements
reinerh Jun 21, 2021
0f03254
Merge branch 'master' into kuesji/master
reinerh Jun 21, 2021
eb87b41
README update
reinerh Jun 21, 2021
04d15e3
Address #3872 with changes in pipewire for Firefox and Chromium
alxjsn Jun 22, 2021
e943e2f
Address #3872 with changes for Librewolf
alxjsn Jun 22, 2021
8113ceb
corrections
Jun 22, 2021
f79bf43
comments
Jun 22, 2021
3ecb41e
Update rtv-addons.profile
Jun 22, 2021
8754896
copy_file_as_user function: drop not needed arguments
smitsohu Jun 23, 2021
db6a0fc
allow access to pkgconfig
glitsj16 Jun 23, 2021
2e29cf7
Merge pull request #4370 from glitsj16/fix-wusc
glitsj16 Jun 23, 2021
a904288
Merge pull request #4368 from alxjsn/master
rusty-snake Jun 25, 2021
b408b20
gcov: fix build failure with gcc 11.1.0
kmk3 Jun 15, 2021
ff4277a
firejail.h: fix typo of "either" in license header
kmk3 Jun 26, 2021
925c9fe
seccomp man page update
smitsohu Jun 26, 2021
43fb38e
RELNOTES
smitsohu Jun 26, 2021
771dcce
fs_home.c: improve EUID switching, fix selinux relabeling
smitsohu Jun 26, 2021
99e5335
Merge pull request #4374 from smitsohu/euid
smitsohu Jun 26, 2021
46712f7
Merge pull request #4340 from smitsohu/kcmp
smitsohu Jun 26, 2021
533a57e
remove kcmp from seccomp default drop list (#3219)
smitsohu Jun 26, 2021
0c2a5e3
tweaks
smitsohu Jun 26, 2021
98d223d
gcov: fix indentation
kmk3 Jun 26, 2021
77e9d0d
Merge pull request #4373 from kmk3/gcov-fix-build-gcc11
netblue30 Jun 27, 2021
ed142c6
Merge pull request #4375 from smitsohu/kcmp
netblue30 Jun 27, 2021
5106b2e
gcov: use no-op functions if not enabled
kmk3 Jun 20, 2021
e056101
Merge pull request #4369 from pirate486743186/rtv
netblue30 Jun 27, 2021
807bf63
Merge pull request #4376 from kmk3/gcov-add-nop-functions
netblue30 Jun 28, 2021
fd6d58d
README update
netblue30 Jun 28, 2021
17c6057
README update
netblue30 Jun 28, 2021
a3397a7
Merge pull request #4332 from rusty-snake/bitwarden-electron
netblue30 Jun 28, 2021
835dd5f
Fix #4377 -- telegram-desktop 2.8.2 not starting using firejail-git
rusty-snake Jun 28, 2021
b3ce082
release 0.9.66 testing
netblue30 Jun 28, 2021
648af4e
Merge branch 'master' of ssh:https://github.com/netblue30/firejail
netblue30 Jun 28, 2021
a67bb37
Fix gnome-calendar crashes
rusty-snake Jun 29, 2021
8816dd5
rel 0.9.66 is out, moving to 0.9.67
netblue30 Jun 29, 2021
9abc12b
Merge pull request #4365 from lxeiqr/sndio-fix
netblue30 Jul 1, 2021
0562ceb
cleanup for the next development cycle
netblue30 Jul 1, 2021
0bae164
wrc: allow cups socket
rusty-snake Jul 3, 2021
c08414f
deprecated --disable-whitelist at compile time
netblue30 Jul 3, 2021
45f2ba5
allow/noallow/deny/nodeny aliases for whitelist/nowhitelist/blacklist…
netblue30 Jul 4, 2021
a11707e
allow/deny help and man pages
netblue30 Jul 4, 2021
c32924b
deprecated whitelist=yes/no in /etc/firejail/firejail.config
netblue30 Jul 4, 2021
fe0f975
move whitelist/blacklist to allow/deny
netblue30 Jul 5, 2021
4438f14
allow/deny fbuilder
netblue30 Jul 5, 2021
ed02ab5
Create profcleaner.sh
rusty-snake Jul 7, 2021
1021fb9
allow/deny in zsh completion
rusty-snake Jul 7, 2021
b023b9a
Exclude allow/deny move in profile from git blame
rusty-snake Jul 7, 2021
3777bd7
Fix clion
vnepogodin Jul 7, 2021
d010afe
Remove unnecessary
vnepogodin Jul 7, 2021
c2f8d4d
Revert changes
vnepogodin Jul 7, 2021
1bb3f61
profcleaner.sh: Rename --all to --system
rusty-snake Jul 7, 2021
3b90a80
Revert changes
vnepogodin Jul 7, 2021
5172e3a
LC_ALL=C sort disable-programs.inc
rusty-snake Jul 7, 2021
b282636
Add new directories
vnepogodin Jul 8, 2021
cbfcf61
Sort
vnepogodin Jul 8, 2021
6afe2f7
Merge pull request #4392 from rusty-snake/sort-disable-programs.inc
netblue30 Jul 8, 2021
d4db566
Merge pull request #4391 from vnepogodin/master
netblue30 Jul 8, 2021
3adc447
Merge pull request #4390 from rusty-snake/git-blame-ignore-revs
netblue30 Jul 8, 2021
665023e
Merge pull request #4388 from rusty-snake/allow-deny-zsh
netblue30 Jul 8, 2021
00cb8b6
Merge pull request #4389 from rusty-snake/profcleaner.sh
netblue30 Jul 8, 2021
0b31c41
profcleaner.sh: Change "# CMD" and "#CMD" too
rusty-snake Jul 9, 2021
e66ba7c
Fix file-roller.profile
rusty-snake Jul 9, 2021
2bcf83e
Fix #4396 -- tracelog causes anki to segfault
rusty-snake Jul 11, 2021
110a74f
disable-common.inc update
netblue30 Jul 13, 2021
ba5f5c8
tmpfs mounts: also clear MS_REMOUNT flag (#4387)
smitsohu Jul 13, 2021
ba9c969
Removing blacklisted files from top level /etc directory if the filse…
netblue30 Jul 14, 2021
599b9af
Merge branch 'master' of ssh:https://github.com/netblue30/firejail
netblue30 Jul 14, 2021
6422a67
Merge pull request #4288 from rusty-snake/whitelist-run-common
rusty-snake Jul 16, 2021
a1a9c44
Fix Firefox 'Profile not found' - whitelist /run/user/xxx/firefox
0x6a61 Jul 17, 2021
42a0351
Add MS Edge Beta profile
Fred-Barclay Jul 18, 2021
f43382f
Revert "move whitelist/blacklist to allow/deny"
kmk3 Jul 18, 2021
7d52575
Update telegram.profile
Neo00001 Jul 20, 2021
cd09840
Update avidemux.profile
Neo00001 Jul 20, 2021
a25e4a1
new profiles
rusty-snake Jul 20, 2021
766931c
Blacklist /*firefox* except for firefox itself
0x6a61 Jul 20, 2021
a490e67
moved rules from firefox-common.profile to firefox.profile
0x6a61 Jul 20, 2021
02ebd9a
output options: expand ~
smitsohu Jul 21, 2021
2b696b4
testing
smitsohu Jul 21, 2021
53b2d81
Add new command checklist to CONTRIBUTING.md
rusty-snake Jul 20, 2021
68280da
Complete 42a03511d0877690276da83bf548635d7e8ca693
Fred-Barclay Jul 23, 2021
ee31d6b
organize program startup
smitsohu Jul 24, 2021
1ba2024
Merge branch 'master' of https://github.com/netblue30/firejail
smitsohu Jul 24, 2021
209cdb5
Merge branch 'master' into revert-allow-deny-etc
netblue30 Jul 25, 2021
8b50039
Merge pull request #4410 from kmk3/revert-allow-deny-etc
netblue30 Jul 25, 2021
ac3b2b9
Create ncdu2.profile
glitsj16 Jul 26, 2021
02ac002
add firecfg support for ncdu2
glitsj16 Jul 26, 2021
67e2843
add ncdu2 profile
glitsj16 Jul 26, 2021
406db5b
ordering and additions
glitsj16 Jul 26, 2021
4261360
drop trailing slashes from openrc items
glitsj16 Jul 26, 2021
9ca0d7a
kcmp is allowed by default, no need to add seccomp exceptions for it …
rusty-snake Jul 28, 2021
fd97365
Update RELNOTES
rusty-snake Jul 28, 2021
8f867d0
Refactor code.profile as electron redirect
rusty-snake Jul 28, 2021
bf88637
Update etc/templates/syscalls.txt
rusty-snake Jul 28, 2021
48a97c2
Add support for ignore to profcleaner.sh
rusty-snake Jul 28, 2021
34b9d50
kodi.profile: Add Lutris Kodi Addon note
rusty-snake Jul 28, 2021
a627071
intrusion detection system
netblue30 Jul 28, 2021
e7f3c2a
Merge branch 'master' of ssh:https://github.com/netblue30/firejail
netblue30 Jul 28, 2021
9b776ba
remove compile warnings
netblue30 Jul 28, 2021
c8dd81d
fix grammar
glitsj16 Jul 28, 2021
6e0504f
reordering and fix for ids.config
glitsj16 Jul 28, 2021
4e373a8
improved reordening for ids.config
glitsj16 Jul 28, 2021
95ff3a7
Merge pull request #4427 from glitsj16/ids
netblue30 Jul 28, 2021
b78f181
Merge pull request #4419 from glitsj16/ncdu2
netblue30 Jul 28, 2021
f591e8e
Merge pull request #4412 from netblue30/Neo00001-patch-1
netblue30 Jul 28, 2021
2b5eb07
Merge branch 'master' into master
netblue30 Jul 28, 2021
ac07da9
Merge pull request #4407 from 0x6a61/master
netblue30 Jul 28, 2021
bc99ba2
Merge pull request #4420 from glitsj16/dci
netblue30 Jul 28, 2021
2e4d52e
Revert allow/deny additional files
Fred-Barclay Jul 28, 2021
060e34d
Merge branch 'master' of https://github.com/netblue30/firejail
Fred-Barclay Jul 28, 2021
982013d
Fixup: Fix Firefox 'Profile not found' - whitelist /run/user/xxx/firefox
rusty-snake Jul 28, 2021
b4424d9
rework make test-fs
startx2017 Jul 29, 2021
0043826
cleanup make test-fs
startx2017 Jul 29, 2021
e4307b4
fix whitelist/allow in make test-utils
startx2017 Jul 29, 2021
4f30e6f
fix deb package building
netblue30 Jul 29, 2021
3e1817a
ci: fix gitlab ci job that fails because of new ids.config
reinerh Jul 29, 2021
a964e3b
removed dependency on strace for --build option; added seccomp by def…
netblue30 Jul 29, 2021
2eb35d0
merge
netblue30 Jul 29, 2021
56e0c9f
private-lib: fix double symlink
netblue30 Jul 30, 2021
6c58fc4
Add --ids-* to zsh completion
rusty-snake Jul 31, 2021
ed1f0c0
Add electron[0-9]{0,2} to all electron redirect …
rusty-snake Aug 1, 2021
242d5c7
Added ~/Private blacklist (#4434)
caydey Aug 2, 2021
f4b36e8
Profile fixes
rusty-snake Aug 4, 2021
8d3d67e
Add wru to firefox-common, chromium-common and profile.template
rusty-snake Aug 4, 2021
16aa6f1
Revice keepassxc's dbus policy
rusty-snake Aug 5, 2021
2c55943
Respect quiet if no dbus-user (filter|none) is set
rusty-snake Aug 5, 2021
5f9873d
remove cargo registry token for crates.io from environment
reinerh Aug 6, 2021
925ff6f
Correct directory for sway.profile and io.github.lainsce.Notejot.profile
rusty-snake Aug 9, 2021
3836131
Fix zim and rednotebook
rusty-snake Aug 9, 2021
a72b59c
Add rmenv RESTIC_* to disable-passwdmgr.inc
rusty-snake Aug 9, 2021
939eb7f
Add /run/media to whitelist-run-common.inc
rusty-snake Aug 9, 2021
d423b0c
Update keepassxc.profile
rusty-snake Aug 9, 2021
04fba33
fix man firejail-profile
rusty-snake Aug 9, 2021
bd623d6
Create disable-X11.inc (#4462)
rusty-snake Aug 11, 2021
ca8603c
Move disable-passwordmgr.inc into disable-common.inc/disable-programs…
rusty-snake Aug 12, 2021
40ad5ce
Move disable-passwordmgr.inc into disable-common.inc/disable-programs…
rusty-snake Aug 12, 2021
8278936
add disable-X11.inc to profile template
reinerh Aug 14, 2021
38accb3
Update celluloid.profile
rusty-snake Aug 16, 2021
3381c61
Give fbuilder full original environment
topimiettinen Aug 12, 2021
aa61917
telegram.profile: whitelist /usr/share/TelegramDesktop
davidebeatrici Aug 21, 2021
e84122f
Fix hanging arp_check
minus7 Aug 22, 2021
50ca2a6
multimc5: fix exec of LWJGL libraries
bjpbakker Aug 24, 2021
df76627
bug_report.md: add missing blank lines
kmk3 Aug 24, 2021
7b69b3d
bug_report.md: turn section titles into headers
kmk3 Aug 24, 2021
06317bc
bug_report.md: trim leading spaces on list items
kmk3 Aug 24, 2021
dc3859f
bug_report.md: format the details section
kmk3 Aug 24, 2021
26d6744
bug_report.md: add log section
kmk3 Aug 24, 2021
6be652e
README.md: add artix linux to distro list
kmk3 Aug 25, 2021
b1c8dfc
creating gallery-dl.profile
Aug 27, 2021
77e40a7
create yt-dlp.profile
Aug 27, 2021
32de609
.git-blame-ignore-revs: add revert of allow/deny move
kmk3 Aug 26, 2021
7c6584f
updating youtube-viewers-common.profile (#4485)
Aug 28, 2021
76ee518
Merge pull request #4476 from minus7/master
netblue30 Aug 30, 2021
136ab51
Merge pull request #4484 from pirate486743186/gallery-dl
netblue30 Aug 30, 2021
fe9b905
Merge pull request #4486 from pirate486743186/yt-dlp-profile
netblue30 Aug 30, 2021
18fa01c
Merge pull request #4475 from davidebeatrici/telegram-desktop-2.6.1-fix
netblue30 Aug 30, 2021
d0668fb
Merge pull request #4477 from bjpbakker/multimc5-lwjgl
netblue30 Aug 30, 2021
1cf621c
Merge pull request #4479 from kmk3/issue-template-improvements
netblue30 Aug 30, 2021
8ba6647
Merge pull request #4481 from kmk3/readme-add-artix
netblue30 Aug 30, 2021
673582f
Merge pull request #4487 from kmk3/blame-ignore-add-big-revert
netblue30 Aug 30, 2021
a44fa49
merges
netblue30 Aug 30, 2021
8bf3bb2
fix duplicate global
Aug 30, 2021
13adc77
Blacklist Exodus wallet
tredondo Sep 2, 2021
dd13595
Revert "allow/deny help and man pages"
kmk3 Aug 31, 2021
0f27981
Fix typo of "parent"
kmk3 Aug 31, 2021
33086c1
Update wrc
rusty-snake Sep 3, 2021
e7264f1
sort.py: pylint: consider-using-sys-exit
rusty-snake Sep 3, 2021
eae1f4b
Fix #4506 -- Freetube does not start
rusty-snake Sep 3, 2021
6192585
Update wrc for Arch Linux (#4507)
mjanonis Sep 3, 2021
3a33386
Update RELNOTES
rusty-snake Sep 4, 2021
263e3fe
Profile fixes
rusty-snake Sep 4, 2021
e17223e
Blacklist ~/.minisign in disable-common
rusty-snake Sep 7, 2021
dc59143
Update telegram.profile
nidamanx Sep 7, 2021
5d3e0e8
Rework pipewire/wayland
rusty-snake Sep 7, 2021
7b3cd31
Rework issue templates
rusty-snake Sep 7, 2021
1b6bdca
Update profile.template to use disable-X11.inc
rusty-snake Sep 8, 2021
befa500
Fix #4367 -- gimp 2.10.22-3: gegl:introspect broken
rusty-snake Sep 8, 2021
8c8282e
Merge pull request #4493 from pirate486743186/fix-duplicate-global
rusty-snake Sep 8, 2021
af94772
Fix #4509 -- Nextcloud profile broken - needs 3D and system tray access
rusty-snake Sep 8, 2021
a138a65
bug_report.md: remove extraneous newline
kmk3 Sep 16, 2021
1b1009c
bug_report.md: improve grammar
kmk3 Sep 16, 2021
b3212ed
bug_report.md: clarify message
kmk3 Sep 17, 2021
7f2597d
Merge pull request #4515 from rusty-snake/rework-issue-template
rusty-snake Sep 17, 2021
7aec067
Update SECURITY.md
rusty-snake Sep 17, 2021
d8d97ac
Add ld.so.preload to all private-etc lines
rusty-snake Sep 18, 2021
e9518d4
Fix #4555 - Allow evince to read .cbz file format
lecso7 Sep 18, 2021
963e4d0
Merge pull request #4501 from tredondo/patch-9
rusty-snake Sep 19, 2021
c3f2996
Let programs outside librewolf sandbox open new tabs in librewolf (#4…
crocket Sep 19, 2021
ccc726f
remove hosts file link check
onny Sep 19, 2021
c2c51e7
remove hosts file link check
onny Sep 19, 2021
df53dce
Create goldendict.profile
lecso7 Sep 20, 2021
6006ee5
Merge pull request #4502 from kmk3/revert-allow-deny-man
kmk3 Sep 21, 2021
1b2710f
rework exitcodes
smitsohu Sep 11, 2021
3a9f18f
Merge pull request #4533 from smitsohu/exitcode
smitsohu Sep 22, 2021
f927bc9
add missing final newlines at end of files
a1346054 Aug 31, 2021
7a1dd38
hardcode PATH for internal use
smitsohu Sep 22, 2021
921c9cc
join: add support for rlimit options
smitsohu Sep 22, 2021
ed1236f
use license file from gnu.org (#4571)
a1346054 Sep 22, 2021
47f7347
fix spelling (#4573)
a1346054 Sep 22, 2021
452916a
Update SECURITY.md
reinerh Sep 22, 2021
a5c7189
Merge pull request #4560 from onny/nolinkcheck
netblue30 Sep 24, 2021
efa57a6
Merge pull request #4572 from a1346054/newline-fix
netblue30 Sep 24, 2021
49449a1
Merge pull request #4564 from lecso7/master
netblue30 Sep 24, 2021
99d2e60
Merge pull request #4559 from rusty-snake/private-etc_ld.so.preload
netblue30 Sep 24, 2021
3492d15
Merge pull request #4514 from nidamanx/master
netblue30 Sep 24, 2021
d9c2558
merges
netblue30 Sep 24, 2021
05374b0
update README
netblue30 Sep 24, 2021
5025f4f
private-lib: check firejail libraries as root user (#4576)
smitsohu Sep 25, 2021
8d36b86
private-lib fixup
smitsohu Sep 25, 2021
6eafbfd
trim excess whitespace
a1346054 Aug 31, 2021
09485e3
Merge pull request #4575 from a1346054/whitespace-fix
kmk3 Sep 27, 2021
6988a80
Rework D-Bus policy of nheko
rusty-snake Sep 29, 2021
f391291
Profile fixes and hardening
rusty-snake Sep 30, 2021
9e18bf8
add more EUID improvements
smitsohu Sep 29, 2021
d2389ec
Merge pull request #4585 from smitsohu/euid
smitsohu Oct 2, 2021
23d7231
Comment to use UPnP with amule.profile
chrpinedo Jun 24, 2021
84d5469
simplify recursive remounting
smitsohu Oct 5, 2021
32fb5ed
Merge pull request #4371 from chrpinedo/patch-1
smitsohu Oct 5, 2021
a78d014
mountinfo: get mount id from failed call to name_to_handle_at
smitsohu Oct 5, 2021
f02a218
Merge pull request #4590 from smitsohu/mountid
smitsohu Oct 6, 2021
990ffbb
Add profile for luarocks
matu3ba Oct 7, 2021
eb7dab0
use allow-lua as its smaller.
matu3ba Oct 8, 2021
4e670d2
remove disable-write-mnt
matu3ba Oct 8, 2021
5df4c63
shortening (default-disabled) private-etc
matu3ba Oct 8, 2021
f6f0021
remove private-bin and s/allow/whitelist
matu3ba Oct 8, 2021
65242d9
add luarocks to firecfg.config
matu3ba Oct 8, 2021
4c5ca65
fix allow-lua.inc and disable-interpreters.inc
matu3ba Oct 8, 2021
161df63
add seccomp.block-secondary
matu3ba Oct 8, 2021
29ef011
update luarocks profile
matu3ba Oct 8, 2021
e610d2e
Merge branch 'luarocks' of github.com:matu3ba/firejail into luarocks
matu3ba Oct 8, 2021
f3e9ea0
update luarocks profile
matu3ba Oct 8, 2021
ce1b231
add whitelist-var-common and whitelist-run-common
matu3ba Oct 8, 2021
1d1f524
fix order
matu3ba Oct 8, 2021
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Whitelist /tmp/sndio in private-tmp
  • Loading branch information
nullenvk committed Jun 20, 2021
commit 64d1ef47553415f7a5ef98667c0914ef0c0279a8
3 changes: 3 additions & 0 deletions src/firejail/fs.c
Original file line number Diff line number Diff line change
Expand Up @@ -1274,6 +1274,9 @@ void fs_private_tmp(void) {
// read-only x11 directory
profile_add("read-only /tmp/.X11-unix");

// whitelist sndio directory
profile_add("whitelist /tmp/sndio");

// whitelist any pulse* file in /tmp directory
// some distros use PulseAudio sockets under /tmp instead of the socket in /urn/user
DIR *dir;
Expand Down