version 0.9.66rc1 released

README

@@ -109,6 +109,7 @@ Amin Vakil (https://github.com/aminvakil)
  - whois profile fix
  - added profile for strawberry
  - w3m profile fix
+ - disable seccomp in wireshark profile
 Andreas Hunkeler (https://github.com/Karneades)
  - Add profile for offical Linux Teams application
 Andrey Alekseenko (https://github.com/al42and)
@@ -203,6 +204,7 @@ Bundy01 (https://github.com/Bundy01)
  - fixup geary
  - add gradio profile
  - update virtualbox.profile
+ - Quodlibet profile
 BytesTuner (https://github.com/BytesTuner)
  - provided keepassxc profile
 caoliver (https://github.com/caoliver)
@@ -435,6 +437,8 @@ hamzadis (https://github.com/hamzadis)
  - added --overlay-named=name and --overlay-path=path
 Hans-Christoph Steiner (https://github.com/eighthave)
  - added xournal profile
+Harald Kubota (https://github.com/haraldkubota)
+ - zsh completion
 hawkey116477 (https://github.com/hawkeye116477)
  - added Waterfox profile
  - updated Cyberfox profile
@@ -520,6 +524,7 @@ Jose Riha (https://github.com/jose1711)
  - Add davfs2 secrets file to blacklist
  - Add profile for udiskie
  - fix udiskie.profile
+ - improve hints for allowing browser access to Gnome extensions connector
 jrabe (https://github.com/jrabe)
  - disallow access to kdbx files
  - Epiphany profile
@@ -555,6 +560,7 @@ Kishore96in (https://github.com/Kishore96in)
  - jitsi-meet-desktop profile
  - konversatin profile fix
  - added Neochat profile
+ - added whitelist-1793-workaround.inc
 KOLANICH (https://github.com/KOLANICH)
  - added symlink fixer fix_private-bin.py in contrib section
  - update fix_private-bin.py
@@ -610,6 +616,8 @@ Mattias Wadman (https://github.com/wader)
  - seccomp errno filter support
 Matthew Gyurgyik (https://github.com/pyther)
  - rpm spec and several fixes
+Matthew Cline (https://github.com/matthew-cline)
+ - steam profile and dropbox profile fixes
 matu3ba (https://github.com/matu3ba)
  - evince hardening, dbus removed
  - fix dia profile
@@ -649,12 +657,20 @@ Nick Fox (https://github.com/njfox)
  - fix wire-desktop.profile on arch
 NickMolloy (https://github.com/NickMolloy)
  - ARP address length fix
+Nico (https://github.com/dr460nf1r3)
+ - added FireDragon profile
+Nicola Davide Mannarelli (https://github.com/nidamanx)
+ - fix "Could not create AF_NETLINK socket"
+ - added nextcloud profiles
+ - Firefox, KeepassXC, Telegram fixes
 Niklas Haas (https://github.com/haasn)
  - blacklisting for keybase.io's client
 Niklas Goerke (https://github.com/Niklas974)
  - update QOwnNotes profile
 Nikos Chantziaras (https://github.com/realnc)
  - fix audio support for Discord
+nolanl (https://github.com/nolanl)
+ - added localtime to signal-desktop's profile
 nyancat18 (https://github.com/nyancat18)
  - added ardour4, dooble, karbon, krita profiles
 Ondra Nekola (https://github.com/satai)
@@ -702,13 +718,26 @@ Petter Reinholdtsen ([email protected])
 PharmaceuticalCobweb (https://github.com/PharmaceuticalCobweb)
  - fix quiterss profile
  - added profile for gnome-ring
+pholodniak (https://github.com/pholodniak)
+ - profstats fixes
 pianoslum (https://github.com/pianoslum)
  - nodbus breaking evince two-page-view warning
 pirate486743186 (https://github.com/pirate486743186)
  - KMail profile
  - mpsyt profile
  - fix youtube-dl and mpv
  - fix gnome-mpv profile
+ - fix gunzip profile
+ - reorganizing youtube-viewers
+ - fix pluma profile
+ - whitelist /var/lib/aspell
+ - mcomix fixes
+ - fixing engrampa profile
+ - adding qcomicbook and pipe-viewer in disable-programs
+ - newsboat/newsbeuter profiles
+ - fix atril profile
+ - rtv profile
+ - reorganizing links browsers
 Pixel Fairy (https://github.com/xahare)
  - added fjclip.py, fjdisplay.py and fjresize.py in contrib section
 PizzaDude (https://github.com/pizzadude)
@@ -745,6 +774,7 @@ Rahul Golam (https://github.com/technoLord)
 RandomVoid (https://github.com/RandomVoid)
  - fix building C# projects in Godot
  - fix Lutris profile
+ - fix running games with enabled Feral GameMode in Lutris
 Raphaël Droz (https://github.com/drzraf)
  - zoom profile fixes
 realaltffour (https://github.com/realaltffour)
@@ -786,6 +816,8 @@ rusty-snake (https://github.com/rusty-snake)
  - some typo fixes
  - added profile templates
  - added sort.py to contrib
+sak96 (https://github.com/sak96)
+ - discord profile fixes
 Salvo 'LtWorf' Tomaselli (https://github.com/ltworf)
  - fixed ktorrent profile
 sarneaud (https://github.com/sarneaud)
@@ -814,6 +846,8 @@ sinkuu (https://github.com/sinkuu)
  - fix symlink invocation for programs placing symlinks in $PATH
 Simo Piiroinen (https://github.com/spiiroin)
  - Jolla/SailfishOS patches
+slowpeek (https://github.com/slowpeek)
+ - refine appimage example in docs
 smitsohu (https://github.com/smitsohu)
  - read-only kde4 services directory
  - enhanced mediathekview profile
@@ -939,6 +973,10 @@ Topi Miettinen (https://github.com/topimiettinen)
  - improve loading of seccomp filter and memory-deny-write-execute feature
  - private-lib feature
  - make --nodbus block also system D-Bus socket
+Ted Robertson (https://github.com/tredondo)
+ - webstorm profile fixes
+ - added bcompare profile
+ - various documentation fixes
 user1024 ([email protected])
  - electron profile whitelisting
  - fixed Rocket.Chat profile
@@ -1003,6 +1041,9 @@ Vladimir Schowalter (https://github.com/VladimirSchowalter20)
  - apparmor profile enhancements
  - various KDE profile enhancements
  read-only kde5 services directory
+Vladislav Nepogodin (https://github.com/vnepogodin)
+ - added Librewolf profiles
+ - added Sway profile
 xee5ch (https://github.com/xee5ch)
  - skypeforlinux profile
 Ypnose (https://github.com/Ypnose)

RELNOTES

@@ -1,6 +1,7 @@
 firejail (0.9.65) baseline; urgency=low
- * deprecated --audit options, relpaced by jailtest
+ * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
+ * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
@@ -33,7 +34,7 @@ firejail (0.9.65) baseline; urgency=low
  * neverball-wrapper, neverputt-wrapper, supertuxkart-wrapper, neochat,
  * cargo, LibreCAD, blobby, funnyboat, pipe-viewer, gtk-pipe-viewer
  * links2, xlinks2
- -- netblue30 <[email protected]> Tue, 9 Feb 2021 09:00:00 -0500
+ -- netblue30 <[email protected]> Wed, 2 Jun 2021 09:00:00 -0500
 
 firejail (0.9.64.4) baseline; urgency=low
  * disabled overlayfs, pending multiple fixes (CVE-2021-26910)

configure

@@ -1,6 +1,6 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for firejail 0.9.65.
+# Generated by GNU Autoconf 2.69 for firejail 0.9.66rc1.
 #
 # Report bugs to <[email protected]>.
 #
@@ -580,8 +580,8 @@ MAKEFLAGS=
 # Identity of this package.
 PACKAGE_NAME='firejail'
 PACKAGE_TARNAME='firejail'
-PACKAGE_VERSION='0.9.65'
-PACKAGE_STRING='firejail 0.9.65'
+PACKAGE_VERSION='0.9.66rc1'
+PACKAGE_STRING='firejail 0.9.66rc1'
 PACKAGE_BUGREPORT='[email protected]'
 PACKAGE_URL='https://firejail.wordpress.com'
 
@@ -1299,7 +1299,7 @@ if test "$ac_init_help" = "long"; then
  # Omit some internal or obsolete options to make the list less imposing.
  # This message is too long to be a string in the A/UX 3.1 sh.
  cat <<_ACEOF
-\`configure' configures firejail 0.9.65 to adapt to many kinds of systems.
+\`configure' configures firejail 0.9.66rc1 to adapt to many kinds of systems.
 
 Usage: $0 [OPTION]... [VAR=VALUE]...
 
@@ -1361,7 +1361,7 @@ fi
 
 if test -n "$ac_init_help"; then
  case $ac_init_help in
- short | recursive ) echo "Configuration of firejail 0.9.65:";;
+ short | recursive ) echo "Configuration of firejail 0.9.66rc1:";;
  esac
  cat <<\_ACEOF
 
@@ -1481,7 +1481,7 @@ fi
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
  cat <<\_ACEOF
-firejail configure 0.9.65
+firejail configure 0.9.66rc1
 generated by GNU Autoconf 2.69
 
 Copyright (C) 2012 Free Software Foundation, Inc.
@@ -1783,7 +1783,7 @@ cat >config.log <<_ACEOF
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 
-It was created by firejail $as_me 0.9.65, which was
+It was created by firejail $as_me 0.9.66rc1, which was
 generated by GNU Autoconf 2.69. Invocation command line was
 
  $ $0 $@
@@ -4910,7 +4910,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by firejail $as_me 0.9.65, which was
+This file was extended by firejail $as_me 0.9.66rc1, which was
 generated by GNU Autoconf 2.69. Invocation command line was
 
  CONFIG_FILES = $CONFIG_FILES
@@ -4964,7 +4964,7 @@ _ACEOF
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
 ac_cs_version="\\
-firejail config.status 0.9.65
+firejail config.status 0.9.66rc1
 configured by $0, generated by GNU Autoconf 2.69,
  with options \\"\$ac_cs_config\\"
 
@@ -5559,6 +5559,7 @@ if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
 $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
 fi
 
+
 cat <<EOF
 
 Configuration options:

configure.ac

@@ -12,7 +12,7 @@
 #
 
 AC_PREREQ([2.68])
-AC_INIT([firejail],[0.9.65],[[email protected]],[],[https://firejail.wordpress.com])
+AC_INIT([firejail],[0.9.66rc1],[[email protected]],[],[https://firejail.wordpress.com])
 AC_CONFIG_SRCDIR([src/firejail/main.c])
 
 AC_CONFIG_MACRO_DIR([m4])

src/firejail/checkcfg.c

@@ -294,7 +294,7 @@ int checkcfg(int val) {
 
 void print_compiletime_support(void) {
  printf("Compile time support:\n");
- printf("\t- Always force nonewprivs support is %s\n",
+ printf("\t- always force nonewprivs support is %s\n",
 #ifdef HAVE_FORCE_NONEWPRIVS
  "enabled"
 #else