diff --git a/README b/README index 522fdc34ac5..7310d22da32 100644 --- a/README +++ b/README @@ -109,6 +109,7 @@ Amin Vakil (https://github.com/aminvakil) - whois profile fix - added profile for strawberry - w3m profile fix + - disable seccomp in wireshark profile Andreas Hunkeler (https://github.com/Karneades) - Add profile for offical Linux Teams application Andrey Alekseenko (https://github.com/al42and) @@ -203,6 +204,7 @@ Bundy01 (https://github.com/Bundy01) - fixup geary - add gradio profile - update virtualbox.profile + - Quodlibet profile BytesTuner (https://github.com/BytesTuner) - provided keepassxc profile caoliver (https://github.com/caoliver) @@ -435,6 +437,8 @@ hamzadis (https://github.com/hamzadis) - added --overlay-named=name and --overlay-path=path Hans-Christoph Steiner (https://github.com/eighthave) - added xournal profile +Harald Kubota (https://github.com/haraldkubota) + - zsh completion hawkey116477 (https://github.com/hawkeye116477) - added Waterfox profile - updated Cyberfox profile @@ -520,6 +524,7 @@ Jose Riha (https://github.com/jose1711) - Add davfs2 secrets file to blacklist - Add profile for udiskie - fix udiskie.profile + - improve hints for allowing browser access to Gnome extensions connector jrabe (https://github.com/jrabe) - disallow access to kdbx files - Epiphany profile @@ -555,6 +560,7 @@ Kishore96in (https://github.com/Kishore96in) - jitsi-meet-desktop profile - konversatin profile fix - added Neochat profile + - added whitelist-1793-workaround.inc KOLANICH (https://github.com/KOLANICH) - added symlink fixer fix_private-bin.py in contrib section - update fix_private-bin.py @@ -610,6 +616,8 @@ Mattias Wadman (https://github.com/wader) - seccomp errno filter support Matthew Gyurgyik (https://github.com/pyther) - rpm spec and several fixes +Matthew Cline (https://github.com/matthew-cline) + - steam profile and dropbox profile fixes matu3ba (https://github.com/matu3ba) - evince hardening, dbus removed - fix dia profile @@ -649,12 +657,20 @@ Nick Fox (https://github.com/njfox) - fix wire-desktop.profile on arch NickMolloy (https://github.com/NickMolloy) - ARP address length fix +Nico (https://github.com/dr460nf1r3) + - added FireDragon profile +Nicola Davide Mannarelli (https://github.com/nidamanx) + - fix "Could not create AF_NETLINK socket" + - added nextcloud profiles + - Firefox, KeepassXC, Telegram fixes Niklas Haas (https://github.com/haasn) - blacklisting for keybase.io's client Niklas Goerke (https://github.com/Niklas974) - update QOwnNotes profile Nikos Chantziaras (https://github.com/realnc) - fix audio support for Discord +nolanl (https://github.com/nolanl) + - added localtime to signal-desktop's profile nyancat18 (https://github.com/nyancat18) - added ardour4, dooble, karbon, krita profiles Ondra Nekola (https://github.com/satai) @@ -702,6 +718,8 @@ Petter Reinholdtsen (pere@hungry.com) PharmaceuticalCobweb (https://github.com/PharmaceuticalCobweb) - fix quiterss profile - added profile for gnome-ring +pholodniak (https://github.com/pholodniak) + - profstats fixes pianoslum (https://github.com/pianoslum) - nodbus breaking evince two-page-view warning pirate486743186 (https://github.com/pirate486743186) @@ -709,6 +727,17 @@ pirate486743186 (https://github.com/pirate486743186) - mpsyt profile - fix youtube-dl and mpv - fix gnome-mpv profile + - fix gunzip profile + - reorganizing youtube-viewers + - fix pluma profile + - whitelist /var/lib/aspell + - mcomix fixes + - fixing engrampa profile + - adding qcomicbook and pipe-viewer in disable-programs + - newsboat/newsbeuter profiles + - fix atril profile + - rtv profile + - reorganizing links browsers Pixel Fairy (https://github.com/xahare) - added fjclip.py, fjdisplay.py and fjresize.py in contrib section PizzaDude (https://github.com/pizzadude) @@ -745,6 +774,7 @@ Rahul Golam (https://github.com/technoLord) RandomVoid (https://github.com/RandomVoid) - fix building C# projects in Godot - fix Lutris profile + - fix running games with enabled Feral GameMode in Lutris Raphaël Droz (https://github.com/drzraf) - zoom profile fixes realaltffour (https://github.com/realaltffour) @@ -786,6 +816,8 @@ rusty-snake (https://github.com/rusty-snake) - some typo fixes - added profile templates - added sort.py to contrib +sak96 (https://github.com/sak96) + - discord profile fixes Salvo 'LtWorf' Tomaselli (https://github.com/ltworf) - fixed ktorrent profile sarneaud (https://github.com/sarneaud) @@ -814,6 +846,8 @@ sinkuu (https://github.com/sinkuu) - fix symlink invocation for programs placing symlinks in $PATH Simo Piiroinen (https://github.com/spiiroin) - Jolla/SailfishOS patches +slowpeek (https://github.com/slowpeek) + - refine appimage example in docs smitsohu (https://github.com/smitsohu) - read-only kde4 services directory - enhanced mediathekview profile @@ -939,6 +973,10 @@ Topi Miettinen (https://github.com/topimiettinen) - improve loading of seccomp filter and memory-deny-write-execute feature - private-lib feature - make --nodbus block also system D-Bus socket +Ted Robertson (https://github.com/tredondo) + - webstorm profile fixes + - added bcompare profile + - various documentation fixes user1024 (user1024@tut.by) - electron profile whitelisting - fixed Rocket.Chat profile @@ -1003,6 +1041,9 @@ Vladimir Schowalter (https://github.com/VladimirSchowalter20) - apparmor profile enhancements - various KDE profile enhancements read-only kde5 services directory +Vladislav Nepogodin (https://github.com/vnepogodin) + - added Librewolf profiles + - added Sway profile xee5ch (https://github.com/xee5ch) - skypeforlinux profile Ypnose (https://github.com/Ypnose) diff --git a/RELNOTES b/RELNOTES index 790b7255712..9a5f165cd60 100644 --- a/RELNOTES +++ b/RELNOTES @@ -1,6 +1,7 @@ firejail (0.9.65) baseline; urgency=low - * deprecated --audit options, relpaced by jailtest + * deprecated --audit options, relpaced by jailcheck utility * deprecated follow-symlink-as-user from firejail.config + * rename --noautopulse to keep-config-pulse * filtering environment variables * zsh completion * command line: --mkdir, --mkfile @@ -33,7 +34,7 @@ firejail (0.9.65) baseline; urgency=low * neverball-wrapper, neverputt-wrapper, supertuxkart-wrapper, neochat, * cargo, LibreCAD, blobby, funnyboat, pipe-viewer, gtk-pipe-viewer * links2, xlinks2 - -- netblue30 Tue, 9 Feb 2021 09:00:00 -0500 + -- netblue30 Wed, 2 Jun 2021 09:00:00 -0500 firejail (0.9.64.4) baseline; urgency=low * disabled overlayfs, pending multiple fixes (CVE-2021-26910) diff --git a/configure b/configure index f3181659926..9162b6c90d0 100755 --- a/configure +++ b/configure @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for firejail 0.9.65. +# Generated by GNU Autoconf 2.69 for firejail 0.9.66rc1. # # Report bugs to . # @@ -580,8 +580,8 @@ MAKEFLAGS= # Identity of this package. PACKAGE_NAME='firejail' PACKAGE_TARNAME='firejail' -PACKAGE_VERSION='0.9.65' -PACKAGE_STRING='firejail 0.9.65' +PACKAGE_VERSION='0.9.66rc1' +PACKAGE_STRING='firejail 0.9.66rc1' PACKAGE_BUGREPORT='netblue30@protonmail.com' PACKAGE_URL='https://firejail.wordpress.com' @@ -1299,7 +1299,7 @@ if test "$ac_init_help" = "long"; then # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures firejail 0.9.65 to adapt to many kinds of systems. +\`configure' configures firejail 0.9.66rc1 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1361,7 +1361,7 @@ fi if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of firejail 0.9.65:";; + short | recursive ) echo "Configuration of firejail 0.9.66rc1:";; esac cat <<\_ACEOF @@ -1481,7 +1481,7 @@ fi test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -firejail configure 0.9.65 +firejail configure 0.9.66rc1 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -1783,7 +1783,7 @@ cat >config.log <<_ACEOF This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by firejail $as_me 0.9.65, which was +It was created by firejail $as_me 0.9.66rc1, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -4910,7 +4910,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by firejail $as_me 0.9.65, which was +This file was extended by firejail $as_me 0.9.66rc1, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -4964,7 +4964,7 @@ _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -firejail config.status 0.9.65 +firejail config.status 0.9.66rc1 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" @@ -5559,6 +5559,7 @@ if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;} fi + cat <