Skip to content

Commit

Permalink
starting 0.9.45 devel version
Browse files Browse the repository at this point in the history
  • Loading branch information
netblue30 committed Oct 23, 2016
1 parent 0b32d83 commit 4802d8b
Show file tree
Hide file tree
Showing 4 changed files with 15 additions and 79 deletions.
70 changes: 1 addition & 69 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -47,73 +47,5 @@ Use this issue to request new profiles: https://github.com/netblue30/firejail/is
`````
`````
# Current development version: 0.9.43

## X11 development
`````
--x11=none
Blacklist /tmp/.X11-unix directory, ${HOME}/.Xauthority and the
file specified in ${XAUTHORITY} environment variable. Remove
DISPLAY and XAUTHORITY environment variables. Stop with error
message if X11 abstract socket will be accessible in jail.
--x11=xorg
Sandbox the application using the untrusted mode implemented by
X11 security extension. The extension is available in Xorg
package and it is installed by default on most Linux distribu‐
tions. It provides support for a simple trusted/untrusted con‐
nection model. Untrusted clients are restricted in certain ways
to prevent them from reading window contents of other clients,
stealing input events, etc.
The untrusted mode has several limitations. A lot of regular
programs assume they are a trusted X11 clients and will crash
or lock up when run in untrusted mode. Chromium browser and
xterm are two examples. Firefox and transmission-gtk seem to be
working fine. A network namespace is not required for this
option.
Example:
$ firejail --x11=xorg firefox
`````

## Other command line options
`````
--put=name|pid src-filename dest-filename
Put src-filename in sandbox container. The container is specified by name or PID.
--allusers
All user home directories are visible inside the sandbox. By default, only current user home
directory is visible.
Example:
$ firejail --allusers
--join-or-start=name
Join the sandbox identified by name or start a new one. Same as "firejail --join=name" if
sandbox with specified name exists, otherwise same as "firejail --name=name ..."
Note that in contrary to other join options there is respective profile option.
--no3d Disable 3D hardware acceleration.
Example:
$ firejail --no3d firefox
--veth-name=name
Use this name for the interface connected to the bridge for
--net=bridge_interface commands, instead of the default one.
Example:
$ firejail --net=br0 --veth-name=if0
`````

## New profile commands

x11 xpra, x11 xephyr, x11 none, x11 xorg, allusers, join-or-start

## New profiles

qpdfview, mupdf, Luminance HDR, Synfig Studio, Gimp, Inkscape, feh, ranger, zathura, 7z, keepass, keepassx,
claws-mail, mutt, git, emacs, vim, xpdf, VirtualBox, OpenShot, Flowblade, Eye of GNOME (eog), Evolution
# Current development version: 0.9.45

4 changes: 4 additions & 0 deletions RELNOTES
Original file line number Diff line number Diff line change
@@ -1,3 +1,7 @@
firejail (0.9.45) baseline; urgency=low
* development version, work in progress
-- netblue30 <[email protected]> Sun, 23 Oct 2016 08:00:00 -0500

firejail (0.9.44) baseline; urgency=low
* CVE-2016-7545 submitted by Aleksey Manevich
* modifs: removed man firejail-config
Expand Down
18 changes: 9 additions & 9 deletions configure
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#! /bin/sh
# Guess values for system-dependent variables and create Makefiles.
# Generated by GNU Autoconf 2.69 for firejail 0.9.44.
# Generated by GNU Autoconf 2.69 for firejail 0.9.45.
#
# Report bugs to <[email protected]>.
#
Expand Down Expand Up @@ -580,8 +580,8 @@ MAKEFLAGS=
# Identity of this package.
PACKAGE_NAME='firejail'
PACKAGE_TARNAME='firejail'
PACKAGE_VERSION='0.9.44'
PACKAGE_STRING='firejail 0.9.44'
PACKAGE_VERSION='0.9.45'
PACKAGE_STRING='firejail 0.9.45'
PACKAGE_BUGREPORT='[email protected]'
PACKAGE_URL='http:https://firejail.wordpress.com'

Expand Down Expand Up @@ -1259,7 +1259,7 @@ if test "$ac_init_help" = "long"; then
# Omit some internal or obsolete options to make the list less imposing.
# This message is too long to be a string in the A/UX 3.1 sh.
cat <<_ACEOF
\`configure' configures firejail 0.9.44 to adapt to many kinds of systems.
\`configure' configures firejail 0.9.45 to adapt to many kinds of systems.
Usage: $0 [OPTION]... [VAR=VALUE]...
Expand Down Expand Up @@ -1320,7 +1320,7 @@ fi

if test -n "$ac_init_help"; then
case $ac_init_help in
short | recursive ) echo "Configuration of firejail 0.9.44:";;
short | recursive ) echo "Configuration of firejail 0.9.45:";;
esac
cat <<\_ACEOF
Expand Down Expand Up @@ -1424,7 +1424,7 @@ fi
test -n "$ac_init_help" && exit $ac_status
if $ac_init_version; then
cat <<\_ACEOF
firejail configure 0.9.44
firejail configure 0.9.45
generated by GNU Autoconf 2.69
Copyright (C) 2012 Free Software Foundation, Inc.
Expand Down Expand Up @@ -1726,7 +1726,7 @@ cat >config.log <<_ACEOF
This file contains any messages produced by compilers while
running configure, to aid debugging if configure makes a mistake.
It was created by firejail $as_me 0.9.44, which was
It was created by firejail $as_me 0.9.45, which was
generated by GNU Autoconf 2.69. Invocation command line was
$ $0 $@
Expand Down Expand Up @@ -4303,7 +4303,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
# report actual input values of CONFIG_FILES etc. instead of their
# values after options handling.
ac_log="
This file was extended by firejail $as_me 0.9.44, which was
This file was extended by firejail $as_me 0.9.45, which was
generated by GNU Autoconf 2.69. Invocation command line was
CONFIG_FILES = $CONFIG_FILES
Expand Down Expand Up @@ -4357,7 +4357,7 @@ _ACEOF
cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
ac_cs_version="\\
firejail config.status 0.9.44
firejail config.status 0.9.45
configured by $0, generated by GNU Autoconf 2.69,
with options \\"\$ac_cs_config\\"
Expand Down
2 changes: 1 addition & 1 deletion configure.ac
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
AC_PREREQ([2.68])
AC_INIT(firejail, 0.9.44, [email protected], , http:https://firejail.wordpress.com)
AC_INIT(firejail, 0.9.45, [email protected], , http:https://firejail.wordpress.com)
AC_CONFIG_SRCDIR([src/firejail/main.c])
#AC_CONFIG_HEADERS([config.h])

Expand Down

0 comments on commit 4802d8b

Please sign in to comment.