Codebase list firejail / 7a35189
New upstream version 0.9.54 Reiner Herrmann 5 years ago
9 changed file(s) with 33 addition(s) and 18 deletion(s). Raw diff Collapse all Expand all
+2
-3
RELNOTES less more
0 firejail (0.9.54~rc1) baseline; urgency=low
1 * work in progress
0 firejail (0.9.54) baseline; urgency=low
21 * modif: --force removed
32 * modif: --csh, --zsh removed
43 * modif: --debug-check-filename removed
4746 * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
4847 * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
4948 * new profiles: qmmp, sayonara
50 -- netblue30 <netblue30@yahoo.com> Sun, 6 May 2018 08:00:00 -0500
49 -- netblue30 <netblue30@yahoo.com> Wed, 16 May 2018 08:00:00 -0500
5150
5251 firejail (0.9.52) baseline; urgency=low
5352 * modif: --allow-private-blacklists was deprecated; blacklisting,
+9
-9
configure less more
00 #! /bin/sh
11 # Guess values for system-dependent variables and create Makefiles.
2 # Generated by GNU Autoconf 2.69 for firejail 0.9.54~rc2.
2 # Generated by GNU Autoconf 2.69 for firejail 0.9.54.
33 #
44 # Report bugs to <netblue30@yahoo.com>.
55 #
579579 # Identity of this package.
580580 PACKAGE_NAME='firejail'
581581 PACKAGE_TARNAME='firejail'
582 PACKAGE_VERSION='0.9.54~rc2'
583 PACKAGE_STRING='firejail 0.9.54~rc2'
582 PACKAGE_VERSION='0.9.54'
583 PACKAGE_STRING='firejail 0.9.54'
584584 PACKAGE_BUGREPORT='netblue30@yahoo.com'
585585 PACKAGE_URL='http://firejail.wordpress.com'
586586
12761276 # Omit some internal or obsolete options to make the list less imposing.
12771277 # This message is too long to be a string in the A/UX 3.1 sh.
12781278 cat <<_ACEOF
1279 \`configure' configures firejail 0.9.54~rc2 to adapt to many kinds of systems.
1279 \`configure' configures firejail 0.9.54 to adapt to many kinds of systems.
12801280
12811281 Usage: $0 [OPTION]... [VAR=VALUE]...
12821282
13381338
13391339 if test -n "$ac_init_help"; then
13401340 case $ac_init_help in
1341 short | recursive ) echo "Configuration of firejail 0.9.54~rc2:";;
1341 short | recursive ) echo "Configuration of firejail 0.9.54:";;
13421342 esac
13431343 cat <<\_ACEOF
13441344
14461446 test -n "$ac_init_help" && exit $ac_status
14471447 if $ac_init_version; then
14481448 cat <<\_ACEOF
1449 firejail configure 0.9.54~rc2
1449 firejail configure 0.9.54
14501450 generated by GNU Autoconf 2.69
14511451
14521452 Copyright (C) 2012 Free Software Foundation, Inc.
17481748 This file contains any messages produced by compilers while
17491749 running configure, to aid debugging if configure makes a mistake.
17501750
1751 It was created by firejail $as_me 0.9.54~rc2, which was
1751 It was created by firejail $as_me 0.9.54, which was
17521752 generated by GNU Autoconf 2.69. Invocation command line was
17531753
17541754 $ $0 $@
44064406 # report actual input values of CONFIG_FILES etc. instead of their
44074407 # values after options handling.
44084408 ac_log="
4409 This file was extended by firejail $as_me 0.9.54~rc2, which was
4409 This file was extended by firejail $as_me 0.9.54, which was
44104410 generated by GNU Autoconf 2.69. Invocation command line was
44114411
44124412 CONFIG_FILES = $CONFIG_FILES
44604460 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
44614461 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
44624462 ac_cs_version="\\
4463 firejail config.status 0.9.54~rc2
4463 firejail config.status 0.9.54
44644464 configured by $0, generated by GNU Autoconf 2.69,
44654465 with options \\"\$ac_cs_config\\"
44664466
+1
-1
configure.ac less more
00 AC_PREREQ([2.68])
1 AC_INIT(firejail, 0.9.54~rc2, netblue30@yahoo.com, , http://firejail.wordpress.com)
1 AC_INIT(firejail, 0.9.54, netblue30@yahoo.com, , http://firejail.wordpress.com)
22 AC_CONFIG_SRCDIR([src/firejail/main.c])
33 #AC_CONFIG_HEADERS([config.h])
44
+2
-1
etc/gedit.profile less more
3737 # private-bin gedit
3838 private-dev
3939 # private-etc fonts
40 private-lib gedit,libgspell-1.so.1,gconv,aspell
40 # private-lib temporarily disabled pending code fixes
41 #private-lib gedit,libgspell-1.so.1,gconv,aspell
4142 private-tmp
4243
4344 noexec ${HOME}
+6
-0
etc/krita.profile less more
66
77 noblacklist ${HOME}/.config/kritarc
88 noblacklist ${HOME}/.local/share/krita
9
10 # Allow python (blacklisted by disable-interpreters.inc)
11 noblacklist ${PATH}/python2*
12 noblacklist ${PATH}/python3*
13 noblacklist /usr/lib/python2*
14 noblacklist /usr/lib/python3*
915
1016 include /etc/firejail/disable-common.inc
1117 include /etc/firejail/disable-devel.inc
+1
-1
etc/skanlite.profile less more
2121 nosound
2222 notv
2323 # novideo
24 protocol unix,netlink
24 protocol unix,inet,inet6,netlink
2525 # blacklisting of ioperm system calls breaks skanlite
2626 seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
2727 shell none
+3
-0
etc/vivaldi.profile less more
1212 whitelist ${HOME}/.cache/vivaldi
1313 whitelist ${HOME}/.config/vivaldi
1414
15 # nodbus breaks vivaldi sync
16 ignore nodbus
17
1518 # Redirect
1619 include /etc/firejail/chromium-common.profile
+8
-2
src/firejail/fs_hostname.c less more
123123 if (asprintf(&dest, "%s/%s", RUN_DNS_ETC, entry->d_name) == -1)
124124 errExit("asprintf");
125125
126 int symlink_done = 0;
126127 if (is_link(src)) {
127128 char *rp =realpath(src, NULL);
128129 if (rp == NULL) {
132133 }
133134 if (symlink(rp, dest))
134135 errExit("symlink");
136 else
137 symlink_done = 1;
135138 }
136139 else if (S_ISDIR(s.st_mode))
137140 create_empty_dir_as_root(dest, s.st_mode);
138141 else
139142 create_empty_file_as_root(dest, s.st_mode);
143
140144 // bind-mount src on top of dest
141 if (mount(src, dest, NULL, MS_BIND|MS_REC, NULL) < 0)
142 errExit("mount bind mirroring /etc");
145 if (!symlink_done) {
146 if (mount(src, dest, NULL, MS_BIND|MS_REC, NULL) < 0)
147 errExit("mount bind mirroring /etc");
148 }
143149 fs_logger2("clone", src);
144150
145151 free(src);
+1
-1
src/firejail/util.c less more
4040 MountData *m = get_last_mount();
4141
4242 char *msg1;
43 char *msg2;
43 char *msg2 = "Access error";
4444 if (vasprintf(&msg1, fmt, args) != -1 &&
4545 asprintf(&msg2, "Access error: pid %d, last mount name:%s dir:%s type:%s - %s", getuid(), m->fsname, m->dir, m->fstype, msg1) != -1)
4646 syslog(LOG_CRIT, "%s", msg2);