Commit c3c9da80 authored by Lorenzo "Palinuro" Faletra's avatar Lorenzo "Palinuro" Faletra
Browse files

Import Debian changes 0.9.58-1parrot6

firejail (0.9.58-1parrot6) UNRELEASED; urgency=medium

  * Add /etc/alternatives support on most of the profiles.
  * Merge recent fixes into parrot-patches.patch.
parent d931267a
firejail (0.9.58-1parrot6) UNRELEASED; urgency=medium
* Add /etc/alternatives support on most of the profiles.
* Merge recent fixes into parrot-patches.patch.
-- Lorenzo "Palinuro" Faletra <palinuro@parrotsec.org> Sat, 16 Feb 2019 16:55:26 +0100
firejail (0.9.58-1parrot5) testing; urgency=medium
* Fix torbrowser-launcher sandbox proile.
......
Description: Disable libreoffice profile sandbox.
firejail (0.9.58-1parrot2) testing; urgency=medium
.
* Temporarily exclude libreoffice from sandbox (it does not work properly).
Author: Lorenzo "Palinuro" Faletra <palinuro@parrotsec.org>
Last-Update: 2019-02-06
--- firejail-0.9.58.orig/src/firecfg/firecfg.config
+++ firejail-0.9.58/src/firecfg/firecfg.config
@@ -257,20 +257,20 @@ ktorrent
kwrite
leafpad
less
-libreoffice
+#libreoffice
liferea
linphone
lmms
-lobase
-localc
-lodraw
-loffice
-lofromtemplate
-loimpress
+#lobase
+#localc
+#lodraw
+#loffice
+#lofromtemplate
+#loimpress
lollypop
-lomath
-loweb
-lowriter
+#lomath
+#loweb
+#lowriter
luminance-hdr
lximage-qt
lxmusic
@@ -392,7 +392,7 @@ slack
smplayer
smtube
sol
-soffice
+#soffice
soundconverter
spotify
sqlitebrowser
Description: Fix keepassxc profile
firejail (0.9.58-1parrot5) testing; urgency=medium
.
* Fix torbrowser-launcher sandbox proile.
* Fix keepassxc sandbox profile.
Author: Lorenzo "Palinuro" Faletra <palinuro@parrotsec.org>
Last-Update: 2019-02-14
--- firejail-0.9.58.orig/etc/keepassxc.profile
+++ firejail-0.9.58/etc/keepassxc.profile
@@ -41,7 +41,7 @@ shell none
private-bin keepassxc
private-dev
-private-etc fonts,ld.so.cache,machine-id
+private-etc fonts,ld.so.cache,machine-id,alternatives
private-tmp
# 2.2.4 crashes on database open
Description: Fix thunderbird conflicts with firefox
Author: Lorenzo "Palinuro" Faletra <palinuro@parrotsec.org>
--- firejail-0.9.58.orig/etc/thunderbird.profile
+++ firejail-0.9.58/etc/thunderbird.profile
@@ -43,5 +43,5 @@ writable-run-user
# allow browsers
# Redirect
# Uncomment if you use enigmail
-# ignore nodbus
-include firefox.profile
+ignore nodbus
+include firefox-common.profile
Description: Fix torbrowser-launcher profile
firejail (0.9.58-1parrot5) testing; urgency=medium
.
* Fix torbrowser-launcher sandbox proile.
* Fix keepassxc sandbox profile.
Author: Lorenzo "Palinuro" Faletra <palinuro@parrotsec.org>
Last-Update: 2019-02-14
--- firejail-0.9.58.orig/etc/torbrowser-launcher.profile
+++ firejail-0.9.58/etc/torbrowser-launcher.profile
@@ -35,13 +35,13 @@ netfilter
nodbus
nodvd
nogroups
-nonewprivs
+#nonewprivs
noroot
notv
nou2f
novideo
-protocol unix,inet,inet6
-seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
+#protocol unix,inet,inet6
+#seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
shell none
# tracelog may cause issues, see github issue #1930
#tracelog
This diff is collapsed.
disable-internet-tests.patch
apparmor-ptrace.patch
config-hardening.patch
disable-libreoffice.patch
parrot-patches.patch
fix-keepassxc.patch
fix-torbrowser-launcher.patch
fix-thunderbird.patch
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment