Jonas Heinrich
03ee925c05
firejail: Fix double-dash usage on non-POSIX shells
2023-02-19 07:49:26 -05:00
Jonas Heinrich
b6b55b60a8
firejail: 0.9.70 -> 0.9.72
2023-01-17 15:56:01 +01:00
Jonas Heinrich
cddf5092be
firejail: Remove unused patches
2022-06-14 16:31:50 +02:00
Jonas Heinrich
03a6fedb12
firejail: 0.9.68 -> 0.9.70
2022-06-11 12:40:31 +02:00
Stig Palmquist
b31db15de0
firejail: patches for CVE-2022-31214
...
https://seclists.org/oss-sec/2022/q2/188
2022-06-08 16:09:08 +02:00
Jonas Heinrich
e87b171be6
firejail: Fix opengl support for various apps
2022-05-09 15:55:05 +02:00
Jonas Heinrich
5d2dfa253e
firejail: Fix resolve binary paths in user environment
2022-05-07 11:39:02 +02:00
Zane van Iperen
36b1dedddd
firejail: 0.9.66 -> 0.9.68
...
Fixes #153430
2022-02-07 00:27:25 +10:00
Reed Riley
b2445ca613
firejail: add apparmor support
2022-01-19 13:35:19 -05:00
Reed Riley
e0bc22ad7b
firejail: improve local profile customization support
2022-01-19 11:14:28 -05:00
Reed Riley
881972bfa6
firejail: remove deprecated flag, see: 4909fa7efc
2022-01-19 10:56:39 -05:00
Jonas Heinrich
defe183dad
firejail: Remove symlink check patch
2021-09-19 11:55:30 +02:00
R. RyanTM
91466bb62a
firejail: 0.9.64.4 -> 0.9.66
2021-06-30 02:28:53 +00:00
0x4A6F
75351261fc
firejail: 0.9.64.2 -> 0.9.64.4
2021-02-07 23:40:58 +00:00
0x4A6F
2451c4d1d6
firejail: 0.9.64 -> 0.9.64.2
2021-01-28 19:42:59 +00:00
volth
bc0d605cf1
treewide: fix double quoted strings in meta.description
...
Signed-off-by: Ben Siraphob <bensiraphob@gmail.com>
2021-01-24 19:56:59 +07:00
Ben Siraphob
16d91ee628
pkgs/os-specific: stdenv.lib -> lib
2021-01-17 23:26:08 +07:00
Roosembert Palacios
831c700c5d
firejail: fix -overlay and -build functionality on NixOS
...
- The `-overlay` flag runs the specified binary inside an OverlayFS,
since the /nix store may be in a different mount point than the user
home, this patch explicitly bind mounts it so it's available inside
the overlay.
- profile builder: firejail provides facilities to build a new profiles.
To do so, it execute the helper binary `fbuilder`, which in turn will
execute firejail back with different options. This patch makes it use
the binary available in PATH instead of the one produced at compile time.
The compiled firejail binary doesn't have the necessary permissions,
so the firejail NixOS module wraps it in a SUID wrapper available on
PATH at runtime.
Signed-off-by: Roosembert Palacios <roosemberth@posteo.ch>
2020-11-27 23:14:58 +01:00
snicket2100
ffeb2af920
firejail: fixing the 'xdg-dbus-proxy' dependency
...
xdg-dbus-proxy path is hardcoded in the common.h file in the firejail
source code. if this binary is not found, dbus filtering capabilities
of firejail get limited i.e. you can only entirely disable or entirely
enable dbus communication.
2020-11-22 13:35:09 +01:00
snicket2100
cd1c5633af
firejail: 0.9.62 -> 0.9.64
2020-11-08 23:25:59 +01:00
Stig Palmquist
15c53cf0fa
nixos/tests: add test for firejail
2020-08-10 06:54:26 +02:00
Stig Palmquist
e15cab8e9c
firejail: add patches to fix CVE-2020-17367 and CVE-2020-17368
2020-08-09 15:08:29 +02:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs
2020-04-10 17:54:53 +01:00
snicket2100
a63f6a7d47
firejail: local profile handling fixed
...
made it possible to place local profiles in `~/.config/firejail`,
as well as in `/etc/firejail`.
2020-03-27 18:34:52 +01:00
snicket2100
a43a5479a5
firejail: updated the homepage address
2020-01-20 23:07:18 +01:00
snicket2100
d914e9d1db
firejail: 0.9.60 -> 0.9.62
2020-01-18 11:56:07 +01:00
snicket2100
0778f0aee6
firejail: local profile handling fixed
...
The sed expression wasn't really catching anything (as local profiles are
included in the provided set of profiles by `include aaa.local` and not by
`include xx/firejail/aaa.local` as the sed expression used to expect).
As a result, it was not possible to create local profiles in any
accessible location. This fix makes it possible to create them in
`/etc/firejail/` which seems pretty standard.
2020-01-11 20:49:48 +01:00
Will Dietz
aadd2a6bc7
firejail: 0.9.58.2 -> 0.9.60
2019-05-28 19:22:56 -05:00
R. RyanTM
9944d2e91d
firejail: 0.9.58 -> 0.9.58.2
...
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/firejail/versions
2019-03-01 21:47:37 -08:00
R. RyanTM
0e28f3c318
firejail: 0.9.56 -> 0.9.58
...
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/firejail/versions
2019-02-06 01:55:03 -08:00
Ivan Kozik
9314c6a563
firejail: disable parallel building
...
firejail was frequently failing to build on my Hydra machine at -j16, and
the error looked like a typical parallel build problem:
<3>make[1]: Entering directory '/build/firejail-0.9.56/src/fcopy'
<3>gcc -ggdb -O2 -DVERSION='"0.9.56"' -DPREFIX='"/nix/store/0dm1agiwiggn8pmnqkknil7mkh25il0k-firejail-0.9.56"' -DSYSCONFDIR='"/nix/store/0dm1agiwiggn8pmnqkknil7mkh25il0k-firejail-0.9.56/etc/firejail"' -DLIBDIR='"/nix/store/0dm1agiwiggn8pmnqkknil7mkh25il0k-firejail-0.9.56/lib"' -DHAVE_X11 -DHAVE_PRIVATE_HOME -DHAVE_OVERLAYFS -DHAVE_SECCOMP -DHAVE_GLOBALCFG -DHAVE_SECCOMP_H -DHAVE_CHROOT -DHAVE_NETWORK -DHAVE_USERNS -DHAVE_FILE_TRANSFER -DHAVE_WHITELIST -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -c main.c -o main.o
<3>gcc -pie -Wl,-z,relro -Wl,-z,now -lpthread -o fcopy main.o
<3>make[1]: Leaving directory '/build/firejail-0.9.56/src/fcopy'
<3>make -C src/fldd
<3>make[1]: Entering directory '/build/firejail-0.9.56/src/fldd'
<3>gcc -ggdb -O2 -DVERSION='"0.9.56"' -DPREFIX='"/nix/store/0dm1agiwiggn8pmnqkknil7mkh25il0k-firejail-0.9.56"' -DSYSCONFDIR='"/nix/store/0dm1agiwiggn8pmnqkknil7mkh25il0k-firejail-0.9.56/etc/firejail"' -DLIBDIR='"/nix/store/0dm1agiwiggn8pmnqkknil7mkh25il0k-firejail-0.9.56/lib"' -DHAVE_X11 -DHAVE_PRIVATE_HOME -DHAVE_OVERLAYFS -DHAVE_SECCOMP -DHAVE_GLOBALCFG -DHAVE_SECCOMP_H -DHAVE_CHROOT -DHAVE_NETWORK -DHAVE_USERNS -DHAVE_FILE_TRANSFER -DHAVE_WHITELIST -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -c main.c -o main.o
<3>gcc -pie -Wl,-z,relro -Wl,-z,now -lpthread -o fldd main.o ../lib/ldd_utils.o
<3>make[1]: Leaving directory '/build/firejail-0.9.56/src/fldd'
<3>make -C src/libpostexecseccomp
<3>make[1]: Entering directory '/build/firejail-0.9.56/src/libpostexecseccomp'
<3>gcc -ggdb -O2 -DVERSION='"0.9.56"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIC -Wformat -Wformat-security -c libpostexecseccomp.c -o libpostexecseccomp.o
<3>gcc -pie -Wl,-z,relro -Wl,-z,now -shared -fPIC -z relro -o libpostexecseccomp.so libpostexecseccomp.o -ldl
<3>make[1]: Leaving directory '/build/firejail-0.9.56/src/libpostexecseccomp'
<3>src/fseccomp/fseccomp default seccomp
<3>src/fsec-optimize/fsec-optimize seccomp
<3>/nix/store/6abyjgibafsbhlc7v7lab50mb3dj81jg-bash-4.4-p23/bin/bash: src/fsec-optimize/fsec-optimize: No such file or directory
<3>make: *** [Makefile:43: filters] Error 127
<3>builder for '/nix/store/30srqmpqrjyr11nhx4jbpr84m9pnmyv5-firejail-0.9.56.drv' failed with exit code 2
2018-12-17 06:41:44 +00:00
c0bw3b
0ea604ac1d
Treewide: use https for SourceForge
2018-11-24 19:58:03 +01:00
Peter Hoeg
04bbb2ab6b
firejail: override files should be in /etc/firejail
2018-10-03 16:08:39 +08:00
R. RyanTM
dd33a9dc0b
firejail: 0.9.54 -> 0.9.56
...
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/firejail/versions
2018-09-20 14:31:57 -07:00
R. RyanTM
b1890946af
firejail: 0.9.52 -> 0.9.54
...
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/firejail/versions .
These checks were done:
- built on NixOS
- Warning: no invocation of /nix/store/5zjr9idl48c08apan8gh45wh971i49i9-firejail-0.9.54/bin/firejail had a zero exit code or showed the expected version
- /nix/store/5zjr9idl48c08apan8gh45wh971i49i9-firejail-0.9.54/bin/firemon passed the binary check.
- /nix/store/5zjr9idl48c08apan8gh45wh971i49i9-firejail-0.9.54/bin/firecfg passed the binary check.
- 2 of 3 passed binary check by having a zero exit code.
- 2 of 3 passed binary check by having the new version present in output.
- found 0.9.54 with grep in /nix/store/5zjr9idl48c08apan8gh45wh971i49i9-firejail-0.9.54
- directory tree listing: https://gist.github.com/3fb76054296d9e45fea3c47ae6a9f03f
- du listing: https://gist.github.com/a732bad0be0159f527ca4e8c532400ed
2018-05-17 07:32:04 -07:00
adisbladis
c2f57b0099
firejail: 0.9.50 -> 0.9.52
2018-01-18 02:24:24 +08:00
adisbladis
0af15f6f45
firejail: 0.9.48 -> 0.9.50
2017-11-06 17:21:03 +08:00
mimadrid
09e0cc7cc7
Update homepage attributes: http -> https
...
Homepage link "http://.../ " is a permanent redirect to "https://.../ " and should be updated
https://repology.org/repository/nix_stable/problems
2017-08-03 11:56:15 +02:00
Silvan Mosberger
f5fa5fa4d6
pkgs: refactor needless quoting of homepage meta attribute ( #27809 )
...
* pkgs: refactor needless quoting of homepage meta attribute
A lot of packages are needlessly quoting the homepage meta attribute
(about 1400, 22%), this commit refactors all of those instances.
* pkgs: Fixing some links that were wrongfully unquoted in the previous
commit
* Fixed some instances
2017-08-01 22:03:30 +02:00
Johannes Frankenau
fcf7b6761b
firejail: 0.9.44.10 -> 0.9.48
2017-07-25 14:30:36 +02:00
Will Dietz
707145a955
firejail: don't try to set setuid bit
2017-06-28 14:31:47 -05:00
Michael Raskin
c4bdec77a0
firejail: 0.9.44.8 -> 0.9.44.10
2017-04-10 00:14:34 +02:00
Michael Raskin
a9e55a2a8e
firejail: 0.9.44.4 -> 0.9.44.8
2017-02-01 19:28:45 +01:00
Michael Raskin
9653be493a
firejail: 0.9.44.2 -> 0.9.44.4
2017-01-08 13:58:24 +01:00
Michael Raskin
11bfe01846
firejail: 0.9.42 -> 0.9.44.2
2017-01-02 20:18:47 +01:00
Michael Raskin
11bc6ea4ae
firejail: 0.9.42-rc1 -> 0.9.42
2016-09-12 13:01:34 +02:00
Michael Raskin
b893d84d53
firejail: 0.9.40-rc1 -> 0.9.42-rc1
2016-08-11 17:57:35 +02:00
Michael Raskin
80db55610c
firejail: 0.9.38 -> 0.9.40
2016-04-13 14:47:04 +02:00
Michael Raskin
4f45082915
firejail: 0.9.36 -> 0.9.38
2016-02-14 21:17:07 +01:00
Michael Raskin
0f9a361064
firejail: 0.9.26 -> 0.9.36
2016-01-01 12:30:17 +03:00