Kunal Mehta ced197d18f firejail: Strengthen by copying from Wikimedia's profile ... This copies all of the non-Wikimedia specific entries from Wikimedia's firejail profile, incluing disallowing access to /sbin and its variants, important system files and various system utilities. Notably it blocks access to /run which typically has UNIX sockets that allow for sandbox escape. The one entry not copied over is disallowing /home because firejail does that already, and it can cause problems if your development setup is inside /home, but FirejailCommand already handles all of that appropriately. Change-Id: I4fd1d3005f18c249b45c9b9a72dff2bef6542b61		2020-08-07 00:04:51 -07:00
..
Hook	Replace "@stable for implementation" with "@stable to implement"	2020-07-13 11:05:49 +02:00
Command.php	shell: Make ->restrict( RESTRICT_NONE ) actually work	2020-07-29 03:17:47 +00:00
CommandFactory.php	shell: Fix autodetection of firejail in findFirejail()	2020-07-07 03:18:34 -07:00
firejail.profile	firejail: Strengthen by copying from Wikimedia's profile	2020-08-07 00:04:51 -07:00
FirejailCommand.php	Shell: Add more types	2019-10-31 01:16:35 +00:00
limit.sh
Result.php	Shell\Result: declare types, enable strict types	2019-10-30 17:58:23 -07:00
Shell.php	Remove terminating line breaks from debug messages	2020-06-03 12:01:16 +10:00