Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
Name: firejail-bash-completion | Distribution: openSUSE Tumbleweed |
Version: 0.9.74 | Vendor: openSUSE |
Release: 1.1 | Build date: Sat Jul 19 13:11:41 2025 |
Group: System/Shells | Build host: reproducible |
Size: 24057 | Source RPM: firejail-0.9.74-1.1.src.rpm |
Packager: https://bugs.opensuse.org | |
Url: https://firejail.wordpress.com | |
Summary: Firejail Bash completion |
Optional dependency offering bash completion for firejail
GPL-2.0-only
* Sat Jul 19 2025 Sebastian Wagner <sebix@sebix.at> - update to version 0.9.74: * security: fix sscanf rv checks (CodeQL) (#6184) * feature: private-etc rework: improve handling of /etc/resolv.conf and add * private-etc groups (#6400 #5518 #5608 #5609 #5629 #5638 #5641 #5642 #5643 * #5650 #5681 #5737 #5844 #5989 #6016 #6104 #5655 #6435 #6514 #6515) * feature: Add "keep-shell-rc" command and option (#1127 #5634) * feature: Print the argument when failing with "too long arguments" (#5677) * feature: a random hostname is assigned to each sandbox unless * overwritten using --hostname command * feature: add IPv6 support for --net.print option * feature: QUIC (HTTP/3) support in --nettrace * feature: add seccomp filters for --restrict-namespaces * feature: stats support for --nettrace * feature: add doas support in firecfg and jailcheck (#5899 #5900) * feature: firecfg: add firecfg.d & add ignore command (#2097 #5245 #5876 * #6153 #6268) * feature: expand simple macros in more commands (--chroot= --netfilter= * --netfilter6= --trace=) (#6032 #6109) * feature: add Landlock support (#5269 #6078 #6115 #6125 #6187 #6195 #6200 * #6228 #6260 #6302 #6305) * feature: add support for comm, coredump, and prctl procevents in firemon * (#6414 #6415) * feature: add notpm command & keep tpm devices in private-dev (#6379 #6390) * feature: fshaper.sh: support tc on NixOS (#6426 #6431) * feature: add aarch64 syscalls (#5821 #6574) * feature: add --disable-sandbox-check configure flag (#6592) * feature: block /dev/ntsync & add keep-dev-ntsync command (#6655 #6660) * modif: Stop forwarding own double-dash to the shell (#5599 #5600) * modif: Prevent sandbox name (--name=) and host name (--hostname=) * from containing only digits (#5578 #5741) * modif: Escape control characters of the command line (#5613) * modif: Allow mostly only ASCII letters and digits for sandbox name * (--name=) and host name (--hostname=) (#5708 #5856) * modif: make private-lib a configure-time option, disabled by default (see * --enable-private-lib) (#5727 #5732) * modif: Improve --version/--help & print version on startup (#5829 #6172) * modif: improve errExit error messages (#5871) * modif: drop deprecated 'shell' option references (#5894) * modif: keep pipewire group unless nosound is used (#5992 #5993) * modif: fcopy: use lstat when copying directory (#5378 #5957) * modif: private-dev: keep /dev/kfd unless no3d is used (#6380) * modif: keep /sys/module/nvidia* if prop driver and no no3d (#6372 #6387) * modif: clarify error messages in profile.c (#6605) * modif: keep plugdev group unless nou2f is used (#6664) * removal: firemon: remove --interface option (it duplicates the firejail * --net.print= option) (0e48f99) * removal: remove support for LTS and firetunnel (db09546) * bugfix: fix --hostname and --hosts-file commands * bugfix: fix examples in firejail-local AppArmor profile (#5717) * bugfix: arp.c: ensure positive timeout on select(2) (#5806) * bugfix: Wrong syscall names for s390_pci_mmio_read and s390_pci_mmio_write * (#5965 #5976) * bugfix: firejail --ls reports wrong file sizes for large files (#5982 * #6086) * bugfix: fix startup race condition for /run/firejail directory (#6307) * bugfix: fix various resource leaks (#6367) * bugfix: profstats: fix restrict-namespaces max count (#6369) * bugfix: remove --noautopulse from --help and zsh comp (#6401) * bugfix: parse --debug before using it (#6579) * bugfix: fix possible memory leak in fs_home.c (#6598) * bugfix: do not interact with dbus directory if dbus proxy is disabled * (#6591) * bugfix: firecfg: check full .desktop filename in check_profile() (#6674) * build: auto-generate syntax files (#5627) * build: mark all phony targets as such (#5637) * build: mkdeb.sh: pass all arguments to ./configure (#5654) * build: deb: enable apparmor by default & remove deb-apparmor (#5668) * build: Fix whitespace and add .editorconfig (#5674) * build: remove for loop initial declarations to fix building with old * compilers (#5778) * build: enable compiler warnings by default (#5842) * build: remove -mretpoline and NO_EXTRA_CFLAGS (#5859) * build: disable all built-in implicit make rules (#5864) * build: organize and standardize make vars and targets (#5866) * build: fix seccomp filters and man pages always being rebuilt when running * make (#5156 #5898) * build: fix hardcoded make & remove unnecessary distclean targets (#5911) * build: dist and asc improvements (#5916) * build: fix some shellcheck issues & use config.sh in more scripts (#5927) * build: firecfg.config sorting improvements (#5942) * build: codespell improvements (#5955) * build: add missing makefile dep & syntax improvements (#5956) * build: sort.py: use case-sensitive sorting (#6070) * build: mkrpm.sh: append instead of override configure args (#6126) * build: use CPPFLAGS instead of INCLUDE in compile targets (#6159) * build: use full paths on compile/link targets (#6158) * build: automatically generate header dependencies (#6164) * build: improve main clean target (#6186) * build: mkrpm.sh improvements (#6196) * build: move errExit macro into inline function (#6217) * build: allow overriding certain tools & sync targets with CI (#6222) * build: reduce hardcoding and inconsistencies & add installcheck target * (#6230 #6620) * build: sort.py: filter empty and duplicate items (#6261) * build: fix "warning: "_FORTIFY_SOURCE" redefined" (#6282 #6283) * build: sort.py: add -h/-i/-n/-- options (#6290 #6339 #6562) * build: add strip target and simplify install targets (#6342) * build: remove clean dependency from cppcheck targets (#6343) * build: allow overriding common tools (#6354) * build: standardize install commands (#6366) * build: improve reliability/portability of date command usage (#6403 #6404) * build: sort.py: strip whitespace in profiles (#6556) * build: sort.py: fix whitespace in entire profile (#6593) * build: sort.py: quote diff lines (#6594) * build: remove cppcheck-old target/job (#6676) * ci: always update the package db before installing packages (#5742) * ci: fix codeql unable to download its own bundle (#5783) * ci: split configure/build/install commands on gitlab (#5784) * ci: fix swapped name/email arguments in debian_ci (#5795) * ci: formatting and misc improvements (#5802) * ci: run for every branch instead of just master (#5815) * ci: upgrade debian:stretch to debian:buster (#5818) * ci: standardize apt-get update/install & misc improvements (#5857) * ci: Update step-security/harden-runner and update allowed endpoints (#5953) * ci: whitelist paths, reorganize workflows & speed-up tests (#5960 #6627) * ci: fix dependabot duplicated workflow runs (#5984) * ci: allow running workflows manually (#6026) * ci: add timeout limits (#6178) * ci: make dependabot updates monthly and bump PR limit (#6338) * contrib/syntax: remove 'text/plain' from firejail-profile.lang.in (#6057 * #6059) * contrib/vim: match profile files more broadly (#5850) * contrib/vim: add ftplugin file (based on cfg.vim) (#6680) * test: split individual test groups in github workflows * test: add chroot, appimage and network tests in github workflows * docs: remove apparmor options in --help when building without apparmor * support (#5589) * docs: fix typos (#5693) * docs: markdown formatting and misc improvements (#5757) * docs: add uninstall instructions to README.md (#5812) * docs: add precedence info to manpage & fix noblacklist example (#6358 * #6359) * docs: bug_report.md: use absolute path in 'steps to reproduce' (#6382) * docs: man: format and sort some private- items (#6398) * docs: man: improve blacklist/whitelist examples with spaces (#6425) * docs: add build_issue.md issue template (#6423) * docs: man: sort commands (firejail.1) (#6451) * docs: man: fix bold in command TPs (#6472) * docs: man: fix wrong escapes (#6474) * docs: github: streamline environment in issue templates (#6471 #6607) * docs: fix typos of --enable-selinux configure option (#6526) * docs: clarify intro and build section in README (#6524) * docs: clarify that other tools may not be in PPA (#6407) * docs: use GitHub issues as the bug reporting address (#6525) * docs: update distribution table & add note in SECURITY.md (#6624) * docs: clarify unmaintained status of overlayfs in configure.ac (#6632) * docs: improve whitelist and blacklist descriptions in man pages (#6622) * docs: note that --build may generate a non-functional profile (#6653) * legal: selinux.c: Split Copyright notice & use same license as upstream * (#5667) * profiles: qutebrowser: fix links not opening in the existing instance * (#5601 #5618) * profiles: clarify userns comments (#5686) * profiles: bulk rename electron to electron-common (#5700) * profiles: streamline seccomp socket comment (#5735) * profiles: drop hostname option from all profiles (#5702) * profiles: move read-only config entries to disable-common.inc (#5763) * profiles: standardize on just "GTK" on comments (#5794) * profiles: bleachbit: allow erasing Trash contents (#5337 #5902) * profiles: improvements to profiles using private (#5946) * profiles: standardize commented code and eol comments (#5987) * profiles: disable-common: add more suid programs (#6049 #6051 #6052) * profiles: replace private-opt with whitelist & document private-opt issues * (#6021) * profiles: drop paths already in wusc (#6218) * profiles: deny access to ~/.config/autostart (#6257) * profiles: replace x11 socket blacklist with disable-X11.inc (#6286) * profiles: sort blacklist sections (#6289) * profiles: rename disable-X11.inc to disable-x11.inc (#6294) * profiles: add allow-nodejs.inc to profile.template (#6298) * profiles: add allow-php.inc to profile.template (#6299) * profiles: clarify and add opengl-game to profile.template (#6300) * profiles: allow-ssh: allow /etc/ssh/ssh_revoked_hosts (#6308 #6309) * profiles: libreoffice: support signing documents with GPG (#6352 #6353) * profiles: blacklist i3 IPC socket & dir except for i3 itself (#6361) * profiles: librewolf: add new dbus name (io.gitlab.firefox) (#6413 #6473) * profiles: nextcloud: fix access to ~/Nextcloud (#5877 #6478) * profiles: ssh: add ${RUNUSER}/gvfsd-sftp (#5816 #6479) * profiles: firecfg: disable text editors (#6002 #6477) * profiles: browsers: centralize/sync/improve comments (#6486) * profiles: keepassxc: add new socket location (#5447 #6391) * profiles: signal-desktop: allow org.freedesktop.secrets (#6498) * profiles: firefox-common: allow org.freedesktop.portal.Documents (#6444 * #6499) * profiles: keepassxc: allow access to ssh-agent socket (#3314 #6531) * profiles: firecfg.config: disable dnsmasq (#6533) * profiles: game-launchers: disable nou2f (#6534) * profiles: anki: fix opening, allow media & add to firecfg (#6544 #6545) * profiles: wget: allow ~/.local/share/wget (#6542) * profiles: wget: unify wget2 into wget profile (#6551) * profiles: tesseract: disable private-tmp to fix ocrmypdf (#6550 #6552) * profiles: ensure allow-lua where mpv is allowed (#6555) * profiles: video-players: add missing /usr/share paths (#6557) * profiles: clamav: add /etc/clamav (#6565) * profiles: lutris: add comment for gamescope workaround (#6192) * profiles: disable-common: add bubblejail paths (#6571) * profiles: fix misc in kmail/transmission-qt & add kontact.profile (#5905) * profiles: misc changes and self-ref fixes in ghostwriter/peek (#5648) * profiles: firecfg: fix sha384sum & add b2sum/cksum (#6578) * profiles: refactor com.github.johnfactotum.Foliate into foliate.profile * (#6582) * profiles: anki: fix dark mode detection & misc changes (#6581) * profiles: tor: add memory-deny-write-execute (#6641) * profiles: torbrowser-launcher: move path from dc to dp (#6640) * profiles: ytmdesktop: add redirect & whitelist /opt/ytmdesktop (#6662 * #6666) * profiles: seahorse: add redirect org.gnome.seahorse.Application (#6658 * #6673) * profiles: godot: ignore noexec in home to fix addons (#6686) * new profiles: qpdf and redirects (fix-qdf, qpdf, zlib-flate) (#5675) * new profiles: parsecd (#5646 #5682) * new profiles: lobster (#5706 #5847 #5885 #6155) * new profiles: ani-cli (#5707 #5733 #5892 #5954) * new profiles: discord redirects (DiscordPTB, discord-ptb) (#5729) * new profiles: jami and postman (#5691) * new profiles: mov-cli (#5710) * new profiles: standard-notes (#5761) * new profiles: url-eater (#5780) * new profiles: fbreader redirect (FBReader) (d88c8d4) * new profiles: rssguard (#5881) * new profiles: mullvad-browser (#5887) * new profiles: sniffnet (#5920) * new profiles: daisy (#5935) * new profiles: reader (#5934) * new profiles: journal-viewer (#5943) * new profiles: clac (#5947) * new profiles: blender redirect (blender-3.6) (#6013) * new profiles: fluffychat (#6007) * new profiles: lettura (#6027) * new profiles: brz and bzr (Breezy) (#6028) * new profiles: floorp (#6030 #6683) * new profiles: tidal-hifi (#6008 #6009) * new profiles: termshark (#6039) * new profiles: tiny-rdm (#6083) * new profiles: rawtherapee (#6180) * new profiles: electron-cash (#6181) * new profiles: gnome-boxes (#6226) * new profiles: virt-manager (#6227) * new profiles: ledger-live-desktop (#6219) * new profiles: lz4 and redirects (#6241) * new profiles: qt5ct (#6249) * new profiles: qt6ct (#6250) * new profiles: green-recoder (#6237) * new profiles: bpftop (#6231) * new profiles: erd (#6236) * new profiles: lyriek (#6245) * new profiles: statusof (#6253) * new profiles: cloneit (#6232) * new profiles: deadlink (#6233) * new profiles: dexios (#6234) * new profiles: koreader (#6243) * new profiles: editorconfiger (#6235) * new profiles: localsend_app (#6244) * new profiles: rymdport (#6251) * new profiles: textroom (#6254) * new profiles: tvnamer (#6256) * new profiles: mimetype (#6247) * new profiles: session-desktop (#6259) * new profiles: metadata-cleaner (#6246) * new profiles: tqemu (#6255) * new profiles: gh (GitHub CLI) (#6293) * new profiles: axel (#6315) * new profiles: several kids programs (alienblaster geki2 geki3 lbreakouthd * tuxtype typespeed) (4c5f558) * new profiles: loupe (#6327 #6333) * new profiles: d-spy (#6328) * new profiles: nhex (#6341) * new profiles: armcord (#6365) * new profiles: dtui (#6422) * new profiles: singularity (Endgame: Singularity) (#6463) * new profiles: prismlauncher (#6558) * new profiles: irssi (#6549) * new profiles: syncthing (#6536) * new profiles: obsidian (#6314) * new profiles: b3sum (blake3) (#6577) * new profiles: aria2p/aria2rpc (#6583 #6609) * new profiles: buku (#6584) * new profiles: monero-wallet-cli (#6586) * new profiles: tremc (#6590) * new profiles: device-flasher.linux (CalyxOS) (#6616) * new profiles: hledger/hledger-ui (#6585) * new profiles: ncmpcpp (#6587) * new profiles: pyradio (#6589) * new profiles: vesktop (#6654) * new profiles: nsxiv (#6588) * new profiles: remmina-file-wrapper (#6669) * new profiles: ouch (#6678) * new profiles: xarchiver (#6679) * Thu Jan 09 2025 Christian Boltz <suse-beta@cboltz.de> - Load/reload AppArmor profiles when installing the package (boo#1235142#c1) * Sun Feb 04 2024 Arjen de Korte <suse+build@de-korte.org> - Use sysuser-tools to generate firejail group * Sun Apr 09 2023 Sebastian Wagner <sebix@sebix.at> - update to version 0.9.72: * modif: move hardcoded apps recognized by default in uiapps file * modif: remove sandbox edit dialog and replace it with uiapps file * feature: added uiapps file for default and user apps configuration * feature: added a system network monitor in sandbox stats * feature: added apparmor support in firejail-ui * feature: added bluetooth support in firejail-ui * feature: print final sandbox configuration in firejail-ui * bugfixes * Tue Jun 14 2022 Sebastian Wagner <sebix+novell.com@sebix.at> - remove patches fix-internet-access.patch and fix-CVE-2022-31214.patch as they are integrated upstream - update to version 0.9.70: - security: CVE-2022-31214 - root escalation in --join logic - Reported by Matthias Gerstner, working exploit code was provided to our - development team. In the same time frame, the problem was independently - reported by Birk Blechschmidt. Full working exploit code was also provided. - feature: enable shell tab completion with --tab (#4936) - feature: disable user profiles at compile time (#4990) - feature: Allow resolution of .local names with avahi-daemon in the apparmor - profile (#5088) - feature: always log seccomp errors (#5110) - feature: firecfg --guide, guided user configuration (#5111) - feature: --oom, kernel OutOfMemory-killer (#5122) - modif: --ids feature needs to be enabled at compile time (#5155) - modif: --nettrace only available to root user - rework: whitelist restructuring (#4985) - rework: firemon, speed up and lots of fixes - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910) - bugfix: nogroups + wrc prints confusing messages (#4930 #4933) - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954) - bugfix: fix printing in evince (#5011) - bugfix: gcov: fix gcov functions always declared as dummy (#5028) - bugfix: Stop warning on safe supplementary group clean (#5114) - build: remove ultimately unused INSTALL and RANLIB check macros (#5133) - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154) - ci: replace centos (EOL) with almalinux (#4912) - ci: fix --version not printing compile-time features (#5147) - ci: print version after install & fix apparmor support on build_apparmor - (#5148) - docs: Refer to firejail.config in configuration files (#4916) - docs: firejail.config: add warning about allow-tray (#4946) - docs: mention that the protocol command accumulates (#5043) - docs: mention inconsistent homedir bug involving --private=dir (#5052) - docs: mention capabilities(7) on --caps (#5078) - new profiles: onionshare, onionshare-cli, opera-developer, songrec - new profiles: node-gyp, npx, semver, ping-hardened - removed profiles: nvm * Wed Jun 08 2022 Sebastian Wagner <sebix+novell.com@sebix.at> - fix bsc#1199148 CVE-2022-31214 by adding patch fix-CVE-2022-31214.patch using commits from upstream. * Mon Feb 28 2022 Sebastian Wagner <sebix+novell.com@sebix.at> - add fix-internet-access.patch to fix boo#1196542 * Sun Feb 06 2022 Sebastian Wagner <sebix+novell.com@sebix.at> - update to firejail 0.9.68: - security: on Ubuntu, the PPA is now recommended over the distro package - (see README.md) (#4748) - security: bugfix: private-cwd leaks access to the entire filesystem - (#4780); reported by Hugo Osvaldo Barrera - feature: remove (some) environment variables with auth-tokens (#4157) - feature: ALLOW_TRAY condition (#4510 #4599) - feature: add basic Firejail support to AppArmor base abstraction (#3226 - #4628) - feature: intrusion detection system (--ids-init, --ids-check) - feature: deterministic shutdown command (--deterministic-exit-code, - --deterministic-shutdown) (#928 #3042 #4635) - feature: noprinters command (#4607 #4827) - feature: network monitor (--nettrace) - feature: network locker (--netlock) (#4848) - feature: whitelist-ro profile command (#4740) - feature: disable pipewire with --nosound (#4855) - feature: Unset TMP if it doesn't exist inside of sandbox (#4151) - feature: Allow apostrophe in whitelist and blacklist (#4614) - feature: AppImage support in --build command (#4878) - modifs: exit code: distinguish fatal signals by adding 128 (#4533) - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669) - modifs: close file descriptors greater than 2 (--keep-fd) (#4845) - modifs: nogroups now stopped causing certain system groups to be dropped, - which are now controlled by the relevant "no" options instead (such as - nosound -> drop audio group), which fixes device access issues on systems - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851) - removal: --disable-whitelist at compile time - removal: whitelist=yes/no in /etc/firejail/firejail.config - bugfix: Fix sndio support (#4362 #4365) - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387) - bugfix: --build clears the environment (#4460 #4467) - bugfix: firejail hangs with net parameter (#3958 #4476) - bugfix: Firejail does not work with a custom hosts file (#2758 #4560) - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586) - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606) - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626) - bugfix: Firejail rejects empty arguments (#4395) - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235) - bugfix: Seccomp list output goes to stdout instead of stderr (#4328) - bugfix: private-etc does not work with symlinks (#4887) - bugfix: Hardware key not detected on keepassxc (#4883) - build: allow building with address sanitizer (#4594) - build: Stop linking pthread (#4695) - build: Configure cleanup and improvements (#4712) - ci: add profile checks for sorting disable-programs.inc and - firecfg.config and for the required arguments in private-etc (#2739 #4643) - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774) - docs: Add new command checklist to CONTRIBUTING.md (#4413) - docs: Rework bug report issue template and add both a question and a - feature request template (#4479 #4515 #4561) - docs: fix contradictory descriptions of machine-id ("preserves" vs - "spoofs") (#4689) - docs: Document that private-bin and private-etc always accumulate (#4078) - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462) - new includes: disable-proc.inc (#4521) - removed includes: disable-passwordmgr.inc (#4454 #4461) - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego - new profiles: imv, retroarch, torbrowser, CachyBrowser, - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd, - new profiles: Seafile, neovim, com.github.tchx84.Flatseal * Sun Jul 18 2021 Andreas Stieger <andreas.stieger@gmx.de> - firejail 0.9.66: * deprecated --audit options, relpaced by jailcheck utility * deprecated follow-symlink-as-user from firejail.config * new firejail.config settings: private-bin, private-etc * new firejail.config settings: private-opt, private-srv * new firejail.config settings: whitelist-disable-topdir * new firejail.config settings: seccomp-filter-add * removed kcmp syscall from seccomp default filter * rename --noautopulse to keep-config-pulse * filtering environment variables * zsh completion * command line: --mkdir, --mkfile * --protocol now accumulates * jailtest utility for testing running sandboxes * faccessat2 syscall support * --private-dev keeps /dev/input * added --noinput to disable /dev/input * add support for subdirs in --private-etc * subdirs support in private-etc * input devices support in private-dev, --no-input * support trailing comments on profile lines * many new profiles - split shell completion into standard subpackages * Sun Feb 07 2021 Илья Индиго <ilya@ilya.pp.ua> - Update to 0.9.64.4: * disabled overlayfs, pending multiple fixes * fixed launch firefox for open url in telegram-desktop.profile
/usr/share/bash-completion /usr/share/bash-completion/completions /usr/share/bash-completion/completions/firecfg /usr/share/bash-completion/completions/firejail /usr/share/bash-completion/completions/firemon /usr/share/licenses/firejail-bash-completion /usr/share/licenses/firejail-bash-completion/COPYING
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Aug 9 10:38:57 2025