# changelog

author: netblue30 <netblue30@yahoo.com> 0.9.18-1
changelog:
  - Support for tracing system, setuid, setgid, setfsuid, setfsgid syscalls
   - Support for tracing setreuid, setregid, setresuid, setresguid syscalls
   - Added profiles for transmission-gtk and transmission-qt
   - bugfixes


author: netblue30 <netblue30@yahoo.com> 0.9.20-1
changelog:
  - utmp, btmp and wtmp enhancements
   -    create empty /var/log/wtmp and /var/log/btmp files in sandbox
   -    generate a new /var/run/utmp file in sandbox
   - CPU affinity, --cpu option
   - Linux control groups support, --cgroup option
   - Opera web browser support
   - VLC support
   - Added "empty" attribute to seccomp command to remove the default
   -    syscall list form seccomp blacklist
   - Added --nogroups option to disable supplementary groups for regular
   -   users. root user always runs without supplementary groups.
   - firemon enhancements
   -   display the command that started the sandbox
   -   added --caps option to display capabilities for all sandboxes
   -   added --cgroup option to display the control groups for all sandboxes
   -   added --cpu option to display CPU affinity for all sandboxes
   -   added --seccomp option to display seccomp setting for all sandboxes
   - New compile time options: --disable-chroot, --disable-bind
   - bugfixes


author: netblue30 <netblue30@yahoo.com> 0.9.22-1
changelog:
  - Replaced --noip option with --ip=none
   - Container stdout logging and log rotation
   - Added process_vm_readv, process_vm_writev and mknod to
       default seccomp blacklist
   - Added CAP_MKNOD to default caps blacklist
   - Blacklist and whitelist custom Linux capabilities filters
   - macvlan device driver support for --net option
   - DNS server support, --dns option
   - Netfilter support
   - Monitor network statistics, --netstats option
   - Added profile for Mozilla Thunderbird/Icedove
   - --overlay support for Linux kernels 3.18+
   - Bugfix: preserve .Xauthority file in private mode (test with ssh -X)
   - Bugfix: check uid/gid for cgroup


author: netblue30 <netblue30@yahoo.com> 0.9.24-1
changelog:
  - whitelist and blacklist seccomp filters
   - doubledash option
   - --shell=none support
   - netfilter file support in profile files
   - dns server support in profile files
   - added --dns.print option
   - added default profiles for Audoacious, Clementine, Rhythmbox and Totem.
   - added --caps.drop=all in default profiles
   - new syscalls in default seccomp filter: sysfs, sysctl, adjtimex, kcmp
   -        clock_adjtime, lookup_dcookie, perf_event_open, fanotify_init
   - Bugfix: using /proc/sys/kernel/pid_max for the max number of pids
   - two build patches from Reiner Herman (tickets 11, 12)
   - man page patch from Reiner Herman (ticket 13)
   - output patch (ticket 15) from sshirokov


author: netblue30 <netblue30@yahoo.com> 0.9.26-1
changelog:
  - private dev directory
   - private.keep option for whitelisting home files in a new private directory
   - user namespaces support, noroot option
   - added Deluge and qBittorent profiles
   - bugfixes


author: netblue30 <netblue30@yahoo.com> 0.9.28-1
changelog:
  - network scanning, --scan option
   - interface MAC address support, --mac option
   - IP address range, --iprange option
   - traffic shaping, --bandwidth option
   - reworked printing of network status at startup
   - man pages rework
   - added firejail-login man page
   - added GNU Icecat, FileZilla, Pidgin, XChat, Empathy, DeaDBeeF default
     profiles
   - added an /etc/firejail/disable-common.inc file to hold common directory
     blacklists
   - blacklist Opera and Chrome/Chromium config directories in profile files
   - support noroot option for profile files
   - enabled noroot in default profile files
   - bugfixes


author: netblue30 <netblue30@yahoo.com> 0.9.30-1
changelog:
  - added a disable-history.inc profile as a result of Firefox PDF.js exploit;
     disable-history.inc included in all default profiles
   - Firefox PDF.js exploit (CVE-2015-4495) fixes
   - added --private-etc option
   - added --env option
   - added --whitelist option
   - support ${HOME} token in include directive in profile files
   - --private.keep is transitioned to --private-home
   - support ~ and blanks in blacklist option
   - support "net none" command in profile files
   - using /etc/firejail/generic.profile by default for user sessions
   - using /etc/firejail/server.profile by default for root sessions
   - added build --enable-fatal-warnings configure option
   - added persistence to --overlay option
   - added --overlay-tmpfs option
   - make install-strip implemented, make install renamed
   - bugfixes


author: netblue30 <netblue30@yahoo.com> 0.9.30-1
changelog:
  - 1h and 12h statistics support
   - user namespaces support
   - QT5 support
   - applist update
   - bugfixes


author: netblue30 <netblue30@yahoo.com> 0.9.40-1
changelog:
  - Grsecurity support
   - updated the default application list
   - sandbox file manager (firemgr) application
   - protocols and cpu cores support
   - sandbox name support
   - X11 dispaly support
   - bugfixes


author: Warren Togami <wtogami@gmail.com> 0.9.40.1-1
changelog:
  - clean up rpm spec to roughly Fedora Packaging Guidelines
  - easy self-contained build from git repo with ./mkrpm.sh as a non-root user


