version 0.9.66rc1 released

README

@@ -109,6 +109,7 @@ Amin Vakil (https://github.com/aminvakil)
 	- whois profile fix
 	- added profile for strawberry
 	- w3m profile fix
+	- disable seccomp in wireshark profile
 Andreas Hunkeler (https://github.com/Karneades)
 	- Add profile for offical Linux Teams application
 Andrey Alekseenko (https://github.com/al42and)
@@ -203,6 +204,7 @@ Bundy01 (https://github.com/Bundy01)
 	- fixup geary
 	- add gradio profile
 	- update virtualbox.profile
+	- Quodlibet profile
 BytesTuner (https://github.com/BytesTuner)
 	- provided keepassxc profile
 caoliver (https://github.com/caoliver)
@@ -435,6 +437,8 @@ hamzadis (https://github.com/hamzadis)
 	- added --overlay-named=name and --overlay-path=path
 Hans-Christoph Steiner (https://github.com/eighthave)
 	- added xournal profile
+Harald Kubota (https://github.com/haraldkubota)
+	- zsh completion
 hawkey116477 (https://github.com/hawkeye116477)
 	- added Waterfox profile
 	- updated Cyberfox profile
@@ -520,6 +524,7 @@ Jose Riha (https://github.com/jose1711)
 	- Add davfs2 secrets file to blacklist
 	- Add profile for udiskie
 	- fix udiskie.profile
+	- improve hints for allowing browser access to Gnome extensions connector
 jrabe (https://github.com/jrabe)
 	- disallow access to kdbx files
 	- Epiphany profile
@@ -555,6 +560,7 @@ Kishore96in (https://github.com/Kishore96in)
 	-  jitsi-meet-desktop profile
 	- konversatin profile fix
 	- added Neochat profile
+	- added whitelist-1793-workaround.inc
 KOLANICH (https://github.com/KOLANICH)
 	- added symlink fixer fix_private-bin.py in contrib section
 	- update fix_private-bin.py
@@ -610,6 +616,8 @@ Mattias Wadman (https://github.com/wader)
 	- seccomp errno filter support
 Matthew Gyurgyik (https://github.com/pyther)
 	- rpm spec and several fixes
+Matthew Cline (https://github.com/matthew-cline)
+	- steam profile and dropbox profile fixes
 matu3ba (https://github.com/matu3ba)
 	- evince hardening, dbus removed
 	- fix dia profile
@@ -649,12 +657,20 @@ Nick Fox (https://github.com/njfox)
 	- fix wire-desktop.profile on arch
 NickMolloy (https://github.com/NickMolloy)
 	- ARP address length fix
+Nico (https://github.com/dr460nf1r3)
+	- added FireDragon profile
+Nicola Davide Mannarelli (https://github.com/nidamanx)
+	- fix "Could not create AF_NETLINK socket"
+	- added nextcloud profiles
+	- Firefox, KeepassXC, Telegram fixes
 Niklas Haas (https://github.com/haasn)
 	- blacklisting for keybase.io's client
 Niklas Goerke (https://github.com/Niklas974)
 	- update QOwnNotes profile
 Nikos Chantziaras (https://github.com/realnc)
 	- fix audio support for Discord
+nolanl (https://github.com/nolanl)
+	- added localtime to signal-desktop's profile
 nyancat18 (https://github.com/nyancat18)
 	- added ardour4, dooble, karbon, krita profiles
 Ondra Nekola (https://github.com/satai)
@@ -702,13 +718,26 @@ Petter Reinholdtsen ([email protected])
 PharmaceuticalCobweb (https://github.com/PharmaceuticalCobweb)
 	- fix quiterss profile
 	- added profile for gnome-ring
+pholodniak (https://github.com/pholodniak)
+	- profstats fixes
 pianoslum (https://github.com/pianoslum)
 	- nodbus breaking evince two-page-view warning
 pirate486743186 (https://github.com/pirate486743186)
 	- KMail profile
 	- mpsyt profile
 	- fix youtube-dl and mpv
 	- fix gnome-mpv profile
+	- fix gunzip profile
+	- reorganizing youtube-viewers
+	- fix pluma profile
+	- whitelist /var/lib/aspell
+	- mcomix fixes
+	- fixing engrampa profile
+	- adding qcomicbook and pipe-viewer in disable-programs
+	- newsboat/newsbeuter profiles
+	- fix atril profile
+	- rtv profile
+	- reorganizing links browsers
 Pixel Fairy (https://github.com/xahare)
 	- added fjclip.py, fjdisplay.py and fjresize.py in contrib section
 PizzaDude (https://github.com/pizzadude)
@@ -745,6 +774,7 @@ Rahul Golam (https://github.com/technoLord)
 RandomVoid (https://github.com/RandomVoid)
 	- fix building C# projects in Godot
 	- fix Lutris profile
+	- fix running games with enabled Feral GameMode in Lutris
 Raphaël Droz (https://github.com/drzraf)
 	- zoom profile fixes
 realaltffour (https://github.com/realaltffour)
@@ -786,6 +816,8 @@ rusty-snake (https://github.com/rusty-snake)
 	- some typo fixes
 	- added profile templates
 	- added sort.py to contrib
+sak96 (https://github.com/sak96)
+	- discord profile fixes
 Salvo 'LtWorf' Tomaselli (https://github.com/ltworf)
 	- fixed ktorrent profile
 sarneaud (https://github.com/sarneaud)
@@ -814,6 +846,8 @@ sinkuu (https://github.com/sinkuu)
 	- fix symlink invocation for programs placing symlinks in $PATH
 Simo Piiroinen (https://github.com/spiiroin)
 	- Jolla/SailfishOS patches
+slowpeek (https://github.com/slowpeek)
+	- refine appimage example in docs
 smitsohu (https://github.com/smitsohu)
 	- read-only kde4 services directory
 	- enhanced mediathekview profile
@@ -939,6 +973,10 @@ Topi Miettinen (https://github.com/topimiettinen)
 	- improve loading of seccomp filter and memory-deny-write-execute feature
 	- private-lib feature
 	- make --nodbus block also system D-Bus socket
+Ted Robertson  (https://github.com/tredondo)
+	- webstorm profile fixes
+	- added bcompare profile
+	- various documentation fixes
 user1024 ([email protected])
 	- electron profile whitelisting
 	- fixed Rocket.Chat profile
@@ -1003,6 +1041,9 @@ Vladimir Schowalter (https://github.com/VladimirSchowalter20)
 	- apparmor profile enhancements
 	- various KDE profile enhancements
 	read-only kde5 services directory
+Vladislav Nepogodin (https://github.com/vnepogodin)
+	- added Librewolf profiles
+	- added Sway profile
 xee5ch (https://github.com/xee5ch)
 	- skypeforlinux profile
 Ypnose (https://github.com/Ypnose)

RELNOTES

@@ -1,6 +1,7 @@
 firejail (0.9.65) baseline; urgency=low
-  * deprecated --audit options, relpaced by jailtest
+  * deprecated --audit options, relpaced by jailcheck utility
   * deprecated follow-symlink-as-user from firejail.config
+  * rename --noautopulse to keep-config-pulse
   * filtering environment variables
   * zsh completion
   * command line: --mkdir, --mkfile
@@ -33,7 +34,7 @@ firejail (0.9.65) baseline; urgency=low
   * neverball-wrapper, neverputt-wrapper, supertuxkart-wrapper, neochat,
   * cargo, LibreCAD, blobby, funnyboat, pipe-viewer, gtk-pipe-viewer
   * links2, xlinks2
- -- netblue30 <[email protected]>  Tue, 9 Feb 2021 09:00:00 -0500
+ -- netblue30 <[email protected]>  Wed, 2 Jun 2021 09:00:00 -0500
 
 firejail (0.9.64.4) baseline; urgency=low
   * disabled overlayfs, pending multiple fixes (CVE-2021-26910)

configure

@@ -1,6 +1,6 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for firejail 0.9.65.
+# Generated by GNU Autoconf 2.69 for firejail 0.9.66rc1.
 #
 # Report bugs to <[email protected]>.
 #
@@ -580,8 +580,8 @@ MAKEFLAGS=
 # Identity of this package.
 PACKAGE_NAME='firejail'
 PACKAGE_TARNAME='firejail'
-PACKAGE_VERSION='0.9.65'
-PACKAGE_STRING='firejail 0.9.65'
+PACKAGE_VERSION='0.9.66rc1'
+PACKAGE_STRING='firejail 0.9.66rc1'
 PACKAGE_BUGREPORT='[email protected]'
 PACKAGE_URL='https://firejail.wordpress.com'
 
@@ -1299,7 +1299,7 @@ if test "$ac_init_help" = "long"; then
   # Omit some internal or obsolete options to make the list less imposing.
   # This message is too long to be a string in the A/UX 3.1 sh.
   cat <<_ACEOF
-\`configure' configures firejail 0.9.65 to adapt to many kinds of systems.
+\`configure' configures firejail 0.9.66rc1 to adapt to many kinds of systems.
 
 Usage: $0 [OPTION]... [VAR=VALUE]...
 
@@ -1361,7 +1361,7 @@ fi
 
 if test -n "$ac_init_help"; then
   case $ac_init_help in
-     short | recursive ) echo "Configuration of firejail 0.9.65:";;
+     short | recursive ) echo "Configuration of firejail 0.9.66rc1:";;
    esac
   cat <<\_ACEOF
 
@@ -1481,7 +1481,7 @@ fi
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
   cat <<\_ACEOF
-firejail configure 0.9.65
+firejail configure 0.9.66rc1
 generated by GNU Autoconf 2.69
 
 Copyright (C) 2012 Free Software Foundation, Inc.
@@ -1783,7 +1783,7 @@ cat >config.log <<_ACEOF
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 
-It was created by firejail $as_me 0.9.65, which was
+It was created by firejail $as_me 0.9.66rc1, which was
 generated by GNU Autoconf 2.69.  Invocation command line was
 
   $ $0 $@
@@ -4910,7 +4910,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by firejail $as_me 0.9.65, which was
+This file was extended by firejail $as_me 0.9.66rc1, which was
 generated by GNU Autoconf 2.69.  Invocation command line was
 
   CONFIG_FILES    = $CONFIG_FILES
@@ -4964,7 +4964,7 @@ _ACEOF
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
 ac_cs_version="\\
-firejail config.status 0.9.65
+firejail config.status 0.9.66rc1
 configured by $0, generated by GNU Autoconf 2.69,
   with options \\"\$ac_cs_config\\"
 
@@ -5559,6 +5559,7 @@ if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
 $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
 fi
 
+
 cat <<EOF
 
 Configuration options:

configure.ac

@@ -12,7 +12,7 @@
 #
 
 AC_PREREQ([2.68])
-AC_INIT([firejail],[0.9.65],[[email protected]],[],[https://firejail.wordpress.com])
+AC_INIT([firejail],[0.9.66rc1],[[email protected]],[],[https://firejail.wordpress.com])
 AC_CONFIG_SRCDIR([src/firejail/main.c])
 
 AC_CONFIG_MACRO_DIR([m4])

src/firejail/checkcfg.c

@@ -294,7 +294,7 @@ int checkcfg(int val) {
 
 void print_compiletime_support(void) {
 	printf("Compile time support:\n");
-	printf("\t- Always force nonewprivs support is %s\n",
+	printf("\t- always force nonewprivs support is %s\n",
 #ifdef HAVE_FORCE_NONEWPRIVS
 		"enabled"
 #else