feature: add support for restricting the creation of Linux namespaces
(--restrict-namespaces, --restrict-namespaces=), implemented as a seccomp
filter for both 64 and 32 bit architectures (#4939 #5259)
feature: add support for custom AppArmor profiles (--apparmor=) (#5274
#5316 #5317 #5475)
feature: add support for ICMP in nettrace
feature: add --dnstrace, --icmptrace, and --snitrace commands
feature: Add basic gtksourceview language-spec (file type detection/syntax
highlighting for profiles) (#5502)
feature: add restrict-namespaces to (almost) all applicable profiles (#5440
#5537)
modif: disabled firetunnel by default in configure.ac (#5190)
modif: disabled chroot by default in /etc/firejail/firejail.config (#5190)
modif: disabled private-lib by default in /etc/firejail/firejail.config
(#5190 #5216)
modif: disabled tracelog by default in /etc/firejail/firejail.config
(#5190)
modif: removed grsecurity support
modif: stop hiding blacklisted files in /etc by default and add a new
etc-hide-blacklisted option to firejail.config that enables the previous
behavior (disabled by default) (#5010 #5230 #5591 #5595)
bugfix: Flood of seccomp audit log entries (#5207)
bugfix: --netlock does not work (Error: no valid sandbox) (#5312)
build: deduplicate configure-time vars into new config files (#5140 #5284)