Commit Graph

71 Commits (shw_dev)

Author SHA1 Message Date
Stephen Watt f616f54b2c Fix TLSGuard handshake timeout issue by breaking total timeout period into one second polling intervals.
7 years ago
Stephen Watt 85d7d60d76 Added new SGFW DBus method RunDebugCmd() for retrieving firewall state debugging information.
7 years ago
Stephen Watt d7df165517 Support for securely logging unredacted messages to sublogmon via new com.subgraph.sublogmon.Logger DBus method.
7 years ago
Stephen Watt 0666e9c3c7 Added firewall testing framework.
7 years ago
Stephen Watt 32983deba4 Merged with latest commits to master.
7 years ago
Stephen Watt 35e7b07e43 Proper locking to fix OzInitPids-related crash conditions.
7 years ago
Stephen Watt 62713d74f0 AddRuleAsync DBus calls now include reference guid for proper application of "once" rules.
7 years ago
Stephen Watt b9c2e03afd Overhaul of GetPendingRequests DBus method to call AddRuleAsync multiple times instead of returning a string array.
7 years ago
Stephen Watt bdca5d330d Disabled TLSGuard handshake rewrites and passed through resumed encrypted sessions.
7 years ago
Stephen Watt 2fb872d8ad Duplicate entries in fw-prompt are now displayed nested by changing GTK ListStore -> TreeStore
7 years ago
Stephen Watt ae1f6f12d0 Added (untested) fix for possibly spurious IPC crash condition.
7 years ago
Stephen Watt 96f6e3bbe5 A bunch of "fixes" to TLSGuard that are pointless because this is a dead end.
7 years ago
Stephen Watt 4c816b2392 Solved done channel notification by creating one for both client and server connections.
7 years ago
Stephen Watt 7279b46310 Fixed TLS extension parsing routines.
7 years ago
Stephen Watt 71ee1964f4 Very messy experimental extensions to TLSGuard to strip out sessions and TLS extensions in the handshake protocol.
7 years ago
Stephen Watt ff8be65566 Added connection timestamps to firewall prompting.
7 years ago
Stephen Watt 0bda150abc Various code cleanups (still buggy/WIP).
7 years ago
Stephen Watt 0d13c7bb9c *WORK IN PROGRESS*: New file descriptor monitor thread removes prompt requests if associated socket closes/dies before user reacts.
7 years ago
Stephen Watt 2eac4c7dc5 *Very experimental*/under-dev release of new fully asynchronous multi-prompter.
7 years ago
Stephen Watt 2f5e10d53d Merge newest branch changes with latest changes to master.
7 years ago
Stephen Watt 2fc7525cc7 Added new RemovePrompt DBus call to complement RequestPrompt (GUID-based prompt removal).
7 years ago
Stephen Watt a8f61a2d4e Re-sync to master.
7 years ago
dma 6d6c3c26ff move sgfw socks config location
7 years ago
dma dafec55bc7 Fixed bug with prompt rule / saved rule mismatch on SOCKS connects
7 years ago
dma 5a755a04e8 Change path of oz socket
7 years ago
dma 7b5a0ed980 Bug fixes, cleanup, improvement
7 years ago
dma d2ff760197 Patch up IPC
7 years ago
dma f3f5414fd4 Support for TLSGuard in prompter
7 years ago
dma ae8f6d96ba Fix rule evaluation of outgoing connections emerging from sandbox proxy ports
7 years ago
dma a89f8118bf Fix rule parsing, still working on this
7 years ago
dma 6cdb400d32 Fix bugs related to parsing rules file and saving rules file
7 years ago
User 14e1f99b03 Loosen match on UDP socket lookup (still WIP)
7 years ago
shw 2e7b7debeb Incorporated TLSGuard and turned it on by default for all outbound SOCKS5 connections.
8 years ago
shw 27d0a4809d Updated SOCKS5 connection lookup code now correctly identifies originating process.
8 years ago
shw acf62b63d1 Changed SOCKS/Tor credential randomization so it only occurs if username and password are empty.
8 years ago
shw de4f6ac206 SOCKS/Tor credential randomization to force new circuits with each outbound connection.
8 years ago
shw 515c4eb3ee Squashed (some) noisy debug output.
8 years ago
shw 0f2b2413ea Added per-process (ephemeral) rule support.
8 years ago
shw af874c7395 Added support for AAAA records to DNS cache for IPv6 addressing.
8 years ago
shw 8546f6c416 Working (but not intensively tested) IPv6 support!
8 years ago
shw 5f5042fed4 Very noisy, experimental support for asynchronous multi-rule firewall prompting.
8 years ago
shw c3635093fa Introduced per-process DNS cache segregation for all A records not returned by local resolver.
8 years ago
shw 51c181a881 Full support for multiple protocol types (UDP, ICMP).
8 years ago
shw ea31a28d3a Added requisite Dbus code so that fw-settings automatically refreshes its rulelist on fw-daemon update.
8 years ago
shw f47e23e706 Support for firewall rule matching by uid/gid and/or user/group name value.
8 years ago
shw fa70c06af2 CIDR subnet/mask matching support for firewall rules.
8 years ago
shw 1cd25ed699 Added simple regex-based hostname matching for firewall rules.
8 years ago
shw 0708f9127c Proper logging of all connections denied by firewall.
8 years ago
shw e895f204a7 Fixed bug so that system-wide firewall settings match all traffic except sandboxed traffic.
8 years ago
shw b567e5ce54 oz-init pid mappings are now properly destroyed as these processes exit.
8 years ago