237 Commits (20c648026a4513c44e3b0e6ca1fd2d846aebb259)

 

All Branches   

Search

Author	SHA1	Message	Date
dma	20c648026a	additional fixes for citadel support + performance	6 years ago
dma	04bd4ec052	starting to add realmsd integration	6 years ago
dma	6a6f3b75e5	Experimental changes for use in citadel	6 years ago
xSmurf	cfaf7b84ff	Integrating fw-prompt into fw-settings ... Updated fw-settings to reflect all recent changes Moved rule notifications to dbus signal Lots of various fixes Local changes to gtk bindings ... And so much more...	7 years ago
xSmurf	61710110d2	Merge branch 'shw_dev' of ssh://github.com/subgraph/fw-daemon into shw-merge	7 years ago
Stephen Watt	f616f54b2c	Fix TLSGuard handshake timeout issue by breaking total timeout period into one second polling intervals.	7 years ago
Stephen Watt	85d7d60d76	Added new SGFW DBus method RunDebugCmd() for retrieving firewall state debugging information. ... Eliminated heavy SGFW CPU usage due to long loop condition. Implemented much more helpful print() method for pendingSocksConnection interface. testfw program updated to show use of new debugging interface. Removed lots of noisy debug print statements (and moved many to new debugging facility).	7 years ago
Stephen Watt	d7df165517	Support for securely logging unredacted messages to sublogmon via new com.subgraph.sublogmon.Logger DBus method.	7 years ago
Stephen Watt	792726545e	Small changes necessary to make fw-prompt a DBus autostart service.	7 years ago
xSmurf	9152ff8153	Merge branch 'shw_dev' of ssh://github.com/subgraph/fw-daemon into shw-merge	7 years ago
Stephen Watt	0666e9c3c7	Added firewall testing framework. ... Fixed simple bug in fw-prompt that accidentally disabled process scope option.	7 years ago
xSmurf	c61a85800f	Merge...	7 years ago
Stephen Watt	32983deba4	Merged with latest commits to master.	7 years ago
xSmurf	b6ff6c4857	Merge back...	7 years ago
Stephen Watt	35e7b07e43	Proper locking to fix OzInitPids-related crash conditions.	7 years ago
Stephen Watt	62713d74f0	AddRuleAsync DBus calls now include reference guid for proper application of "once" rules. ... Deletes of fw-prompt entries at root of tree now fold up the first child entry into the deleted parent entry. Fixed fw-prompt bug resulting in return of improper scope. Application name is no longer editable in fw-prompt. Icon mapping properly supported for symlinked application paths. Removed spurious warnings for valid fw-prompt removal requests. Awful hacked up fix to make icons for non-existent applications properly blank and remove GTK warnings. Removed old/deprecated Oz firewall rules routines.	7 years ago
xSmurf	e5dd1cb538	Merge...	7 years ago
Stephen Watt	b9c2e03afd	Overhaul of GetPendingRequests DBus method to call AddRuleAsync multiple times instead of returning a string array. ... TLSGuard now handles multiple expected client and server message types.	7 years ago
Stephen Watt	bdca5d330d	Disabled TLSGuard handshake rewrites and passed through resumed encrypted sessions.	7 years ago
Stephen Watt	5ba55a2d96	Removed old/deprecated decision code.	7 years ago
Stephen Watt	819edd1962	Consolidated code for creating new entries in fw-prompt.	7 years ago
Stephen Watt	4f685222e1	Added application icons to fw-prompt treeview. ... Code cleanup (removal of lots of hardcoded values)	7 years ago
Stephen Watt	2fb872d8ad	Duplicate entries in fw-prompt are now displayed nested by changing GTK ListStore -> TreeStore ... Fixed bad scope returned with new rules by fw-prompt	7 years ago
Stephen Watt	ae1f6f12d0	Added (untested) fix for possibly spurious IPC crash condition.	7 years ago
Stephen Watt	96f6e3bbe5	A bunch of "fixes" to TLSGuard that are pointless because this is a dead end. ... Fix of possible fw-prompt crash.	7 years ago
Stephen Watt	4c816b2392	Solved done channel notification by creating one for both client and server connections.	7 years ago
Stephen Watt	7279b46310	Fixed TLS extension parsing routines. ... Added lots of constant values to TLSGuard; general code cleanup.	7 years ago
xSmurf	7472b4d828	Merged from shw_dev	7 years ago
Stephen Watt	71ee1964f4	Very messy experimental extensions to TLSGuard to strip out sessions and TLS extensions in the handshake protocol.	7 years ago
Stephen Watt	ff8be65566	Added connection timestamps to firewall prompting. ... Disabled old synchronous RequestPrompt Dbus method in fw-prompt. fw-prompt GUI now (as originally) remains above other windows when there are pending decisions. Fixed improper traversal of pending connections in fw-prompt GUI. Consolidated redundant code blocks in fw-prompt GUI.	7 years ago
Stephen Watt	0bda150abc	Various code cleanups (still buggy/WIP). ... Fixed lock/race condition in fw-prompt; consolidated redundant rule action code. Started fuller TLS implementation in TLSGuard; probably broke a lot of stuff in the process. Removal/reorganization of old/stale/unused code.	7 years ago
Stephen Watt	0d13c7bb9c	*WORK IN PROGRESS*: New file descriptor monitor thread removes prompt requests if associated socket closes/dies before user reacts. ... fw-prompt request entries are now properly tethered to their default rule scope included by SGFW. pendingConnection now operates on prompter instead of raw DBus object. Fixed prompter bug in cycling through pending connections. Fixed inadequacies in SGFW rules parsing/error handling. go fmt.	7 years ago
Stephen Watt	2eac4c7dc5	*Very experimental*/under-dev release of new fully asynchronous multi-prompter. ... New Dbus method "RequestPromptAsync" to handle "return-less" prompter invocations in fw-prompt. Proper GUI locking in fw-prompt eliminates old race/crash conditions. New DBus method "GetPendingRequests" in SGFW allows prompter to retrieve pending connections. Policies now maintain rulesPending list of unapplied asynchronously submitted FW rules from the prompter. Fixed reentrance/crash bug in UID and GID to name lookups.	7 years ago
xSmurf	5f26317c44	Control prompt via full keyboard navigation...	7 years ago
Stephen Watt	2f5e10d53d	Merge newest branch changes with latest changes to master.	7 years ago
Stephen Watt	2fc7525cc7	Added new RemovePrompt DBus call to complement RequestPrompt (GUID-based prompt removal). ... The addition of a rule matching multiple pending connections in fw-prompt now removes all of them. fw-prompter now increments ref# column for identical prompt requests. Fixed/cleaned up/updated TLSGuard code. Added TLSGuard toggle option to fw-prompt GUI (default for SOCKS connections). fw-prompt now displays icon of filtered application. DBus RequestPrompt() now "works" asynchronously. TLSGuard fixed under certain conditions but still very buggy. Fixed some fw-prompt crash conditions with treeview mutex locking. Fixed SOCKS connection panic condition linked to closed channel. Cleanup of unused data structures/values.	7 years ago
Stephen Watt	a8f61a2d4e	Re-sync to master.	7 years ago
xSmurf	2b7bed6fde	Fmting...	7 years ago
xSmurf	fc19ebc2ef	Fixed icons to passed name > sandbox name > path basename	7 years ago
xSmurf	00aa12f140	FMT'ing some more log output...	7 years ago
xSmurf	bfa28d89da	Fmt'ing some log outputs...	7 years ago
dma	7c657b9f53	Fix sandbox rule evaluation from policy file bug after fw-daemon start	7 years ago
xSmurf	972f733b63	fmt..	7 years ago
dma	7d3e31a005	Read more TLS messages during handshake	7 years ago
dma	38fabc3327	Apply rules contextually by policy defined sandbox	7 years ago
dma	c395ad85f8	Fix dumb bug where sgfw accepting DNS packet before passing to DNS processor	7 years ago
xSmurf	ccd3792609	Fixed com.subgraph.fwprompt.EventNotifier.conf policy	7 years ago
xSmurf	fdd5e4a194	Moved com.Subgraph.fwprompt.EventNotifier.conf > com.subgraph.fwprompt.EventNotifier.conf for consistency...	7 years ago
xSmurf	970a4c9cee	Fixed rule mode in getString and save methods...	7 years ago
xSmurf	31eb87c580	gnome-shell disabled unused connection monitor...	7 years ago