dma
2869f15ba1
Remove hack + debug output because of fix in af1a925b11
7 years ago
dma
af1a925b11
Fix bug where sometimes not all of /proc/net/tcp is read
7 years ago
xSmurf
119344dbfc
Settings: adding sandbox and allow tls to rule edit...
7 years ago
dma
ef9a0a22c2
Make log more sublogmon friendly
7 years ago
dma
ed8c254404
Add TLSGuard to SOCKS5 filter clients not coming from oz-daemon
7 years ago
dma
e7a803f84f
Temporary workaround
7 years ago
dma
9ac3c3fa92
Temporary workaround to drop connections from the sandbox manager that we can't further identify.
7 years ago
xSmurf
755e0088c5
typo and fmt...
7 years ago
xSmurf
6e6e265fae
Fmt..
7 years ago
dma
68e6d57c9b
Remove bad deps, fix exec erroneous path truncation for processes outside of oz
7 years ago
dma
e2ed0b68e7
Increase stylesheet width
7 years ago
dma
5dd4dea30e
Remove duplicate systemd unit file
7 years ago
dma
ab7d9464e0
typo
7 years ago
dma
a8321095be
fixing broken deps..
7 years ago
dma
52fe2b5d2d
trying to fix broken deps in vendor/
7 years ago
dma
70c21b0636
vendoring
7 years ago
dma
4babfbbd14
Merge remote-tracking branch 'origin/shw_dev'
7 years ago
dma
e1f48ced94
move
7 years ago
dma
6d6c3c26ff
move sgfw socks config location
7 years ago
dma
ee82803633
move socks config
7 years ago
dma
17e1acc69d
socks config
7 years ago
dma
dafec55bc7
Fixed bug with prompt rule / saved rule mismatch on SOCKS connects
7 years ago
dma
58b7a4f6a9
Update systemd unit file to install /var/run/fw-daemon/ on start
7 years ago
dma
5a755a04e8
Change path of oz socket
7 years ago
dma
7b5a0ed980
Bug fixes, cleanup, improvement
7 years ago
dma
d2ff760197
Patch up IPC
7 years ago
dma
a65c268dbf
Change default for non-sandboxed connections.
7 years ago
dma
f3f5414fd4
Support for TLSGuard in prompter
7 years ago
dma
9ff74569f3
Add Sandbox to procsnitch Info struct
7 years ago
dma
ae8f6d96ba
Fix rule evaluation of outgoing connections emerging from sandbox proxy ports
7 years ago
dma
d0e5a97a53
Fixing process identification for UDP packets (still WIP)
7 years ago
dma
a89f8118bf
Fix rule parsing, still working on this
7 years ago
dma
e8f5001483
Updated procsnitch
7 years ago
dma
6cdb400d32
Fix bugs related to parsing rules file and saving rules file
7 years ago
User
14e1f99b03
Loosen match on UDP socket lookup (still WIP)
7 years ago
shw
2e7b7debeb
Incorporated TLSGuard and turned it on by default for all outbound SOCKS5 connections.
...
Fixed display of nil IPs (when only hostname is passed via SOCKS5 connect).
8 years ago
shw
f945481c2e
Should solve a (newly introduced) intermittent crash issue with fw-settings.
8 years ago
shw
27d0a4809d
Updated SOCKS5 connection lookup code now correctly identifies originating process.
...
Includes code to read internal proxy state information from (updated) oz-daemon.
8 years ago
shw
acf62b63d1
Changed SOCKS/Tor credential randomization so it only occurs if username and password are empty.
8 years ago
shw
de4f6ac206
SOCKS/Tor credential randomization to force new circuits with each outbound connection.
8 years ago
shw
604c157a7b
Fixed Firewall prompt popup dialog width problem.
8 years ago
shw
515c4eb3ee
Squashed (some) noisy debug output.
8 years ago
shw
0f2b2413ea
Added per-process (ephemeral) rule support.
...
(proc coroner now has support for multiple callbacks)
8 years ago
shw
af874c7395
Added support for AAAA records to DNS cache for IPv6 addressing.
8 years ago
shw
8546f6c416
Working (but not intensively tested) IPv6 support!
8 years ago
shw
5f5042fed4
Very noisy, experimental support for asynchronous multi-rule firewall prompting.
...
Fixed prompted rule removal bug in fw-prompt.
8 years ago
shw
3319802a80
Lots of assorted cleanup.
...
Much better code for detecting if a rule being edited is valid.
fw-prompt window now forces itself to be on top if a rule is pending approval.
Matching by user/uid and group/gid options now visible but not functional.
8 years ago
shw
aba795fa97
Lots of work to establish basic support for approving/denying rules.
...
Updated gotk3 vendor dependency (fixed some bug conditions).
8 years ago
shw
e3833190bf
Created pre-functional replacement GUI for fw-daemon prompter that is independent of gnome-shell.
8 years ago
shw
c3635093fa
Introduced per-process DNS cache segregation for all A records not returned by local resolver.
...
Cached DNS name lookups now failover to global cache only populated by local resolver.
Added proc-coroner module for detecting process deaths.
procsnitch updated to handle multiple levels of "strictness" (necessary to lookup processes generating certain UDP data).
8 years ago