212 Commits (b6ff6c485752182ada7fef0812d61f1ac1083195)

 

All Branches   

Search

Author	SHA1	Message	Date
xSmurf	b6ff6c4857	Merge back...	7 years ago
xSmurf	e5dd1cb538	Merge...	7 years ago
xSmurf	7472b4d828	Merged from shw_dev	7 years ago
Stephen Watt	71ee1964f4	Very messy experimental extensions to TLSGuard to strip out sessions and TLS extensions in the handshake protocol.	7 years ago
Stephen Watt	ff8be65566	Added connection timestamps to firewall prompting. ... Disabled old synchronous RequestPrompt Dbus method in fw-prompt. fw-prompt GUI now (as originally) remains above other windows when there are pending decisions. Fixed improper traversal of pending connections in fw-prompt GUI. Consolidated redundant code blocks in fw-prompt GUI.	7 years ago
Stephen Watt	0bda150abc	Various code cleanups (still buggy/WIP). ... Fixed lock/race condition in fw-prompt; consolidated redundant rule action code. Started fuller TLS implementation in TLSGuard; probably broke a lot of stuff in the process. Removal/reorganization of old/stale/unused code.	7 years ago
Stephen Watt	0d13c7bb9c	*WORK IN PROGRESS*: New file descriptor monitor thread removes prompt requests if associated socket closes/dies before user reacts. ... fw-prompt request entries are now properly tethered to their default rule scope included by SGFW. pendingConnection now operates on prompter instead of raw DBus object. Fixed prompter bug in cycling through pending connections. Fixed inadequacies in SGFW rules parsing/error handling. go fmt.	7 years ago
Stephen Watt	2eac4c7dc5	*Very experimental*/under-dev release of new fully asynchronous multi-prompter. ... New Dbus method "RequestPromptAsync" to handle "return-less" prompter invocations in fw-prompt. Proper GUI locking in fw-prompt eliminates old race/crash conditions. New DBus method "GetPendingRequests" in SGFW allows prompter to retrieve pending connections. Policies now maintain rulesPending list of unapplied asynchronously submitted FW rules from the prompter. Fixed reentrance/crash bug in UID and GID to name lookups.	7 years ago
xSmurf	5f26317c44	Control prompt via full keyboard navigation...	7 years ago
Stephen Watt	2f5e10d53d	Merge newest branch changes with latest changes to master.	7 years ago
Stephen Watt	2fc7525cc7	Added new RemovePrompt DBus call to complement RequestPrompt (GUID-based prompt removal). ... The addition of a rule matching multiple pending connections in fw-prompt now removes all of them. fw-prompter now increments ref# column for identical prompt requests. Fixed/cleaned up/updated TLSGuard code. Added TLSGuard toggle option to fw-prompt GUI (default for SOCKS connections). fw-prompt now displays icon of filtered application. DBus RequestPrompt() now "works" asynchronously. TLSGuard fixed under certain conditions but still very buggy. Fixed some fw-prompt crash conditions with treeview mutex locking. Fixed SOCKS connection panic condition linked to closed channel. Cleanup of unused data structures/values.	7 years ago
Stephen Watt	a8f61a2d4e	Re-sync to master.	7 years ago
xSmurf	2b7bed6fde	Fmting...	7 years ago
xSmurf	fc19ebc2ef	Fixed icons to passed name > sandbox name > path basename	7 years ago
xSmurf	00aa12f140	FMT'ing some more log output...	7 years ago
xSmurf	bfa28d89da	Fmt'ing some log outputs...	7 years ago
dma	7c657b9f53	Fix sandbox rule evaluation from policy file bug after fw-daemon start	7 years ago
xSmurf	972f733b63	fmt..	7 years ago
dma	7d3e31a005	Read more TLS messages during handshake	7 years ago
dma	38fabc3327	Apply rules contextually by policy defined sandbox	7 years ago
dma	c395ad85f8	Fix dumb bug where sgfw accepting DNS packet before passing to DNS processor	7 years ago
xSmurf	ccd3792609	Fixed com.subgraph.fwprompt.EventNotifier.conf policy	7 years ago
xSmurf	fdd5e4a194	Moved com.Subgraph.fwprompt.EventNotifier.conf > com.subgraph.fwprompt.EventNotifier.conf for consistency...	7 years ago
xSmurf	970a4c9cee	Fixed rule mode in getString and save methods...	7 years ago
xSmurf	31eb87c580	gnome-shell disabled unused connection monitor...	7 years ago
xSmurf	c209d1b376	gnome-shell fixed handling of multiple prompt requests...	7 years ago
xSmurf	11b8ec9818	gnome-shell fmt...	7 years ago
xSmurf	c01894f35c	fmt..	7 years ago
Stephen Watt	8054062418	More checks in SGFW prompt GUI to prevent accidental startup race/panic condition. ... Increased default max concurrent prompts in standalone prompter to 5 connections. Fixed NULL dereference crash condition from recvfrom() error in go-nfnetlink vendor dependency.	7 years ago
Stephen Watt	e3ab56486b	Upgraded standalone fw-prompt for DBus compatibility with new fw-daemon. ... Averted potential panic issue in SOCKS5 listener. Fixed strange whole-window scrolling behavior in fw-prompt. Removed verbose debug output in fw-prompt.	7 years ago
Stephen Watt	a3fa1b1285	Slightly kludgy workaround for gtk-3.20 dependence in gtk-3.18 builds. ... Added SGFW_CONF environment variable for overriding default SGFW configuration path. Added SGFW_SOCKS_CONFIG environment variable for overriding default SGFW SOCKS json config file path. Updated readme with information on building outside SGOS.	7 years ago
dma	92276eed47	fmt	7 years ago
dma	5f454f2c6b	Remove debug output	7 years ago
dma	2869f15ba1	Remove hack + debug output because of fix in af1a925b11	7 years ago
dma	af1a925b11	Fix bug where sometimes not all of /proc/net/tcp is read	7 years ago
xSmurf	119344dbfc	Settings: adding sandbox and allow tls to rule edit...	7 years ago
dma	ef9a0a22c2	Make log more sublogmon friendly	7 years ago
dma	ed8c254404	Add TLSGuard to SOCKS5 filter clients not coming from oz-daemon	7 years ago
dma	e7a803f84f	Temporary workaround	7 years ago
dma	9ac3c3fa92	Temporary workaround to drop connections from the sandbox manager that we can't further identify.	7 years ago
xSmurf	755e0088c5	typo and fmt...	7 years ago
xSmurf	6e6e265fae	Fmt..	7 years ago
dma	68e6d57c9b	Remove bad deps, fix exec erroneous path truncation for processes outside of oz	7 years ago
dma	e2ed0b68e7	Increase stylesheet width	7 years ago
dma	5dd4dea30e	Remove duplicate systemd unit file	7 years ago
dma	ab7d9464e0	typo	7 years ago
dma	a8321095be	fixing broken deps..	7 years ago
dma	52fe2b5d2d	trying to fix broken deps in vendor/	7 years ago
dma	70c21b0636	vendoring	7 years ago
dma	4babfbbd14	Merge remote-tracking branch 'origin/shw_dev'	7 years ago