Commit Graph

174 Commits (e7a803f84f93218e97666d55710fd57ee7f31dc0)
 

Author SHA1 Message Date
dma e7a803f84f Temporary workaround
7 years ago
dma 9ac3c3fa92 Temporary workaround to drop connections from the sandbox manager that we can't further identify.
7 years ago
xSmurf 755e0088c5 typo and fmt...
7 years ago
xSmurf 6e6e265fae Fmt..
7 years ago
dma 68e6d57c9b Remove bad deps, fix exec erroneous path truncation for processes outside of oz
7 years ago
dma e2ed0b68e7 Increase stylesheet width
7 years ago
dma 5dd4dea30e Remove duplicate systemd unit file
7 years ago
dma ab7d9464e0 typo
7 years ago
dma a8321095be fixing broken deps..
7 years ago
dma 52fe2b5d2d trying to fix broken deps in vendor/
7 years ago
dma 70c21b0636 vendoring
7 years ago
dma 4babfbbd14 Merge remote-tracking branch 'origin/shw_dev'
7 years ago
dma e1f48ced94 move
7 years ago
dma 6d6c3c26ff move sgfw socks config location
7 years ago
dma ee82803633 move socks config
7 years ago
dma 17e1acc69d socks config
7 years ago
dma dafec55bc7 Fixed bug with prompt rule / saved rule mismatch on SOCKS connects
7 years ago
dma 58b7a4f6a9 Update systemd unit file to install /var/run/fw-daemon/ on start
7 years ago
dma 5a755a04e8 Change path of oz socket
7 years ago
dma 7b5a0ed980 Bug fixes, cleanup, improvement
7 years ago
dma d2ff760197 Patch up IPC
7 years ago
dma a65c268dbf Change default for non-sandboxed connections.
7 years ago
dma f3f5414fd4 Support for TLSGuard in prompter
7 years ago
dma 9ff74569f3 Add Sandbox to procsnitch Info struct
7 years ago
dma ae8f6d96ba Fix rule evaluation of outgoing connections emerging from sandbox proxy ports
7 years ago
dma d0e5a97a53 Fixing process identification for UDP packets (still WIP)
7 years ago
dma a89f8118bf Fix rule parsing, still working on this
7 years ago
dma e8f5001483 Updated procsnitch
7 years ago
dma 6cdb400d32 Fix bugs related to parsing rules file and saving rules file
7 years ago
User 14e1f99b03 Loosen match on UDP socket lookup (still WIP)
7 years ago
shw 2e7b7debeb Incorporated TLSGuard and turned it on by default for all outbound SOCKS5 connections.
8 years ago
shw f945481c2e Should solve a (newly introduced) intermittent crash issue with fw-settings.
8 years ago
shw 27d0a4809d Updated SOCKS5 connection lookup code now correctly identifies originating process.
8 years ago
shw acf62b63d1 Changed SOCKS/Tor credential randomization so it only occurs if username and password are empty.
8 years ago
shw de4f6ac206 SOCKS/Tor credential randomization to force new circuits with each outbound connection.
8 years ago
shw 604c157a7b Fixed Firewall prompt popup dialog width problem.
8 years ago
shw 515c4eb3ee Squashed (some) noisy debug output.
8 years ago
shw 0f2b2413ea Added per-process (ephemeral) rule support.
8 years ago
shw af874c7395 Added support for AAAA records to DNS cache for IPv6 addressing.
8 years ago
shw 8546f6c416 Working (but not intensively tested) IPv6 support!
8 years ago
shw 5f5042fed4 Very noisy, experimental support for asynchronous multi-rule firewall prompting.
8 years ago
shw 3319802a80 Lots of assorted cleanup.
8 years ago
shw aba795fa97 Lots of work to establish basic support for approving/denying rules.
8 years ago
shw e3833190bf Created pre-functional replacement GUI for fw-daemon prompter that is independent of gnome-shell.
8 years ago
shw c3635093fa Introduced per-process DNS cache segregation for all A records not returned by local resolver.
8 years ago
shw 51c181a881 Full support for multiple protocol types (UDP, ICMP).
8 years ago
shw ea31a28d3a Added requisite Dbus code so that fw-settings automatically refreshes its rulelist on fw-daemon update.
8 years ago
shw f47e23e706 Support for firewall rule matching by uid/gid and/or user/group name value.
8 years ago
shw fa70c06af2 CIDR subnet/mask matching support for firewall rules.
8 years ago
shw 1cd25ed699 Added simple regex-based hostname matching for firewall rules.
8 years ago