JavaScript error: Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "default-src 'self' http: https: data: blob: 'unsafe-inline'". (https://git.lalonde.me/assets/js/index.js?v=1.18.3 @ 19:71758). Open browser console to see more details.

71 Commits (f616f54b2c82fc33f2b20bf99815046cce70295e)

Author SHA1 Message Date
Stephen Watt f616f54b2c Fix TLSGuard handshake timeout issue by breaking total timeout period into one second polling intervals.
8 years ago
Stephen Watt 85d7d60d76 Added new SGFW DBus method RunDebugCmd() for retrieving firewall state debugging information.
8 years ago
Stephen Watt d7df165517 Support for securely logging unredacted messages to sublogmon via new com.subgraph.sublogmon.Logger DBus method.
8 years ago
Stephen Watt 0666e9c3c7 Added firewall testing framework.
8 years ago
Stephen Watt 32983deba4 Merged with latest commits to master.
8 years ago
Stephen Watt 35e7b07e43 Proper locking to fix OzInitPids-related crash conditions.
8 years ago
Stephen Watt 62713d74f0 AddRuleAsync DBus calls now include reference guid for proper application of "once" rules.
8 years ago
Stephen Watt b9c2e03afd Overhaul of GetPendingRequests DBus method to call AddRuleAsync multiple times instead of returning a string array.
8 years ago
Stephen Watt bdca5d330d Disabled TLSGuard handshake rewrites and passed through resumed encrypted sessions.
8 years ago
Stephen Watt 2fb872d8ad Duplicate entries in fw-prompt are now displayed nested by changing GTK ListStore -> TreeStore
8 years ago
Stephen Watt ae1f6f12d0 Added (untested) fix for possibly spurious IPC crash condition.
8 years ago
Stephen Watt 96f6e3bbe5 A bunch of "fixes" to TLSGuard that are pointless because this is a dead end.
8 years ago
Stephen Watt 4c816b2392 Solved done channel notification by creating one for both client and server connections.
8 years ago
Stephen Watt 7279b46310 Fixed TLS extension parsing routines.
8 years ago
Stephen Watt 71ee1964f4 Very messy experimental extensions to TLSGuard to strip out sessions and TLS extensions in the handshake protocol.
8 years ago
Stephen Watt ff8be65566 Added connection timestamps to firewall prompting.
8 years ago
Stephen Watt 0bda150abc Various code cleanups (still buggy/WIP).
8 years ago
Stephen Watt 0d13c7bb9c *WORK IN PROGRESS*: New file descriptor monitor thread removes prompt requests if associated socket closes/dies before user reacts.
8 years ago
Stephen Watt 2eac4c7dc5 *Very experimental*/under-dev release of new fully asynchronous multi-prompter.
8 years ago
Stephen Watt 2f5e10d53d Merge newest branch changes with latest changes to master.
8 years ago
Stephen Watt 2fc7525cc7 Added new RemovePrompt DBus call to complement RequestPrompt (GUID-based prompt removal).
8 years ago
Stephen Watt a8f61a2d4e Re-sync to master.
8 years ago
dma 6d6c3c26ff move sgfw socks config location
8 years ago
dma dafec55bc7 Fixed bug with prompt rule / saved rule mismatch on SOCKS connects
8 years ago
dma 5a755a04e8 Change path of oz socket
8 years ago
dma 7b5a0ed980 Bug fixes, cleanup, improvement
8 years ago
dma d2ff760197 Patch up IPC
8 years ago
dma f3f5414fd4 Support for TLSGuard in prompter
8 years ago
dma ae8f6d96ba Fix rule evaluation of outgoing connections emerging from sandbox proxy ports
8 years ago
dma a89f8118bf Fix rule parsing, still working on this
8 years ago
dma 6cdb400d32 Fix bugs related to parsing rules file and saving rules file
8 years ago
User 14e1f99b03 Loosen match on UDP socket lookup (still WIP)
8 years ago
shw 2e7b7debeb Incorporated TLSGuard and turned it on by default for all outbound SOCKS5 connections.
8 years ago
shw 27d0a4809d Updated SOCKS5 connection lookup code now correctly identifies originating process.
8 years ago
shw acf62b63d1 Changed SOCKS/Tor credential randomization so it only occurs if username and password are empty.
8 years ago
shw de4f6ac206 SOCKS/Tor credential randomization to force new circuits with each outbound connection.
8 years ago
shw 515c4eb3ee Squashed (some) noisy debug output.
8 years ago
shw 0f2b2413ea Added per-process (ephemeral) rule support.
8 years ago
shw af874c7395 Added support for AAAA records to DNS cache for IPv6 addressing.
8 years ago
shw 8546f6c416 Working (but not intensively tested) IPv6 support!
8 years ago
shw 5f5042fed4 Very noisy, experimental support for asynchronous multi-rule firewall prompting.
8 years ago
shw c3635093fa Introduced per-process DNS cache segregation for all A records not returned by local resolver.
8 years ago
shw 51c181a881 Full support for multiple protocol types (UDP, ICMP).
8 years ago
shw ea31a28d3a Added requisite Dbus code so that fw-settings automatically refreshes its rulelist on fw-daemon update.
8 years ago
shw f47e23e706 Support for firewall rule matching by uid/gid and/or user/group name value.
8 years ago
shw fa70c06af2 CIDR subnet/mask matching support for firewall rules.
8 years ago
shw 1cd25ed699 Added simple regex-based hostname matching for firewall rules.
8 years ago
shw 0708f9127c Proper logging of all connections denied by firewall.
8 years ago
shw e895f204a7 Fixed bug so that system-wide firewall settings match all traffic except sandboxed traffic.
8 years ago
shw b567e5ce54 oz-init pid mappings are now properly destroyed as these processes exit.
8 years ago