16 Commits (f6b8712712a36aacd1865f9c8df4ae91f628ffb3)

Author	SHA1	Message	Date
dma	372cc52f2a	Clean up output	7 years ago
dma	a3e38de6e5	Reduce log noise + honor log redact config option	7 years ago
Stephen Watt	8054062418	More checks in SGFW prompt GUI to prevent accidental startup race/panic condition. ... Increased default max concurrent prompts in standalone prompter to 5 connections. Fixed NULL dereference crash condition from recvfrom() error in go-nfnetlink vendor dependency.	7 years ago
dma	70c21b0636	vendoring	7 years ago
dma	9ff74569f3	Add Sandbox to procsnitch Info struct	7 years ago
dma	d0e5a97a53	Fixing process identification for UDP packets (still WIP)	7 years ago
dma	e8f5001483	Updated procsnitch	7 years ago
User	14e1f99b03	Loosen match on UDP socket lookup (still WIP)	7 years ago
shw	8546f6c416	Working (but not intensively tested) IPv6 support!	8 years ago
shw	c3635093fa	Introduced per-process DNS cache segregation for all A records not returned by local resolver. ... Cached DNS name lookups now failover to global cache only populated by local resolver. Added proc-coroner module for detecting process deaths. procsnitch updated to handle multiple levels of "strictness" (necessary to lookup processes generating certain UDP data).	8 years ago
shw	51c181a881	Full support for multiple protocol types (UDP, ICMP). ... Cleared up awkward fw-settings/fwprompt GUI language caused by introduction of UDP/ICMP ("connection"-less) rules. fw-daemon automatically passes through all ICMP traffic sent to same address. Added (temporary) rule for passing through all UDP-based DNS server traffic. Updated developers' README documentation.	8 years ago
shw	f47e23e706	Support for firewall rule matching by uid/gid and/or user/group name value. ... fw-daemon prompt GUI and fw-settings now include user/uid and group/gid info. sgfw prompt GUI now displays username instead of real name. Fixed bug in parsing IP addresses as CIDR values. sgfw_rules entries can now be commented out. Upgraded bundled go-procsnitch API.	8 years ago
shw	7a1851419c	Added support for using fw-daemon on all processes system-wide. ... Added changes for fw-daemon to check sandboxed processes' oz-init /proc/[pid]/net/tcp with procsnitch. fw-daemon IPC accepts "register-init" command to register new oz-init process instance alerts. fw-daemon also checks for existing oz-init processes on startup. Updated vendor-bundled go-procsnitch to latest dev version that includes findTCPSocketAll().	8 years ago
xSmurf	b8f3bb54f9	Update procsnitch to upstream version	8 years ago
Bruce Leidl	79741be8a1	Update procsnitch dependency	9 years ago
Bruce Leidl	3ac218f288	Migration from /Godeps to /vendor	9 years ago