26 Commits (fa70c06af2b14eb6c116b524804ed89549596114)

Author	SHA1	Message	Date
shw	fa70c06af2	CIDR subnet/mask matching support for firewall rules.	7 years ago
shw	1cd25ed699	Added simple regex-based hostname matching for firewall rules.	7 years ago
shw	0708f9127c	Proper logging of all connections denied by firewall. ... fw-daemon now also forces logging to syslog if launched from a terminal.	7 years ago
shw	e895f204a7	Fixed bug so that system-wide firewall settings match all traffic except sandboxed traffic.	7 years ago
shw	b567e5ce54	oz-init pid mappings are now properly destroyed as these processes exit.	7 years ago
shw	a930fbbce0	Sandboxed process entries in GUI now include sandbox name/ID in display. ... Removed fatal error when a connection to oz-control socket cannot be established.	7 years ago
shw	ba35abfb46	Name of sandboxed exe returned by procsnitch is now resolved to absolute pathname.	7 years ago
shw	b4ed11261f	Added extra display info for "Sandboxed application" in fw-prompt gnome shell GUI. ... fw-prompt GUI gracefully displays unknown PIDs and UIDs. Fixed stupid syntax error bug in oz-init PID management code.	7 years ago
shw	7a1851419c	Added support for using fw-daemon on all processes system-wide. ... Added changes for fw-daemon to check sandboxed processes' oz-init /proc/[pid]/net/tcp with procsnitch. fw-daemon IPC accepts "register-init" command to register new oz-init process instance alerts. fw-daemon also checks for existing oz-init processes on startup. Updated vendor-bundled go-procsnitch to latest dev version that includes findTCPSocketAll().	7 years ago
shw	30482bf15b	Support for wildcard ports in dynamic OZ/fw rules. ... Modified behavior for source interface-based rules to allow for fallthrough policies.	7 years ago
shw	e1a994169f	Added removeall IPC command for stripping all rules matching a source interface.	7 years ago
shw	670abc5232	Removed code for custom matching of firewall rules.	7 years ago
shw	9069c91606	Garbage dump commit of current progress.	7 years ago
shw	08266cca76	Support for handling network traffic that can't be uncovered with procsnitch.	7 years ago
shw	cadb859dce	Added ephemeral oz sandbox/fw-daemon rules that can be updated via IPC connection. ... fw-daemon prompter is now updated with source address of originating packet. Fixed bug in decoding DNS data. Packets are dropped properly (by marking and then calling Accept()).	7 years ago
shw	942b0a0c01	Bug fix.	7 years ago
shw	8fe02202de	Very dirty/experimental replacement of nfqueue with native github.com/subgraph/go-nfnetlink package.	7 years ago
shw	4955c6a66b	Added (unused) origin field in firewall gnome-shell UI. ... Added some instructions.	7 years ago
shw	1e84a6e168	Reincorporated socks5 code. ... Fixed small but critical bug in rules matching/IP comparison.	7 years ago
xSmurf	90bbc67517	Linting...	8 years ago
xSmurf	02155c44ed	Golint...	8 years ago
xSmurf	c5b8dcb660	Golint..	8 years ago
xSmurf	2e6f98e410	FMT...	8 years ago
xSmurf	5d4b38c5b4	Refactor...	8 years ago
xSmurf	4b632fb6f2	Moved fw-daemon to command/lib	8 years ago
xSmurf	9c8f5895ca	Moved all to sgfw	8 years ago