summaryrefslogtreecommitdiff
path: root/src/leap/bitmask/vpn/fw
AgeCommit message (Collapse)Author
2017-10-06[bug] use sytem-wide bitmask-root, if foundKali Kaneko
we make a distinction between the system-wide bitmask-root, which should be placed there by the maintainers of whatever packages your distribution uses, and the bitmask-root that is placed by the bundles (using polkit). since the bundles copying over the helper from user-writeable folders is a potential attack vector, we prefer to use the package's version if present. also, if we cannot find either, we abort the launching of the VPN. we've discussed that this might move to the service initialization instead, but I think the cases in which this is needed should be rare. I fix also a corner-case in which we were using getcwd() at import time. if you execute code and then remove the installation path, this will raise a traceback in bitmaskctl. I think it's nicer to catch the error properly when starting.
2017-08-30[refactor] remove verbose debug infoKali Kaneko
2017-08-30[bug] return if cannot parse stateKali Kaneko
2017-08-30[tests] fix check-ip scriptKali Kaneko
2017-06-16[feat] fix OpenVPN start/stop in OSX using a process canaryKali Kaneko
- correctly start the openvpn process canary - use helper to fix tearing down of the vpn
2017-06-13[pkg] reorder osx helper filesKali Kaneko (leap communications)
2017-06-09[bug] make openvpn and firewall able to launchKali Kaneko
with these fixes, I'm able to finally launch openvpn and firewall on osx. :) all that's left for a minimum vpn release is packaging and installing all the helpers in the proper place.
2017-06-07[docs] document testing of the osx helperKali Kaneko (leap communications)
2017-06-07[style] pep8Kali Kaneko (leap communications)
2017-06-07[feature] run vpn directly if user is rootKali Kaneko (leap communications)
- Improve tests too: add entry in resolv.conf, not done without resolvconf
2017-06-07[feature] log output of subprocess callKali Kaneko (leap communications)
2017-06-07[feat] do not use pkexec if we are rootKali Kaneko (leap communications)
2017-03-17[feat] report the real status of the VPNRuben Pollan
2017-02-23[pkg] add osx helpersKali Kaneko (leap communications)
2017-02-23[feature] parse statusKali Kaneko (leap communications)
- simple status parsing - add separate firewall status - set status for abnormal termination
2017-02-23[feature] add install/uninstall command for helpersKali Kaneko (leap communications)
2017-02-23[feature] initial port of legacy vpn codeKali Kaneko (leap communications)
non functional at the moment, but started doing some cleanup