summaryrefslogtreecommitdiff
path: root/src/leap/bitmask/vpn/privilege.py
AgeCommit message (Collapse)Author
2017-10-06[bug] use sytem-wide bitmask-root, if foundKali Kaneko
we make a distinction between the system-wide bitmask-root, which should be placed there by the maintainers of whatever packages your distribution uses, and the bitmask-root that is placed by the bundles (using polkit). since the bundles copying over the helper from user-writeable folders is a potential attack vector, we prefer to use the package's version if present. also, if we cannot find either, we abort the launching of the VPN. we've discussed that this might move to the service initialization instead, but I think the cases in which this is needed should be rare. I fix also a corner-case in which we were using getcwd() at import time. if you execute code and then remove the installation path, this will raise a traceback in bitmaskctl. I think it's nicer to catch the error properly when starting.
2017-10-03[feat] Update polkit optionsRuben Pollan
2017-09-20[feat] detect if pkexec is present in the systemRuben Pollan
Check it before starting the vpn. - Resolves: #8895
2017-09-15[feat] wait up to 20 seconds for polkit to be launchedRuben Pollan
- Related: #9012
2017-09-15[refactor] remove unused 'is_missing_policy_permissions'Ruben Pollan
2017-09-15[feat] use psutil to discover polkit processRuben Pollan
Better psutil than ps+grep.
2017-08-30[bug] verbose log if error when (un)installing helpersKali Kaneko
2017-05-31[refactor] factor out installer functionKali Kaneko (leap communications)
2017-05-31[feat] install installers directly if we are rootKali Kaneko (leap communications)
2017-05-22[feat] port the polkit agent launcherKali Kaneko (leap communications)
this commit is porting the polkit launcher from the legacy bitmask client. if no polkit authentication agent is running, it will try to run one that is found in the system. - Resolves: #8836
2017-05-22[bug] use openvpn from bundleKali Kaneko (leap communications)
2017-05-03[bug] include bitmask_helpers into the frozen binaryRuben Pollan
The bundled version of bitmask is unable to find the bitmask_helpers binary. Let's include it as part of the frozen binary generated by pyinstaller. - Resolves: #8862
2017-04-27[bug] unify logging style using class attrKali Kaneko (leap communications)
I changed most of the logger statements to use a class attribute, in this way it's easier to identify which class it's logging them. in some cases I leave a module-level logger, when we're either using functions or when the module it's too small. at the same time I did a general review and cleanup of the logging statements.
2017-04-19[bug] fail if tried to stop vpn when not runningKali Kaneko (leap communications)
2017-04-19[bug] pass along no polkit errorKali Kaneko (leap communications)
2017-03-31[bug] fix usage of exception with twisted loggerKali Kaneko (leap communications)
2017-02-23[refactor] rename eip to vpnKali Kaneko (leap communications)
2017-02-23[feature] add install/uninstall command for helpersKali Kaneko (leap communications)
2017-02-23[feature] initial port of legacy vpn codeKali Kaneko (leap communications)
non functional at the moment, but started doing some cleanup