| Age | Commit message (Collapse) | Author |
|---|
|
This removes a dependency by using the built-in go:embed functionality
introduce in Go 1.16 instead of statik for embedding files.
This means that Go 1.16+ would now be required to build the VPN.
Signed-off-by: Sam Whited <sam@samwhited.com>
|
|
|
|
|
|
|
|
Upstreamed patch from Gentoo Linux
We put bin before sbin because we want sbin to have the
higher priority
Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>
|
|
- Resolves: #457
|
|
By default, bitmask-root allows traffic to devices in local networks.
However, this behavior depends on it correctly identifying the local
network of the default route, and it can fail on more complex network
setups (one common failure mode is when one of the ifaces gets a
link-local ip).
This commit introduces an explicit mechanism, by parsing lines in
/etc/bitmask/ipv4.allow
/etc/bitmask/ipv6.allow
If valid private ips are defined in either of the files, the behavior
will change to fail close for local devices, and allow traffic (both tcp
and udp) to the defined ips, on all ports.
- Resolves: #503
|
|
|
|
this has been officially deprecated for some time
|
|
Find the right path of the system commands looking into /sbin, /usr/sbin
and /usr/local/sbin
- Resolves: #254
|
|
|
|
|
