Andreas Steffen
|
133fb74841
|
add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins
|
2012-12-09 19:40:13 +01:00 |
|
Andreas Steffen
|
92e75e4535
|
optionally skip dlclose() of IMCs/IMVs in order to track memory leaks
|
2012-12-09 19:35:23 +01:00 |
|
Andreas Steffen
|
7d17eeb7ef
|
fixed memory leak in error case
|
2012-12-09 17:07:51 +01:00 |
|
Andreas Steffen
|
965fce31c3
|
newer releases of dpkg-query does not have PackageSpec
|
2012-12-09 13:55:22 +01:00 |
|
Andreas Steffen
|
4037bb5288
|
ignore ports of the 127.0.1.1 internal system address
|
2012-12-09 13:26:34 +01:00 |
|
Andreas Steffen
|
81ee269d1f
|
attest displays dates either in local time or UTC
|
2012-11-30 09:55:38 +01:00 |
|
Andreas Steffen
|
2b61f7baa3
|
store detected improper OS settings in database
|
2012-11-30 00:12:48 +01:00 |
|
Andreas Steffen
|
f0d4756eb0
|
allow update of file hashes
|
2012-11-28 23:18:33 +01:00 |
|
Andreas Steffen
|
e8a491c01a
|
removed unused header include
|
2012-11-28 14:37:15 +01:00 |
|
Andreas Steffen
|
b8f0bf00b7
|
differentiate attestation reason strings
|
2012-11-28 14:14:41 +01:00 |
|
Andreas Steffen
|
7b6cc33eb2
|
store collected device information in database
|
2012-11-28 10:51:11 +01:00 |
|
Andreas Steffen
|
ac6dd7d404
|
store unique device_id in database
|
2012-11-27 23:48:40 +01:00 |
|
Andreas Steffen
|
2810d934e5
|
cosmetics
|
2012-11-23 18:31:44 +01:00 |
|
Andreas Steffen
|
9cbdfdb988
|
implemented output of item lists in remediation instructions
|
2012-11-23 18:30:00 +01:00 |
|
Andreas Steffen
|
ee6aeca892
|
refactored reason string and remediation instructions framework
|
2012-11-23 12:30:33 +01:00 |
|
Andreas Steffen
|
48b23d06a8
|
allow the optional sharing if RSA private keys
|
2012-11-22 00:34:42 +01:00 |
|
Andreas Steffen
|
ef214f2855
|
added ike2/rw-eap-md5-class-radius scenario
|
2012-11-21 06:05:34 +01:00 |
|
Andreas Steffen
|
76bd0d7c1f
|
overwrite sensitive prime with zeroes
|
2012-11-18 22:55:22 +01:00 |
|
Andreas Steffen
|
bf1cecdb6b
|
strndup() requires string.h header file
|
2012-11-18 19:41:03 +01:00 |
|
Andreas Steffen
|
168ee460c6
|
implemented generation of safe primes
|
2012-11-18 19:22:31 +01:00 |
|
Andreas Steffen
|
c1c98f5f4a
|
generate reason strings and remediation instructions for improper OS settings
|
2012-11-18 11:44:03 +01:00 |
|
Andreas Steffen
|
602c6b6be2
|
precautionary measures
|
2012-11-17 14:53:27 +01:00 |
|
Andreas Steffen
|
3294cbd61e
|
fixed a memory leak in pacman
|
2012-11-17 08:16:53 +01:00 |
|
Andreas Steffen
|
aa3061d432
|
removed unused variable
|
2012-11-17 08:16:23 +01:00 |
|
Andreas Steffen
|
d287c14436
|
version bump to 5.0.2dr4
|
2012-11-15 21:56:27 +01:00 |
|
Andreas Steffen
|
bacffb890e
|
discovered the use of strndup()
|
2012-11-15 11:48:57 +01:00 |
|
Andreas Steffen
|
a95959cce6
|
implemented blacklisting of software packages
|
2012-11-14 11:38:45 +01:00 |
|
Andreas Steffen
|
f94d32dba9
|
fixed remediation instructions output
|
2012-11-13 07:15:46 +01:00 |
|
Andreas Steffen
|
e6a2de344d
|
fixed memory leak
|
2012-11-12 13:08:58 +01:00 |
|
Andreas Steffen
|
a40372d82d
|
fixed typo in strcpy() function call
|
2012-11-12 12:31:26 +01:00 |
|
Andreas Steffen
|
7c49d77982
|
updated parameters
|
2012-11-12 10:45:38 +01:00 |
|
Andreas Steffen
|
e6b117491f
|
implemented reason string and remediation instructions for OS IMV
|
2012-11-12 10:45:38 +01:00 |
|
Andreas Steffen
|
742722e2f5
|
updated strongswan.conf man page
|
2012-11-12 10:45:38 +01:00 |
|
Andreas Steffen
|
3de9a31a49
|
centralized processing of assessment information
|
2012-11-12 10:45:38 +01:00 |
|
Andreas Steffen
|
eda87d1a95
|
define TSS_TROUSERS compile option
|
2012-11-11 00:27:55 +01:00 |
|
Andreas Steffen
|
af83700f88
|
implemented get_remediation_instructions()
|
2012-11-10 23:47:06 +01:00 |
|
Andreas Steffen
|
b217e16f7e
|
removed debug output
|
2012-11-10 21:37:33 +01:00 |
|
Andreas Steffen
|
db15c6dac1
|
implement a preferred language enumerator
|
2012-11-10 21:35:46 +01:00 |
|
Andreas Steffen
|
4ccc4fd97c
|
abort if fatal error is received from peer
|
2012-11-09 16:07:03 +01:00 |
|
Andreas Steffen
|
84f9b9f9bd
|
corrected debug class
|
2012-11-09 15:50:10 +01:00 |
|
Andreas Steffen
|
236eb5851a
|
added missing method assignments
|
2012-11-09 15:08:14 +01:00 |
|
Andreas Steffen
|
d425f30e80
|
added missing --update parameter
|
2012-11-08 11:02:17 +01:00 |
|
Andreas Steffen
|
da72eb388a
|
created packman daily update script
|
2012-11-08 09:19:10 +01:00 |
|
Andreas Steffen
|
b18b924b2f
|
pacman supports differential security updates
|
2012-11-07 22:20:39 +01:00 |
|
Andreas Steffen
|
8cae17431a
|
fixed Android product string
|
2012-11-07 14:57:41 +01:00 |
|
Andreas Steffen
|
f77d425da3
|
accumulate package counts over multiple attributes
|
2012-11-07 14:20:47 +01:00 |
|
Andreas Steffen
|
538c13fe5c
|
use OS type on IMV side
|
2012-11-07 13:40:52 +01:00 |
|
Andreas Steffen
|
dad76a5828
|
fixed debug output
|
2012-11-05 21:56:49 +01:00 |
|
Andreas Steffen
|
d78c869cff
|
eliminate deinstalled packages
|
2012-11-05 21:40:19 +01:00 |
|
Andreas Steffen
|
a08fc61ea3
|
check installed packages in OS database
|
2012-11-05 21:00:56 +01:00 |
|
Andreas Steffen
|
68cf283cd3
|
Define and use an OS enumeration type
|
2012-11-05 14:48:43 +01:00 |
|
Andreas Steffen
|
7b0330d285
|
check if assessment has already been done
|
2012-11-05 14:46:50 +01:00 |
|
Andreas Steffen
|
5e8987689a
|
compute the optimum Installed Packages attribute size
|
2012-11-05 12:13:13 +01:00 |
|
Andreas Steffen
|
6ac6dbd3fb
|
Added ITA Start/Stop Angel attributes to split bulk data into multiple attributes
|
2012-11-05 10:24:12 +01:00 |
|
Andreas Steffen
|
3b057d66cf
|
enumerate over installed Debian/Ubuntu packages
|
2012-11-04 23:54:36 +01:00 |
|
Andreas Steffen
|
9d41e0f362
|
debug output in lower case letters
|
2012-11-04 23:52:34 +01:00 |
|
Andreas Steffen
|
3867eaab89
|
added second index
|
2012-11-04 23:51:04 +01:00 |
|
Andreas Steffen
|
9074186345
|
add generation time to package versions
|
2012-11-04 18:55:37 +01:00 |
|
Andreas Steffen
|
60e26e0f63
|
extract generation time of packages file
|
2012-11-04 17:51:02 +01:00 |
|
Andreas Steffen
|
113db9b9e0
|
added pacman to .gitignore
|
2012-11-04 17:51:02 +01:00 |
|
Andreas Steffen
|
b5c2a27098
|
store packages with security issues and their optional updates only
|
2012-11-04 17:51:02 +01:00 |
|
Andreas Steffen
|
d79ec8e911
|
created pacman - an Ubuntu/Debian package manager
|
2012-11-04 17:51:02 +01:00 |
|
Andreas Steffen
|
d598f2db75
|
added generation time to package versions
|
2012-11-04 17:47:06 +01:00 |
|
Andreas Steffen
|
1bb6a086a5
|
added package management to ipsec attest
|
2012-11-02 23:17:19 +01:00 |
|
Andreas Steffen
|
8128f255f4
|
check if setting exists
|
2012-11-01 19:26:29 +01:00 |
|
Andreas Steffen
|
efe0d5478f
|
implemented ITA Get Settings and ITA Settings attributes
|
2012-11-01 18:00:40 +01:00 |
|
Andreas Steffen
|
b3d66a8dc5
|
some improvements in tcg_pts_attr_file_meas.c
|
2012-11-01 17:59:54 +01:00 |
|
Andreas Steffen
|
b1a2ebb686
|
use countof()
|
2012-11-01 09:02:58 +01:00 |
|
Andreas Steffen
|
ffd3556bad
|
scanner imc/imv pair uses IETF VPN PA-TNC message subtype
|
2012-10-31 21:58:21 +01:00 |
|
Andreas Steffen
|
9901207a09
|
transmit Product Vendor ID if known
|
2012-10-31 20:29:36 +01:00 |
|
Andreas Steffen
|
3e765dad95
|
added some Linux OS PENs
|
2012-10-31 14:53:01 +01:00 |
|
Andreas Steffen
|
bbd454a467
|
version bump to 5.0.2dr3
|
2012-10-28 08:21:02 +01:00 |
|
Andreas Steffen
|
12d68762f7
|
issue warning if sqlite finalize is missing
|
2012-10-26 13:22:02 +02:00 |
|
Andreas Steffen
|
d8e62ae9b4
|
version bump to 5.0.2dr2
|
2012-10-20 10:49:27 +02:00 |
|
Andreas Steffen
|
c2a5e7bcf9
|
updated NEWS
|
2012-10-19 08:52:35 +02:00 |
|
Andreas Steffen
|
a9c9414d58
|
implemented IETF Numeric Version attribute
|
2012-10-18 22:33:26 +02:00 |
|
Andreas Steffen
|
ef315c5a1c
|
implemented IETF Remediation Instructions attribute
|
2012-10-18 18:24:26 +02:00 |
|
Andreas Steffen
|
bbf90fcc79
|
no need to include pa_tnc_msg.h
|
2012-10-18 07:00:32 +02:00 |
|
Andreas Steffen
|
6a61b79583
|
refactored PA-TNC message handling by IMVs
|
2012-10-17 23:15:14 +02:00 |
|
Andreas Steffen
|
f8a70254a9
|
refactored PA-TNC message handling by IMCs
|
2012-10-17 10:02:53 +02:00 |
|
Andreas Steffen
|
154cae09e3
|
increased IMC/IMV debug level to 3
|
2012-10-17 10:02:53 +02:00 |
|
Andreas Steffen
|
c8b88ba733
|
removed unused variable
|
2012-10-17 10:02:52 +02:00 |
|
Andreas Steffen
|
5f085d7e13
|
allow registration of multiple message type
|
2012-10-14 17:37:00 +02:00 |
|
Andreas Steffen
|
07a3dee937
|
implemented IETF Operational Status attribute
|
2012-10-13 20:34:50 +02:00 |
|
Andreas Steffen
|
4bc119afb7
|
corrected class description
|
2012-10-13 10:38:10 +02:00 |
|
Andreas Steffen
|
1afcff297a
|
implemented IETF Factory Default Password Enabled attribute
|
2012-10-12 22:04:51 +02:00 |
|
Andreas Steffen
|
4abe404d27
|
added tnc/tnccs-20-os scenario
|
2012-10-12 09:50:15 +02:00 |
|
Andreas Steffen
|
ca1a64742f
|
implemented the Forwarding Enabled attribute
|
2012-10-12 09:49:44 +02:00 |
|
Andreas Steffen
|
230a26ed01
|
minor fixes in imc_attestation.c
|
2012-10-12 00:53:07 +02:00 |
|
Andreas Steffen
|
abcc762387
|
version bump to 5.0.2dr1
|
2012-10-11 09:21:38 +02:00 |
|
Andreas Steffen
|
6ab1502519
|
implemented os_info_t class
|
2012-10-10 21:54:21 +02:00 |
|
Andreas Steffen
|
7174a0a527
|
implemented IETF String Version attribute
|
2012-10-10 12:30:18 +02:00 |
|
Andreas Steffen
|
7d202f56b9
|
restrict package name and package version number fields to 255 octets
|
2012-10-10 09:03:11 +02:00 |
|
Andreas Steffen
|
e9f47ee2d5
|
created OS IMC/IMV pair
|
2012-10-09 23:58:36 +02:00 |
|
Andreas Steffen
|
49f0f7e7ca
|
implemented IETF Installed Packages attribute
|
2012-10-09 23:58:36 +02:00 |
|
Andreas Steffen
|
219d638db9
|
fixed PA-TNC error code to Invalid Parameter
|
2012-10-09 23:58:35 +02:00 |
|
Andreas Steffen
|
190d6fc37a
|
check for zero product vendor ID and non-zero product ID
|
2012-10-09 23:58:35 +02:00 |
|
Andreas Steffen
|
7207793d57
|
cosmetics
|
2012-10-09 23:58:35 +02:00 |
|
Andreas Steffen
|
a9876799d2
|
cosmetics
|
2012-10-09 23:58:35 +02:00 |
|
Andreas Steffen
|
f4263eaef6
|
list multiple files with a given basename but different path names
|
2012-10-08 18:56:22 +02:00 |
|