Andreas Steffen
5b7536c803
Attestation IMV requests platform info if not received
2013-06-27 17:30:14 +02:00
Tobias Brunner
75ff252324
integrity-checker: Fix checksum calculation after randomizing chunk_hash()
2013-06-27 15:34:08 +02:00
Tobias Brunner
fcc33c0cd4
unit-tests: Print loaded plugins
2013-06-27 11:27:13 +02:00
Tobias Brunner
a6357a62b4
unit-tests: RSA key generation might take longer than 4 seconds
...
Check uses a default timeout of 4 seconds for each test case, generating
keys of 6 different key sizes might take longer than that.
2013-06-27 11:06:47 +02:00
Tobias Brunner
65d23c7c90
tests: Properly load plugins from build directory
...
Calling load() incrementally does not really work as dependencies
wouldn't be resolved properly if a required feature was to be provided
by a plugin that is loaded later with a separate call to load().
2013-06-27 11:06:47 +02:00
Tobias Brunner
f2086e42ff
plugin-loader: Method added to provide additional search paths for plugins
2013-06-27 10:27:24 +02:00
Andreas Steffen
71c7b43541
Support blacklist field in PTS database
2013-06-26 12:07:09 +02:00
Andreas Steffen
de8de88fa7
Updated PTS demo database
2013-06-26 10:14:25 +02:00
Andreas Steffen
f4dcbe3bf2
Device can be member of multiple groups
2013-06-25 18:43:07 +02:00
Tobias Brunner
ac2ffde4ae
capabilities: Return effective UID/GID if user did not configure anything
2013-06-25 17:16:33 +02:00
Tobias Brunner
68b7448eab
capabilities: Make the user and group charon(-nm) changes to configurable
2013-06-25 17:16:33 +02:00
Tobias Brunner
5e80e387bd
capabilities: Report effective UID/GID after dropping capabilities
2013-06-25 17:16:33 +02:00
Tobias Brunner
1091edede8
capabilities: CAP_CHOWN might be required by many plugins opening UNIX sockets
...
But as the sockets will be created with the user/group of the running
process this might not be required as no change may be needed.
2013-06-25 17:16:33 +02:00
Tobias Brunner
1937538440
capabilities: Handle CAP_CHOWN specially as it might not be required
2013-06-25 17:16:33 +02:00
Tobias Brunner
9c354c659f
capabilities: Check effective UID as fallback if capabilities are not supported
2013-06-25 17:16:33 +02:00
Tobias Brunner
9fd2583e6b
kernel-netlink: Make CAP_NET_ADMIN capability optional
...
It is not required to use the kernel-net part of the plugin.
2013-06-25 17:16:32 +02:00
Tobias Brunner
405f5ab9e9
farp: Require CAP_NET_RAW capability to open AF_PACKET socket
2013-06-25 17:16:32 +02:00
Tobias Brunner
6f15f5e632
dhcp: Require CAP_NET_BIND_SERVICE and CAP_NET_RAW to open/bind sockets
2013-06-25 17:16:32 +02:00
Tobias Brunner
1dd61bf13d
socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024
...
Since we don't know which ports are used with socket-dynamic we can't
demand the capability there, but it might still be required.
2013-06-25 17:16:32 +02:00
Tobias Brunner
41b8546ac0
capabilities: Only plugins that require CAP_NET_ADMIN demand it
...
The daemon as such does not require this capability.
2013-06-25 17:16:32 +02:00
Tobias Brunner
a2eb581781
capabilities: Move global capabilities_t instance to libstrongswan
2013-06-25 17:16:32 +02:00
Tobias Brunner
2e21bac19a
capabilities: Ensure required capabilities are actually held by the process/user
2013-06-25 17:16:32 +02:00
Martin Willi
a650242643
ikev2: keep the CHILD_SA we delete as initiator in the list to destroy
...
If the responder not correctly send the correct protocol or SPI in the delete
response, we should remove the CHILD_SA regardless.
2013-06-25 14:03:51 +02:00
Andreas Steffen
72631301eb
Some IMV policy managers expect a TEXT string
2013-06-25 12:47:07 +02:00
Andreas Steffen
59c9ec107f
Assign default group to newly created devices
2013-06-25 11:49:32 +02:00
Andreas Steffen
632e5b0b99
Set device creation date if it hasn't been set yet
2013-06-24 20:18:16 +02:00
Tobias Brunner
e8db483f41
unit-tester: RSA test was removed
2013-06-24 16:01:23 +02:00
Andreas Steffen
7867c1a315
Aligned AR Identity types to IF-IMV 1.4 R5 draft
2013-06-24 00:23:50 +02:00
Andreas Steffen
69c4715bf8
Send PA-TNC assessment result even if no workitems are available
2013-06-24 00:22:38 +02:00
Andreas Steffen
02497901d0
Some pacman fixes
2013-06-23 16:23:19 +02:00
Andreas Steffen
6b081a4c21
Some PTS database fixes
2013-06-21 23:25:25 +02:00
Andreas Steffen
45eb318ed4
Implemented pacman in a more reliable way
2013-06-21 23:25:25 +02:00
Andreas Steffen
4fe7294bb3
Define protocol string
2013-06-21 23:25:25 +02:00
Andreas Steffen
41dabbad41
Generate result string for port scan workitems
2013-06-21 23:25:25 +02:00
Andreas Steffen
8fbfe03e4e
Ignore non-matching protocols
2013-06-21 23:25:25 +02:00
Andreas Steffen
e5dd8a1d34
Introduced workitems to Scanner IMV
2013-06-21 23:25:24 +02:00
Andreas Steffen
da99df1443
Added ITA components to database
2013-06-21 23:25:24 +02:00
Andreas Steffen
10bb71261c
Added soft dependency on database plugin
2013-06-21 23:25:24 +02:00
Andreas Steffen
a2e30d601a
fixed SQL query
2013-06-21 23:25:24 +02:00
Andreas Steffen
4cf568a785
Shortened names of default policy groups
2013-06-21 23:25:24 +02:00
Andreas Steffen
19ce03be73
Store device with product ID
2013-06-21 23:25:24 +02:00
Andreas Steffen
bf250acb06
Database changes needed to integrate Cygnet backend
2013-06-21 23:25:24 +02:00
Andreas Steffen
01afff71cb
Implemented get|set_action_flag() methods
2013-06-21 23:25:24 +02:00
Andreas Steffen
a45a2c9291
Implemented hierarchical policy groups
2013-06-21 23:25:24 +02:00
Andreas Steffen
b1da8368d0
Introduced workitems to Attestation IMV
2013-06-21 23:25:23 +02:00
Andreas Steffen
7e9bdd20aa
pts_meas_algo_probe() and pts_dh_group_probe() got lost
2013-06-21 23:25:23 +02:00
Andreas Steffen
c174c116fe
Converted all IMVs to use generic IF-IMV API
2013-06-21 23:25:23 +02:00
Andreas Steffen
ea2663ec03
Remove the constructor from the IMV agent interface
2013-06-21 23:25:23 +02:00
Andreas Steffen
97f0a7ea77
Defined a generic IMV agent interface
2013-06-21 23:25:23 +02:00
Andreas Steffen
7513a09ee5
Moved all functionality into imv_os_agent_t class turning imv_os_t into an IF-IMV skeleton
2013-06-21 23:25:23 +02:00
Andreas Steffen