denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11,354 Commits 1 Branch 0 Tags
f4dcbe3bf26d00797ccb05aec31dfb17cc5065e5
Commit Graph
8901 Commits
Author SHA1 Message Date
Andreas Steffen f4dcbe3bf2 Device can be member of multiple groups 2013-06-25 18:43:07 +02:00
Tobias Brunner ac2ffde4ae capabilities: Return effective UID/GID if user did not configure anything 2013-06-25 17:16:33 +02:00
Tobias Brunner 68b7448eab capabilities: Make the user and group charon(-nm) changes to configurable 2013-06-25 17:16:33 +02:00
Tobias Brunner 5e80e387bd capabilities: Report effective UID/GID after dropping capabilities 2013-06-25 17:16:33 +02:00
Tobias Brunner 1091edede8 capabilities: CAP_CHOWN might be required by many plugins opening UNIX sockets 
But as the sockets will be created with the user/group of the running
process this might not be required as no change may be needed.
 2013-06-25 17:16:33 +02:00
Tobias Brunner 1937538440 capabilities: Handle CAP_CHOWN specially as it might not be required 2013-06-25 17:16:33 +02:00
Tobias Brunner 9c354c659f capabilities: Check effective UID as fallback if capabilities are not supported 2013-06-25 17:16:33 +02:00
Tobias Brunner 9fd2583e6b kernel-netlink: Make CAP_NET_ADMIN capability optional 
It is not required to use the kernel-net part of the plugin.
 2013-06-25 17:16:32 +02:00
Tobias Brunner 405f5ab9e9 farp: Require CAP_NET_RAW capability to open AF_PACKET socket 2013-06-25 17:16:32 +02:00
Tobias Brunner 6f15f5e632 dhcp: Require CAP_NET_BIND_SERVICE and CAP_NET_RAW to open/bind sockets 2013-06-25 17:16:32 +02:00
Tobias Brunner 1dd61bf13d socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024 
Since we don't know which ports are used with socket-dynamic we can't
demand the capability there, but it might still be required.
 2013-06-25 17:16:32 +02:00
Tobias Brunner 41b8546ac0 capabilities: Only plugins that require CAP_NET_ADMIN demand it 
The daemon as such does not require this capability.
 2013-06-25 17:16:32 +02:00
Tobias Brunner a2eb581781 capabilities: Move global capabilities_t instance to libstrongswan 2013-06-25 17:16:32 +02:00
Tobias Brunner 2e21bac19a capabilities: Ensure required capabilities are actually held by the process/user 2013-06-25 17:16:32 +02:00
Martin Willi a650242643 ikev2: keep the CHILD_SA we delete as initiator in the list to destroy 
If the responder not correctly send the correct protocol or SPI in the delete
response, we should remove the CHILD_SA regardless.
 2013-06-25 14:03:51 +02:00
Andreas Steffen 72631301eb Some IMV policy managers expect a TEXT string 2013-06-25 12:47:07 +02:00
Andreas Steffen 59c9ec107f Assign default group to newly created devices 2013-06-25 11:49:32 +02:00
Andreas Steffen 632e5b0b99 Set device creation date if it hasn't been set yet 2013-06-24 20:18:16 +02:00
Tobias Brunner e8db483f41 unit-tester: RSA test was removed 2013-06-24 16:01:23 +02:00
Andreas Steffen 7867c1a315 Aligned AR Identity types to IF-IMV 1.4 R5 draft 2013-06-24 00:23:50 +02:00
Andreas Steffen 69c4715bf8 Send PA-TNC assessment result even if no workitems are available 2013-06-24 00:22:38 +02:00
Andreas Steffen 02497901d0 Some pacman fixes 2013-06-23 16:23:19 +02:00
Andreas Steffen 6b081a4c21 Some PTS database fixes 2013-06-21 23:25:25 +02:00
Andreas Steffen 45eb318ed4 Implemented pacman in a more reliable way 2013-06-21 23:25:25 +02:00
Andreas Steffen 4fe7294bb3 Define protocol string 2013-06-21 23:25:25 +02:00
Andreas Steffen 41dabbad41 Generate result string for port scan workitems 2013-06-21 23:25:25 +02:00
Andreas Steffen 8fbfe03e4e Ignore non-matching protocols 2013-06-21 23:25:25 +02:00
Andreas Steffen e5dd8a1d34 Introduced workitems to Scanner IMV 2013-06-21 23:25:24 +02:00
Andreas Steffen da99df1443 Added ITA components to database 2013-06-21 23:25:24 +02:00
Andreas Steffen 10bb71261c Added soft dependency on database plugin 2013-06-21 23:25:24 +02:00
Andreas Steffen a2e30d601a fixed SQL query 2013-06-21 23:25:24 +02:00
Andreas Steffen 4cf568a785 Shortened names of default policy groups 2013-06-21 23:25:24 +02:00
Andreas Steffen 19ce03be73 Store device with product ID 2013-06-21 23:25:24 +02:00
Andreas Steffen bf250acb06 Database changes needed to integrate Cygnet backend 2013-06-21 23:25:24 +02:00
Andreas Steffen 01afff71cb Implemented get|set_action_flag() methods 2013-06-21 23:25:24 +02:00
Andreas Steffen a45a2c9291 Implemented hierarchical policy groups 2013-06-21 23:25:24 +02:00
Andreas Steffen b1da8368d0 Introduced workitems to Attestation IMV 2013-06-21 23:25:23 +02:00
Andreas Steffen 7e9bdd20aa pts_meas_algo_probe() and pts_dh_group_probe() got lost 2013-06-21 23:25:23 +02:00
Andreas Steffen c174c116fe Converted all IMVs to use generic IF-IMV API 2013-06-21 23:25:23 +02:00
Andreas Steffen ea2663ec03 Remove the constructor from the IMV agent interface 2013-06-21 23:25:23 +02:00
Andreas Steffen 97f0a7ea77 Defined a generic IMV agent interface 2013-06-21 23:25:23 +02:00
Andreas Steffen 7513a09ee5 Moved all functionality into imv_os_agent_t class turning imv_os_t into an IF-IMV skeleton 2013-06-21 23:25:23 +02:00
Andreas Steffen 99c6a5f8a4 Moved batch_ending into separate source file 2013-06-21 23:25:23 +02:00
Andreas Steffen e1db511bbd do not process workitems with NULL result 2013-06-21 23:25:23 +02:00
Andreas Steffen c219d7e31f fixed enumeration of workitems for a given session 2013-06-21 23:25:23 +02:00
Andreas Steffen 65148217b0 generate workitems based on group policy 2013-06-21 23:25:23 +02:00
Andreas Steffen 0fca778254 Added file and directory reference measurements to workitems 2013-06-21 23:25:22 +02:00
Andreas Steffen 2964562199 add overall recommendation to session database entry 2013-06-21 23:25:22 +02:00
Andreas Steffen 4f6bf1a843 don't define a default database URI 2013-06-21 23:25:22 +02:00
Andreas Steffen 1ecff25917 created a simple IMV Policy Manager 2013-06-21 23:25:22 +02:00