Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• f95205f580 integrity-checker: Use chunk_hash_static() to calculate checksums Tobias Brunner 2013-06-28 12:18:05 +02:00
• ed235dbbf2 chunk: Add predictable hash function Tobias Brunner 2013-06-28 12:12:41 +02:00
• b7b5432ff8 stroke: Changed how proto/port are specified in left|rightsubnet Tobias Brunner 2013-06-28 10:29:42 +02:00
• b18a531715 plugin-loader: Removed unused path argument of load() method Tobias Brunner 2013-06-28 10:44:15 +02:00
• 9da142b4dc tnc-pdp: Initialize TNC-PDP in plugin callback with proper dependencies Tobias Brunner 2013-06-27 18:01:10 +02:00
• 5b7536c803 Attestation IMV requests platform info if not received Andreas Steffen 2013-06-27 17:30:14 +02:00
• 75ff252324 integrity-checker: Fix checksum calculation after randomizing chunk_hash() Tobias Brunner 2013-06-27 15:34:08 +02:00
• fcc33c0cd4 unit-tests: Print loaded plugins Tobias Brunner 2013-06-27 11:27:13 +02:00
• a6357a62b4 unit-tests: RSA key generation might take longer than 4 seconds Tobias Brunner 2013-06-27 10:41:34 +02:00
• 65d23c7c90 tests: Properly load plugins from build directory Tobias Brunner 2013-06-25 19:42:34 +02:00
• f2086e42ff plugin-loader: Method added to provide additional search paths for plugins Tobias Brunner 2013-06-25 19:40:52 +02:00
• 71c7b43541 Support blacklist field in PTS database Andreas Steffen 2013-06-26 12:07:09 +02:00
• de8de88fa7 Updated PTS demo database Andreas Steffen 2013-06-26 10:14:25 +02:00
• f4dcbe3bf2 Device can be member of multiple groups Andreas Steffen 2013-06-25 18:42:57 +02:00
• 78e6f69e5a Adding NEWS for 5.1.0 Tobias Brunner 2013-06-22 12:11:48 +02:00
• 9da5a2ed1e Merge branch 'check-caps' Tobias Brunner 2013-06-25 17:17:40 +02:00
• ac2ffde4ae capabilities: Return effective UID/GID if user did not configure anything Tobias Brunner 2013-06-25 15:03:51 +02:00
• 68b7448eab capabilities: Make the user and group charon(-nm) changes to configurable Tobias Brunner 2013-02-05 17:48:12 +01:00
• 5e80e387bd capabilities: Report effective UID/GID after dropping capabilities Tobias Brunner 2013-06-25 10:41:03 +02:00
• 1091edede8 capabilities: CAP_CHOWN might be required by many plugins opening UNIX sockets Tobias Brunner 2013-06-25 09:03:00 +02:00
• 1937538440 capabilities: Handle CAP_CHOWN specially as it might not be required Tobias Brunner 2013-06-25 10:39:03 +02:00
• 9c354c659f capabilities: Check effective UID as fallback if capabilities are not supported Tobias Brunner 2013-06-25 10:09:38 +02:00
• 9fd2583e6b kernel-netlink: Make CAP_NET_ADMIN capability optional Tobias Brunner 2013-06-25 08:49:55 +02:00
• 405f5ab9e9 farp: Require CAP_NET_RAW capability to open AF_PACKET socket Tobias Brunner 2013-06-25 08:37:01 +02:00
• 6f15f5e632 dhcp: Require CAP_NET_BIND_SERVICE and CAP_NET_RAW to open/bind sockets Tobias Brunner 2013-06-25 08:35:06 +02:00
• 1dd61bf13d socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024 Tobias Brunner 2013-06-25 08:23:35 +02:00
• 41b8546ac0 capabilities: Only plugins that require CAP_NET_ADMIN demand it Tobias Brunner 2013-06-24 18:22:31 +02:00
• a2eb581781 capabilities: Move global capabilities_t instance to libstrongswan Tobias Brunner 2013-06-25 07:25:18 +02:00
• 2e21bac19a capabilities: Ensure required capabilities are actually held by the process/user Tobias Brunner 2013-05-08 17:14:29 +02:00
• a650242643 ikev2: keep the CHILD_SA we delete as initiator in the list to destroy Martin Willi 2013-06-25 14:03:51 +02:00
• 72631301eb Some IMV policy managers expect a TEXT string Andreas Steffen 2013-06-25 12:47:07 +02:00
• 59c9ec107f Assign default group to newly created devices Andreas Steffen 2013-06-25 11:49:32 +02:00
• 632e5b0b99 Set device creation date if it hasn't been set yet Andreas Steffen 2013-06-24 20:18:16 +02:00
• e8db483f41 unit-tester: RSA test was removed Tobias Brunner 2013-06-24 16:01:23 +02:00
• 7867c1a315 Aligned AR Identity types to IF-IMV 1.4 R5 draft Andreas Steffen 2013-06-24 00:23:50 +02:00
• 69c4715bf8 Send PA-TNC assessment result even if no workitems are available Andreas Steffen 2013-06-24 00:22:38 +02:00
• 02497901d0 Some pacman fixes Andreas Steffen 2013-06-23 16:23:19 +02:00
• 226f34e0a0 version bump to 5.1.0dr1 Andreas Steffen 2013-06-21 23:54:13 +02:00
• 6b081a4c21 Some PTS database fixes Andreas Steffen 2013-06-21 23:24:40 +02:00
• 45eb318ed4 Implemented pacman in a more reliable way Andreas Steffen 2013-06-21 14:15:18 +02:00
• 4fe7294bb3 Define protocol string Andreas Steffen 2013-06-19 09:42:21 +02:00
• 41dabbad41 Generate result string for port scan workitems Andreas Steffen 2013-06-19 09:30:31 +02:00
• 8fbfe03e4e Ignore non-matching protocols Andreas Steffen 2013-06-18 21:35:15 +02:00
• e5dd8a1d34 Introduced workitems to Scanner IMV Andreas Steffen 2013-06-18 19:13:21 +02:00
• adf8a05a3d Removed obsoleted strongswan.conf options Andreas Steffen 2013-06-18 18:59:31 +02:00
• da99df1443 Added ITA components to database Andreas Steffen 2013-06-17 11:47:39 +02:00
• 10bb71261c Added soft dependency on database plugin Andreas Steffen 2013-06-13 14:18:15 +02:00
• a2e30d601a fixed SQL query Andreas Steffen 2013-06-13 14:17:47 +02:00
• 4cf568a785 Shortened names of default policy groups Andreas Steffen 2013-06-12 19:05:34 +02:00
• 19ce03be73 Store device with product ID Andreas Steffen 2013-06-11 22:15:27 +02:00
• bf250acb06 Database changes needed to integrate Cygnet backend Andreas Steffen 2013-06-11 21:03:08 +02:00
• 01afff71cb Implemented get|set_action_flag() methods Andreas Steffen 2013-06-11 21:01:57 +02:00
• a45a2c9291 Implemented hierarchical policy groups Andreas Steffen 2013-06-10 22:56:49 +02:00
• b1da8368d0 Introduced workitems to Attestation IMV Andreas Steffen 2013-06-10 13:29:07 +02:00
• 7e9bdd20aa pts_meas_algo_probe() and pts_dh_group_probe() got lost Andreas Steffen 2013-05-30 20:04:34 +02:00
• c174c116fe Converted all IMVs to use generic IF-IMV API Andreas Steffen 2013-05-30 18:02:00 +02:00
• ea2663ec03 Remove the constructor from the IMV agent interface Andreas Steffen 2013-05-30 00:08:38 +02:00
• 97f0a7ea77 Defined a generic IMV agent interface Andreas Steffen 2013-05-30 00:06:12 +02:00
• 7513a09ee5 Moved all functionality into imv_os_agent_t class turning imv_os_t into an IF-IMV skeleton Andreas Steffen 2013-05-29 23:21:04 +02:00
• 99c6a5f8a4 Moved batch_ending into separate source file Andreas Steffen 2013-05-27 07:41:58 +02:00
• e1db511bbd do not process workitems with NULL result Andreas Steffen 2013-05-24 16:56:42 +02:00
• c219d7e31f fixed enumeration of workitems for a given session Andreas Steffen 2013-05-24 12:51:56 +02:00
• 65148217b0 generate workitems based on group policy Andreas Steffen 2013-05-23 22:12:10 +02:00
• 0fca778254 Added file and directory reference measurements to workitems Andreas Steffen 2013-05-23 15:30:55 +02:00
• 2964562199 add overall recommendation to session database entry Andreas Steffen 2013-05-19 12:43:55 +02:00
• 4f6bf1a843 don't define a default database URI Andreas Steffen 2013-05-17 22:32:04 +02:00
• 1ecff25917 created a simple IMV Policy Manager Andreas Steffen 2013-05-17 21:38:54 +02:00
• 1571a11fa4 register received scanner attributes Andreas Steffen 2013-05-17 21:38:21 +02:00
• 9d63ad17d4 used tnc_policy_update functions for default policy Andreas Steffen 2013-05-17 21:36:11 +02:00
• a6266485be refactored IMV policy management Andreas Steffen 2013-05-16 23:07:24 +02:00
• 4f9aabbfd7 implemented policy rules for OS IMV Andreas Steffen 2013-05-14 00:21:56 +02:00
• 7daf6d8cc5 check for zero-length device ID Andreas Steffen 2013-05-05 10:13:13 +02:00
• 033834719d ITA-HSR/Device ID attribute & IMV OS state machine Andreas Steffen 2013-05-04 21:06:36 +02:00
• bb9d8b1853 execute an _imv_policy script Andreas Steffen 2013-05-02 22:15:12 +02:00
• b8db66de15 implemented IMV session control Andreas Steffen 2013-04-28 22:47:09 +02:00
• 1f179c63b3 Manage files and directories Andreas Steffen 2013-04-23 00:06:34 +02:00
• b61c78d3c2 Merge branch 'kernel-libipsec' Tobias Brunner 2013-06-21 17:03:35 +02:00
• 45dcf4df57 osx-attr: add plugin installing config attributes using SystemConfiguration Martin Willi 2013-05-15 15:56:17 +02:00
• 12488efa78 kernel-pfroute: Simplify route lookup after fixing sockaddr parsing Tobias Brunner 2013-06-18 18:06:46 +02:00
• 4b3fea3d54 kernel-pfroute: Alignment of sockaddrs is not always the same Tobias Brunner 2013-06-18 17:50:51 +02:00
• aa33d2e6eb kernel-pfroute: struct sockaddr arguments are 4 byte aligned Tobias Brunner 2013-06-18 16:55:03 +02:00
• 23ea59a95c kernel-libipsec: Ignore failures when installing routes for multicast or broadcast policies Tobias Brunner 2013-06-17 21:51:23 +02:00
• b0629f7d9b kernel-pfroute: Improve route lookup depending on information we get back Tobias Brunner 2013-06-17 15:56:44 +02:00
• 1c697ff1c5 kernel-pfroute: Try to ensure we get a source address or interface name Tobias Brunner 2013-06-17 15:38:35 +02:00
• 01955eec71 ike: Force NAT-T/UDP encapsulation if kernel interface requires it Tobias Brunner 2013-06-17 10:23:04 +02:00
• 35fe41f7d0 kernel-libipsec: Add a feature to request UDP encapsulation of ESP packets Tobias Brunner 2013-06-17 10:13:56 +02:00
• 66aaabf342 tun-device: Packets sent over utun devices on Mac OS X have the protocol family prepended Tobias Brunner 2013-06-16 20:05:08 +02:00
• 34b0ad0653 kernel-pfroute: Use DST as nexthop for host routes Tobias Brunner 2013-06-16 18:59:13 +02:00
• d6c17e96b2 kernel-pfroute: Implement get_source_addr() Tobias Brunner 2013-06-16 11:40:16 +02:00
• f58f8bf409 kernel-pfroute: Properly install routes with interface and gateway Tobias Brunner 2013-06-16 10:49:25 +02:00
• 1f31a2bc2e kernel-libipsec: Install a gateway for routes on platforms other than Linux Tobias Brunner 2013-06-16 10:47:39 +02:00
• 93e4df3761 kernel-pfroute: Activate TUN device before setting address Tobias Brunner 2013-06-15 18:56:11 +02:00
• c8a56512a6 tun-device: Avoid opening /dev/tunX multiple times (e.g. on FreeBSD) Tobias Brunner 2013-06-15 17:46:25 +02:00
• dcaf8d570c kernel-libipsec: Router reads packets from multiple TUN devices Tobias Brunner 2013-06-15 16:21:08 +02:00
• 7045defbff kernel-libipsec: Use separate class to route packets between charon, libipsec and TUN device Tobias Brunner 2013-06-15 14:21:34 +02:00
• 554c4276a5 kernel-pfroute: Raise tun event when creating/destroying TUN devices for virtual IPs Tobias Brunner 2013-06-13 17:51:16 +02:00
• 4868d1c3bc kernel: Add an event kernel interfaces can raise if they create/destroy a TUN device Tobias Brunner 2013-06-13 17:03:17 +02:00
• 0d2ad63fe2 printf-hook: Avoid double-free when freeing Vstr config Tobias Brunner 2013-06-12 16:13:32 +02:00
• 587bdf8768 kernel-libipsec: Track policies and automatically install routes Tobias Brunner 2013-06-11 18:53:28 +02:00
• 44a49681fd kernel-libipsec: Handle packets between charon socket, libipsec and TUN device Tobias Brunner 2013-06-11 18:52:23 +02:00