68 Commits

Author SHA1 Message Date
Francois Marier 1f417ea829 Fix AppArmor profile for Debian unstable 2019-02-25 09:07:54 -08:00
Jakub Wilk ca320c1c73 [extras] fix URL in OpenWRT packaging 2017-04-25 21:12:24 +02:00
Michael Rash 9f963df723 minor comment addition 2017-02-20 21:51:35 -05:00
Franck Joncourt 861111bd1e Fix apparmor profil for Ubuntu
Refer to https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/1598506
2016-11-11 22:19:02 +01:00
Michael Rash 5f15119190 clarify GPL v2+ for the license per issue #222 2016-06-03 22:08:15 -04:00
Jonathan Bennett d939deb811 Spelling corrections, found using the codespell tool. 2016-04-10 12:03:59 -05:00
alteman 4855202c98 Fix Ubuntu AppArmor regression
Error: 
$ sudo fwknopd -f -c /etc/fwknop/fwknopd.conf 
Starting fwknopd
Added jump rule from chain: INPUT to chain: FWKNOP_INPUT
iptables 'comment' match is available
Sniffing interface: ppp0
[*] pcap_open_live() error: ppp0: You don't have permission to capture on that device (socket: Permission denied)

Syslog:

[...] kernel: [...] type=1400 audit([...]): apparmor="DENIED" operation="create" profile="/usr/sbin/fwknopd" pid=[...] comm="fwknopd" family="packet" sock_type="dgram" protocol=768
2016-02-04 00:55:39 +03:00
Michael Rash 8bb46f9664 [extras] add scan-build wrapper for the CLANG static analyzer 2016-01-12 21:42:42 -05:00
Michael Rash 88907248f7 [extras] minor Coverity scan path update 2015-12-21 09:29:43 -08:00
Michael Rash d509925822 [extras] add build support for Google's UndefinedBehaviorSanitizer 2015-12-09 18:19:42 -08:00
Michael Rash f37fd22816 [extras] use default configure args before running cov-build 2015-08-21 21:49:07 -04:00
Michael Rash 47ff151dea [build] add convenience script for ASan builds
Sometimes when ASan support is wanted for fwknop, the following compile
error can be generated. This script provides a means to solve this.

fwknop-spa_comm.o: In function `send_spa_packet_http':
/home/mbr/git/fwknop.git/client/spa_comm.c:516: undefined reference to `rpl_malloc'
../lib/.libs/libfko.so: undefined reference to `rpl_realloc'
2015-08-18 20:37:56 -04:00
Michael Rash 8edad8b583 [extras] update Coverity version to 7.7.0 for interface script 2015-08-16 21:27:14 -04:00
Ilya Tumaykin 8647854efe extras: add systemd unit file and tmpfiles.d configuration for fwknopd 2015-07-19 06:18:54 +03:00
Michael Rash 788bf543c8 [extras] added ramdisk-create-osx.sh for Mac OS X systems 2015-06-30 21:24:00 -04:00
Michael Rash 29defca4d5 (Jonathan Bennett) added console-qr.sh script to create QR codes from fwknopd access.conf keys 2015-05-20 18:52:30 -07:00
Michael Rash 1f45462206 [extras] run ramdisk creation script from top level sources directory 2015-05-21 22:18:14 -04:00
Ilya Tumaykin f757b4ebda extras: adjust 'localstatedir' value for the AppArmor profile
Comments in the shipped AppArmor profile state that fwknopd is assumed
to be built with 'localstatedir=/var', which is misleading for several
reasons:

* AppArmor profile assumes that fwknopd's pidfile and digest cache are
under /run/fwknop by the looks of it, i.e. 'localstatedir' is '/run'.

* By default these files are placed under /var/run/fwknop. Thus this
profile implicitly relies on the existence of '/var/run -> /run' symlink
and won't work otherwise when 'localstatedir' is '/var'

Since GitHub PR#152 was merged, 'localstatedir' can be simply set to
'/run' for AppArmor users to avoid this confusion. This changeset does
it.

If anyone had it working before, they should have it working now as the
shipped AppArmor profile required /run existence before as well.
2015-04-20 14:32:37 +03:00
Michael Rash f962edda00 [extras] update Coverity installation path 2015-04-19 19:37:06 -07:00
Michael Rash c4ffd4b00a [extras] minor ramdisk creation bug fix 2015-03-30 21:38:31 -04:00
Michael Rash 5aacd6ae21 added convenience script to create a ramdisk for AFL fuzzing runs 2015-03-22 22:18:04 -04:00
Michael Rash 2414393c94 added the extras/patches/ directory (initial patch to link against pthreads for libfiu support) 2015-03-22 22:02:12 -04:00
Michael Rash 5fadf56af4 added extras/coverity/ directory for Coverity script 2014-07-22 22:05:29 -04:00
Michael Rash 46e8428e01 [extras] allow configure wrapper to pass on args to the configure script 2014-03-17 22:06:31 -04:00
Michael Rash 9e990c9be0 fix header non-ascii chars, and introduce test suite support for detecting this in source files 2014-03-14 09:14:35 -04:00
Michael Rash bfdbb8f260 Updated authorship and copyright information
This commit updates all authorship and copyright information to include a
standard header that references the AUTHORS and CREDITS file. This standard
header was written by the Debian legal team at the request of Franck Joncourt.
2014-03-04 17:53:10 -05:00
Michael Rash cba2873e22 AppArmor profile update to allow GnuPG link operations, closes #109
This fix was submitted by Raybuntu through github.
2013-11-22 22:36:17 -05:00
Michael Rash af3d4fa926 minor extras/apparmor configure_args.sh path typo fix 2013-11-14 09:55:43 -05:00
Michael Rash 10ac35b344 added extras/apparmor configure_args.sh helper script for building fwknop with args that AppArmor expects 2013-11-14 09:54:38 -05:00
Michael Rash a5c308f9c5 Added AppArmor policy
This commit adds an AppArmor policy that is known to work in Debian and Ubuntu
systems.  The original version of this policy was contributed by Radostan Riedel
to the fwknop mailing list.
2013-08-18 22:58:10 -04:00
Franck Joncourt c2e1a00154 s/GNU Public/GNU General Public/g 2013-06-30 22:21:22 +02:00
Michael Rash 59eb7fcf0f [extras] update spa-entropy.pl script to point fwknop client in gpg mode to the no-pw homedir 2013-06-04 21:17:15 -04:00
Michael Rash 44d05a6916 interim commit for supporting multiple HMAC digest types (# 45) 2013-03-07 23:14:48 -05:00
Michael Rash 47ea800889 merged in fwknop-2.0.4 changes 2013-01-18 17:25:16 -05:00
Michael Rash 516b75f41c removed openbsd/pkg/ directory 2012-12-13 21:09:47 -05:00
Michael Rash 0d19065ecc added fwknop-2.0.4 OpenBSD port from Vlad Glagolev 2012-12-13 21:07:53 -05:00
Michael Rash 0e89efb40e moved openbsd/* to openbsd/fwknop-2.0.3/ now that Vlad Glagolev has contributed an fwknop-2.0.4 OpenBSD port 2012-12-13 21:05:31 -05:00
Michael Rash bb1743d25d [server] Switched upstart config to use 'expect' section
This change allows fwknopd to write syslog messages to traditional syslog files
while running under upstart.  Not forking into the background resulted in
messages meant for syslog were captured under /var/log/upstart/fwknop.log.
2012-10-02 23:22:15 -04:00
Michael Rash 1f4ca20f76 [server] upstart config change to start on network device up
For the upstart config make sure only start fwknopd after a non-loopback
network interface is brought up.  Also added a commented post-start script
to send an email whenever fwknopd is (re)started.
2012-09-29 21:58:04 -04:00
Michael Rash f7472bec0f Added upstart config for Ubuntu systems
fwknop can be easily managed with upstart with the addition of this config.
Here is an example:

 # service fwknop start
 fwknop start/running, process 4269
2012-09-27 21:58:38 -04:00
Michael Rash 2b09f048f7 (Vlad Glagolev) Submitted an OpenBSD port for fwknop-2.0.3
(Vlad Glagolev) Submitted an OpenBSD port for fwknop-2.0.3, and this has
been checked in under extras/openbsd/.
2012-09-13 21:24:54 -04:00
Michael Rash b643848e05 added --hmac-mode to spa-entropy.pl 2012-08-19 22:27:04 -04:00
Michael Rash 8d6bc05295 merged from master 2012-08-17 21:19:52 -04:00
Michael Rash a646a024d9 added 'Pragma: no-cache' header 2012-08-15 22:46:49 -04:00
Michael Rash dfe6679c57 Added the extras/myip/ directory for client IP resolution code
The myip.c file is deployed at http://www.cipherdyne.org/cgi-bin/myip
for fwknop client IP resolution.
2012-08-14 21:51:00 -04:00
Michael Rash c6b674617c completed merge from master after fwknop-2.0.1 release 2012-07-24 16:19:48 -04:00
Michael Rash cab2ea9083 bumped version to 2.0.1 2012-07-23 22:40:47 -04:00
Michael Rash 3c533de7e4 updated Debian init script (contributed by Franck Joncourt) 2012-07-23 21:49:25 -04:00
Michael Rash 71690a1de4 bug fix to ensure to pick up proper entropy min/max values 2012-02-13 13:56:24 -05:00
Michael Rash 65cd9b0038 updated to local_spa.key from the test suite directory 2012-02-13 12:48:58 -05:00