0b475ec7b3
Use execvp() instead of execvpe()
...
execvp() is (usually) equivalent to execvpe(), without enforcing any
change to the environment. However, unlike execvp(), execvpe() is not
standardized by POSIX, and may therefore not be available nor detected
when configuring the project (like on NetBSD).
No place could be found in fwknop to be using execvpe() and changing the
environment. Therefore it seems only logical (and safer) to use execvp()
instead.
This also updates the tests to reflect this change.
2018-08-06 12:04:45 +02:00
Jonathan Bennett
d448004f38
[Server] slightly broadens FORWARD rule matching, disables rewriting sport for snat
2016-05-29 14:13:53 -05:00
Michael Rash
29411dea8c
Merge branch 'master' of ssh://github.com/mrash/fwknop
2016-01-03 08:44:22 -05:00
Michael Rash
6247fe9e6a
Merge remote-tracking branch 'origin/dstuart_netfilter_queue'
2016-01-03 08:31:12 -05:00
Jonathan Bennett
3378ba2423
Add Doxygen headers for server files
2016-01-01 02:09:59 +00:00
Michael Rash
a85b081f79
copyright update
2015-12-23 14:34:51 -05:00
Damien Stuart
ba611a2d2c
Many additions and modifications for support of capture via Netfilter Queue.
2015-12-20 21:58:31 -05:00
Damien Stuart
d2cef1746c
Initial update for NETFILTER_QUEUE support. These changes are not tested at all as they were edit on a Mac, but are linux-specific.
2015-11-28 15:03:39 -05:00
Michael Rash
03959653ca
[server] differentiate MASQUERADE from SNAT with a dedicated FWKNOP_MASQUERADE chain
2015-04-18 05:38:35 -07:00
Michael Rash
c0f3ed38a8
[server] further error status simplication for firewalld
2015-04-14 08:15:03 -07:00
Michael Rash
8010690039
[server] add missing #define's for firewalld
2015-04-06 11:47:07 -07:00
Michael Rash
59edf64d9c
[server] consolidate fw creation, add FORWARD_ALL functionality
2015-03-07 20:09:31 -08:00
Michael Rash
cfd1cbf2bf
[server] minor macro usage update for 127.0.0.2
2015-03-07 19:45:50 -08:00
Grant Pannell
624872ef48
Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive
2014-11-29 15:05:06 +10:30
Michael Rash
c70e1c72a0
[server] update firewalld code to use run_extcmd() instead of popen() and system() - allows execvpe() to be used
2014-10-12 21:57:04 -04:00
Gerry Reno
2da57da0cb
more changes for firewalld
2014-08-31 16:13:46 -04:00
Gerry Reno
ac82b1ced2
more changes for firewalld
2014-08-31 13:51:08 -04:00
Gerry Reno
d47ebb602a
more changes for firewalld
2014-08-31 02:23:39 -04:00
Gerry Reno
25d252c11a
more changes for firewalld
2014-08-31 00:29:17 -04:00
Gerry Reno
e54383b518
first cut at firewalld
2014-08-31 00:06:37 -04:00
