Michael Rash
|
4ca718f8da
|
[test suite] allow valgrind/crash search/profile coverage tests to run after --test-limit
|
2014-11-06 20:21:05 -05:00 |
|
Michael Rash
|
04f8b9669a
|
[server] check number of cmd args even when execvpe() is not available
|
2014-11-05 23:19:51 -05:00 |
|
Michael Rash
|
e7942f48e0
|
[server] allow loop restart after select() sets EINTR (since we handle signals) - fixes cmd execution through UDP on FreeBSD
|
2014-11-04 22:44:59 -05:00 |
|
Michael Rash
|
c5f0389281
|
[server] minor code restructure, use FD_ISSET() test on file descriptors
|
2014-11-04 22:43:04 -05:00 |
|
Michael Rash
|
705c507414
|
[test suite] check for TCP/UDP server string in do_fwknopd_cmd()
|
2014-11-03 19:57:50 -05:00 |
|
Michael Rash
|
fdc6e0db20
|
[test suite] bug fix to specify LD_LIBRARY_PATH for configure --enable-udp-server recompile test
|
2014-11-02 15:30:56 -05:00 |
|
Michael Rash
|
7a98eed759
|
[test suite] add spa_fuzzing.py and a few minor helper files for FreeBSD/OpenBSD
|
2014-11-01 20:44:35 -04:00 |
|
Michael Rash
|
3826bb5631
|
ChangeLog updates, bump version to 2.6.4
|
2014-11-01 12:04:11 -04:00 |
|
Michael Rash
|
50009115b3
|
[server] bug fix to close write filehandle in _run_extcmd_write()
|
2014-11-01 12:03:49 -04:00 |
|
Michael Rash
|
4880243902
|
[test suite] added invalid_firewd_input_chain_* files
|
2014-10-28 21:56:19 -04:00 |
|
Michael Rash
|
387c1acdf7
|
add fcs_spa.pcap to Makefile.am
|
2014-10-28 21:29:34 -04:00 |
|
Michael Rash
|
34e38fe39e
|
[server] first pass at eliminating popen() write calls with run_extcmd_write() (used for PF firewalls)
|
2014-10-28 21:28:21 -04:00 |
|
Michael Rash
|
b5fe62bfc7
|
[test suite] command exec too many args tests
|
2014-10-26 16:58:13 -04:00 |
|
Michael Rash
|
d2abbd8720
|
[test suite] more code coverage tests
|
2014-10-25 22:29:49 -04:00 |
|
Michael Rash
|
17608dd01d
|
[test suite] additional code coverage
|
2014-10-25 08:42:30 -04:00 |
|
Michael Rash
|
837f7780fe
|
[libfko] validate MAX_PORT integer value for SPA messages
|
2014-10-25 08:42:14 -04:00 |
|
Michael Rash
|
58d47cb385
|
[test suite] additional code coverage for a few areas
|
2014-10-24 20:39:40 -04:00 |
|
Michael Rash
|
7b70ed08d2
|
[server] ensure to break out of while loop and close() UDP socket before returning
|
2014-10-23 23:05:21 -04:00 |
|
Michael Rash
|
3040251695
|
[test suite] default to recompiling fwknop in code coverage profiling mode
|
2014-10-23 20:03:34 -04:00 |
|
Michael Rash
|
cbb3b0d413
|
[test suite] add branch coverage stats in code coverage mode
|
2014-10-23 19:55:30 -04:00 |
|
Michael Rash
|
a2ce50e9e5
|
[python module] default to HMAC SHA256 when an HMAC key is used but no HMAC mode was specified
|
2014-10-23 08:45:21 -04:00 |
|
Michael Rash
|
d7be3f43ac
|
[test suite] firewall prefix typo bug fix
|
2014-10-23 08:40:21 -04:00 |
|
Michael Rash
|
22161af075
|
[test suite] add ipt_local_nat_fwknopd.conf
|
2014-10-23 08:39:42 -04:00 |
|
Michael Rash
|
b8f1cf6c6c
|
make sure test suite conf files are included in Makefile.am
|
2014-10-21 22:49:03 -04:00 |
|
Michael Rash
|
56a6b7dee5
|
give firewalld its own namespace (can track firewalld changes independently of iptables)
|
2014-10-21 22:43:21 -04:00 |
|
Michael Rash
|
6945e23bc9
|
[test suite] UDP server command execution tests, run configure arg recompile tests after gcov profiling stuff
|
2014-10-20 22:23:46 -04:00 |
|
Michael Rash
|
15f73c7f9e
|
[test suite] added configure args test with UDP server test for fwknopd not linking against libpcap
|
2014-10-19 22:58:35 -04:00 |
|
Michael Rash
|
0af8faa0b3
|
Merge branch 'udp_listener' into execvpe
|
2014-10-13 20:25:14 -04:00 |
|
Michael Rash
|
00b229b834
|
[test suite] detect firewalld vs. iptables for server rewrite conf tests
|
2014-10-13 19:54:30 -04:00 |
|
Michael Rash
|
c70e1c72a0
|
[server] update firewalld code to use run_extcmd() instead of popen() and system() - allows execvpe() to be used
|
2014-10-12 21:57:04 -04:00 |
|
Michael Rash
|
d9fb29318e
|
[test suite] add --exit-parse-config to fwknopd basic tests where possible
|
2014-10-12 21:29:44 -04:00 |
|
Michael Rash
|
c481f7f6b3
|
add --disable-execvpe arg to configure script (looks for execvpe() support by default)
|
2014-10-12 13:16:30 -04:00 |
|
Michael Rash
|
62ee780d65
|
[server] make pid_status a static var at the top of each fw_util_*.c file
|
2014-10-10 14:20:18 -04:00 |
|
Michael Rash
|
e54b15ceaf
|
[test suite] fix up Rijndael cmd exec test
|
2014-10-10 08:16:31 -04:00 |
|
Michael Rash
|
a6007918a8
|
added setuid/setgid cmd exec test files
|
2014-10-10 08:15:44 -04:00 |
|
Michael Rash
|
2b5088eb76
|
[test suite] added use terminal test, fix up Rijndael CMD tests
|
2014-10-09 16:03:05 -04:00 |
|
Michael Rash
|
6dd599f3de
|
[server] update ipfw and pf firewall interace code to latest run_extcmd() API
|
2014-10-07 23:23:05 -04:00 |
|
Michael Rash
|
06f3db1de8
|
[server] restore shell stderr redirect when execvpe() is not available
|
2014-10-07 21:42:36 -04:00 |
|
Michael Rash
|
1905baa0e8
|
[server] minor macro usage update
|
2014-10-07 21:37:29 -04:00 |
|
Michael Rash
|
b7785a9304
|
[server] extend run_extcmd() to allow the caller to specify whether to collect stderr
|
2014-10-07 21:01:17 -04:00 |
|
Michael Rash
|
ed9e1ac236
|
added setgid() call for command execution along with CMD_EXEC_GROUP access.conf var
|
2014-10-07 16:18:14 -04:00 |
|
Michael Rash
|
e6d162215f
|
[test suite] added command execution setuid() 'nobody' test
|
2014-10-06 22:04:20 -04:00 |
|
Michael Rash
|
fedc691e21
|
[test suite] added generate_core.sh script and --enable-cores-pattern arg for the test suite
|
2014-10-06 21:10:02 -04:00 |
|
Michael Rash
|
248c4b301e
|
added configure detection of execvpe() - doesn't exist on Mac OS X yet
|
2014-10-06 20:04:00 -04:00 |
|
Michael Rash
|
652b8cb80e
|
[server] have run_extcmd() collect process exit status for calling function (in addition to return value)
|
2014-10-05 20:21:05 -04:00 |
|
Michael Rash
|
a47ddfcb1e
|
[server] added WIFEXITED(status) check for external commands run via execvpe()
|
2014-10-04 21:14:49 -04:00 |
|
Michael Rash
|
841d732c07
|
[server] removed remaining popen() call for iptables firewalls
|
2014-10-04 19:56:26 -04:00 |
|
Michael Rash
|
50952b4a6e
|
Merge branch 'master' of https://github.com/mrash/fwknop into execvpe
|
2014-10-04 19:36:04 -04:00 |
|
Michael Rash
|
87f3bbdd23
|
[server] hex_dump() '%' bug fix, minor verbose criteria update
|
2014-10-04 16:40:44 -04:00 |
|
Michael Rash
|
46232122c3
|
Merge branch 'master' of https://github.com/mrash/fwknop
|
2014-10-04 10:38:08 -04:00 |
|