66 Commits

Author SHA1 Message Date
Michael Rash
9f963df723 minor comment addition 2017-02-20 21:51:35 -05:00
Franck Joncourt
861111bd1e Fix apparmor profil for Ubuntu
Refer to https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/1598506
2016-11-11 22:19:02 +01:00
Michael Rash
5f15119190 clarify GPL v2+ for the license per issue #222 2016-06-03 22:08:15 -04:00
Jonathan Bennett
d939deb811 Spelling corrections, found using the codespell tool. 2016-04-10 12:03:59 -05:00
alteman
4855202c98 Fix Ubuntu AppArmor regression
Error: 
$ sudo fwknopd -f -c /etc/fwknop/fwknopd.conf 
Starting fwknopd
Added jump rule from chain: INPUT to chain: FWKNOP_INPUT
iptables 'comment' match is available
Sniffing interface: ppp0
[*] pcap_open_live() error: ppp0: You don't have permission to capture on that device (socket: Permission denied)

Syslog:

[...] kernel: [...] type=1400 audit([...]): apparmor="DENIED" operation="create" profile="/usr/sbin/fwknopd" pid=[...] comm="fwknopd" family="packet" sock_type="dgram" protocol=768
2016-02-04 00:55:39 +03:00
Michael Rash
8bb46f9664 [extras] add scan-build wrapper for the CLANG static analyzer 2016-01-12 21:42:42 -05:00
Michael Rash
88907248f7 [extras] minor Coverity scan path update 2015-12-21 09:29:43 -08:00
Michael Rash
d509925822 [extras] add build support for Google's UndefinedBehaviorSanitizer 2015-12-09 18:19:42 -08:00
Michael Rash
f37fd22816 [extras] use default configure args before running cov-build 2015-08-21 21:49:07 -04:00
Michael Rash
47ff151dea [build] add convenience script for ASan builds
Sometimes when ASan support is wanted for fwknop, the following compile
error can be generated. This script provides a means to solve this.

fwknop-spa_comm.o: In function `send_spa_packet_http':
/home/mbr/git/fwknop.git/client/spa_comm.c:516: undefined reference to `rpl_malloc'
../lib/.libs/libfko.so: undefined reference to `rpl_realloc'
2015-08-18 20:37:56 -04:00
Michael Rash
8edad8b583 [extras] update Coverity version to 7.7.0 for interface script 2015-08-16 21:27:14 -04:00
Ilya Tumaykin
8647854efe extras: add systemd unit file and tmpfiles.d configuration for fwknopd 2015-07-19 06:18:54 +03:00
Michael Rash
788bf543c8 [extras] added ramdisk-create-osx.sh for Mac OS X systems 2015-06-30 21:24:00 -04:00
Michael Rash
29defca4d5 (Jonathan Bennett) added console-qr.sh script to create QR codes from fwknopd access.conf keys 2015-05-20 18:52:30 -07:00
Michael Rash
1f45462206 [extras] run ramdisk creation script from top level sources directory 2015-05-21 22:18:14 -04:00
Ilya Tumaykin
f757b4ebda extras: adjust 'localstatedir' value for the AppArmor profile
Comments in the shipped AppArmor profile state that fwknopd is assumed
to be built with 'localstatedir=/var', which is misleading for several
reasons:

* AppArmor profile assumes that fwknopd's pidfile and digest cache are
under /run/fwknop by the looks of it, i.e. 'localstatedir' is '/run'.

* By default these files are placed under /var/run/fwknop. Thus this
profile implicitly relies on the existence of '/var/run -> /run' symlink
and won't work otherwise when 'localstatedir' is '/var'

Since GitHub PR#152 was merged, 'localstatedir' can be simply set to
'/run' for AppArmor users to avoid this confusion. This changeset does
it.

If anyone had it working before, they should have it working now as the
shipped AppArmor profile required /run existence before as well.
2015-04-20 14:32:37 +03:00
Michael Rash
f962edda00 [extras] update Coverity installation path 2015-04-19 19:37:06 -07:00
Michael Rash
c4ffd4b00a [extras] minor ramdisk creation bug fix 2015-03-30 21:38:31 -04:00
Michael Rash
5aacd6ae21 added convenience script to create a ramdisk for AFL fuzzing runs 2015-03-22 22:18:04 -04:00
Michael Rash
2414393c94 added the extras/patches/ directory (initial patch to link against pthreads for libfiu support) 2015-03-22 22:02:12 -04:00
Michael Rash
5fadf56af4 added extras/coverity/ directory for Coverity script 2014-07-22 22:05:29 -04:00
Michael Rash
46e8428e01 [extras] allow configure wrapper to pass on args to the configure script 2014-03-17 22:06:31 -04:00
Michael Rash
9e990c9be0 fix header non-ascii chars, and introduce test suite support for detecting this in source files 2014-03-14 09:14:35 -04:00
Michael Rash
bfdbb8f260 Updated authorship and copyright information
This commit updates all authorship and copyright information to include a
standard header that references the AUTHORS and CREDITS file. This standard
header was written by the Debian legal team at the request of Franck Joncourt.
2014-03-04 17:53:10 -05:00
Michael Rash
cba2873e22 AppArmor profile update to allow GnuPG link operations, closes #109
This fix was submitted by Raybuntu through github.
2013-11-22 22:36:17 -05:00
Michael Rash
af3d4fa926 minor extras/apparmor configure_args.sh path typo fix 2013-11-14 09:55:43 -05:00
Michael Rash
10ac35b344 added extras/apparmor configure_args.sh helper script for building fwknop with args that AppArmor expects 2013-11-14 09:54:38 -05:00
Michael Rash
a5c308f9c5 Added AppArmor policy
This commit adds an AppArmor policy that is known to work in Debian and Ubuntu
systems.  The original version of this policy was contributed by Radostan Riedel
to the fwknop mailing list.
2013-08-18 22:58:10 -04:00
Franck Joncourt
c2e1a00154 s/GNU Public/GNU General Public/g 2013-06-30 22:21:22 +02:00
Michael Rash
59eb7fcf0f [extras] update spa-entropy.pl script to point fwknop client in gpg mode to the no-pw homedir 2013-06-04 21:17:15 -04:00
Michael Rash
44d05a6916 interim commit for supporting multiple HMAC digest types (# 45) 2013-03-07 23:14:48 -05:00
Michael Rash
47ea800889 merged in fwknop-2.0.4 changes 2013-01-18 17:25:16 -05:00
Michael Rash
516b75f41c removed openbsd/pkg/ directory 2012-12-13 21:09:47 -05:00
Michael Rash
0d19065ecc added fwknop-2.0.4 OpenBSD port from Vlad Glagolev 2012-12-13 21:07:53 -05:00
Michael Rash
0e89efb40e moved openbsd/* to openbsd/fwknop-2.0.3/ now that Vlad Glagolev has contributed an fwknop-2.0.4 OpenBSD port 2012-12-13 21:05:31 -05:00
Michael Rash
bb1743d25d [server] Switched upstart config to use 'expect' section
This change allows fwknopd to write syslog messages to traditional syslog files
while running under upstart.  Not forking into the background resulted in
messages meant for syslog were captured under /var/log/upstart/fwknop.log.
2012-10-02 23:22:15 -04:00
Michael Rash
1f4ca20f76 [server] upstart config change to start on network device up
For the upstart config make sure only start fwknopd after a non-loopback
network interface is brought up.  Also added a commented post-start script
to send an email whenever fwknopd is (re)started.
2012-09-29 21:58:04 -04:00
Michael Rash
f7472bec0f Added upstart config for Ubuntu systems
fwknop can be easily managed with upstart with the addition of this config.
Here is an example:

 # service fwknop start
 fwknop start/running, process 4269
2012-09-27 21:58:38 -04:00
Michael Rash
2b09f048f7 (Vlad Glagolev) Submitted an OpenBSD port for fwknop-2.0.3
(Vlad Glagolev) Submitted an OpenBSD port for fwknop-2.0.3, and this has
been checked in under extras/openbsd/.
2012-09-13 21:24:54 -04:00
Michael Rash
b643848e05 added --hmac-mode to spa-entropy.pl 2012-08-19 22:27:04 -04:00
Michael Rash
8d6bc05295 merged from master 2012-08-17 21:19:52 -04:00
Michael Rash
a646a024d9 added 'Pragma: no-cache' header 2012-08-15 22:46:49 -04:00
Michael Rash
dfe6679c57 Added the extras/myip/ directory for client IP resolution code
The myip.c file is deployed at http://www.cipherdyne.org/cgi-bin/myip
for fwknop client IP resolution.
2012-08-14 21:51:00 -04:00
Michael Rash
c6b674617c completed merge from master after fwknop-2.0.1 release 2012-07-24 16:19:48 -04:00
Michael Rash
cab2ea9083 bumped version to 2.0.1 2012-07-23 22:40:47 -04:00
Michael Rash
3c533de7e4 updated Debian init script (contributed by Franck Joncourt) 2012-07-23 21:49:25 -04:00
Michael Rash
71690a1de4 bug fix to ensure to pick up proper entropy min/max values 2012-02-13 13:56:24 -05:00
Michael Rash
65cd9b0038 updated to local_spa.key from the test suite directory 2012-02-13 12:48:58 -05:00
Michael Rash
0c9946160c ensure CBC is the default symmetric encryption mode 2012-02-12 20:52:17 -05:00
Michael Rash
6130099b75 minor header addition for spa-entropy.pl 2012-02-10 13:38:30 -05:00