Michael Rash 627035fb22 Patch from Franck Joncourt for setting permissions via open() ...

[client+server] Applied patch from Franck Joncourt to remove unnecessary
chmod() call when creating client rc file and server replay cache file.
The permissions are now set appropriately via open(), and at the same
time this patch fixes a potential race condition since the previous code
used fopen() followed by chmod().

2012-10-23 21:47:56 -04:00

..

access.c

[server] GPG_ALLOW_NO_PW + no KEY bug fix

2012-10-02 23:20:47 -04:00

access.conf

Per Franck Joncourt - Corrected misspelled word in fwknopd man page and access.conf.

2010-07-16 20:14:35 +00:00

access.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

access.h

(Fernando Arnaboldi, IOActive) Found and fixed several DoS/code execution vulns for authenticated clients

2012-08-24 22:12:19 -04:00

cmd_opts.h

[server] iptables 'comment' match check

2012-08-12 15:44:13 -04:00

config_init.c

file permissions and client buffer overflow fix

2012-08-29 22:21:43 -04:00

config_init.h

PCAP_LOOP_SLEEP bug fix to 1/10th of a second

2012-07-23 21:13:30 -04:00

extcmd.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

extcmd.h

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fw_util_ipf.c

Added FORCE_NAT mode to the access.conf file

2011-11-30 20:51:19 -05:00

fw_util_ipf.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

fw_util_ipfw.c

[server] Added FLUSH_IPFW_AT_INIT and FLUSH_IPFW_AT_EXIT

2012-08-10 21:48:02 -04:00

fw_util_ipfw.h

Added tweaks to ipfw command for Mac OS X

2012-07-14 18:22:42 -04:00

fw_util_iptables.c

minor addition of newline before each chain list in --fw-list mode

2012-10-07 15:11:53 -04:00

fw_util_iptables.h

[server] iptables 'comment' match check

2012-08-12 15:44:13 -04:00

fw_util_pf.c

updated PF anchor check to not rely on listing the PF policy

2012-05-28 14:19:52 -04:00

fw_util_pf.h

updated PF anchor check to not rely on listing the PF policy

2012-05-28 14:19:52 -04:00

fw_util.c

Minor restructuring to suppress compiler "defined but not used warnings"

2011-08-20 12:34:57 -04:00

fw_util.h

[server] iptables 'comment' match check

2012-08-12 15:44:13 -04:00

fwknopd_common.h

added encryption mode flags for each access stanza

2012-08-26 15:47:24 -04:00

fwknopd_errors.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fwknopd_errors.h

added DNAT mode tests, minor memory leak fix in NAT mode, added fwknopd check for ENABLE_IPT_FORWARDING variable before attempting NAT access

2011-11-22 22:13:27 -05:00

fwknopd.8.in

minor wording update netfilter -> iptables

2011-10-13 20:59:30 -04:00

fwknopd.c

verify_file_perms_ownership() to just return if the file doesn't exist

2012-09-01 21:55:52 -04:00

fwknopd.conf

[server] iptables 'comment' match check

2012-08-12 15:44:13 -04:00

fwknopd.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

fwknopd.h

Minor PID string length fix

2011-10-18 21:28:38 -04:00

incoming_spa.c

added encryption mode flags for each access stanza

2012-08-26 15:47:24 -04:00

incoming_spa.h

Added access stanza expiration feature, multiple access stanza bug fix

2011-11-28 22:03:21 -05:00

log_msg.c

This commit fixes two memory leaks and adds a common exit function.

2011-11-10 22:33:32 -05:00

log_msg.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

Makefile.am

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

pcap_capture.c

added log output for the sniffing interface

2012-09-27 21:57:39 -04:00

pcap_capture.h

Added tweaks to ipfw command for Mac OS X

2012-07-14 18:22:42 -04:00

process_packet.c

Better IP spoofing support (udpraw and icmp)

2012-10-03 22:56:10 -04:00

process_packet.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

replay_cache.c

Patch from Franck Joncourt for setting permissions via open()

2012-10-23 21:47:56 -04:00

replay_cache.h

Only cache replay digests for SPA packets that decrypt

2012-07-08 08:36:30 -04:00

sig_handler.c

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

sig_handler.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

tcp_server.c

Refactored configure.ac to use a custom macro for compiler flag checks.

2011-12-29 14:20:18 -05:00

tcp_server.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

utils.c

Patch from Franck Joncourt for setting permissions via open()

2012-10-23 21:47:56 -04:00

utils.h

Patch from Franck Joncourt for setting permissions via open()

2012-10-23 21:47:56 -04:00