summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Quick fix for typo 'Quering'Dario Minnucci2010-12-014-8/+8
| | | | Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Quick fix for Lintian 'manpage-has-bad-whatis-entry' warningDario Minnucci2010-12-0110-15/+12
| | | | Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Add preliminary support for using IP addresses in the firewall moduleDavid Sommerseth2010-12-012-25/+33
| | | | | | | | | | | The current implementation uses the MAC address of the client's VPN interface. This also restricts eurephia to use TAP mode. This patch adds preliminary support for also accepting the clients IP address when updating the firewall rules. But the complete support for TUN mode is not completed yet. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Update efw-iptables version number and API versionDavid Sommerseth2010-11-302-3/+8
| | | | | | | | | | | | As the firewall API has changed in regards to moving a way from a string based implementation to a struct based implementation, the older eurephia firewall module will not work any longer. To make sure nothing bad happens, enforce that the efw-iptables module is at least using API version 2. Also updated the module version to reflect some changes as well. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Implemented detection of OpenVPN tunnel device typeDavid Sommerseth2010-11-304-2/+124
| | | | | | | | | | | | This will later be used to be able to support OpenVPN in tun mode as well as the now only supported tap mode. It will first try to detect the tunnel type based on the 'dev_type' environment variable if available. If not, it will try to figure it out based on the device name. If this fails, it is possible to force the eurephia to a specific device type by setting the openvpn_devtype config variable. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Move daemonize() code to be called in the firewall child thread onlyDavid Sommerseth2010-11-265-35/+37
| | | | | | | | The eurephia plug-in would daemonize the OpenVPN process by calling daemonize() too early. This patch renames daemoinze() to efw_daemonize() and calls it only in the firewall child process. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* SQLite3 eurephiadm fix: sorting lastlog based on session status didn't workDavid Sommerseth2010-11-122-2/+2
| | | | | | | | | The eDBadminGetLastlog(...) function didn't parse the sortkeys string to match the database layout. In addition the field mapping for the openvpn_lastlog.sessionstatus field was wrong. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fixed a simple spelling typoDavid Sommerseth2010-11-101-1/+1
| | | | Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fixed git tree status check once againDavid Sommerseth2010-11-102-7/+7
| | | | | | | It turned out the previous git tree state check misinterpretted the tree state on a clean git repository. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fixed a last-minute typo on the reg-exp.David Sommerseth2010-11-091-1/+1
| | | | Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Tackle more git-status variantsDavid Sommerseth2010-11-091-1/+1
| | | | | | | The reg-exp for catching the git status -s variants was too limited. This new reg-exp should be able to handle more variants better and safer. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Further updates to the buildinfoDavid Sommerseth2010-11-092-11/+22
| | | | | | | | | - Reorganised the layout a bit - Added a path to the local git repository - Added '(origin)' identificator to the remote git repo string - Do the 'git status' call from the root of the source tree Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Improved buildinfo, adding some kind of git tree state informationDavid Sommerseth2010-11-092-3/+15
| | | | | | This patch adds a list over uncommitted files. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* eurephiadm: Added a buildinfo commandDavid Sommerseth2010-11-095-0/+155
| | | | | | | This just adds some gathered information about the build, useful for debugging later on. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* eurephiadm/adminaccess: Check granted accesses before modifying themDavid Sommerseth2010-10-221-2/+42
| | | | | | | | | | It was reported that it was possible to grant the same access level several times using the eurephiadm adminaccess command. This is now fixed by quering the access levels for the user before executing the grant or revoke operation. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net> Report-URL: https://sourceforge.net/tracker/index.php?func=detail&aid=3092583&group_id=236344&atid=1099760
* RPM build: Put eurephia-auth.so into the default OpenVPN plug-in directoryDavid Sommerseth2010-10-201-1/+5
| | | | | | | | | As eurephia-auth.so is the OpenVPN plug-in part of eurephia, it should be located in the directory OpenVPN uses. The other .so files which are built will stay in the designated /usr/{lib,lib64}/eurephia directory, as they are only related to eurephia itself. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* RPM build: Obsolete the eurephia-iptables RPM packageDavid Sommerseth2010-10-201-17/+8
| | | | | | | This is really not needed to split out in a separate RPM. It can be shipped together with the eurephia plug-in. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fix ./configure to honour --sqlite3-path correctlyDavid Sommerseth2010-10-201-3/+3
| | | | | | | | | The --sqlite3-path argument was silently ignored due to a misbehaviour in the check for database driver enablement. Moved over to proper bash scripting and used wildcards on the DB string which is intended to also contain more than just one database indicator. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fixed missing quotes in ./configureAlberto Gonzalez Iniesta2010-10-191-1/+1
| | | | | Signed-off-by: Alberto Gonzalez Iniesta <agi@inittab.org> Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* More man page fixes for DebianDavid Sommerseth2010-10-191-1/+1
| | | | | | A dash was not escaped with backslash. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fixed a Debian lintian complaints on a man pageDavid Sommerseth2010-10-191-1/+3
| | | | | | It didn't like that the NAME section contained a description instead. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Discovered a failing loop checkDavid Sommerseth2010-09-271-1/+1
| | | | | | This could cause eurephia to use a faulty hashing rounds value. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Harden memory management in passwd.cDavid Sommerseth2010-09-271-0/+18
| | | | | | | Do a mlock() call on all buffers used by the password hashing algorithms, to make sure these data segments never will be written to swap. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* eurephia_init will now suggest a ~/.eurephia/eurephiadm.cfg fileDavid Sommerseth2010-09-062-2/+46
| | | | | | | | A suggestion for this file will be generated based on the command line arguments. It will also honour the EUREPHIA_DIR environment variable as well. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Removed misleading documentation of eurephiaInit()David Sommerseth2010-08-291-3/+1
| | | | Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Updated wrong log entriesDavid Sommerseth2010-08-293-10/+10
| | | | | | Removed old and obsolete expressions used to reference the eurephia database driver. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Show eurephia-auth version during initialisationDavid Sommerseth2010-08-291-0/+2
| | | | Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fixed some issues with the firewall implementationDavid Sommerseth2010-08-261-3/+9
| | | | | | | | | | - OpenVPN would not exit gracefully due to mq_send() returns 0 on success - On-the-fly blacklisting with new API failed due to wrong value checking The request->rule_destination is empty when request->mode==BLACKLIST, so the check for rule_destination was moved to the appropriate place. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fixed Doxygen complaintsDavid Sommerseth2010-08-265-33/+4
| | | | | | Removed some #defines which was not needed and added missing comments. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Corrected a typo in eurephia_initDavid Sommerseth2010-08-251-1/+1
| | | | | | | | | This was discovered during a documentation review done by Nate Lieby. sf.net ticket: https://sourceforge.net/tracker/?func=detail&aid=3052422&group_id=236344&atid=1099760 Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Completed the needed changes for the new firewall plug-in APIDavid Sommerseth2010-08-254-135/+114
| | | | | | | Moved over the missing pieces to use the eFWupdateRequest struct. This is a continuation of the work started in commit bdd956adcccd91ff553278fd73cea7 Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fixed a SEGV issue when adding values to a value chainDavid Sommerseth2010-08-241-2/+2
| | | | | | eAdd_valuestruct() did not use a nullsafe strdup(). Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Merge remote branch 'origin/master'David Sommerseth2010-07-300-0/+0
|\
| * Updated with comments from Fedora package reviewsDavid Sommerseth2010-07-151-7/+37
| | | | | | | | Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
| * Fixed a few doxygen complaints - missing documentationDavid Sommerseth2010-07-122-0/+11
| | | | | | | | Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
| * Cosmetic debug logging fixDavid Sommerseth2010-07-121-1/+1
| |
| * Show which cmake version is being used before starting the configurationDavid Sommerseth2010-07-121-1/+3
| |
| * Changed main firewall implementation to use eFWupdateRequest structDavid Sommerseth2010-07-123-57/+142
| | | | | | | | | | All functions calling eFW_UpdateFirewall() and the iptables driver needs to be updated as well.
| * More driver API clean upDavid Sommerseth2010-07-121-11/+1
| |
| * Cleaned up the driver/interface API for database and firewallDavid Sommerseth2010-07-123-43/+93
| |
| * Fixed a buffer overflow issue in eurephia_initDavid Sommerseth2010-07-081-2/+2
| |
| * Fixed compiler warning: loop could be used uninitialisedDavid Sommerseth2010-07-081-1/+1
| |
| * Do check the result of fgets()David Sommerseth2010-07-081-2/+6
| | | | | | | | If fgets() returns NULL, clear the buffer allocated for the console data.
| * Fixed an overflow issue with memset() in eurephiadmDavid Sommerseth2010-07-081-1/+1
| |
| * More updates to eurephia.specDavid Sommerseth2010-07-081-9/+26
| | | | | | | | | | | | | | | | - Added missing Group tags - Added stricter cmake version requirement - Fixed rpmlint complaints - Added -p when calling install - Changed $RPM_BUILD_ROOT to %{buildroot} for consistency
| * Added extra checks for POSIX semaphore functionsDavid Sommerseth2010-07-081-9/+31
| | | | | | | | | | | | On Fedora 13 and Rawhide, the sem_wait(), sem_timedwait() and sem_post() functions is no longer available in librt, only in libpthread. Added extra CMake checks to check if the functions are in libpthread if not found in librt.
| * Updated errornous URL for eurephia sources in .spec fileDavid Sommerseth2010-07-071-1/+1
| |
| * Added install rules for man pagesv1.0.0David Sommerseth2010-07-066-6/+45
| |
| * Ignore utils/eurephia_saltdecode instead of utils/saltdecodeDavid Sommerseth2010-07-061-1/+1
| |
| * Added man page for eurephiadm usercertDavid Sommerseth2010-07-061-0/+90
| |
generated by cgit (git 2.34.1) at 2024-05-10 05:10:09 +0000