mirrors/opensnitch
1
0
Fork 0
mirror of https://github.com/evilsocket/opensnitch.git synced 2025-03-04 00:24:40 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
1819 commits 11 branches 43 tags 36 MiB
Commit graph

59 commits

Author SHA1 Message Date
redanaheim
fa2f1068f6
Remove duplicate regex in system.go for -check-requirements 2024-05-26 23:22:53 +00:00
Gustavo Iñiguez Goia
81dd625a1c
added more kernel config paths for checking system requirements 
On Fedora Silverblue the kernel config of the current kernel is under
/usr/lib/modules/<kernel>/config

Closes: #1117
 2024-04-27 23:36:04 +02:00
Gustavo Iñiguez Goia
96e62bf973
strings concatenation improvements 
Use strings.Join() to concatenate strings, instead of Sprint*(), for
better performance.
 2024-01-16 00:14:44 +01:00
Gustavo Iñiguez Goia
ffb76683aa
allow to configure ebpf modules path 
Now it's possible to configure eBPF modules path from the
default-config.json file:
 "Ebpf": {
   "ModulesPath": "..."
 }

If the option is not provided, or if it's empty, we'll keep loading from
the default directories:

 - /usr/local/lib/opensnitchd/ebpf
 - /usr/lib/opensnitchd/ebpf
 - /etc/opensnitchd/ebpf (deprecated, will be removed in the future).

Closes #928
 2023-12-22 23:27:18 +01:00
Gustavo Iñiguez Goia
6d056b8a7b
Bump daemon and GUI versions 
Current changes are no longer compatible with 1.6.x.
 2023-11-09 01:05:46 +01:00
Gustavo Iñiguez Goia
c22e358fce
added CONFIG_PROC_EVENTS to check-requirements 
Check if the kernel has support for the Process Events Connector feature,
to see if we can use it.

https://lwn.net/Articles/157150/
 2023-09-30 21:59:45 +02:00
Gustavo Iñiguez Goia
ce7c3f8002
Bump versions to v1.6.2 2023-07-31 00:36:33 +02:00
Gustavo Iñiguez Goia
662cd2eda3
Better ebpf module errors 
Report to the GUI and the logs, whether the modules have been found
or not, and if found, whether there have been any errors loading them.

Closes #868
 2023-07-23 23:35:19 +02:00
Gustavo Iñiguez Goia
cdf6497ea7
Bump versions to v1.6.1 2023-07-23 22:18:58 +02:00
Gustavo Iñiguez Goia
5a0bd3bc27
added more requirements checks, minor code refactor 
- Check kernel configs NET_DIAG_*.
- config.SaveConfiguration() -> config.Save()
 2023-06-28 11:24:24 +02:00
Gustavo Iñiguez Goia
a233006d78
added more checks to -checks-requirements 
Closes #976
 2023-06-25 02:36:12 +02:00
Gustavo Iñiguez Goia
f3a621e192
changed system requirements reading 2023-05-18 14:32:03 +02:00
Gustavo Iñiguez Goia
8513c0dd7f
Added system requirements check 
Added flag to check system requirements.
Related: #774
 2023-05-18 14:23:40 +02:00
Gustavo Iñiguez Goia
a1948e259a
Bump versions to 1.6.0 2023-04-22 12:32:53 +02:00
NRGLine4Sec
7273f73e59
make version consistent with github tags (#870) 
* make version consistent with github tags
 2023-02-28 22:21:55 +01:00
Gustavo Iñiguez Goia
b53e2af52a
Bump versions to 1.6.0rc5 2023-02-18 20:37:08 +01:00
Gustavo Iñiguez Goia
85776f4d17
Bump ui and daemon versions to 1.6.0rc4 2022-12-22 10:20:36 +01:00
Gustavo Iñiguez Goia
342c75a6e1
better errors, fixed default sys fw conf 2022-12-16 17:09:37 +01:00
Gustavo Iñiguez Goia
93e1135b4a
better ebpf errors printing 
Provide more information when loading ebpf modules fails.
 2022-12-11 17:25:05 +01:00
Gustavo Iñiguez Goia
e2a822b731
better errors printing 
Explain a littler bit better some errors.
 2022-12-10 21:49:48 +01:00
Gustavo Iñiguez Goia
314ee820ce
centralized ebpf modules loading 2022-11-18 20:38:52 +01:00
Gustavo Iñiguez Goia
6bfe6cef8d
Bump versions to 1.6.0-rc.3 2022-11-15 00:52:23 +01:00
Gustavo Iñiguez Goia
8f70af47e2
resolve absolute path of a process if it's relative 
We may receive relative paths from kernel (eBPF), so we need to resolve
the absolute path of the process in order to create valid rules.
 2022-10-01 22:27:07 +02:00
Gustavo Iñiguez Goia
77f52574fc Bump versions to v1.6.0rc2 2022-07-14 12:29:02 +02:00
Gustavo Iñiguez Goia
cb74058b96 Bump versions to 1.6.0rc1 2022-05-04 14:47:45 +02:00
Gustavo Iñiguez Goia
d9e8699702 Bump versions to v1.5.0 2022-01-28 23:29:31 +01:00
Gustavo Iñiguez Goia
bb253629e8 Bump versionis to v1.5.0rc2 2022-01-17 01:10:38 +01:00
Gustavo Iñiguez Goia
e8dd17418f Bump versions to v1.5.0rc1 2021-10-19 12:00:22 +02:00
Gustavo Iñiguez Goia
041cf456dc Bump versions to v1.4.0 2021-08-27 13:48:20 +02:00
Gustavo Iñiguez Goia
38d4fb9ae5 Bump versions to v1.4.0rc4 2021-08-11 17:16:56 +02:00
Gustavo Iñiguez Goia
708a7e6333 Bump versions to v1.4.0rc3 2021-07-16 23:41:02 +02:00
Gustavo Iñiguez Goia
2e42e989d4 Bump versions to 1.4.0rc2 
As we've added eBPF interception method, we need go iovisor ebpf package,
which is not packaged for Debian yet, so the way I was compiling it
differs a little bit (instead of using gbp buildpackage,
dpkg-buildpackage is used).

Aside from that, there'll be a new eBPF module (.o ELF), which must be
packaged with the packages. Will be compiled on the fly, but maybe it
could be hosted in the repo, because it won't change that much.
 2021-05-07 21:24:42 +02:00
Gustavo Iñiguez Goia
8af290e970 Bump versions to 1.4.0rc1 2021-03-26 00:59:16 +01:00
Gustavo Iñiguez Goia
c7d93d83a5 improved rules (re)loading 
- Delete lists of domains if the rule about to change is of type Lists.
- Monitor the lists of domains, and reload them if they're modified.
- Delete rules from disk when the Duration changes from
  Always (saved on disk) to !Always (temporary).
- After the above operation a fsnotify Remove event is fired. Don't
  delete the rule from memory if it's temporary.
- Rules are only compiled if they're enabled, avoiding unnecessary
  allocations.
 2021-03-01 12:41:35 +01:00
Gustavo Iñiguez Goia
d33cf8b8ba Bump version to 1.3.6 2021-02-10 20:17:02 +01:00
Gustavo Iñiguez Goia
bdafd7fb42 Bump version to 1.3.5 2021-01-11 23:01:23 +01:00
luz paz
d15d3465a9 Fix random typos 
Found via `codespell v2.1.dev0`  
`codespell -q 3 -L ans`
 2020-12-23 13:24:59 -05:00
Gustavo Iñiguez Goia
438ceca57d Bump version to 1.3.0 2020-12-16 18:59:03 +01:00
Gustavo Iñiguez Goia
6619124db7 Bumped versions to 1.3.0rc2 2020-11-28 12:26:39 +01:00
Gustavo Iñiguez Goia
df952d974e fixed errors when IPv6 is not enabled in the system 
If IPv6 was not enabled we failed to add IPv6 rules.

closes #96
 2020-11-26 16:25:48 +01:00
Gustavo Iñiguez Goia
b41aadbaac daemon packaging: set the next release version (rc) 2020-11-13 17:29:37 +01:00
Gustavo Iñiguez Goia
c666abe5f9 apps version increased 2020-11-05 21:50:37 +01:00
Gustavo Iñiguez Goia
544ce11a21 Bump daemon version to 1.0.1 2020-07-30 22:04:56 +02:00
Gustavo Iñiguez Goia
f4845240cc fixed typo and lint errors 2020-07-29 01:17:05 +02:00
Gustavo Iñiguez Goia
00b249a171 remove useless debug message when executing a command 
As we return the error message if the execution fail, use it from where
the method is called.
 2020-07-29 00:48:37 +02:00
Gustavo Iñiguez Goia
9eb589a3ea v1.0.0 release 
Current version is stable enough (based on users' feedback) to get it out
of the release candidate state. OpenSnitch works and is usable.

There's a lot of work yet to do, so let's start from a fresh and shiny
release number.
 2020-07-16 00:48:32 +02:00
Gustavo Iñiguez Goia
714aa311a0 Bump version to v1.0.0rc11 2020-06-24 00:41:36 +02:00
Gustavo Iñiguez Goia
edfbfbdcb4 Bump version to 1.0.0rc10 2020-06-14 12:34:20 +02:00
Gustavo Iñiguez Goia
c36b09db55 Bump version to v1.0.0rc9 2020-05-17 19:55:07 +02:00
Gustavo Iñiguez Goia
ca1cbe3084 added functions to retrieve system information 2020-05-10 17:52:08 +02:00