mirrors/opensnitch
1
0
Fork 0
mirror of https://github.com/evilsocket/opensnitch.git synced 2025-03-04 16:44:46 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
455 commits 11 branches 43 tags 36 MiB
Commit graph

455 commits

This branch
This branch
All branches
Author SHA1 Message Date
Gustavo Iñiguez Goia
845e6a704f Intercept and parse UDPLite connections 
/proc/net/udplite[6]
 2019-10-29 20:01:45 +01:00
Gustavo Iñiguez Goia
a0eacfb8b8 Allow to intercept localhost and multicast connections 2019-10-29 19:53:07 +01:00
Gustavo Iñiguez Goia
65c3790106 Prompt the user to allow/deny all outgoing connections 
With the current implementation, it's not possible to know what
process/pid has created an outgoing connection, but there's still
valuable information that the user may want to know, so:

- display outgoing connections even if the process name/path is unknown.
 (src ip, dst ip, dst port, uid)
- get outgoing connection uid if kernel > 3.6.
 2019-10-25 00:55:32 +02:00
Gustavo Iñiguez Goia
9cc3da6446 experimental cache of inodes and pids 
Just an experimental cache of inodes and pids, which lowers the CPU
usage and improves user's experience.
 2019-10-24 01:01:20 +02:00
Gustavo Iñiguez Goia
dea50635d5 Merge branch 'fix_process_finding' into main 2019-10-21 19:48:17 +02:00
Gustavo Iñiguez Goia
59a11a530c Workaroung process name lookup 2019-10-21 19:45:35 +02:00
Gustavo Iñiguez Goia
5690d37d52 Merge branch 'clean_fw_rules_before_start' into main 2019-10-21 19:25:42 +02:00
Gustavo Iñiguez Goia
8922d445af Clean firewall rules before start 
If opensnitchd dies unexpectedly, firewall rules are not cleaned up.
 2019-10-21 19:23:29 +02:00
Gustavo Iñiguez Goia
cf01281911 Merge branch 'fix_prompt_dialog_countdown' into main 2019-10-21 00:52:06 +02:00
Gustavo Iñiguez Goia
44c2b6b90b Fixed prompt dialog countdown 2019-10-21 00:47:00 +02:00
Gustavo Iñiguez Goia
ad70655698 removed useless trace log 2019-10-21 00:40:26 +02:00
Gustavo Iñiguez Goia
935260abbc Merge branch 'fix_ui_high_cpu_usage' into main 2019-10-21 00:09:31 +02:00
Gustavo Iñiguez Goia
fb3b32d8c7 Merge branch 'fix_prompt_dialog_IPs_regex' into main 2019-10-21 00:06:01 +02:00
Gustavo Iñiguez Goia
ce71c383a9 fixed missing funcs declarations and non used var 2019-10-21 00:04:15 +02:00
Gustavo Iñiguez Goia
dedd009204 Merge branch 'daemon_default_config' into main 2019-10-21 00:02:25 +02:00
Gustavo Iñiguez Goia
067d0d8eed Merge branch 'fixed_unwanted_rules_reloading' of github.com:gustavo-iniguez-goya/opensnitch into main 2019-10-20 23:46:04 +02:00
Gustavo Iñiguez Goia
2c3339c728 Merge branch 'fix_grpc_sockets_leaks' into main 2019-10-20 23:25:21 +02:00
Gustavo Iñiguez Goia
1778a5502a Merge branch 'fix_race_read_write_stats' into main 2019-10-20 22:28:45 +02:00
Gustavo Iñiguez Goia
a7e9b5072f project import paths changed 2019-10-20 21:51:35 +02:00
Gustavo Iñiguez Goia
843924fff4 Fixed unwanted rules reloading after adding a new one 
fixes #271
 2019-08-13 19:19:17 +02:00
Gustavo Iñiguez Goia
3bc83efd10 apply default action to connections that can not be parsed 
If a connection can not be parsed for some reason, apply the default
action configured.
 2019-07-31 01:44:41 +02:00
Gustavo Iñiguez Goia
152eafd743 Fixed prompt dialog IPs regex pattern order 
Previously a regex pattern like this was shown: *.*.1.1
Now this regex pattern is displayed: 1.1.*.*
 2019-07-05 00:29:28 +02:00
Gustavo Iñiguez Goia
eeed991f8d Allow to configure daemon's default action rule 
If the file /etc/opensnitchd/default-config.json exists,
read it and apply the options to the default rule when there's no client
connected.

If it doesn't exist, just apply the default rule, allow connections
once.

Config example: {"default_action": "deny", "default_duration": "once"}
 2019-07-02 23:41:41 +02:00
Gustavo Iñiguez Goia
e356c84baa Fix grpc sockets leaking when connecting to a UI 
Failured connections to a UI were not being closed, so we ended up
with > 1024 opened sockets, which caused the error Too many files open.
 2019-06-29 13:55:44 +02:00
Gustavo Iñiguez Goia
57d1198635 Fixed race when reading and collecting stats 
When reading stats, a race can occur when sending them to remote UI via
Ping()s if at the same time more stats are being collected(written).
 2019-06-29 13:46:26 +02:00
Gustavo Iñiguez Goia
4617cd5e90 update stats only when the window is visible and when needed 
- Update the statistics only when the window is open and visible.
- Update only the relevant statistic tab shown to the user.
- Update only the row which has changed, instead of clearing up all
the table (except for the general tab).
- Update the status labels only when the connection with the daemon
changes.
- Allow to sort the hits column by order.
 2019-06-23 17:05:42 +02:00
Gustavo Iñiguez Goia
881812deae Use QTableView instead of QTableWidget to render data 
This change drops down the cpu usage from 100% to 2-5%.
 2019-06-16 23:26:21 +02:00
evilsocket
aa05ceb60b
Merge pull request #261 from ofrancois/master 
README.md: add missing steps for TL;DR
 2019-06-12 17:53:13 +02:00
ofrancois
5346327eff README.md: add missing steps for TL;DR 2019-06-10 14:05:42 +02:00
evilsocket
55e32209e7
Merge pull request #254 from p-/issue-252 
UI: improve regex for domain matching
 2019-06-04 11:55:59 +02:00
evilsocket
d7ad9569dc
Merge pull request #256 from p-/issue-206 
Also detect applications that use the AF_INET6 socket for IPv4 connections (like Java)
 2019-06-04 11:55:45 +02:00
Peter Stöckli
0efcfe9e65
also detect applications that use the AF_INET6 socket for IPv4 connections 2019-05-13 11:14:58 +02:00
Peter Stöckli
7d815d9608
UI: improve regex for domain matching 2019-05-06 15:51:27 +02:00
evilsocket
5c8f7102c2
misc: small fix or general refactoring i did not bother commenting 2019-03-02 13:24:27 +01:00
evilsocket
31ff746cab
-.- 2019-03-02 13:24:00 +01:00
evilsocket
fbc4a6d8d2
Merge pull request #243 from Northern-Lights/ui-fix 
Add () to str cat to fix % fmt
 2019-02-15 11:47:17 +01:00
evilsocket
9ba074e24e
Merge pull request #239 from Northern-Lights/runrule-err-check 
Fix ignored err check in RunRule
 2019-02-15 11:46:56 +01:00
Armen Boursalian
a3278f7637 Add () to str cat to fix % fmt 2019-01-27 17:04:14 -08:00
Northern-Lights
ba00f91bde
Fix QueueDNSResponses to include ip6tables 2019-01-26 20:56:12 -08:00
Armen Boursalian
cc3786b919 Fix ignored err check in RunRule 2018-12-30 19:07:05 -08:00
evilsocket
0316580e92
Merge pull request #229 from DarkSpyro003/master 
Fixes #228: Parse IP and port to uint
 2018-12-21 12:13:37 +01:00
Christina Lena Korosec
08c3e17c37
Fixes #228: Parse IP and port to uint 2018-12-13 12:08:44 +01:00
evilsocket
61cf3d1e08
Merge pull request #224 from jkozera/jkozera/list-rule-type 
Add a 'list' rule type
 2018-11-22 01:56:27 +01:00
evilsocket
bc637c7269
Merge pull request #223 from jkozera/jkozera/ipv6 
IPv6 support
 2018-11-22 01:56:19 +01:00
Jerzy Kozera
22c4aca5d0 IPv6 support 2018-11-21 22:57:43 +01:00
Jerzy Kozera
616fef6e83 Add a 'list' rule type 2018-11-21 22:51:33 +01:00
evilsocket
c10e7a30c8
Merge pull request #198 from MartynHare/minor-fixes 
Fixes issue #197 - modified user stats to use pwd.getpwuid
 2018-10-08 01:59:38 +02:00
evilsocket
53686fe573
Merge pull request #201 from lfdominguez/python_fix 
Fix function to get username from uid.
 2018-10-08 01:55:17 +02:00
evilsocket
abff18e201
Merge pull request #203 from MiWCryptAnalytics/patch-1 
Add UI Scaling for HiDPi Support
 2018-10-08 01:54:27 +02:00
evilsocket
00dfe862ab
Merge pull request #207 from lamby/mime-desktop-type 
ui/opensnitch_ui.desktop: Drop MimeType declaration
 2018-10-08 01:54:04 +02:00