opensnitch/daemon/procmon
Gustavo Iñiguez Goia 0526b84309
Allow to intercept more kernel connections (#513)
* Allow to intercept some kernel connections

Some connections are initiated from kernel space, like WireGuard
VPNs (#454), NFS or SMB connections (#502) and ip tunnels (#500).

Note: This feature is complete for x86_64, WIP for aarch64, and not supported for armhf and i386
https://github.com/evilsocket/opensnitch/pull/513#issuecomment-924400824

More information regarding this change: #493
2021-09-23 01:44:12 +02:00
..
audit improved monitor method switching (audit) 2021-03-30 01:13:02 +02:00
ebpf improved process monitor method (re)configuring 2021-09-04 21:18:22 +02:00
monitor improved process monitor method (re)configuring 2021-09-04 21:18:22 +02:00
activepids.go cache, pids/inodes: fixed race conditions, improvements 2021-07-21 15:04:23 +02:00
activepids_test.go fixed parsing /proc/$pid/stat starttime field 2021-04-20 16:31:49 +02:00
cache.go fixed exception when cleaning up the cache 2021-09-02 20:51:18 +02:00
cache_test.go cache of PIDs: added new tests, fixed rare crash 2021-08-11 14:19:43 +02:00
details.go Allow to intercept more kernel connections (#513) 2021-09-23 01:44:12 +02:00
find.go cache, pids/inodes: fixed race conditions, improvements 2021-07-21 15:04:23 +02:00
find_test.go cache improvements 2021-03-19 19:05:45 +01:00
parse.go Allow to intercept more kernel connections (#513) 2021-09-23 01:44:12 +02:00
process.go Allow to intercept more kernel connections (#513) 2021-09-23 01:44:12 +02:00
process_test.go added unit tests for process parsing and rules 2020-12-19 19:31:09 +01:00
watcher.go improved process monitor method (re)configuring 2021-09-04 21:18:22 +02:00