Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | libcharon: Use lib->ns instead of charon->name | Tobias Brunner | 2014-02-12 | 2 | -2/+2 |
| | |||||
* | whitelist: Read multiple commands until client closes connection | Martin Willi | 2013-10-29 | 1 | -30/+28 |
| | | | | | This restores the same behavior we had before e11c02c8, and fixes the whitelist add/remove-from command. | ||||
* | whitelist: Fix compilation on FreeBSD | Tobias Brunner | 2013-07-31 | 1 | -0/+2 |
| | |||||
* | stream-service: move CAP_CHOWN check from plugins to service constructor | Martin Willi | 2013-07-18 | 1 | -6/+0 |
| | | | | | A plugin service can be a TCP socket now, so it does not make much sense to strictly check for CAP_CHOWN. | ||||
* | whitelist: use a read-copy when listing entries | Martin Willi | 2013-07-18 | 1 | -19/+44 |
| | | | | | While this requires a little more overhead, we can free the lock should the stream block, allowing other threads to add/remove entries. | ||||
* | whitelist: fix error handling when creating the socket fails | Martin Willi | 2013-07-18 | 1 | -0/+6 |
| | |||||
* | whitelist: use a stream service to accept client connections | Martin Willi | 2013-07-18 | 3 | -121/+106 |
| | | | | | Use SOCK_STREAM, as we don't have SOCK_SEQPACKET on TCP. To have network transparency, the message now uses network byte order. | ||||
* | capabilities: Some plugins don't actually require capabilities at runtime | Tobias Brunner | 2013-07-18 | 1 | -1/+1 |
| | |||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -5/+7 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | capabilities: CAP_CHOWN might be required by many plugins opening UNIX sockets | Tobias Brunner | 2013-06-25 | 1 | -0/+6 |
| | | | | | But as the sockets will be created with the user/group of the running process this might not be required as no change may be needed. | ||||
* | capabilities: Move global capabilities_t instance to libstrongswan | Tobias Brunner | 2013-06-25 | 1 | -2/+2 |
| | |||||
* | whitelist: Use plugin features to register listener | Tobias Brunner | 2013-06-11 | 1 | -4/+29 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 1 | -1/+2 |
| | |||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -9/+3 |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | ||||
* | whitelist: Make sure listed IDs are null-terminated. | Tobias Brunner | 2012-05-18 | 1 | -0/+1 |
| | |||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -1/+1 |
| | | | | Also fixes several whitespace errors. | ||||
* | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 1 | -2/+2 |
| | |||||
* | fixed whitelist enabling | Andreas Steffen | 2011-05-14 | 1 | -2/+3 |
| | |||||
* | Disable whitelist plugin by default | Martin Willi | 2011-05-12 | 1 | -1/+1 |
| | |||||
* | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 |
| | |||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -0/+7 |
| | | | | over plugin_t | ||||
* | Increase whitelist message identity buffer to 128 bytes | Martin Willi | 2011-03-23 | 1 | -1/+1 |
| | |||||
* | Added strongswan.conf and runtime option to enable/disable whitelist plugin | Martin Willi | 2011-03-17 | 5 | -1/+43 |
| | |||||
* | Added a whitelist command line utility to control whitelist plugin | Martin Willi | 2011-02-28 | 3 | -0/+184 |
| | |||||
* | Added a UNIX socket based control backend to whitelist plugin | Martin Willi | 2011-02-28 | 5 | -2/+337 |
| | |||||
* | Implemented a in-memory peer identity whitelist plugin | Martin Willi | 2011-02-28 | 5 | -0/+402 |