tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Device can be member of multiple groups	Andreas Steffen	2013-06-25	1	-74/+87
\|
*	capabilities: Return effective UID/GID if user did not configure anything	Tobias Brunner	2013-06-25	1	-2/+2
\|
*	capabilities: Make the user and group charon(-nm) changes to configurable	Tobias Brunner	2013-06-25	2	-12/+36
\|
*	capabilities: Report effective UID/GID after dropping capabilities	Tobias Brunner	2013-06-25	1	-1/+1
\|
*	capabilities: CAP_CHOWN might be required by many plugins opening UNIX sockets	Tobias Brunner	2013-06-25	8	-0/+48
\| \| \| \| \|	But as the sockets will be created with the user/group of the running process this might not be required as no change may be needed.
*	capabilities: Handle CAP_CHOWN specially as it might not be required	Tobias Brunner	2013-06-25	2	-2/+63
\|
*	capabilities: Check effective UID as fallback if capabilities are not supported	Tobias Brunner	2013-06-25	1	-1/+1
\|
*	kernel-netlink: Make CAP_NET_ADMIN capability optional	Tobias Brunner	2013-06-25	1	-3/+4
\| \| \| \|	It is not required to use the kernel-net part of the plugin.
*	farp: Require CAP_NET_RAW capability to open AF_PACKET socket	Tobias Brunner	2013-06-25	1	-0/+6
\|
*	dhcp: Require CAP_NET_BIND_SERVICE and CAP_NET_RAW to open/bind sockets	Tobias Brunner	2013-06-25	2	-0/+14
\|
*	socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024	Tobias Brunner	2013-06-25	2	-1/+16
\| \| \| \| \|	Since we don't know which ports are used with socket-dynamic we can't demand the capability there, but it might still be required.
*	capabilities: Only plugins that require CAP_NET_ADMIN demand it	Tobias Brunner	2013-06-25	5	-10/+24
\| \| \| \|	The daemon as such does not require this capability.
*	capabilities: Move global capabilities_t instance to libstrongswan	Tobias Brunner	2013-06-25	21	-49/+48
\|
*	capabilities: Ensure required capabilities are actually held by the process/user	Tobias Brunner	2013-06-25	5	-10/+77
\|
*	ikev2: keep the CHILD_SA we delete as initiator in the list to destroy	Martin Willi	2013-06-25	1	-6/+5
\| \| \| \| \|	If the responder not correctly send the correct protocol or SPI in the delete response, we should remove the CHILD_SA regardless.
*	Some IMV policy managers expect a TEXT string	Andreas Steffen	2013-06-25	3	-17/+23
\|
*	Assign default group to newly created devices	Andreas Steffen	2013-06-25	1	-1/+12
\|
*	Set device creation date if it hasn't been set yet	Andreas Steffen	2013-06-24	1	-3/+18
\|
*	unit-tester: RSA test was removed	Tobias Brunner	2013-06-24	1	-1/+0
\|
*	Aligned AR Identity types to IF-IMV 1.4 R5 draft	Andreas Steffen	2013-06-24	3	-6/+6
\|
*	Send PA-TNC assessment result even if no workitems are available	Andreas Steffen	2013-06-24	2	-7/+13
\|
*	Some pacman fixes	Andreas Steffen	2013-06-23	2	-33/+32
\|
*	Some PTS database fixes	Andreas Steffen	2013-06-21	1	-14/+14
\|
*	Implemented pacman in a more reliable way	Andreas Steffen	2013-06-21	4	-380/+471
\|
*	Define protocol string	Andreas Steffen	2013-06-21	1	-9/+10
\|
*	Generate result string for port scan workitems	Andreas Steffen	2013-06-21	1	-2/+29
\|
*	Ignore non-matching protocols	Andreas Steffen	2013-06-21	1	-2/+2
\|
*	Introduced workitems to Scanner IMV	Andreas Steffen	2013-06-21	7	-194/+318
\|
*	Added ITA components to database	Andreas Steffen	2013-06-21	1	-0/+26
\|
*	Added soft dependency on database plugin	Andreas Steffen	2013-06-21	1	-0/+1
\|
*	fixed SQL query	Andreas Steffen	2013-06-21	1	-1/+1
\|
*	Shortened names of default policy groups	Andreas Steffen	2013-06-21	2	-10/+10
\|
*	Store device with product ID	Andreas Steffen	2013-06-21	5	-24/+32
\|
*	Database changes needed to integrate Cygnet backend	Andreas Steffen	2013-06-21	3	-84/+107
\|
*	Implemented get\|set_action_flag() methods	Andreas Steffen	2013-06-21	3	-37/+20
\|
*	Implemented hierarchical policy groups	Andreas Steffen	2013-06-21	3	-144/+81
\|
*	Introduced workitems to Attestation IMV	Andreas Steffen	2013-06-21	20	-469/+775
\|
*	pts_meas_algo_probe() and pts_dh_group_probe() got lost	Andreas Steffen	2013-06-21	1	-1/+3
\|
*	Converted all IMVs to use generic IF-IMV API	Andreas Steffen	2013-06-21	16	-1409/+1485
\|
*	Remove the constructor from the IMV agent interface	Andreas Steffen	2013-06-21	1	-10/+0
\|
*	Defined a generic IMV agent interface	Andreas Steffen	2013-06-21	5	-99/+134
\|
*	Moved all functionality into imv_os_agent_t class turning imv_os_t into an ↵	Andreas Steffen	2013-06-21	7	-780/+946
\| \| \| \|	IF-IMV skeleton
*	Moved batch_ending into separate source file	Andreas Steffen	2013-06-21	6	-295/+373
\|
*	do not process workitems with NULL result	Andreas Steffen	2013-06-21	2	-2/+3
\|
*	fixed enumeration of workitems for a given session	Andreas Steffen	2013-06-21	1	-1/+1
\|
*	generate workitems based on group policy	Andreas Steffen	2013-06-21	4	-64/+533
\|
*	Added file and directory reference measurements to workitems	Andreas Steffen	2013-06-21	2	-4/+8
\|
*	add overall recommendation to session database entry	Andreas Steffen	2013-06-21	6	-38/+75
\|
*	don't define a default database URI	Andreas Steffen	2013-06-21	3	-6/+4
\|
*	created a simple IMV Policy Manager	Andreas Steffen	2013-06-21	5	-0/+232
\|