Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-09-15 | Use raise(...) instead of kill(getpid(), ...) | Matthias Schiffer | |
2016-02-22 | Add "drop privileges force" option which allows to drop CAP_NET_ADMIN even ↵ | Matthias Schiffer | |
when fastd thinks it might still need it | |||
2016-02-22 | Improve capability handling, retain required capabilities | Matthias Schiffer | |
2016-02-22 | Update copyright years | Matthias Schiffer | |
2016-02-22 | socket: improve and simplify error handling | Matthias Schiffer | |
Rather exit on errors we're unlikely to recover from than retrying indefinitely. | |||
2016-02-21 | Print UID and GID as unsigned in log message | Matthias Schiffer | |
2016-02-21 | Replace setuid/setgid with setresuid/setresgid (or setreuid/setregid) | Matthias Schiffer | |
The semantics of setuid in SUID processes are not entirely clear on all Unix-like systems. Better use setresuid to drop privileges where available. | |||
2015-12-21 | Don't block fatal signals | Matthias Schiffer | |
2015-12-21 | Terminate with the received signal | Matthias Schiffer | |
2015-11-10 | Implement generic task queue to handle handshakes and maintenance | Matthias Schiffer | |
2015-11-09 | Check return value of sodium_init() | Matthias Schiffer | |
Fixes a warning with -Wunused-result. | |||
2015-11-09 | Use a global ioctl socket | Matthias Schiffer | |
Based-on-patch-by: Julian Kornberger <jk+github@digineo.de> | |||
2015-10-20 | Improve include_directories to prevent conflicts between system and fastd ↵ | Matthias Schiffer | |
headers In in-tree builds, fastd's poll.h was conflicting with the system one on non-Linux systems. | |||
2015-10-18 | config: make on_up/down/establish/disestablish commands configurable per ↵ | Matthias Schiffer | |
peer group | |||
2015-03-23 | Move ifname logic from peer to iface | Matthias Schiffer | |
2015-03-23 | Improve sync/async execution of up/down scripts | Matthias Schiffer | |
2015-03-23 | peer: set peer name in on-up environment for peer-specific interfaces | Matthias Schiffer | |
2015-03-23 | Some Android fixes for issues introduced by multi-interface support | Matthias Schiffer | |
Not really tested, I'll do that when the multiif support is finished. | |||
2015-03-23 | iface: add ifname argument | Matthias Schiffer | |
2015-03-23 | Don't reset peers twice on start in TUN mode | Matthias Schiffer | |
2015-03-23 | iface: make fastd_iface_open() gracefully (at least on Linux, for now) | Matthias Schiffer | |
2015-03-23 | Use peer-specific interface in TUN mode | Matthias Schiffer | |
2015-03-23 | Configure static peers before capabilities are dropped | Matthias Schiffer | |
2015-03-22 | Rename tuntap to iface to match struct name | Matthias Schiffer | |
2015-03-22 | First work towards multi-interface support | Matthias Schiffer | |
2015-03-22 | Refactor poll API | Matthias Schiffer | |
2015-01-20 | Implement new hash table to keep track of unknown peers handshakes have been ↵ | Matthias Schiffer | |
sent to This should significantly reduce the number of handshakes sent after restarting fastd with many active connections. | |||
2015-01-14 | Refactor handling of platforms without user/group settings (Android) | Matthias Schiffer | |
2015-01-14 | Update copyright years | Matthias Schiffer | |
2015-01-14 | Add Android 4.1+ support. See doc/README-Android.md for build HOWTO. | Rick Lei | |
* Update CMake files to work with android-cmake * Use unix domain socket for communicating with Android GUI * May also run standalone but requires rooted Android device | |||
2015-01-14 | Reset all connections on SIGUSR2 | Matthias Schiffer | |
2014-09-15 | status: add uptime and established times | Matthias Schiffer | |
2014-09-06 | Fix async command waitpid error handling (again...) | Matthias Schiffer | |
2014-09-05 | Add status socket to get the current status as JSON | Matthias Schiffer | |
2014-09-04 | Support dynamic binds with extra options (interface binds, specific ↵ | Matthias Schiffer | |
addresses...) | |||
2014-09-01 | Remove old state dump feature | Matthias Schiffer | |
It will be replaced by a nicer version. | |||
2014-08-24 | Coding style: always add a space between a pointer's type and the * | Matthias Schiffer | |
2014-08-24 | Use simple int64_t timestamps in ms instead of timespecs | Matthias Schiffer | |
2014-08-24 | Fix waitpid EINTR error on SIGCHLD | Matthias Schiffer | |
waitpid may fail with EINTR for SIGCHLD even when all signals are blocked. | |||
2014-08-24 | Merge peer config into peer structure | Matthias Schiffer | |
With this refactoring, the structure fastd_peer_config_t is merged into fastd_peer_t, and fastd_remote_config_t into fastd_remote_t. This also means we now create peers directly when reading their configurations, which significantly simplifies the whole reload process, and prepares for some future optimizations like a key hash table. Note: This commit is too big, but I couldn't come up with a nice way to split it into smaller pieces... | |||
2014-08-22 | Remove VECTOR_ALLOC | Matthias Schiffer | |
It is done automatically now if the VECTOR is zeroed before. | |||
2014-08-19 | Create peer structures for disabled peers as well | Matthias Schiffer | |
We have a 1:1 association between peers and peer configs now. | |||
2014-08-18 | Unify enabled and dynamic flags into a config_state flag | Matthias Schiffer | |
2014-08-18 | Rename WITH_VERIFY CMake option to WITH_DYNAMIC_PEERS | Matthias Schiffer | |
2014-08-18 | peer: add a flag `dynamic' instead of checking the config field for NULL | Matthias Schiffer | |
2014-08-18 | Rename "temporary peers" to "dynamic peers" | Matthias Schiffer | |
2014-08-09 | Move fastd_config_t.peers to fastd_context_t.peer_configs | Matthias Schiffer | |
2014-08-02 | Encapsulate semaphore handling | Matthias Schiffer | |
2014-08-02 | Introduce and use alloc helpers | Matthias Schiffer | |
These new helpers will terminate fastd on allocation failures and add some additional convenience (allow strdup with NULL; typesafe new(type) macros). | |||
2014-08-01 | Use srandom/random instead of rand_r | Matthias Schiffer | |
There's no need to keep our own seed. |