Commit Graph

10260 Commits

Author SHA1 Message Date
Andreas Steffen 76bd0d7c1f overwrite sensitive prime with zeroes 2012-11-18 22:55:22 +01:00
Andreas Steffen bf1cecdb6b strndup() requires string.h header file 2012-11-18 19:41:03 +01:00
Andreas Steffen 168ee460c6 implemented generation of safe primes 2012-11-18 19:22:31 +01:00
Andreas Steffen c1c98f5f4a generate reason strings and remediation instructions for improper OS settings 2012-11-18 11:44:03 +01:00
Andreas Steffen 602c6b6be2 precautionary measures 2012-11-17 14:53:27 +01:00
Andreas Steffen 3294cbd61e fixed a memory leak in pacman 2012-11-17 08:16:53 +01:00
Andreas Steffen aa3061d432 removed unused variable 2012-11-17 08:16:23 +01:00
Martin Willi 2354b10576 Add an ikesa_limit option to limit number of IKE_SAs as responder 2012-11-16 10:27:36 +01:00
Martin Willi 5b89e3b061 Pass PLUTO_XAUTH_ID to updown script 2012-11-16 09:56:05 +01:00
Andreas Steffen d287c14436 version bump to 5.0.2dr4 2012-11-15 21:56:27 +01:00
Andreas Steffen bacffb890e discovered the use of strndup() 2012-11-15 11:48:57 +01:00
Andreas Steffen a95959cce6 implemented blacklisting of software packages 2012-11-14 11:38:45 +01:00
Martin Willi 07474b6062 libtnc can be initialized more than once 2012-11-14 10:14:40 +01:00
Martin Willi de4c1def83 libcharon can be initialized more than once 2012-11-14 10:14:37 +01:00
Martin Willi 8edb6248f8 libhydra can be initialized more than once 2012-11-14 10:14:34 +01:00
Martin Willi 1e5e1fb685 libstrongswan can be initialized more than once 2012-11-14 10:14:31 +01:00
Tobias Brunner cbd52e7ddc Limit recursion when searching for source addresses
This could be required if e.g. two default routes list gateways but the
corresponding outbound interfaces do not have any IP addresses on them.
2012-11-13 09:06:02 +01:00
Tobias Brunner 5be88ca6bb Don't call get_route recursively if a route's gateway matches the destination 2012-11-13 09:06:02 +01:00
Andreas Steffen f94d32dba9 fixed remediation instructions output 2012-11-13 07:15:46 +01:00
Andreas Steffen e6a2de344d fixed memory leak 2012-11-12 13:08:58 +01:00
Andreas Steffen a40372d82d fixed typo in strcpy() function call 2012-11-12 12:31:26 +01:00
Tobias Brunner 7d41e90846 Fix destruction of tcg_pts_attr_file_meas_t when building from encoding 2012-11-12 12:13:11 +01:00
Andreas Steffen 7c49d77982 updated parameters 2012-11-12 10:45:38 +01:00
Andreas Steffen e6b117491f implemented reason string and remediation instructions for OS IMV 2012-11-12 10:45:38 +01:00
Andreas Steffen 742722e2f5 updated strongswan.conf man page 2012-11-12 10:45:38 +01:00
Andreas Steffen 3de9a31a49 centralized processing of assessment information 2012-11-12 10:45:38 +01:00
Tobias Brunner 6782bf3722 Properly define TSS_TROUSERS in configure script 2012-11-12 10:34:04 +01:00
Andreas Steffen eda87d1a95 define TSS_TROUSERS compile option 2012-11-11 00:27:55 +01:00
Andreas Steffen af83700f88 implemented get_remediation_instructions() 2012-11-10 23:47:06 +01:00
Andreas Steffen b217e16f7e removed debug output 2012-11-10 21:37:33 +01:00
Andreas Steffen db15c6dac1 implement a preferred language enumerator 2012-11-10 21:35:46 +01:00
Andreas Steffen 4ccc4fd97c abort if fatal error is received from peer 2012-11-09 16:07:03 +01:00
Andreas Steffen 84f9b9f9bd corrected debug class 2012-11-09 15:50:10 +01:00
Andreas Steffen 236eb5851a added missing method assignments 2012-11-09 15:08:14 +01:00
Tobias Brunner 44566c2238 Made TSS implementation configurable and thereby optional 2012-11-08 19:32:41 +01:00
Andreas Steffen d425f30e80 added missing --update parameter 2012-11-08 11:02:17 +01:00
Andreas Steffen da72eb388a created packman daily update script 2012-11-08 09:19:10 +01:00
Andreas Steffen b18b924b2f pacman supports differential security updates 2012-11-07 22:20:39 +01:00
Andreas Steffen 8cae17431a fixed Android product string 2012-11-07 14:57:41 +01:00
Andreas Steffen f77d425da3 accumulate package counts over multiple attributes 2012-11-07 14:20:47 +01:00
Andreas Steffen 538c13fe5c use OS type on IMV side 2012-11-07 13:40:52 +01:00
Tobias Brunner eba65182e4 Include 'aggressive' when comparing peer_cfg_t objects 2012-11-07 12:44:58 +01:00
Tobias Brunner bf0bcee9ec Fixed output of longer debug messages
(v)snprintf(3) returns the length without terminating null byte but the
length given as parameter must include it.
2012-11-07 12:44:58 +01:00
Tobias Brunner ed05a1a3b7 'signal' is a keyword in MySQL 5.5
Fixes #251.
2012-11-07 12:37:23 +01:00
Andreas Steffen dad76a5828 fixed debug output 2012-11-05 21:56:49 +01:00
Andreas Steffen d78c869cff eliminate deinstalled packages 2012-11-05 21:40:19 +01:00
Andreas Steffen a08fc61ea3 check installed packages in OS database 2012-11-05 21:00:56 +01:00
Andreas Steffen 68cf283cd3 Define and use an OS enumeration type 2012-11-05 14:48:43 +01:00
Andreas Steffen 7b0330d285 check if assessment has already been done 2012-11-05 14:46:50 +01:00
Andreas Steffen 5e8987689a compute the optimum Installed Packages attribute size 2012-11-05 12:13:13 +01:00