blind-operator-mode, branch masterHides various networking information from operators who wish not to know ithttps://git.zx2c4.com/blind-operator-mode/atom/?h=master2018-06-18T13:56:25ZMore strongly discourage use2018-06-18T13:56:25ZJason A. DonenfeldJason@zx2c4.com2018-06-18T13:56:25Zurn:sha1:e1073f8fa6fe2ac2cefc42194a5878783c831627Add note about what's obviously better2017-11-22T15:51:47ZJason A. DonenfeldJason@zx2c4.com2017-11-17T16:36:26Zurn:sha1:46406634efcb772b9b757eab60562190f6bfc6aeDisable ptrace, /proc/pid/mem, and coredumps2017-11-16T23:54:53ZJason A. DonenfeldJason@zx2c4.com2017-11-15T22:48:58Zurn:sha1:f2f1db963ba71a3159d568bbd2e19cecba12ca69Convert to blind-operator-mode2017-11-16T23:44:51ZJason A. DonenfeldJason@zx2c4.com2017-11-14T17:30:41Zurn:sha1:fa19978d36cfcad7d9b2da50bfbd13cabb92c7e2
It turns out, people wanted to hide endpoint as well, which means we
actually have to muck around with the netlink message, rather than being
able to just clobber the WireGuard function.
While we're at it, we hook a bunch of other stuff, to hide things like
tcpdump and /dev/kmem. Pretty incomplete, but serves its purpose here.
This started out very simple, but then we added the terrible compat
layer and the x86-opcode parsing. Oh well.
Requested-by: William Öling <william@azirevpn.com>
Add hide-allowed-ips2017-11-16T23:44:51ZJason A. DonenfeldJason@zx2c4.com2017-10-01T19:18:00Zurn:sha1:227060e1c4f40881494c18ae48675f03b92d6354
This hides allowed IPs from userspace by nopping out the tree traversal
function.
Requested-by: William Öling <william@azirevpn.com>