aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* More strongly discourage useHEADmasterJason A. Donenfeld2018-06-181-0/+2
|
* Add note about what's obviously betterJason A. Donenfeld2017-11-222-1/+4
|
* Disable ptrace, /proc/pid/mem, and coredumpsJason A. Donenfeld2017-11-172-2/+38
|
* Convert to blind-operator-modeJason A. Donenfeld2017-11-179-121/+908
| | | | | | | | | | | | | | It turns out, people wanted to hide endpoint as well, which means we actually have to muck around with the netlink message, rather than being able to just clobber the WireGuard function. While we're at it, we hook a bunch of other stuff, to hide things like tcpdump and /dev/kmem. Pretty incomplete, but serves its purpose here. This started out very simple, but then we added the terrible compat layer and the x86-opcode parsing. Oh well. Requested-by: William Öling <william@azirevpn.com>
* Add hide-allowed-ipsJason A. Donenfeld2017-11-175-0/+149
This hides allowed IPs from userspace by nopping out the tree traversal function. Requested-by: William Öling <william@azirevpn.com>