aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/conf/config.go (follow)
Commit message (Collapse)AuthorAgeFilesLines
* global: update headersJason A. Donenfeld2020-11-221-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: enable {Pre,Post}{Up,Down} scripts gated behind admin knobJason A. Donenfeld2020-11-221-0/+4
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* manager: allow S-1-5-32-556 users to launch a limited UIJason A. Donenfeld2020-11-221-1/+9
| | | | | | | | | | | | | | | | | I still have serious security reservations about this, both conceptually -- should users be allowed to do this stuff? -- and pratically -- there are issues with this implementation that need some examination. TODO: - Is that registry key a secure path? Should we double check it? - Are we leaking handles to the unpriv'd process from the manager? Audit this too. - IPC notifications are blocking. Should we move this to a go routine to mitigate DoS potential? - Is GOB deserialization secure? Can an NCO user crash or RCE the manager? Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: mask self before giving routes to windowsJason A. Donenfeld2020-11-181-0/+8
| | | | | | Otherwise Windows complains. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* conf: add support for search domains inside dns lineJason A. Donenfeld2020-06-051-0/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* l18n: disambiguate enumeration and unit concatenation separatorsSimon Rozman2020-03-151-1/+1
| | | | | | | | | In Japanese, "1分、5秒 前" is a little strange. It should be "1分 5秒 前". After consulting Slovenian linguist, I've learned the same applies to Slovenian as well. Reported-by: Eiji Tanioka <tanioka404@gmail.com> Signed-off-by: Simon Rozman <simon@rozman.si>
* l18n: add localization supportSimon Rozman2020-03-151-27/+17
| | | | | | | | | | | | | | | | | | | | | Revise the messages to make them localizable. Note: The log messages are not marked for localization. Probably, we want to keep log files in English for easier global troubleshooting. Having a user run `go generate` requires a valid and up-to-date Go environment. Rather than instructing users how to setup the environment correctly, the `go generate` was integrated into build.bat. This reuses the Go building environment downloaded and prepared by build.bat to provide controllable and consistent result. Use `make generate` on Linux. As the zgotext.go output varies for GOARCH=386 and amd64, one had to be chosen to provide stable output. The former is the first one to build in build.bat. Signed-off-by: Simon Rozman <simon@rozman.si>
* tunnel: deduplicate addresses from configJason A. Donenfeld2020-01-241-0/+43
| | | | | | | Windows doesn't like it when passing these off to its config. Reported-by: Jonathan Tooker <jonathan.tooker@netprotect.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: correct names and patterns for go lintJason A. Donenfeld2019-05-161-2/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: change acronyms to uppercaseSimon Rozman2019-05-161-2/+2
| | | | Signed-off-by: Simon Rozman <simon@rozman.si>
* conf: expose base64 key parsingJason A. Donenfeld2019-03-051-0/+4
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: make winipcfg sort of workJason A. Donenfeld2019-03-011-0/+15
| | | | | | | | The duplicate route thing is silly, and we currently don't do DNS or the fancy socket routing. But this is a step in the right direction, perhaps. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* conf: introduce configuration managementJason A. Donenfeld2019-02-281-0/+180
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>