aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/service (follow)
Commit message (Collapse)AuthorAgeFilesLines
* service: split into tunnel and managerJason A. Donenfeld2019-05-2023-5171/+0
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: move route monitor and account for changing indexJason A. Donenfeld2019-05-202-133/+150
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: simplify tunnel loggingJason A. Donenfeld2019-05-202-37/+25
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: give indication of socket bindingJason A. Donenfeld2019-05-201-0/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: don't add empty dns allow rulesJason A. Donenfeld2019-05-181-4/+4
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: silently ignore routes that won't have a gatewayJason A. Donenfeld2019-05-163-20/+32
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: print useragent in logJason A. Donenfeld2019-05-162-1/+5
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: correct names and patterns for go lintJason A. Donenfeld2019-05-168-66/+64
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: use more upstream constantsJason A. Donenfeld2019-05-164-18/+12
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: correct protocol condition in NDP filtersOdd Stranne2019-05-162-8/+9
| | | | | Signed-off-by: Odd Stranne <odd@mullvad.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: token elevation stuff is upstreamJason A. Donenfeld2019-05-162-34/+14
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: change acronyms to uppercaseSimon Rozman2019-05-165-67/+67
| | | | Signed-off-by: Simon Rozman <simon@rozman.si>
* firewall: allow wireguard.exe to override other rulesJason A. Donenfeld2019-05-151-0/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: give sublayer heavy weightJason A. Donenfeld2019-05-151-0/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: correct type on 32bit structureJason A. Donenfeld2019-05-151-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: ip adapter might not be up yetJason A. Donenfeld2019-05-151-5/+19
| | | | | | I don't like polling, but windows is racey. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* ui: drop permissionsJason A. Donenfeld2019-05-152-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: move WTS upstreamJason A. Donenfeld2019-05-154-136/+12
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: more apis ported upstreamJason A. Donenfeld2019-05-153-64/+10
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: clean up token manglingJason A. Donenfeld2019-05-144-89/+21
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: drop all privileges for tunnel serviceOdd Stranne2019-05-144-0/+108
| | | | | Signed-off-by: Odd Stranne <odd@mullvad.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: replace GetIfEntry2Ex with GetIfEntry2Simon Rozman2019-05-141-1/+1
| | | | | | GetIfEntry2Ex is Windows 10+ only Signed-off-by: Simon Rozman <simon@rozman.si>
* service: winipcfg no longer returns a wrapped errorJason A. Donenfeld2019-05-141-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: skip routes for interfaces that aren't upJason A. Donenfeld2019-05-141-0/+5
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: account for loggedon but disconnected sessionsJason A. Donenfeld2019-05-141-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: use tab after //sysJason A. Donenfeld2019-05-142-5/+5
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: regroup all importsJason A. Donenfeld2019-05-1413-33/+46
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: reuse golang.org/x/sys/windows address family constantsSimon Rozman2019-05-141-12/+13
| | | | Signed-off-by: Simon Rozman <simon@rozman.si>
* firewall: fix logic errorJason A. Donenfeld2019-05-131-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: only allow specified dns serversJason A. Donenfeld2019-05-133-49/+186
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: use more standard naming scheme for syscallsJason A. Donenfeld2019-05-134-99/+95
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: allow go to create correct environment blockJason A. Donenfeld2019-05-134-83/+10
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: run UI with elevated tokenJason A. Donenfeld2019-05-123-375/+11
| | | | | | | There are too many attacks possible when starting this with a non-elevated token. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: run UI at high integrityJason A. Donenfeld2019-05-113-0/+34
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: use LUID directlyJason A. Donenfeld2019-05-101-15/+5
| | | | | | InterfaceGuidToLuid fails if called soon after device creation. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: clean up addresses from stale interfacesJason A. Donenfeld2019-05-101-0/+51
| | | | | | Other VPN implementations leave trash laying around... Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: fix user logoutJason A. Donenfeld2019-05-101-17/+50
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: account for delete pending windows bug in tunneltrackerJason A. Donenfeld2019-05-092-12/+35
| | | | | | | | | | | Sometimes deleting a service disables it and prepares it for being deleted, but doesn't actually mark it as pending deletion. Presumably this is due to a race condition in the service management code. Workaround this by polling for disabled services, so that we don't wind up sleeping forever. Reported-by: Thomas Gschwantner <tharre3@gmail.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: prevent against multiple routines per sessionJason A. Donenfeld2019-05-081-4/+18
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: print in log after UI exitsJason A. Donenfeld2019-05-081-3/+10
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: waste a page due to sheer incompetenceJason A. Donenfeld2019-05-081-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: require elevated tokenJason A. Donenfeld2019-05-081-0/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: make the generated bindings do the type forcingJason A. Donenfeld2019-05-082-64/+56
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: local system's token is a bit more locked down than elevatedJason A. Donenfeld2019-05-081-2/+3
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* service: give process elevated security attributes plus logon session ID with minimal permissionsJason A. Donenfeld2019-05-085-42/+311
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: cleanupJason A. Donenfeld2019-05-086-58/+59
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: implode recurring address definitionsOdd Stranne2019-05-081-14/+15
| | | | | Signed-off-by: Odd Stranne <odd@mullvad.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: remove unused codeOdd Stranne2019-05-088-296/+44
| | | | | Signed-off-by: Odd Stranne <odd@mullvad.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: add permitHyperV()Odd Stranne2019-05-083-0/+108
| | | | | Signed-off-by: Odd Stranne <odd@mullvad.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* firewall: implement permitNdp()Odd Stranne2019-05-082-4/+222
| | | | | Signed-off-by: Odd Stranne <odd@mullvad.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.