kali authored 3 years ago and Kali Kaneko committed 2 years ago

- Resolves: #339

kali authored 3 years ago and Kali Kaneko committed 3 years ago

A vulnerability in QtIFW produces improper ACLs to be set when
installing in custom locations. This can lead to privilege escalation if
a non-privileged user overwrites the openvpn binary. Thanks to
researchers at Tenable for finding and reporting this!

Impact is considered low-medium, since an installation outside of the
suggested path is needed to trigger the issue.

Privileged execution of openvpn should be abandoned in next release, in
favor of the interactive service.

A bug upstream should be filed since other projects could be affected by
this vulnerability too.

-Resolves: #569

some refactor, plus fix docs

this is mainly a workaround for #497

meskio authored 3 years ago and Kali Kaneko committed 3 years ago

It was missing the qml qtquick controls 2

admin authored 3 years ago and Kali Kaneko committed 3 years ago

there was a mismatch after latest changes to the plist template
location.

also revert latest osx depends, since some are not installable via
homebrew in osx.

forcing a style override looks like a good workaround to avoid system qt
plugins mixing up with the libs in the snap.

- Resolves: #458

Kali Kaneko authored 4 years ago and Kali Kaneko committed 4 years ago

Let's use openssl for the time being, there's a compilation issue with mbedtls
that I don't seem to be able to solve.

- Closes: #311, #453

kali authored 4 years ago and Kali Kaneko committed 4 years ago

stop if:

- bitmask is running (we don't want to mess with the helper if the app
  is running)
- we cannot stop the service for some reason.

powershell gives more flexibility to stop services, but Remove-Service
is not present in PS < 6, so we try to remove the service from the
post-install too (the golang helper will complain about an eventlog
registry key).

this could probably be improved in the helper, but we'll be moving to
the official openvpnserv2 service for 0.21.4. we might want to revisit
the current helper for the firewall/killswitch.

Kali Kaneko authored 4 years ago and Kali Kaneko committed 4 years ago

- install into global /Applications
- document how to troubleshoot helper
- uninstall app is visible on top-level folder
- improve detection of running processes for old and new binaries

- Closes: #441
- Closes: #445
- Closes: #435

it had been changed in the hook itself, but this script kept using the
deprecated form.

- Resolves: #431

decodestring is an alias that was deprecated in 3.1

- Resolves: #412

kali authored 4 years ago and Kali Kaneko committed 4 years ago

I kind of liked the "classic" style more (looks cleaner), but it looks
like we only can customize the logo etc with the "modern" look and feel
in windows.

I think the way to go would be to add a QStyleSheet to the installer
(and adding logo etc there), but I think that is going to take some
reading. this is not too bad for now, at least we can put logos to
differentiate riseup/calyx etc.

kali authored 4 years ago and Kali Kaneko committed 4 years ago

Also, install the tap driver silently.

- Resolves: #366

kali authored 4 years ago and Kali Kaneko committed 4 years ago

- Resolves: #383

this was left out of the packaging refactor by mistake.

- Resolves: #368