Sam Whited authored 3 years ago and Kali Kaneko committed 3 years ago

Removes some GNUisms in favor of POSIX-make or generally more portable
make constructs.

Signed-off-by: Sam Whited <sam@samwhited.com>

kali authored 3 years ago and Kali Kaneko committed 3 years ago

A vulnerability in QtIFW produces improper ACLs to be set when
installing in custom locations. This can lead to privilege escalation if
a non-privileged user overwrites the openvpn binary. Thanks to
researchers at Tenable for finding and reporting this!

Impact is considered low-medium, since an installation outside of the
suggested path is needed to trigger the issue.

Privileged execution of openvpn should be abandoned in next release, in
favor of the interactive service.

A bug upstream should be filed since other projects could be affected by
this vulnerability too.

-Resolves: #569

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>

this should also hopefully make the CI/CD work again

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>

now we can call "make -jX build" with X>1 and
it will work \o/

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>

Kali Kaneko authored 3 years ago and Kali Kaneko committed 3 years ago

- Resolves: #443

this is mainly a workaround for #497

admin authored 3 years ago and Kali Kaneko committed 3 years ago

there was a mismatch after latest changes to the plist template
location.

also revert latest osx depends, since some are not installable via
homebrew in osx.

kali authored 4 years ago and Kali Kaneko committed 4 years ago

stop if:

- bitmask is running (we don't want to mess with the helper if the app
  is running)
- we cannot stop the service for some reason.

powershell gives more flexibility to stop services, but Remove-Service
is not present in PS < 6, so we try to remove the service from the
post-install too (the golang helper will complain about an eventlog
registry key).

this could probably be improved in the helper, but we'll be moving to
the official openvpnserv2 service for 0.21.4. we might want to revisit
the current helper for the firewall/killswitch.

Kali Kaneko authored 4 years ago and Kali Kaneko committed 4 years ago

- install into global /Applications
- document how to troubleshoot helper
- uninstall app is visible on top-level folder
- improve detection of running processes for old and new binaries

- Closes: #441
- Closes: #445
- Closes: #435

t h authored 4 years ago and Kali Kaneko committed 4 years ago

- Closes: #394

kali authored 4 years ago and Kali Kaneko committed 4 years ago

I kind of liked the "classic" style more (looks cleaner), but it looks
like we only can customize the logo etc with the "modern" look and feel
in windows.

I think the way to go would be to add a QStyleSheet to the installer
(and adding logo etc there), but I think that is going to take some
reading. this is not too bad for now, at least we can put logos to
differentiate riseup/calyx etc.

kali authored 4 years ago and Kali Kaneko committed 4 years ago

Also, install the tap driver silently.

- Resolves: #366

kali authored 4 years ago and Kali Kaneko committed 4 years ago

- Resolves: #383

this was left out of the packaging refactor by mistake.

- Resolves: #368