Upstreamed patch from Gentoo Linux

We put bin before sbin because we want sbin to have the
higher priority

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>

This ensures proper building when cross-compiling
and allows users to use different toolchain tools if
desired

Bug: https://bugs.gentoo.org/814017
Closes: #550


Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>

Kali Kaneko authored 3 years ago and Kali Kaneko committed 3 years ago

- Resolves: #443

-Resolves: #524

- Resolves: #522

"pick location" menu was a transitional menu item to be able to open
window without altering too much the current UI flow that operates on
the systray, and as an interim until the simply secure proposal was in
place.

for calyx, it makes sense to open the window directly.

- Resolves: #457

- Closes: #511

- Cloases: #470

just a dump from a working pad, comments are welcome

By default, bitmask-root allows traffic to devices in local networks.

However, this behavior depends on it correctly identifying the local
network of the default route, and it can fail on more complex network
setups (one common failure mode is when one of the ifaces gets a
link-local ip).

This commit introduces an explicit mechanism, by parsing lines in

/etc/bitmask/ipv4.allow
/etc/bitmask/ipv6.allow

If valid private ips are defined in either of the files, the behavior
will change to fail close for local devices, and allow traffic (both tcp
and udp) to the defined ips, on all ports.

- Resolves: #503