Skip to content

v0.2.0

Pre-release
Pre-release

Choose a tag to compare

View all tags
@EvSecDev EvSecDev released this 02 Mar 05:10
· 14 commits to main since this release
v0.2.0
cd8919b
This commit was signed with the committer’s verified signature. The key has expired.
EvSecDev
GPG key ID: 76041D1FDE3B77E6
Expired
Verified
Learn about vigilant mode.

Added

  • More detailed logging to command execution failures
  • Panic catch to validation and execution functions
  • Generic bpf filter config field to allow for any combination of valid BPF filters
  • Optional server configuration file field to add an exclusion BPF filter
  • Log message in server to show received valid knock packets before executing commands

Fixed

  • Server would ask for more permissions than allowed in sudo apparmor profile (fixed by allowing inet6 and /etc/gai.conf read permissions)
  • Server systemd service repeatedly failed without specific logs (fixed by excluding capabilities from service file, and adding directly to file only)
  • Server install script did not correct owner/permissions of extracted server executable
  • Server install script did not show user missing commands

Instructions

  • Please refer to the README.md file for instructions
  • ⚠️ Please be careful with this pre-release, as it may not work as expected.
Assets 6
Loading