gaschz/qubes-network-server
1
0
Fork 0
mirror of https://github.com/Rudd-O/qubes-network-server.git synced 2025-03-01 14:22:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Brown paper bug. Fixed.

Browse Source
This commit is contained in:
Manuel Amador (Rudd-O) 2018-11-18 08:57:41 +00:00
parent efdda01dd0
commit c5d909e193
2 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
qubes-network-server.spec
View File

@ -3,7 +3,7 @@
%define mybuildnumber %{?build_number}%{?!build_number:1} %define mybuildnumber %{?build_number}%{?!build_number:1}
Name: qubes-network-server Name: qubes-network-server
Version: 0.0.7 Version: 0.0.8
Release: %{mybuildnumber}%{?dist} Release: %{mybuildnumber}%{?dist}
Summary: Turn your Qubes OS into a network server Summary: Turn your Qubes OS into a network server
BuildArch: noarch BuildArch: noarch

15
src/usr/lib64/python2.7/site-packages/qubes/modules/001FortressQubesVm.py
View File

@ -106,7 +106,7 @@ class QubesVm(OriginalQubesVm):
def start_qrexec_daemon(self, verbose=False, notify_function=None): def start_qrexec_daemon(self, verbose=False, notify_function=None):
ret = OriginalQubesVm.start_qrexec_daemon(self, verbose=verbose, notify_function=notify_function) ret = OriginalQubesVm.start_qrexec_daemon(self, verbose=verbose, notify_function=notify_function)
if self.type not in ['AppVM', 'HVM']: if self.type in ['AppVM', 'HVM']:
self.deploy_appvm_firewall(verbose=verbose, notify_function=notify_function) self.deploy_appvm_firewall(verbose=verbose, notify_function=notify_function)
self.adjust_proxy_arp(verbose=verbose, notify_function=notify_function) self.adjust_proxy_arp(verbose=verbose, notify_function=notify_function)
self.adjust_own_firewall_rules() self.adjust_own_firewall_rules()
@ -396,6 +396,19 @@ class QubesVm(OriginalQubesVm):
f.close() f.close()
def deploy_appvm_firewall(self, verbose = False, notify_function=None): def deploy_appvm_firewall(self, verbose = False, notify_function=None):
# FIXME FIXME FIXME!
#
# Finish porting all code here that sets rules in AppVMs to
# use this daemon instead, so that rules can be configured
# to work properly without bullshit of any kind.
#
# See 007FortressQubesProxyVm.py code for where that may
# happen, as well as any place where FORTRESS-INPUT appears
# or is involved.
#
# Maybe: templatize qubes-appvm-firewall so that the template
# can take the name of the chain and the name of the key
# from this upstream program which deploys it into VMs.
def n(msg): def n(msg):
if notify_function: if notify_function:
notify_function("info", msg) notify_function("info", msg)