Sunil Mohan Adapa 2240f7a151

firewall: Create a mechanism for protecting local services ...

Tests:

- On a fresh container, run FreedomBox service. Notice that firewall app setup
succeeds. Base setup rules are inserted into the nftables as checked with 'nft
list ruleset ip' and 'nft list ruleset ipv6'.

- When firewalld is restarted or reloaded, the rules are still present.

- When machine is restarted, the rules are still present.

- Without the patch, setup a container. Then apply patches and restart
FreedomBox service. App setup runs again however, duplicate rules are listed in
nftables as checked with 'nft list ruleset ip' and 'nft list ruleset ipv6'.

- Increment setup version of the firewall app manually and repeat the test.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>

2022-12-05 20:46:46 -05:00

..

locale

locale: Update translation strings

2022-11-07 20:14:46 -05:00

migrations

…

modules

firewall: Create a mechanism for protecting local services

2022-12-05 20:46:46 -05:00

privileged

*: Use privileged decorator for package actions

2022-10-08 18:54:00 -04:00

templates

templates: Update HTML meta tags for better description and app-name

2022-10-08 09:14:01 -04:00

templatetags

…

tests

privacy: Add new system app for popularity-contest

2022-10-10 17:35:26 -07:00

__init__.py

Release 22.25.1 to unstable

2022-12-02 08:23:18 -08:00

__main__.py

module_loader, app: Move app init to app module

2021-12-04 16:39:40 -05:00

action_utils.py

action_utils: Drop support for non-systemd environments

2022-10-08 18:54:13 -04:00

actions.py

actions: Drop unused superuser_run and related methods

2022-10-08 18:54:03 -04:00

app.py

app: Add API to uninstall an app

2022-08-29 08:28:44 -04:00

axes_app_config.py

…

cfg.py

…

clients.py

…

context_processors.py

…

daemon.py

*: Use privileged decorator for service actions

2022-10-08 18:53:55 -04:00

dbus.py

…

develop.config

…

errors.py

actions: Drop unused superuser_run and related methods

2022-10-08 18:54:03 -04:00

forms.py

forms: Implement form for uninstallation

2022-08-29 08:28:39 -04:00

frontpage.py

users: Use privileged decorator for actions

2022-10-08 18:53:52 -04:00

glib.py

…

hashers.py

…

kvstore.py

…

log.py

…

menu.py

…

middleware.py

setup: Drop setup_helper and use the new Operation API

2022-08-15 10:36:32 -04:00

models.py

…

module_loader.py

actions: Add a decorator for marking superuser actions

2022-06-20 18:16:47 -04:00

network.py

*: pylint: Drop unnecessary 'pass' statements

2022-07-04 19:46:31 -04:00

notification.py

notification: Don't fail when formatting message strings

2022-10-01 08:02:51 -04:00

operation.py

operation: Add module to manage threaded operations

2022-08-15 10:36:13 -04:00

package.py

*: Use privileged decorator for package actions

2022-10-08 18:54:00 -04:00

settings.py

…

setup.py

*: Use privileged decorator for package actions

2022-10-08 18:54:00 -04:00

signals.py

module_loader, app: Move app init to app module

2021-12-04 16:39:40 -05:00

translation.py

translation: Don't use session for storing lang pref in Django 4.0

2022-06-20 08:15:58 -04:00

urls.py

views: Implement a view to uninstall an app

2022-08-29 08:28:51 -04:00

utils.py

version: Compare Debian package version numbers

2022-09-08 21:38:58 -07:00

version.py

version: Compare Debian package version numbers

2022-09-08 21:38:58 -07:00

views.py

app: Add a menu item to trigger uninstallation

2022-08-29 08:28:54 -04:00

web_framework.py

…

web_server.py

…