Commit graph

1965 commits

Author SHA1 Message Date
Dan Williams
25e758c770 core: PolicyKit protect connection activation 2010-06-03 23:20:11 -07:00
Dan Williams
6cbe50ffbd core: add nm_auth_uid_authorized() to check user permissions
Basically cleaned up is_user_request_authorized() from nm-manager.c.
2010-06-03 23:04:10 -07:00
Dan Williams
78c4e0798e core: check permissions on the user settings service too
And if the permissions change, make sure we allow or deny user
settings connections as appropriate.
2010-06-03 13:03:07 -07:00
Dan Williams
f31022bfbc core: use return_no_pk_error() more and fix returned error messages 2010-06-02 11:20:38 -07:00
Dan Williams
299ab139e4 core: add policy for overall network control
Allows for locking down connections completely and disallowing
certain users from touching networking at all.
2010-06-02 02:23:51 -07:00
Dan Williams
a08227525c core: simplify auth chain permission callback handling 2010-06-02 02:16:14 -07:00
Dan Williams
6476c697d8 Merge remote branch 'origin/master' into perm 2010-06-01 15:34:53 -07:00
Dan Williams
a3d8cb9b6d core: rework pending activation to be more flexible
In preparation for more granular permissions.
2010-06-01 00:36:46 -07:00
Dan Williams
c4946a6dfe core: fix some problems with the user auth rework 2010-05-31 16:47:38 -07:00
Dan Williams
3b6917f74b core: make nm_auth_is_caller_root() more generic 2010-05-31 09:45:26 -07:00
Jiří Klimeš
12d26643e9 libnm-util: add nm_utils_wifi_* functions to handle frequencies/channels 2010-05-31 15:32:13 +02:00
Dan Williams
41faf87b0e core: root can always enable/disable and sleep/wake 2010-05-30 08:30:37 -07:00
Dan Williams
65818d517e core: PolicyKit-protect sleep/wake
Default to 'not allowed', distros that need backwards compatibility
can flip this to 'yes' if they need to. At this point, only power
management scripts should call these functions.
2010-05-29 23:11:45 -07:00
Dan Williams
c013490ba3 core: PolicyKit-protect enable/disable networking method 2010-05-29 23:00:46 -07:00
Dan Williams
716a9c6c0d core: add permissions framework for various operations (rh #585182) (bgo #619323) 2010-05-28 18:23:00 -07:00
Dan Williams
6810ef1422 core: don't shadow 'sleep' 2010-05-28 13:06:14 -07:00
Dan Williams
fea6431a20 core/libnm-glib: implement better missing firmware support (rh #594578)
Track missing firmware and ensure the device can't be used when firmware
is missing.  Add a property for missing firmware so that clients can do
something intelligent with this information.
2010-05-25 10:52:25 -07:00
Dan Williams
ba17174798 core: NL_CB_VERBOSE breaks error propagation (rh #594578)
Plus we don't really need the VERBOSE bits anyway.
2010-05-24 17:21:04 -07:00
Dan Williams
2e92d84ef0 modem: fix WWAN hardware enable state tracking (rh #591622) 2010-05-24 17:07:46 -07:00
Dan Williams
fa70542c61 core: add networking enable/disable knob distinct from sleep/wake (rh #589108) (bgo #346615)
Since forever we've used sleep/wake as the way to implement
Networking Enabled.  When the state file was introduced to make the
networking and wifi states persistent, we ran into a bug where
a failed suspend (like if the machine ran out of power while
suspended) would result in networking being disabled on reboot
since suspend/resume used the same knob as enable/disable.

This patch adds a distinct call for enable/disable networking
which changes the state file, while sleep/wake no longer change
the state file.
2010-05-22 09:51:22 -07:00
Dan Williams
a729d2f649 ip6: remove standalone DHCP method since DHCPv6 can't provide gateways
All IPv6 enabled sites are expected to provide router advertisement
support apparently.  If standalone DHCP is really used in the wild
then we can clearly re-enable it later.
2010-05-20 10:24:13 -07:00
Dan Williams
87ac1bd5f5 vpn: s/tundev/ip_iface 2010-05-18 16:47:43 -07:00
Dan Williams
0b8ee13ee0 ip6: pad RDNSS server expiry slightly to avoid hiccups (rh #590202)
Pad the DNS server expiry somewhat to give a bit of slack in cases
where one RA gets lost or something (which can happen on unreliable
links like wifi where certain types of frames are not retransmitted).
2010-05-14 09:48:46 -07:00
Dan Williams
a7e0e62311 core: tell GIO to use local implementation (rh #588745)
GIO will apparently normally try to use the remote VFS implemenation
on the session bus.  But NM (as a root service) shouldn't ever be
trying to talk to anything on the session bus.  Squash that.
2010-05-13 10:52:07 -07:00
Dan Williams
c62cfd2b63 dns: fix undefined reference when netconf is enabled (bgo #618300)
Thanks to Dominique Leuenberger.
2010-05-10 16:35:14 -07:00
Dan Williams
3e68d33583 ip6: only honor kernel-provided RA flags if an RA was received (rh #588560)
The kernel apparently caches the value and will send Managed/Other flags
in the newlink message even if the router is no longer reachable and
and RA hasn't been received for a while.  So we need to make sure we
check for IF_RA_RCVD before paying attention to Managed/Other.
2010-05-10 15:19:03 -07:00
Dan Williams
391fb0f0f2 ip6: set accept_ra to initial value for ignored connections (rh #588619) 2010-05-05 13:20:18 -07:00
Dan Williams
266e389cd3 bt: more debug logging 2010-05-05 13:09:12 -07:00
Dan Williams
57d9cc3c4a bt: increase DUN modem find timeout a bit 2010-05-05 12:53:20 -07:00
Dan Williams
e2f848c2d9 bt: ensure connect timeout is canceled on success (rh #586961) 2010-05-05 12:52:45 -07:00
Dan Williams
17b49b957c ip6: don't flush link-local IPv6 routes (rh #587836)
Since a link-local address should pretty much always be
assigned to an active interface, avoid flushing the routes
that allow link-local communication to work.
2010-05-04 20:24:17 -07:00
Dan Williams
1c5236029c core: pass ifindex and address family when flushing routes
Use the interfaces kernel index when we can to avoid unecessary
iface->index lookups; and let callers figure out which address
family they really want to flush.
2010-05-04 20:23:09 -07:00
Dan Williams
ad1017974b core: treat missing IPv6 setting as "ignore" (rh #588814)
Caused IPv6 configuration to fail the device even if IPv6 was supposed
to be disabled/ignored.
2010-05-04 16:14:29 -07:00
Dan Williams
d9cca49784 logging: silence ignorable warning
Since the NMDevice's interface isn't always the same as a kernel
interface name, we won't always have an entry in /proc/sys/net for it.
2010-05-04 16:12:52 -07:00
Dan Williams
79df93ce33 logging: log PID with syslog messages 2010-05-04 15:03:59 -07:00
Dan Williams
46c5a48ff2 ip6: use IN6_ARE_ADDR_EQUAL not memcmp 2010-05-04 12:45:36 -07:00
Dan Williams
291211ac2b dbus: ensure only root can change debug levels 2010-05-04 12:07:57 -07:00
Dan Williams
defaee09e5 logging: correctly print new logging level and domains on changes
Previously the input would simply be printed, but if you're not
changing either the level or domains (ie sending "") then the
unchanged logging domains wouldn't be printed, only "".
2010-05-04 12:06:00 -07:00
Dan Williams
e1eee77497 hostname: return NULL from failed hostname lookup, not zero-length string 2010-05-03 20:34:22 -07:00
Dan Williams
7926b3ca95 ip6: turn RA acceptance off when RAs shouldn't be used (rh #588163)
Make sure we don't inadvertenly let the kernel assign an RA address
when connections that don't allow RA are used.
2010-05-03 03:42:43 -07:00
Dan Williams
10d6bc8d2e ip6: fail if the RA-provided address disappears or RDNSS expires 2010-05-03 03:02:57 -07:00
Dan Williams
c21416e956 ip6: don't prematurely remove RDNSS nameservers (rh #588192) 2010-05-03 02:48:18 -07:00
Dan Williams
670de9b5fb ip6: tune RDNSS parsing logging 2010-05-03 02:42:48 -07:00
Dan Williams
dd699c585f core: better logging for interface address syncing 2010-05-03 02:11:59 -07:00
Dan Williams
8aef7ef411 core: allow selective failure of IP configuration (rh #567978)
As long as at least one IP config method completes, and as long as
methods that the user required to complete do complete, allow the
connection to complete.
2010-05-03 01:19:54 -07:00
Dan Williams
3fb8cdb35f mesh: let parent class handle IP config timeout 2010-05-03 00:59:06 -07:00
Dan Williams
5ca72c78a0 ip6: avoid autoconf routes where dest == gateway
These return errors when we try to add them via netlink (both internal
code and using /sbin/ip) so we'll ignore them for now.
2010-05-02 00:44:44 -07:00
Dan Williams
32b255e128 trivial: remove some debugging leftovers 2010-05-02 00:32:26 -07:00
Dan Williams
28d2c5592b dhcp: ensure getting DHCP IP config fails if the client died early
If the client never delivered any options to NM, make sure we don't
return a valid IP config object to callers when they request one.
2010-05-02 00:24:50 -07:00
Dan Williams
c34cc017ba dhcp: handle client early exit correctly
When the client	exits it may take a short amount of time for the
dhclient hook script to	deliver	the options to NetworkManager; so
we need	to keep	the client object around a bit (so we know what
NMDHCPClient the options getting delivered are for).  If we don't,
the DHCPManager will dispose of	the DHCPClient object and then
when the options come in, it can't match up the	PID from the
options with the PID of	an existing NMDHCPClient.  So put the
clients	on a removal timer that	keeps them around for a	bit before
we let the manager dispose of them.

Since we're keeping the	PID around too instead of zeroing it when
the client exits (for the reason above), track whether the client
is really dead yet so we don't indiscriminately	kill a random
process	that happens to re-use the PID.
2010-05-02 00:24:40 -07:00