WARNING:
The configuration file /etc/opensnitchd/default-config.json has new fields. .If you're upgrading opensnitch and you have modified it, you must replace the one you have installed with the one shipped with the packages (apt will ask you to do it).
Changes made to that file will be overwritten after installation.
Highlights
- Rules are case-insensitive by default. (see #45)
- Rules are sorted alphabetically. (see #36)
- Allow to prioritize rules. (see #36 )
- Connections can be filtered by protocols.
ftraceinterception method works again (it seems to have a descriptors leak bug though).- You can configure on the daemon (
default-config.json) and from the UI the address of the server (UI) and the log file. - Set pop-ups Default Timeout to 0 to disable connections pop-ups. It'll apply the Default Action configured.
UI
907e738 ui: configure Server Address and LogFile from the GUI
832f4fd ui: allow to clear stats in all tabs
9aa100f ui: improved showing/hiding stats window
6522a94 ui: make pop-up dialogs optionals
1c3a9d1 ui: fixed viewing stats of a node
1f6a2db ui,pop-ups: don't set the focus on the action buttons
7deb2f3 ui: fixed python3 system libs path on OpenSuse
e919bd5 ui: refresh rules list after rules deletion
d3d8aa9 ui: set an alternative theme if the default one fails or if there's none configured
Daemon
aad69e9 close log file handles when applying a configuration change
0d1e9f5 set server address and log file from the default config
e625b93 fixed switching between process monitor methods
5990560 fix a deadlock and race condition checking monitor method
ab46cca added priority and case-sensitive rules, fixes
820a6f2 added option to set priority on the rules
c2ee610 sort rules by name
4949ab1 allow to filter connections by protocol
d6cf18e show domain name when establishing a new connection
bc70423 make rules case-insensitive by default
08abdd0 go.mod: add netns as indirect dependency for netlink
Packaging
5e5a586 ui: improved GUI deb packages (allow non-interactive installations)
bc26ca4 ui deb pkg: improved post install
a7f470e daemon deb: Added support for sysvinit based systems
Thank you for all the errors and suggestions reported!