Micah Morton b9fcc61991 Allow strongSwan to be spawned as non-root user ...

This patch allows for giving strongSwan only the runtime capabilities it
needs, rather than full root privileges.

Adds preprocessor directives which allow strongSwan to be configured to
 1) start up as a non-root user
 2) avoid modprobe()'ing IPsec kernel modules into the kernel, which
    would normally require root or CAP_SYS_MODULE

Additionally, some small mods to charon/libstrongswan ensure that charon
fully supports starting as a non-root user.

Tested with strongSwan 5.5.3.

2018-05-14 15:50:01 +02:00

..

parser

Change interface for enumerator_create_filter() callback

2017-05-26 13:56:44 +02:00

tests

starter: Add support for multi-line strings in ipsec.conf

2015-07-28 13:27:32 +02:00

.gitignore

configure: Fix gperf length parameter determination

2017-10-02 17:21:42 +02:00

Android.mk

libhydra: Remove empty unused library

2016-03-03 17:36:11 +01:00

args.c

stroke: Make 96-bit truncation for SHA-256 configurable

2017-05-26 11:22:28 +02:00

args.h

starter: Use new parser to read config file

2014-06-19 14:00:49 +02:00

cmp.c

starter: Fix mark_out.mask in starter_cmp_conn()

2015-01-12 11:17:12 +01:00

cmp.h

…

confread.c

starter: Don't define any hard-coded proposal strings

2017-10-10 11:04:17 +02:00

confread.h

stroke: Make 96-bit truncation for SHA-256 configurable

2017-05-26 11:22:28 +02:00

files.h

starter: Make daemon name configurable

2013-03-19 15:23:45 +01:00

invokecharon.c

starter: Wait indefinitely for charon when using --attach-gdb

2014-08-08 16:36:00 +02:00

invokecharon.h

…

ipsec.conf

…

ipsec.secrets

starter: Install an empty ipsec.secrets file

2016-10-04 10:13:32 +02:00

keywords.h.in

configure: Fix gperf length parameter determination

2017-10-02 17:21:42 +02:00

keywords.txt

configure: Fix gperf length parameter determination

2017-10-02 17:21:42 +02:00

klips.c

…

klips.h

…

Makefile.am

starter: Add the correct keywords header file to EXTRA_DIST

2017-10-12 09:09:12 +02:00

netkey.c

libhydra: Move kernel interface to libcharon

2016-03-03 17:36:11 +01:00

netkey.h

starter: Don't flush SAs in the kernel

2015-08-21 18:27:06 +02:00

starter.c

Allow strongSwan to be spawned as non-root user

2018-05-14 15:50:01 +02:00

starterstroke.c

stroke: Make 96-bit truncation for SHA-256 configurable

2017-05-26 11:22:28 +02:00

starterstroke.h

…

y.output

…