Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
3fb258db47
core-agent-linux/vm-systemd
History
Marek Marczykowski-Górecki 3fb258db47
network: order qubes-firewall service before enabling IP forwarding 
Start qubes-firewall (which will add "DROP by default" rule) before
enabling IP forwarding, to not leave a time slot where some connection
could go around configured firewall.

QubesOS/qubes-issues#3269
2017-11-20 02:42:39 +01:00
..
anacron-resume.service.d Stop anacron from starting in Debian using existing constraint on cron 2017-02-05 23:36:27 +00:00
anacron.service.d Stop anacron from starting in Debian using existing constraint on cron 2017-02-05 23:36:27 +00:00
avahi-daemon.service.d Stop unnecessary services in Debian 2017-02-16 22:41:14 +00:00
chronyd.service.d Fix starting time synchronization service 2017-11-03 03:12:55 +01:00
cron.service.d Revert version and correct unit files 2016-10-16 13:39:01 +01:00
crond.service.d Revert version and correct unit files 2016-10-16 13:39:01 +01:00
cups.path.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
cups.service.d Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
cups.socket.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
exim4.service.d Stop unnecessary services in Debian 2017-02-16 22:41:14 +00:00
getty@tty.service.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
ModemManager.service.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
netfilter-persistent.service.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
network-manager.service.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
NetworkManager-wait-online.service.d systemd: improve ordering of systemd units 2016-07-27 05:19:47 +02:00
NetworkManager.service.d systemd: improve ordering of systemd units 2016-07-27 05:19:47 +02:00
org.cups.cupsd.path.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
org.cups.cupsd.service.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
org.cups.cupsd.socket.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
systemd-random-seed.service.d systemd: plug random seed loading into systemd-random-seed 2016-07-17 04:26:01 +02:00
systemd-timesyncd.service.d clock synchronization rewrite 2017-07-06 23:37:26 +02:00
tinyproxy.service.d No longer start /etc/init.d/tinyproxy by default anymore. 2015-11-11 14:57:36 +00:00
tmp.mount.d Enlarge /tmp and /dev/shm 2015-10-04 23:07:10 +02:00
tor.service.d systemd: order units checking for qubes-service after qubes-sysinit 2016-05-12 00:17:05 +02:00
tor@default.service.d Do not start tor@default service in TemplateVM. 2016-06-11 13:46:58 +00:00
user dropins: implement dropins for systemd user starting with pulseaudio systemd service and socket masking 2015-11-07 19:12:30 +01:00
75-qubes-vm.preset Resize root filesystem at VM startup if needed 2017-10-18 21:02:15 +02:00
bind-dirs.sh Hint shellcheck where to look for sourced files, if in repository 2017-09-30 05:05:34 +02:00
haveged.service debian: make haveged.service patch less intrusive... 2017-05-22 17:30:06 +02:00
misc-post-stop.sh Remove DisposableVM savefile related files 2017-06-08 22:11:35 +02:00
misc-post.sh Hint shellcheck where to look for sourced files, if in repository 2017-09-30 05:05:34 +02:00
mount-dirs.sh Hint shellcheck where to look for sourced files, if in repository 2017-09-30 05:05:34 +02:00
network-proxy-setup.sh init: fix issues found by shellcheck in init scripts 2017-09-30 04:49:21 +02:00
qubes-core-agent-linux.tmpfiles updates-proxy: use separate directory for PID file 2015-11-11 05:57:57 +01:00
qubes-core.conf Cleanup kernel modules loading configuration 2017-06-08 22:11:38 +02:00
qubes-early-vm-config.service systemd: fix race condition between qubes-db and qubes-early-vm-config 2017-05-14 23:13:26 +02:00
qubes-early-vm-config.sh init: fix issues found by shellcheck in init scripts 2017-09-30 04:49:21 +02:00
qubes-firewall.service network: order qubes-firewall service before enabling IP forwarding 2017-11-20 02:42:39 +01:00
qubes-iptables.service Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-misc-post.service Remove DisposableVM savefile related files 2017-06-08 22:11:35 +02:00
qubes-mount-dirs.service Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-network.service Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-qrexec-agent.service Remove DisposableVM savefile related files 2017-06-08 22:11:35 +02:00
qubes-random-seed.sh Hint shellcheck where to look for sourced files, if in repository 2017-09-30 05:05:34 +02:00
qubes-rootfs-resize.service Resize root filesystem at VM startup if needed 2017-10-18 21:02:15 +02:00
qubes-sync-time.service clock synchronization rewrite 2017-07-06 23:37:26 +02:00
qubes-sync-time.timer clock synchronization rewrite 2017-07-06 23:37:26 +02:00
qubes-sysinit.service Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-sysinit.sh Enable qubes-firewall also in "NetVM" 2017-11-20 01:56:15 +01:00
qubes-update-check.service systemd: don't mark updates check service failed 2016-07-16 15:30:40 +02:00
qubes-update-check.timer vm: notify dom0 when updates available in VM (#475) 2012-05-02 00:09:00 +02:00
qubes-updates-proxy-forwarder.socket Implement qrexec-based connection to updates proxy 2017-05-26 05:25:29 +02:00
qubes-updates-proxy-forwarder@.service Implement qrexec-based connection to updates proxy 2017-05-26 05:25:29 +02:00
qubes-updates-proxy.service updates-proxy: use separate directory for PID file 2015-11-11 05:57:57 +01:00