core-agent-linux/qubesagent
Marek Marczykowski-Górecki 57a3c2d67e
network: have safe fallback in case of qubes-firewall crash/error
When qubes-firewall service is started, modify firewall to have "DROP"
policy, so if something goes wrong, no data got leaked.
But keep default action "ACCEPT" in case of legitimate service stop, or
not starting it at all - because one may choose to not use this service
at all.
Achieve this by adding "DROP" rule at the end of QBS-FIREWALL chain and
keep it there while qubes-firewall service is running.

Fixes QubesOS/qubes-issues#3269
2017-11-20 01:56:14 +01:00
..
__init__.py network: rewrite qubes-firewall daemon 2016-09-12 05:22:53 +02:00
firewall.py network: have safe fallback in case of qubes-firewall crash/error 2017-11-20 01:56:14 +01:00
test_firewall.py network: have safe fallback in case of qubes-firewall crash/error 2017-11-20 01:56:14 +01:00