Marek Marczykowski-Górecki 68b61c2c6d network: setup anti-spoofing firewall rules before enabling the interface ... Previously enabling the interface was the first action in the setup steps. Linux theoretically do not forward the traffic until proper IP address and route is added to the interface (depending on rp_filter setting). But instead of relying on this opaque behavior better setup anti-spoofing rules earlier. Also, add 'set -o pipefail' for more reliable error handling. Note the rules for actual VM traffic (qvm-firewall) are properly enforced - until those rules are loaded, traffic from appropriate vif interface is blocked. But this relies on proper source IP address, anti-spoofing rules need to be setup race-free. Reported-by: Demi M. Obenour <demiobenour@gmail.com>		2020-11-10 15:46:22 -05:00
app-menu	Fixed menu item name	2020-09-26 22:48:35 +00:00
applications-dropins	Add /etc/qubes/applications override, use it for gnome-terminal	2020-01-27 14:05:55 +01:00
archlinux	archlinux: disable check on unassigned pkgdir var	2020-10-21 08:37:53 +02:00
autostart-dropins	Enable gnome settings daemon xsettings plugin	2018-01-12 05:44:54 +01:00
boot	Merge app-defaults and sys-defaults to config-overrides	2020-02-05 00:12:22 +00:00
ci	travis: install also python xdg module	2020-01-28 04:22:12 +01:00
config-overrides	Merge app-defaults and sys-defaults to config-overrides	2020-02-05 00:12:22 +00:00
debian	version 4.1.18	2020-10-31 05:39:07 +01:00
doc	Remove qrexec-agent related files	2019-04-08 18:22:38 +02:00
filesystem	Drop legacy xen entry in fstab	2020-07-26 14:30:33 +02:00
init	init/setup-rwdev: don't write a journal in DispVMs	2020-02-14 11:35:05 -05:00
misc	Install 50-qubes-mem-hotplug.rules in /lib/udev instead of /etc/udev	2020-02-05 00:12:23 +00:00
network	network: setup anti-spoofing firewall rules before enabling the interface	2020-11-10 15:46:22 -05:00
package-managers	dnf-plugin: restrict to only version provided by plateform-python	2020-10-30 10:46:56 +01:00
passwordless-root	passwordless-root: sudo: grant access for group qubes	2020-09-13 14:17:06 +00:00
patches.debian	Split items in misc directory by topic	2020-02-04 23:59:09 +00:00
pkgs	archlinux: created build scripts	2013-04-17 01:22:32 +02:00
qubes-rpc	Merge remote-tracking branch 'origin/pr/236'	2020-09-17 03:08:56 +02:00
qubesagent	Do not use legacy distutils.spawn	2020-07-02 02:56:13 +02:00
rpm_spec	dnf-plugin: restrict to only version provided by plateform-python	2020-10-30 10:46:56 +01:00
test-packages	tests: add run-tests script, plug it into travis	2017-05-20 13:20:08 +02:00
vm-init.d	Move qubes-firewall from sbin to bin	2020-02-05 00:12:22 +00:00
vm-systemd	preset: handle dom0 and sys-usb qubes-psu-client	2020-10-03 19:34:58 +02:00
.coveragerc	tests: add run-tests script, plug it into travis	2017-05-20 13:20:08 +02:00
.gitignore	debian: add 'rpm' as dependency	2020-06-19 19:15:52 +02:00
.travis.yml	travis: allow bullseye install to fail - no dnf/yum available	2020-09-16 15:40:51 +02:00
debian-quilt	debian: fix shellcheck warnings in debian packaging	2017-09-30 05:05:33 +02:00
LICENSE	Added LICENSE	2010-04-05 21:21:27 +02:00
Makefile	Revert "rpm: do not build qubes-core-agent-sysvinit package"	2020-09-17 02:47:51 +02:00
Makefile.builder	Allow build for Focal	2020-10-10 04:18:19 +02:00
run-tests	Load only test_* files when looking for tests (python)	2018-04-02 23:19:02 +02:00
series-debian-jessie-vm.conf	Revert "Use sfdisk instead of parted to ..." on stretch and jessie	2019-02-24 05:15:04 +01:00
series-debian-stretch-vm.conf	Revert "Use sfdisk instead of parted to ..." on stretch and jessie	2019-02-24 05:15:04 +01:00
series-debian-vm.conf	Stop anacron from starting in Debian using existing constraint on cron	2017-02-05 23:36:27 +00:00
setup.py	Install faster console scripts for Python code	2020-01-24 18:45:16 +01:00
version	version 4.1.18	2020-10-31 05:39:07 +01:00