diff options
| author | Aleksander Morgado <aleksander@aleksander.es> | 2017-10-16 22:55:02 +0200 |
|---|---|---|
| committer | Aleksander Morgado <aleksander@aleksander.es> | 2017-12-05 10:58:29 +0100 |
| commit | ee570d44dc117dc69f23e83313dd877f76c5e3e0 (patch) | |
| tree | 360a1d17e37ab1569cb82153c19bc835e92a0b63 /src/mm-context.c | |
| parent | 33583ca4dea8dd14e9090fc011986577b14b8ede (diff) | |
filter: new automatic whitelisting rules and strict/paranoid policies
The 'default' filter policy was based on blacklisting as much as
possible and otherwise allow.
The new 'strict' filter policy will be based on whitelisting as much
as much as possible, using custom defined rules, and otherwise forbid
the ports.
The new 'paranoid' filter policy is equivalent to the 'strict' filter
after having applied the blacklist rules from the 'default' filter.
Diffstat (limited to 'src/mm-context.c')
| -rw-r--r-- | src/mm-context.c | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/src/mm-context.c b/src/mm-context.c index 3dac3903..88d71384 100644 --- a/src/mm-context.c +++ b/src/mm-context.c @@ -58,6 +58,16 @@ filter_policy_option_arg (const gchar *option_name, return TRUE; } + if (!g_ascii_strcasecmp (value, "strict")) { + filter_policy = MM_FILTER_POLICY_STRICT; + return TRUE; + } + + if (!g_ascii_strcasecmp (value, "paranoid")) { + filter_policy = MM_FILTER_POLICY_PARANOID; + return TRUE; + } + g_set_error (error, MM_CORE_ERROR, MM_CORE_ERROR_FAILED, "Invalid filter policy value given: %s", value); @@ -67,7 +77,7 @@ filter_policy_option_arg (const gchar *option_name, static const GOptionEntry entries[] = { { "filter-policy", 0, 0, G_OPTION_ARG_CALLBACK, filter_policy_option_arg, - "Filter policy: one of DEFAULT, WHITELIST-ONLY", + "Filter policy: one of DEFAULT, WHITELIST-ONLY, STRICT, PARANOID", "[POLICY]" }, { |