filter: new automatic whitelisting rules and strict/paranoid policies

The 'default' filter policy was based on blacklisting as much as
possible and otherwise allow.

The new 'strict' filter policy will be based on whitelisting as much
as much as possible, using custom defined rules, and otherwise forbid
the ports.

The new 'paranoid' filter policy is equivalent to the 'strict' filter
after having applied the blacklist rules from the 'default' filter.
This commit is contained in:
Aleksander Morgado
2017-10-16 22:55:02 +02:00
parent 33583ca4de
commit ee570d44dc
4 changed files with 142 additions and 29 deletions

View File

@@ -1139,7 +1139,9 @@ initable_init (GInitable *initable,
#endif
/* Create filter */
priv->filter = mm_filter_new (priv->filter_policy);
priv->filter = mm_filter_new (priv->filter_policy, error);
if (!priv->filter)
return FALSE;
/* Create plugin manager */
priv->plugin_manager = mm_plugin_manager_new (priv->plugin_dir, error);