Skip to content

Releases: gustavo-iniguez-goya/opensnitch

v1.0.0rc7

12 Apr 23:14
Compare
Choose a tag to compare

Improved stability, performance and apps detection.

UI important note:

  • Be sure to uninstall any previous installation of the original repo you may have, specially under /usr/local/lib/python*
  • No systray icon on latest gnome-shell version.

Before reporting an issue, or if you experience any error:
https://github.com/gustavo-iniguez-goya/opensnitch/wiki/FAQs-and-common-errors

And check the existing issues (open and closed)

Relevant changes

UI:
60005d7 UI: added help menu
1e11e52 deb UI packages improved
7c647f5 fixed UI icons
00bfd58 UI: added filter by command line/args
9d139a3 fixed not answered dialog alert icon

daemon:
d6af478 netlink: exclude connections with invalid inode
c51d954 audit: avoid to overwrite cmdline of new events
99ad5e5 fixed getting process uid under certain situations
b9af7c2 fixed compiling for arm and i386
24ede1c netlink: get active connections by source port + protocol
bf90229 procmon cache: removed redundant inodes cache deletion
b359bfd update upstream url
528ce81 exclude localhost resolved dns from being cached
f7114d9 delete inodes cache when a process exits
e85a41c allow to configure process monitor method in daemon config
dbb86d7 avoid to crash if opensnitchd is already running

v1.0.0rc6

08 Mar 20:14
Compare
Choose a tag to compare

Added new method to monitor PIDs which open connections.
Improved PIDs cache.

UI important note:
Be sure to uninstall any previous installation of the original repo you may have, specially under /usr/local/lib/python*

Before reporting an issue, or if you experience any error:
https://github.com/gustavo-iniguez-goya/opensnitch/wiki/FAQs-and-common-errors

And check the existing issues (open and closed)

Relevant changes:

UI:
802c19f Workaround to show up the systray icon on Cinnamon

daemon:
6ebd6cc added a default configuration file
0fb23bb audit: avoid to alloc unused map, reformatted code
a3422e4 audit: sort events after update the cache
ba770fd audit: insert new processes at the top of the list.
ef04667 cache of pids: insert new processes at the top of the list
1c04e95 audit: search for a process using the ppid
db22e83 pids cache: delete from cache non existent PIDs
7ef15fa cache of known pids: update lastSeen field when we have a match
3d6beb5 Added new processes monitor method: audit
6a82cdb Allow to select which log level to use
c5a3fb5 Allow to select what process search method to use
fe87895 Apply default action in case of communication failure with the server
de956b1 Fixed DNS responses firewall rule not deleted on exit

deb packages:
c21e552 deb packages: distribute default daemon configuration
4407b82 deb package: added logrotate file, lower daemon log level

v1.0.0-rc5

24 Feb 21:23
Compare
Choose a tag to compare

This release improves connections interception accuracy, as well as ensure that our rules are not deleted (by mistake/etc...) while the daemon is running.

There has also been several important fixes in GUI, which makes it more robust and compatible with more environments (Linux Mint 19.x, Cinnamon, etc...). The deb package has also received some improvements, to make it more robust and user friendly .

IMPORTANT:
If you had a previous installation of the OpenSnitch UI, uninstall it. Otherwise you may have errors.
Look for it under /usr/local/lib/python*

Relevant changes:

UI:
a34f215 UI deb package: added qt sqlite lib dependency
4479bb5 UI: exit cleanly if there's no QtSql driver available
be89865 fixed UI autostart on Cinnamon
4013291 Workaround for crashes parsing .desktop files
c4a9a21 fixed HighDpi scaling
7f2f40b UI, stats: display dst_port on process details view
8d88a4c Fixed advanced button height on some systems
6ae1857 Fixed prompt dialog exception and improved backward compatibility
b409eca Fixed UI crash when configuring high dpi scaling on some systems

Daemon:
848f72d Fixed netlink socket querying - get correctly the inode of a connection
2c7472f firewall: check rules every 5s - ensure that our rules are not deleted while the daemon is running

v1.0.0-rc4

19 Feb 23:44
Compare
Choose a tag to compare

Fixed a UI crash on old distros, and a typo which also caused a crash.
Improve UI layout for several distros and window managers (Ubuntu/Mint, mate/kde/gnome-shell)

UI deb package tested and working well on:

  • Ubuntu Mate >= 16.04
  • Linux Mint >= 18
  • Ubuntu Lite (KDE)
  • Debian >= 9 (Mate, Cinnamon).

No icon on Unity WM, and it behaves really odd.

v1.0.0-rc3

18 Feb 23:39
Compare
Choose a tag to compare

Read the commits list for detailed information: https://github.com/gustavo-iniguez-goya/opensnitch/commits/main

Changes:

  • UI: display an alert when the user does not respond to a prompt dialog.
  • UI: centralized configuration under ~/.config/opensnitch/settings.conf.
  • UI: Fixed regex patterns.
  • UI: Fixed Allow/Deny second-level domains (github.com, imgur.com ...).
  • daemon: Do not panic if we can't parse a regex type rule.
  • daemon: if debugfs is not present, parse /proc directly. This allows us to keep functioning on some environments (secure boot on, latest kernels with debugfs unmounted by default, etc).
  • daemon: fixed and improved netlink connections querying.
  • daemon: improved PIDs cache searching by prioritize PIDs with active connections.
  • daemon: improved /proc PIDs searching, sorting by latest modified PIDs.

Note about the deb UI packages:
They're experimental, in the sense that we're trying to make them as much Debian compliant and backward compatible as we can, so expect changes between releases. You may need to remove and reinstall it. All in all it should work in most cases, if not, report it.

Installation:
sudo dpkg -i *opensnitch*deb; sudo apt -f install

Thanks:
@Ph0rk0z, @squalou and (...) for testing and reporting bugs. More than welcome!

v1.0.0-rc2

05 Feb 00:02
Compare
Choose a tag to compare

Small improvements to the UI.
Make it work on distros with old libnetfilter-queue.

Daemon deb package compatibility (maybe others as well, let us know!):

  • Debian >= 8
  • LinuxMint >= 18
  • Ubuntu >= 16 (works also on 14.04, but it lacks upstart service file. And dpkg must be at least .1.17.x)

UI deb package compatibility (maybe others as well, let us know!):

  • Debian >= 10
  • Ubuntu >= 19.x

The reason for such low compatiblity is that mainly the python3-grpcio and python3-protobuf is not available in all distros. We'll remove these dependencies from the package soon, and install them via pip3

sudo dpkg -i opensnitch_1.0.0rc-2_amd64.deb python3-opensnitch-ui_1.0.0rc2-1_all.deb; sudo apt -f install

v1.0.0-rc1

04 Feb 09:22
Compare
Choose a tag to compare

64eaf4120411927d3272c8094523ab58e445b9f55ca9e6c7a1aa11940acfbd7 opensnitch_1.0.0rc-1_amd64.deb