1. 04 Jun, 2019 1 commit
    • Jussi Laakkonen's avatar
      [connman] Home must be mounted before connmand is run. Fixes JB#46139 · e67769a1
      Jussi Laakkonen authored
      This forces connman to wait for /home to be mounted before it is
      started. It can be achieved with RequiresMountsFor, which is equal to
      having Requires and After for home.mount. Also, connman needs to be
      stopped when /home is unmounted. This is achieved with PartOf.
      
      Added a systemd service additional conf file to be put under systemd
      system/connman.service.d/ which makes the above possible.
      e67769a1
  2. 03 Jun, 2019 1 commit
    • flypig's avatar
      [connman] Add access control to connman-vpn dbus interface. Contributes to JB#45379 · 9c30b7d1
      flypig authored
      Currently access to the connman-vpn dbus interfaces (connection and
      manager) are controlled only by the policy config, which sets `<policy
      at_console="true">`, allowing access to all users.
      
      This change adds internal access control to the connection dbus
      interface, which is configurable using a similar plugin approach as the
      existing access method implemented for connman. It also adds a
      Sailfish-specific plugin that blocks access for non-privileged users
      base on a policy file installed at /etc/connman/vpn-dbus-access.conf.
      
      The exceptions are the GetProperties and GetConnections dbus methods
      which are available to all users (including nemo).
      
      This Sailfish configuration is needed for MDM, to prevent users from
      being able to connect to and disconnect from VPNs when this capability
      is being restricted by the MDM policy.
      9c30b7d1
  3. 28 May, 2019 1 commit
  4. 22 May, 2019 1 commit
  5. 02 May, 2019 1 commit
    • Jussi Laakkonen's avatar
      [packaging] VPN plugins into separate packages. Contributes to JB#42973 · ace8bc53
      Jussi Laakkonen authored
      Create separate packages for the VPN plugins. Each plugin has the .so
      library and necessary script along LICENCE file.
      
      Also add vpn-script, openvpn-script and libppp-plugin.la into separate
      vpn-scripts package. Every VPN plugin needs these files. vpn-script is
      needed by OpenConnect and VPNC. libppp-plugin.la is needed by L2TP and
      PPTP. Because the directory is owned by the connman-vpn-scripts package
      it makes sense to have all scripts in one package to get the directory
      properly removed when packages are removed.
      ace8bc53
  6. 10 Apr, 2019 1 commit
  7. 08 Apr, 2019 1 commit
  8. 12 Mar, 2019 2 commits
    • Jussi Laakkonen's avatar
      [connman] Add developer mode tracking/query plugin. JB#43928 · bcec6362
      Jussi Laakkonen authored
      This commit adds a plugin to monitor and react to developer mode changes
      in Sailfis OS. When a change is detected connman_device_status_notify()
      is called with appropriate values.
      
      Using rtnl notifier and device.c to check if the device that was brought
      up & running or put down, exists and has a device. Bluetooth, cellular,
      GPS and WiFi devices are ignored, they are never developer mode devices.
      Plugin reports the device to be non-managed (managed = false), so
      connman should not manage it.
      
      The device brought up must be also running and have lower layer set as
      well (carrier is setup). If a device exists and usb moded is in correct
      state (developer mode), call notifier. If the usb moded is not queried
      the status is explicitely queried and notification is sent when reply is
      received.
      
      This plugin keeps a reference of all devices that have been detected
      being up. This is because rtnl priority for the plugin is low to get the
      notification after device.c has added a struct connman_device. But a
      reference must be kept for removal since with low rtnl priority device.c
      has already removed the struct connman_device. The notification is only
      done for the devices that have been added to the internal list and are
      queried only from there.
      
      Plugin also listens for status change signals from usb moded.
      
      If an interface is put down notifier is called after device checks. Even
      when interface goes down there must be a device for it. After this the
      device is removed from internal list.
      bcec6362
    • Tomi Leppänen's avatar
      Move connmanctl to correct package. · 331f8243
      Tomi Leppänen authored
      [packaging] Move connmanctl to connman-tools package. Contributes to JB#45071
      331f8243
  9. 12 Feb, 2019 1 commit
  10. 07 Feb, 2019 1 commit
  11. 01 Feb, 2019 3 commits
  12. 17 Jan, 2019 1 commit
  13. 14 Jan, 2019 1 commit
  14. 21 Dec, 2018 1 commit
    • flypig's avatar
      [mdm] Add global proxy plugin. Contributes to JB#43758 · 51cfddd2
      flypig authored
      1. Add dbus interface for activation and configuration
      2. Integrate global proxy into pacrunner plugin
      3. Handle config files for the global proxy
      4. Add unit tests and docs
      5. Use org.sailfishos.connman as dbus interface name
      6. Avoid infinite cycle updating config from file
      7. Ensure all memory is freed correctly.
      51cfddd2
  15. 18 Dec, 2018 1 commit
  16. 23 Nov, 2018 1 commit
  17. 21 Oct, 2018 1 commit
  18. 29 Mar, 2018 1 commit
    • Jussi Laakkonen's avatar
      [connman] Sailfish iptables API support. Contributes to JB#39338 · 113f670c
      Jussi Laakkonen authored
      Adds support for managing iptables content via ConnMan. The header to
      include: iptables_ext.h, which is installed as part of devel package.
      
      Functionalities implemented for plugins to use:
       - Chain management (new, delete, flush, find)
       - Iptables rule management (insert, append, delete)
       - Commit iptables changes
       - Change iptables policy
       - Save, load and clear iptables
          - Each table is saved to STORAREDIR/iptables/{tablename}.v4
          - Saving is done by connman at startup/shutdown.
          - Saving of iptables feature is adapted from iptables source.
       - Get iptables content
      
      These functionalities do not restrict use of specific iptables table.
      Except use of chains or targets with "connman-" in name is prevented.
      
      Upgrade iptables' xtables library build requirement to >= 1.6.1.
      
      Upgrade iptables install requirement to >= 1.6.1.
      113f670c
  19. 20 Feb, 2018 1 commit
  20. 06 Feb, 2018 2 commits
  21. 16 Oct, 2017 1 commit
  22. 12 Sep, 2017 1 commit
  23. 21 Aug, 2017 1 commit
    • Slava Monich's avatar
      [connman] Dropped connman-tracing package · 3be2ed4d
      Slava Monich authored
      These days there are better ways to collect traces from connman.
      
      Enabling traces at startup involves some additional command line action
      anyway (e.g. lifting journald limits so that messages don't get dropped)
      and with that in mind, installing a package just to add -d to the command
      line makes very little sense. A person capable of collecting connman traces
      at startup should be able to directly edit the connman.service file. And
      it's probably easier for such a person to edit the file than to install
      a package.
      3be2ed4d
  24. 21 Apr, 2017 1 commit
    • Slava Monich's avatar
      [connman] Added net.connman.Manager.CreateService method. JB#37538 · f5d37008
      Slava Monich authored
      Arguments:
      
        s     service type (optional)
        s     device identifier (optional)
        s     network identifier (optional)
        a(ss) service settings (essentially, the settings file)
      
      Returns:
      
        o     the service path
      
      Only "wifi" service type is currently allowed. If the device
      identifier is missing, the first available device is assumed.
      If the network identifier is missing, it's generated from "SSID"
      and "Security" settings.
      
      Settings may contain the same keys that you can find in the
      service settings file.
      f5d37008
  25. 29 Mar, 2017 2 commits
  26. 17 Mar, 2017 1 commit
  27. 14 Mar, 2017 1 commit
  28. 12 Mar, 2017 1 commit
    • Slava Monich's avatar
      [connman] Hidden networks require active scan. Fixes JB#38006 · d7254cc7
      Slava Monich authored
      Once we find a hidden network, we actively scan for all known hidden
      networks hoping that it's one of them. This results in two BSSes with
      the same BSSID, one having SSID and one not. Both get associated with
      the same network.
      
      As long as there are hidden networks in range, active scans are
      periodically repeated.
      d7254cc7
  29. 06 Mar, 2017 1 commit
    • Slava Monich's avatar
      [connman] Added net.connman.Service.RestrictedPropertyChanged signal. JB#37923 · 4b7a00b9
      Slava Monich authored
      Added GetProperty method and RestrictedPropertyChanged signal
      to the net.connman.Service interface. The signal is emitted
      instead of the PropertyChanged signal for the properties that
      are not wide open to everyone. The client has to call GetProperty
      to query the new value and to have its access checked.
      
      Currently GetProperty only works for restricted properties in
      order to reduce the amount of patching even though it might be
      logical if it worked for any property. However, for a normal
      wide-open property it will return net.connman.InvalidArguments
      error.
      
      The only use for GetProperty is to query the new value after
      receiving the RestrictedPropertyChanged signal - the normal
      GetProperties call return all the properties that the client
      has access to.
      4b7a00b9
  30. 05 Mar, 2017 1 commit
  31. 04 Mar, 2017 1 commit
  32. 02 Mar, 2017 1 commit
    • Slava Monich's avatar
      [connman] Added sailfish_wifi plugin. JB#37468 · e7d08af9
      Slava Monich authored
      Replaces the original wifi plugin, as it was becoming unmaintainable.
      Significant portions of the original one have been rewritten which
      made applying upstream patches increasingly difficult. Also, upstream
      is pushing their own replacement for wpa_supplicant and is likely to
      stop supporting this plugin anyway.
      
      This also removes support for signal_poll plugins from the connman core.
      It was never merged upstream (for unknown reasons) and since nothing but
      sailfish_wifi plugin is using this functionality, there's no need to have
      it as a plugin.
      
      [connman] WPS push button configuration. Fixes JB#37812
      e7d08af9
  33. 28 Feb, 2017 1 commit
  34. 21 Feb, 2017 2 commits