Update internal profile settings

This commit is contained in:
Daniel 2023-08-11 12:00:27 +02:00
parent 9182063892
commit 58c4b44739

View file

@ -175,7 +175,11 @@ func createSpecialProfile(profileID string, path string) *Profile {
// attributed to a connection of a regular process. Otherwise, users // attributed to a connection of a regular process. Otherwise, users
// would see two connection prompts for the same domain. // would see two connection prompts for the same domain.
CfgOptionDefaultActionKey: DefaultActionPermitValue, CfgOptionDefaultActionKey: DefaultActionPermitValue,
// Explicitly allow incoming connections. // Disable force blockers.
CfgOptionBlockScopeInternetKey: status.SecurityLevelOff,
CfgOptionBlockScopeLANKey: status.SecurityLevelOff,
CfgOptionBlockScopeLocalKey: status.SecurityLevelOff,
CfgOptionBlockP2PKey: status.SecurityLevelOff,
CfgOptionBlockInboundKey: status.SecurityLevelOff, CfgOptionBlockInboundKey: status.SecurityLevelOff,
// Explicitly allow localhost and answers to multicast protocols that // Explicitly allow localhost and answers to multicast protocols that
// are commonly used by system resolvers. // are commonly used by system resolvers.
@ -234,6 +238,11 @@ func createSpecialProfile(profileID string, path string) *Profile {
PresentationPath: path, PresentationPath: path,
Config: map[string]interface{}{ Config: map[string]interface{}{
CfgOptionDefaultActionKey: DefaultActionBlockValue, CfgOptionDefaultActionKey: DefaultActionBlockValue,
CfgOptionBlockScopeInternetKey: status.SecurityLevelOff,
CfgOptionBlockScopeLANKey: status.SecurityLevelOff,
CfgOptionBlockScopeLocalKey: status.SecurityLevelOff,
CfgOptionBlockP2PKey: status.SecurityLevelOff,
CfgOptionBlockInboundKey: status.SecurityLevelsAll,
CfgOptionEndpointsKey: []string{ CfgOptionEndpointsKey: []string{
"+ Localhost", "+ Localhost",
"+ .safing.io", "+ .safing.io",
@ -249,6 +258,11 @@ func createSpecialProfile(profileID string, path string) *Profile {
PresentationPath: path, PresentationPath: path,
Config: map[string]interface{}{ Config: map[string]interface{}{
CfgOptionDefaultActionKey: DefaultActionBlockValue, CfgOptionDefaultActionKey: DefaultActionBlockValue,
CfgOptionBlockScopeInternetKey: status.SecurityLevelOff,
CfgOptionBlockScopeLANKey: status.SecurityLevelOff,
CfgOptionBlockScopeLocalKey: status.SecurityLevelOff,
CfgOptionBlockP2PKey: status.SecurityLevelOff,
CfgOptionBlockInboundKey: status.SecurityLevelsAll,
CfgOptionEndpointsKey: []string{ CfgOptionEndpointsKey: []string{
"+ Localhost", "+ Localhost",
}, },
@ -281,11 +295,11 @@ func specialProfileNeedsReset(profile *Profile) bool {
switch profile.ID { switch profile.ID {
case SystemResolverProfileID: case SystemResolverProfileID:
return canBeUpgraded(profile, "21.10.2022") return canBeUpgraded(profile, "12.8.2023") // FIXME: set one day after stable release date.
case PortmasterProfileID: case PortmasterProfileID:
return canBeUpgraded(profile, "21.10.2022") return canBeUpgraded(profile, "12.8.2023") // FIXME: set one day after stable release date.
case PortmasterAppProfileID: case PortmasterAppProfileID:
return canBeUpgraded(profile, "8.9.2021") return canBeUpgraded(profile, "12.8.2023") // FIXME: set one day after stable release date.
default: default:
// Not a special profile or no upgrade available yet. // Not a special profile or no upgrade available yet.
return false return false