vikarti.anatra/safing-portmaster
1
0
Fork 0
mirror of https://github.com/safing/portmaster synced 2025-09-02 02:29:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Update internal profile settings

Browse source
This commit is contained in:
Daniel 2023-08-11 12:00:27 +02:00
parent 9182063892
commit 58c4b44739
1 changed files with 21 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
profile/special.go
View file

@ -175,8 +175,12 @@ func createSpecialProfile(profileID string, path string) *Profile {
// attributed to a connection of a regular process. Otherwise, users // attributed to a connection of a regular process. Otherwise, users
// would see two connection prompts for the same domain. // would see two connection prompts for the same domain.
CfgOptionDefaultActionKey: DefaultActionPermitValue, CfgOptionDefaultActionKey: DefaultActionPermitValue,
// Explicitly allow incoming connections. // Disable force blockers.
CfgOptionBlockInboundKey: status.SecurityLevelOff, CfgOptionBlockScopeInternetKey: status.SecurityLevelOff,
CfgOptionBlockScopeLANKey: status.SecurityLevelOff,
CfgOptionBlockScopeLocalKey: status.SecurityLevelOff,
CfgOptionBlockP2PKey: status.SecurityLevelOff,
CfgOptionBlockInboundKey: status.SecurityLevelOff,
// Explicitly allow localhost and answers to multicast protocols that // Explicitly allow localhost and answers to multicast protocols that
// are commonly used by system resolvers. // are commonly used by system resolvers.
// TODO: When the Portmaster gains the ability to attribute multicast // TODO: When the Portmaster gains the ability to attribute multicast
@ -233,7 +237,12 @@ func createSpecialProfile(profileID string, path string) *Profile {
Source: SourceLocal, Source: SourceLocal,
PresentationPath: path, PresentationPath: path,
Config: map[string]interface{}{ Config: map[string]interface{}{
CfgOptionDefaultActionKey: DefaultActionBlockValue, CfgOptionDefaultActionKey: DefaultActionBlockValue,
CfgOptionBlockScopeInternetKey: status.SecurityLevelOff,
CfgOptionBlockScopeLANKey: status.SecurityLevelOff,
CfgOptionBlockScopeLocalKey: status.SecurityLevelOff,
CfgOptionBlockP2PKey: status.SecurityLevelOff,
CfgOptionBlockInboundKey: status.SecurityLevelsAll,
CfgOptionEndpointsKey: []string{ CfgOptionEndpointsKey: []string{
"+ Localhost", "+ Localhost",
"+ .safing.io", "+ .safing.io",
@ -248,7 +257,12 @@ func createSpecialProfile(profileID string, path string) *Profile {
Source: SourceLocal, Source: SourceLocal,
PresentationPath: path, PresentationPath: path,
Config: map[string]interface{}{ Config: map[string]interface{}{
CfgOptionDefaultActionKey: DefaultActionBlockValue, CfgOptionDefaultActionKey: DefaultActionBlockValue,
CfgOptionBlockScopeInternetKey: status.SecurityLevelOff,
CfgOptionBlockScopeLANKey: status.SecurityLevelOff,
CfgOptionBlockScopeLocalKey: status.SecurityLevelOff,
CfgOptionBlockP2PKey: status.SecurityLevelOff,
CfgOptionBlockInboundKey: status.SecurityLevelsAll,
CfgOptionEndpointsKey: []string{ CfgOptionEndpointsKey: []string{
"+ Localhost", "+ Localhost",
}, },
@ -281,11 +295,11 @@ func specialProfileNeedsReset(profile *Profile) bool {
switch profile.ID { switch profile.ID {
case SystemResolverProfileID: case SystemResolverProfileID:
return canBeUpgraded(profile, "21.10.2022") return canBeUpgraded(profile, "12.8.2023") // FIXME: set one day after stable release date.
case PortmasterProfileID: case PortmasterProfileID:
return canBeUpgraded(profile, "21.10.2022") return canBeUpgraded(profile, "12.8.2023") // FIXME: set one day after stable release date.
case PortmasterAppProfileID: case PortmasterAppProfileID:
return canBeUpgraded(profile, "8.9.2021") return canBeUpgraded(profile, "12.8.2023") // FIXME: set one day after stable release date.
default: default:
// Not a special profile or no upgrade available yet. // Not a special profile or no upgrade available yet.
return false return false