Commit Graph

51 Commits

Author SHA1 Message Date
Oleksii Shevchuk 4f1a508dd0 Fix migration (linux client) /w memfd 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 29d7e1ad5b Properly set sys.executable from /proc/self/exe 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk ce50ea3230 Add workaround to make possible to close memfds after dlopen 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk fec8025de7 Add memfd sealing 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk f1bc5450c6 Request maximal amount of open files (because of memfd) and disable coredumps 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk bc62899b4f Prevent GC collection of modules and config 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 177fab2498 Reduce virtual size 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk fc585d60a6 Values are hardcoded 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk c005cf86de Fix invoking from non-shell 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 45ac2bf02e "Securely" pass environment 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk fc7d0253ec Reduce size by building shared openssl, removing dbus from client and so on 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk e6b227f36c Fix typo 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 1a02ac6150 Try to become root if possible 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 7309acdf19 Set non-dumpable property 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 86b1c20484 Fix build/work in lin32 environment 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 93497d75c8 Make DEFAULT_SAFE_PATH also "configurable" 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk a31537968c Setup "safe" environment 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 6bbee454ac Add memfd support (optional) for dlopen 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 6e38e209d5 Fix RTLD_NEXT in pthreads wokraround 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 8c35337379 Use pyuv instead of asyncoro 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 190fd92d09 Bump versions, fix build script 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 4207218055 Bump zlib version 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 480bc18df4 Add more deps to bundle builder 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 891d7aed05 Build scandir to the bundle 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 45ad9ccff6 Build python libraries from environments to zip bundles. Experemental 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk f84b41056c Bump versions 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 45d31a5dea Make compat sched calls static inline 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 6ef4ebd431 Avoid redifinition 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk e58c910493 Copy compatible headers after bootstrap 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 2ef3cc7cf8 Move make psutils clients built-in (Linux, Windows) 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 3d7d76bbef Add python-ptrace to standard package 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk cfbdc87758 ZSH doesn't support writing to UID 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 04b3eb0f2c Create buildenv script for linux client 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 8bfae8bb50 Rework pupy basic configuration
Improve compression:
[+] LMZA everywhere (uniformed)
[+] Config space 40690 -> 8192
[+] Compress payload libraries (libpython)
[+] Compress serialized objects (resources, bootloader, config)
[-] Windows build (Makefile) was removed

Improve cryptography/credentials default configuration
[+] Remove default secrets
[-] Android still there
[+] Add uniformed class to search proper credentials
[+] Generate all credentials on first launch
[+] Improve SSL -> CA/Client/Server + roles

Client default configuration
[+] Add stubbed site.py (to preserve pupy from search files on target device)

TODO:
[?] Test all that stuff?
[?] Rewrite all transport configs to honor roles
2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 8dc9232450 Use LZMA instead of ZLib for resources 2017-03-08 19:40:25 +02:00
Oleksii Shevchuk 338763187c Add _sqlite3.so 2016-10-30 23:23:07 +02:00
Oleksii Shevchuk 5175b72ca9 Add dbus/gir support to linux client build 2016-10-30 23:23:07 +02:00
Oleksii Shevchuk d21a1c7e6e Add more nice flags to linux client linker 2016-10-30 23:23:07 +02:00
Oleksii Shevchuk 19059fc101 Scripts unification for linux and windows build 2016-10-30 23:23:07 +02:00
Oleksii Shevchuk 755d24b2e7 Fix build for windows 2016-10-30 23:23:07 +02:00
Oleksii Shevchuk a2465d3a56 Looks like encodings module is not required here 2016-10-30 23:23:07 +02:00
Oleksii Shevchuk 9202f365a1 Use marshalled code, enable optimization (.pyc -> .pyo) 2016-10-30 23:23:07 +02:00
Oleksii Shevchuk 711aef51f7 Don't mess debug builds with nondebug 2016-10-30 23:23:07 +02:00
Oleksii Shevchuk 3423834403 Try actually call mmap at drop destinations 2016-08-26 12:35:36 +03:00
Oleksii Shevchuk 2f1b3ab915 Update linux client 2016-08-24 20:18:48 +03:00
Oleksii Shevchuk dc9ebe63b9 Fix migration. Add compression. Fix build on ancient distros 2016-08-24 09:51:33 +03:00
Oleksii Shevchuk 4cb42753f3 Remove garbage 2016-08-24 09:48:08 +03:00
Oleksii Shevchuk f2e749c71f Update migration support for Linux 2016-08-23 19:48:12 +03:00
Oleksii Shevchuk 1e8595ab24 Fix resources building after merge 2016-08-23 02:03:42 +03:00
Oleksii Shevchuk 4ed67dc413 Remove garbage 2016-08-23 02:03:02 +03:00