Justin B Rye wrote:
> I'd better get some sleep before I try to produce a revised version.
Looking at it again:
> Description: FireWall KNock OPerator Graphical User Interface
[...]
> This application helps the user to maintain multiple Fwknop
> configurations through a single interface, and includes a wizard for
> configuring an Fwknop server.
[...]
I don't see any evidence elsewhere of this "wizard for configuring an
Fwknop server" (which would presumably require elevated privileges,
and probably be a separate binary); it looks more as if there's just
one GUI, which simplifies the task of creating per-server
configuration files for its built-in Fwknop client. Did you mean "a
wizard for setting up a configuration for an Fwknop server"?
Mind you, the man page doesn't mention any of this - it only admits to
being a graphical SPA-packet sender, not a configuration manager. The
help.html file is much more informative, but it's still possible that
I don't understand this software, in which case I'd be glad of any
hints you can provide.
Until then, here's my best guess:
# Description: FireWall KNock OPerator Graphical User Interface
# The FireWall KNock OPerator implements an authorization scheme called
# Single Packet Authorization (SPA), based on Netfilter and libpcap.
# .
# Its main application is to protect services such as OpenSSH with
# an additional layer of security in order to make the exploitation of
# vulnerabilities (both 0-day and unpatched code) much more difficult.
# .
# Fwknop GUI is a graphical user interface integrated with an Fwknop
# client that provides the ability to send SPA packets to a remote
# Fwknop server, as well as a front-end for creating and managing
# client configurations for multiple Fwknop servers.
# .
# It supports exporting saved configuration data to a QR code format
# readable by the Android client, as well as to the .fwknoprc format
# readable by the command line client.
(I attach a patch on the off chance that this will do.)
--
JBR with qualifications in linguistics, experience as a Debian
sysadmin, and probably no clue about this particular package
--- fwknop-gui.pd.pristine 2016-09-06 17:55:36.592881191 +0100
+++ fwknop-gui.pd 2016-09-06 18:37:30.889339260 +0100
@@ -6,13 +6,10 @@
an additional layer of security in order to make the exploitation of
vulnerabilities (both 0-day and unpatched code) much more difficult.
.
- Fwknop GUI is a user graphical interface fitted with a Fwknop client
- that provides the ability to send SPA packets to a remote Fwknop
- server.
- .
- This application helps the user to maintain multiple Fwknop
- configurations through a single interface, and includes a wizard for
- configuring an Fwknop server.
+ Fwknop GUI is a graphical user interface integrated with an Fwknop
+ client that provides the ability to send SPA packets to a remote
+ Fwknop server, as well as a front-end for creating and managing
+ client configurations for multiple Fwknop servers.
.
It supports exporting saved configuration data to a QR code format
readable by the Android client, as well as to the .fwknoprc format
