Commit graph

9 commits

Author SHA1 Message Date
Raphael Dannecker
04a5e8b455 Enable ARP support in nftable for outbound restriction in exam_mode 2025-12-17 19:43:33 +01:00
Raphael Dannecker
1f45184d0c Apply outbound restriction in exam_mode on macvtap interfaces too 2025-12-17 13:24:24 +01:00
Raphael Dannecker
a986254abc Apply libvirt firewall policy only on devices with vm_support 2025-12-17 13:19:43 +01:00
Raphael Dannecker
4687ac4888 Make IP addresses of teacherpc configurable (for the firewall in exam mode) 2025-12-15 08:17:39 +01:00
Raphael Dannecker
21f4cbcbc3 Correct the determination of the teacher's PC's IP address (a75934c) 2025-12-11 17:27:50 +01:00
Raphael Dannecker
a75934ca0b Restrict outbound traffic in exam-mode 2025-12-10 15:40:21 +01:00
Raphael Dannecker
f965f4466c Improve ansible code so that ansibe-lint shows fewer errors 2025-03-24 07:33:56 +01:00
Raphael Dannecker
9f1c60eefd Use variable instead of group membership to install localhome
Use variable localhome to determines whether the localhome module is installed.
Default: localhome=false

Further changes:
- Move pam-exec from common-auth to common-session
- Move pam-mkhomedir before pam-mount to avoid double login on first use
  on localhome devices
2025-03-19 11:08:57 +01:00
Raphael Dannecker
3d01394820 Separate exam-mode stuff in own role 2025-03-18 14:37:13 +01:00