Commit Graph

2826 Commits

Author SHA1 Message Date
Michael Tremer
0c265f5717 nginx: Update to 1.8.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-29 09:04:04 +01:00
Arne Fitzenreiter
de2ee80d4f kernel: update arm buildfix patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-29 07:18:37 +02:00
Arne Fitzenreiter
c5c12c9c81 backports: add upstream driver fixes.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-28 18:00:50 +02:00
Michael Tremer
71f578bbfc freeradius: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-19 14:54:50 +01:00
Jonatan Schlag
b61fe3f404 Fix in libvirt install.sh/uninstall.sh
The libvirt daemon was not started after installation because the
initscritp is named 'libvirtd' not like the package 'libvirt'.
The same problem appear in the uninstall.sh. The service was not
stopped.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-15 09:53:13 +01:00
Matthias Fischer
a4fdc17642 dnsmasq 2.76: latest patches from upstream (004-009)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-12 14:54:19 +01:00
Matthias Fischer
754efda131 dnsmasq 2.76: latest patches from upstream (001-003)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-12 14:54:13 +01:00
Arne Fitzenreiter
afc14499a7 p7zip: add CVE-2016-2334 and CVE-2016-2335 patches
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-11 16:27:58 +02:00
Arne Fitzenreiter
01e38218c9 backports: r8152 add lenovo and nvidia usb id
this id's are blacklisted in new cdc_ether module
because the r8152 module should used but the
3.14 module not know this id's.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-29 17:00:29 +02:00
Jonatan Schlag
5cc7ae0926 Qemu: add a group kvm to access /dev/kvm eaiser
As a normal user, it is not possible to use qemu with KVM. This is bad
because it is better when it is possible to start the machine with a
less privileged user. To achieve this a group KVM is created and the
access to /dev/kvm is allowed for this group. So every user in this
group can use qemu with KVM.
This change is also useful for libvirt because the VMs can be started
with user nobody and group kvm.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-20 16:25:29 +01:00
Marcel Lorenz
4787315b6e shadow: update to 4.2.1
The "groups" from the coreutils package is used (/usr/bin/groups)

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-17 13:03:34 +01:00
Jonatan Schlag
e6fd1f2d38 Fix in pakfire functions.sh
The if statement in line 89 and 99 are useless with the -e
conditional expression because it returns true if the path ist a
regular file or a directory.
So "/etc/init.d/ " returns true and "/etc/init.d/avahi" return also true,
but the statement should return only true if we have a regular file.
So -f if the right conditional expression, and we only try to execute
the init script if the path "/etc/init.d/${1}" points to a regular file.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:33:26 +01:00
Jonatan Schlag
77d989a667 Change the default libvirt remote user to libvirt-remote
It is possible to communicate per ssh via a socket with libvirt. It is
not a good idea to do this as root, so the remote user is now
libvirt-remote. Only this user or users in the group libvirt-remote can
communicate with the socket.
The user libvirt-remote is created without a password. The users have to
set a password for this user after installation.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:32:49 +01:00
Marcel Lorenz
17e1edad4c expect: update to 5.45
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:43:47 +01:00
Marcel Lorenz
7cf3a80b47 coreutils: update to 8.25 v3
Coreutils 8.25 needs the automake 1.15
I have send this patch earlier.
Plaese merge automake before coreutils 8.25

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:40:05 +01:00
Marcel Lorenz
4900fdc963 automake: update to 1.15
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:40:00 +01:00
Jonatan Schlag
272ac1b454 New package libvirt
Libvirt is buidl only on i585 and x86_64 because qemu is build only
on this arches.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:26:01 +01:00
Matthias Fischer
b78a8742ae squid 3.5.19: latest patches from upstream
For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:12:15 +01:00
Arne Fitzenreiter
55c645ba48 samba: import updated rpc security patchset from red hat.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-23 23:08:01 +02:00
Michael Tremer
1193d00f51 nfs: Bump release to install rpcbind dependency
This update will pull in rpcbind as new dependency which
will automatically remove portmap when installed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 16:41:51 +01:00
Michael Tremer
3fcc9b67fc squid: Fix indentation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 16:17:21 +01:00
Michael Tremer
691b2836c0 squid: Kill redirector processes only after squid has stopped
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 16:16:12 +01:00
Matthias Fischer
6113575d81 squid: Rework initscript
The initscript now takes care that the squid proxy server process
is properly shut down. If that fails, it will remove the cache
index and let it be recreated at the next start. A warning is
shown to the user.

The "flush" command will now remove the entire proxy cache.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 16:12:13 +01:00
Jonatan Schlag
e93a0b06fe Replace portmap with rpcbind
Portmap is not maintained anymore that's why it is replaced by rpcbind.
Rpcbind provides also rpcinfo which is quite useful for debugging.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-17 14:08:47 +01:00
Matthias Fischer
c00aeae80f dnsmasq: Update to 2.76rc2
- Updated to 2.76rc2 and deleted obsolete patch files from 2.76rc1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:44 +01:00
Matthias Fischer
3f877ebd25 dnsmasq: Update to 2.76rc1 - added latest patches (001-002)
Update, added latest patches and deleted obsolete patch files.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:39 +01:00
Matthias Fischer
4d36732fe2 dnsmasq: Update to 2.76test13 with latest patches (001-006)
Update from 'dnsmasq 2.76test10' to '2.76test13'

Includes latest patches (001-006) from upstream.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:19 +01:00
Matthias Fischer
15f37d7738 procps: Update to 3.2.8
For details see:
http://procps.sourceforge.net/changelog.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:03:08 +01:00
Matthias Fischer
bb91c2f744 squid init: small cosmetic fixes
- Deleted a few absolutely unneeded tabs.
- Inserted/deleted some needed/unnecessary line breaks.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-15 11:41:25 +01:00
Arne Fitzenreiter
ef553dccc8 linux-pae: fix typo at remove meta on non-pae systems.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-11 21:00:29 +02:00
Arne Fitzenreiter
eb797e6ec0 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-05-11 20:59:15 +02:00
Matthias Fischer
e0cba8eea9 squid 3.4: remove obsolete patch files
Obsolete, no longer needed.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-11 15:46:58 +01:00
Arne Fitzenreiter
3917eadc29 initskripts: remove obsolete checkfstab
the file update the bootdevice to uuid in fstab and grub1 config.
this is not needed since we use uuid at default and grub2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 15:40:38 +02:00
Arne Fitzenreiter
f61b838fb0 linux-pae: prevent install on non pae systems
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 15:16:12 +02:00
Arne Fitzenreiter
4558108c4d clamav: rework initskript
display download wait, increase time to 15min and
remove tmp files at freshclam terminate.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 11:22:05 +02:00
Arne Fitzenreiter
c594bd17b1 Merge remote-tracking branch 'origin/master' into next 2016-05-04 09:14:29 +02:00
Arne Fitzenreiter
d25d7bfccf openssl: security update to 1.0.2g
see https://www.openssl.org/news/secadv/20160503.txt for details

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 21:28:28 +02:00
Arne Fitzenreiter
e78d9e4fc8 clamav: save signature database at update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 11:02:18 +02:00
Michael Tremer
1a26eca66e squid: Add forgetten patch file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 21:59:50 +01:00
Michael Tremer
b5a50b494e rtpproxy: Add initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 21:07:13 +01:00
Matthias Fischer
77d0467c05 squid: Update to 3.5.17
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 18:25:08 +01:00
Michael Tremer
3d7e6b4b61 setup: Show more than 6 NICs
http://lists.ipfire.org/pipermail/development/2016-April/002074.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 13:23:24 +01:00
Arne Fitzenreiter
c0119cfb37 samba: import rpc server and client fixes.
should fix: #11110

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-28 17:04:58 +02:00
Michael Tremer
54ea98e318 nfs: Fix whitespace issues in nfs-server initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:21:50 +01:00
Jonatan Schlag
54cc2c4e5d nfs: Fixes for NFS server
Fixes: #11098
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:20:15 +01:00
Matthias Fischer
198c39265b squid 3.4.14: latest patches, sorted options
The 'configure'-options were sorted (kind of) to get a better overview.

Added latest patches from upstream.

Changed '--enable-async-io=8' to '--enable-async-io=16' because of
http://www.squid-cache.org/mail-archive/squid-users/200705/0768.html :

"The default number of threads is dependent on the number of aufs
cache_dir lines, based on a reasonable estimate of how the code behaves."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:19:29 +01:00
Arne Fitzenreiter
875bd87bbd backports: ath9k fix ht40 init.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-25 18:02:53 +02:00
Arne Fitzenreiter
bb28d8913a Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-04-20 17:45:49 +02:00
Michael Tremer
8e7c5e65ad firewall: Fix connection tracking for PPTP
GRE connections were not correctly forwarded without the helper
being enabled. Choosing the wrong protocol here did not allow
us to load it properly.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-20 16:04:24 +01:00
Arne Fitzenreiter
23bb683902 firewall: fix nat module load for application layer gateways
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-20 10:19:46 +02:00