Commit Graph

21758 Commits

Author SHA1 Message Date
Michael Tremer
0e93c1eaf3 header.pl: Fix whitespace errors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:27 +02:00
Michael Tremer
62a84fdb4a general-functions.pl: Remove unused NextIP* functions
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:14 +02:00
Michael Tremer
9c9f637e16 general-functions.pl: Remove unused srtarray function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:04 +02:00
Michael Tremer
11e75894ce general-functions.pl: Remove getlastip/getnextip
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:55 +02:00
Michael Tremer
498feaa550 general-functions.pl: Drop unused getccdbc function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:40 +02:00
Michael Tremer
b8d1ae216f general-functions.pl: Drop unused "writehashpart" function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:31 +02:00
Michael Tremer
d110e751f3 general-functions.pl: Fix various whitespace issues
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:21 +02:00
Michael Tremer
db09ea9e5c initscripts: Don't overwrite the PID file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:32:54 +02:00
Michael Tremer
3f863ee70d initscripts: Add some basic functions for IP address maths
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:32:40 +02:00
Michael Tremer
5900a95059 initscripts: Fix reading PIDs
An incorrect variable has been used.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:31:36 +02:00
Michael Tremer
6e47a143c9 initscripts: Handle command arguments as array
For some reason, the function is refusing to launch a command that has
extra arguments.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:31:24 +02:00
Michael Tremer
e340d393d3 network: Don't include initscript headers twice
Everywhere we import the functions, we have already imported the
standard includes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:31:08 +02:00
Michael Tremer
737e9e1037 network-functions.pl: Add function to get netmask in dotted format
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:44 +02:00
Michael Tremer
85e004c2da network-functions.pl: Fix return code check
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:32 +02:00
Michael Tremer
65fff7fc34 network-functions.pl: Fix whitespace issues
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:21 +02:00
Michael Tremer
0e55d27737 network-functions.pl: Add function to extract prefix
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:09 +02:00
Michael Tremer
8eb016da79 CSS: Make text/number inputs 100% wide, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:29:48 +02:00
Michael Tremer
17c29ce7fe CSS: Make all <select> and <textarea> use all available space
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:29:40 +02:00
Michael Tremer
d9de11aff8 CSS: Don't make headings so skinny
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:28:50 +02:00
Michael Tremer
82fec28abe header.pl: Allow passing more HTTP headers to showhttpheaders()
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:28:25 +02:00
Peter Müller
28e8d436fc Remove orphaned Apache patch
See: https://lists.ipfire.org/hyperkitty/list/development@lists.ipfire.org/message/BENPLQ43YKYOWIKIEXHDVEQWNE3SBKEH/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 21:10:52 +00:00
Peter Müller
e212c7293d Core Update 186: Ship and restart Apache
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 21:10:29 +00:00
Matthias Fischer
9fbb9c39fb apache: Update to 2.4.59
For details see:
https://dlcdn.apache.org/httpd/CHANGES_2.4.59

Fixes CVE-2024-27316 / CVE-2024-24795 / CVE-2023-38709

Previously applied patch (apache-2.4.58_mod_xml2enc_remove_dependency_on_xmlstring_header.patch)
has been removed - is now included.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 21:09:05 +00:00
Peter Müller
9ce9514bad libloc: Adjust changed URL format
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 20:09:40 +00:00
Peter Müller
658e1675f7 langs: Update Spamhaus DROP URL
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 20:06:52 +00:00
Peter Müller
3cc7b53a87 libloc: Update location database shipped with new installations
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 20:04:51 +00:00
Arne Fitzenreiter
ba5da82e9b core186: ship ipblocklist sources
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 19:55:13 +00:00
Adolf Belka
4fdaa9577b backup.pl: removes any references to ALIENVAULT & SPAMHAUSEDROP from restores
- This patch ensures that if a restore is carried out from an earlier version that includes
   ALIENVAULT and/or SPAMHAUS_EDROP that the references will be removed.
- This is the same code as was put into the update.sh file with the previous patch of this
   set.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 19:51:24 +00:00
Adolf Belka
6408ff8d6a update.sh: Remove existing entries for ALIENVAULT & SPAMHAUS_EDROP
- This removes any time entries in the modified file for either ALIENVAULT or
   SPAMHAUS_EDROP.
- This also removes any blocklists for either of these sources from the /var/lib/ipblocklist
   directory.
- This patch will ensure that any reference to either of these sources is removed from the
   ipblocklist files.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 19:51:13 +00:00
Adolf Belka
78e2c1dce5 sources: Removal of ALIENVAULT and SPAMHAUS_EDROP from ipblocklist sources
- ALIENVAULT has not been updated since at least Nov 2022 but probably earlier. There is no
   date for the file to be downloaded but a forum user has log messages from Nov 2022 that
   indicate the file had not changed as therefore no download occurred.
- AT&T aquired AlienVault in August 2018. Somewhere between 2018 and 2022 the list stopped
   getting updated. AlienVault references on the AT&T website are now for a different
   product.
- Discussed in IPFire conf call of April 2024 and agreed to remove the ALIENVAULT
   blocklist.
- On Apr 10th the Spamhaus eDROP list was merged with the Spamhaus DROP list. The eDROP
   list is still available but is now empty. Trying to select the SPAMHAUS_EDROP list
   gives an error message that the blocklist was found to be empty.
- This patch removes both the ALIENVAULT and the SPAMHAUS_EDROP lists from the ipblocklist
   sources file.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 19:51:01 +00:00
Arne Fitzenreiter
fc2b1edc73 core185: ship fixes for bug12763
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 19:29:26 +00:00
Adolf Belka
238a47874f oci-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:41:33 +00:00
Adolf Belka
2841a67548 gcp-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:41:17 +00:00
Adolf Belka
3162b6ccfa exoscale-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:41:05 +00:00
Adolf Belka
1db5f96c5e azure-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:40:54 +00:00
Adolf Belka
eb0de6531c aws-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:40:41 +00:00
Adolf Belka
4f455c488e ip-up: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:40:27 +00:00
Adolf Belka
9c28cd59c1 red: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:40:15 +00:00
Adolf Belka
e33ee46e62 static-routes: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot.
- Tested on my vm system and confirmed that the fix in ipsec-interfaces stops the "FIB
   table does not exist" and "RTNETLINK answers: no such file or directory" messages during
   boot.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:39:56 +00:00
Adolf Belka
87a97a4319 ipsec-interfaces: Fixes bug12763
- Some of the ip route commands are not redirected to null. This causes the "FIB table does
   not exist" message from bug12763
- This patch makes all ip route commands get redirected to null, preventing the error
   message from being seen at boot.
- One of the ip rule commands is not redirected to null. This causes the "RTNETLINK
    answers: no such file or directory" message.
- This patch makes all ip rule commands get redirected to null, preventing the error
   message from being seen at boot.
- Additional patches in this set ensure that all ip route and ip rule commands in all
   IPFire code is redirected to null unless the output of the ip route or ip rule command
   is used in a variable for use elsewhere in the code.
- Tested on my vm system and confirmed that the fix in ipsec-interfaces stops the "FIB
   table does not exist" and "RTNETLINK answers: no such file or directory" messages during
   boot.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:39:29 +00:00
Arne Fitzenreiter
dbda89e0fc core186: remove incinga and sslh if installed
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:19:51 +00:00
Adolf Belka
ea7dd6822c icinga: Removal of icinga addon
- As discussed in the Dev conf call on 2024-Jan-08
- The 1.x version of Icinga has been EOL since 2018
- The 2.x version would require a complete new configuration approach as the settings
   and options are completely different to 1.x and so would be a start from scratch.
- removal of icinga from make.sh file
- removal of lfs file
- removal of rootfile
- removal of configuration file
- removal of backup includes file

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:07:02 +00:00
Adolf Belka
e792c3b945 initscripts: Removal of references to sslh
- sslh is listed in the initscripts lfs and rootfiles.
- Removal of these references with the bremoval of sslh

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:06:47 +00:00
Adolf Belka
4ed125ae66 sslh: Removal of sslh addon
- As discussed in the Dev conf call on 2024-Apr-08
- sslh has not been functioning since last update ion Sep 2021. Configuration syntax
   was radically changed somewhere in the update from 1.7a(2013) to 1.22c in Sep 2021
- removal of sslh from make file
- removal of lfs file
- removal of rootfile
- removal of paks files
- removal of initscript

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:06:37 +00:00
Michael Tremer
4b7906cc4b dnsdist: Update to 1.9.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:05:46 +00:00
Michael Tremer
f102cdc515 installer: Fix using uninitialized variables
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:05:35 +00:00
Michael Tremer
af932f13dd installer: Fix more const warnings
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:05:24 +00:00
Michael Tremer
fd0b10c92c installer: Pass correct length of hostname to sethostname()
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:05:11 +00:00
Michael Tremer
874ec4b049 installer: Replace all uses of strncpy with snprintf
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:04:59 +00:00
Michael Tremer
1415e83a34 installer: Correctly pass mount flags
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:04:48 +00:00