Commit Graph

12415 Commits

Author SHA1 Message Date
Arne Fitzenreiter
1e2e78e6ff Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2018-11-02 15:16:22 +00:00
Arne Fitzenreiter
5edc6b10e0 directfb: fix comile on 32bit arm
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-11-02 15:14:11 +00:00
Michael Tremer
898b355abd core125: Ship updated ca-certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:31:45 +00:00
Peter Müller
6eb221c2e5 update ca-certificates CA bundle
Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

The second version of this patch superseds the first one and
bumps the LFS version of ca-certificate, too. Me stupid...

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:31:30 +00:00
Peter Müller
2e0660f9ce Unbound: output statistics daily instead of just on shutdown
Currently, Unbound only prints statistics if it is being shutdown
(mostly because of a machine reboot). This makes detecting DNS
anomalies hard as no intermediate statistic result is being logged.

This patch changes Unbound's behaviour in order to log statistics
every 86,400 seconds (i.e. 24 hours).

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:31:09 +00:00
Michael Tremer
c22498887d core125: Ship updated ids.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:30:49 +00:00
Peter Müller
0c451a4a32 fix downloading Snort rules if behind upstream proxy
Currently, the wget call only uses proxy information for HTTP.
Since rulesets are downloaded via HTTPS now, the same information
also needs to be applied for HTTPS.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:30:08 +00:00
Michael Tremer
c3070d32e3 core125: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:29:48 +00:00
Matthias Fischer
e2bd68dfad squid 3.5.28: latest patches (01-02)
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:29:05 +00:00
Michael Tremer
4f10c0b3a3 backup: Fix expanding glogging
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:27:09 +00:00
Arne Fitzenreiter
a4e5b80b91 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2018-10-31 18:44:43 +01:00
Michael Tremer
c7b7a70deb backup: Rewrite backup script
The old script was quite messy and written in perl although
it was only calling shell commands.

This version is now written in shell although keeping the .pl
file suffix and is a drop-in replacement.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 14:22:56 +00:00
Michael Tremer
c81dffc942 core125: Ship updated backup include
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 12:55:55 +00:00
Michael Tremer
ac1fc6ea5e backup: Include addon backups in main backup
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 12:10:18 +00:00
Michael Tremer
33d2002767 backup: Include custom include/exclude files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 12:08:57 +00:00
Michael Tremer
b3cc1932e4 Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 10:56:24 +00:00
Michael Tremer
0faf9c7869 core125: Ship JSON-C
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 09:32:01 +00:00
Michael Tremer
ed1349aa76 Merge remote-tracking branch 'ms/frr' into next 2018-10-31 09:31:38 +00:00
Michael Tremer
58e0aa18cc frr: Add backup include file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 09:30:44 +00:00
Michael Tremer
e1def10e29 frr: Set configuration file permissions correctly
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-30 17:32:48 +00:00
Michael Tremer
ebd6fe2b50 frr: Add initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-30 17:27:28 +00:00
Michael Tremer
a90f7faf78 frr: Install users and make backup when package is installed/uinstalled
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-30 17:20:37 +00:00
Arne Fitzenreiter
1b24eec502 toolchain: bump version
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-10-30 18:15:14 +01:00
Arne Fitzenreiter
ea4e88cbbe perl: fix toolchain build
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-10-30 18:13:45 +01:00
Michael Tremer
feaa3d91bd frr: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-30 16:55:42 +00:00
Arne Fitzenreiter
ebaecf2c96 Revert "make.sh: Log into subdirectory for each architecture"
This reverts commit 35ce207ff7.
2018-10-30 15:07:12 +01:00
Michael Tremer
7261a4987d Update translations
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 13:43:37 +00:00
Stéphane
fc95fb0303 French translation improvements
- Adding missing syntaxes
- Improved syntax translation
- Minor corrections (spelling, conjugation)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 13:43:21 +00:00
Michael Tremer
35ce207ff7 make.sh: Log into subdirectory for each architecture
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 13:42:51 +00:00
Michael Tremer
81e838ebde tzdata: Update to 2018g
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:30:12 +00:00
Michael Tremer
92505ef003 Drop paxctl
We do not have grsecurity and more and there is no point
in shipping this tool.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:27:34 +00:00
Michael Tremer
aeefbca730 clamav: Move database directory to /var partition
The clamav database is quite large and occupies valuable
space on the root partition that on older systems is only
2GB large. This change moves the virus definition database
to the /var partition which is larger and supposed to hold
data like this anyway.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:25:24 +00:00
Michael Tremer
2f1d27e3d8 kmod: Build with support for XZ compressed modules
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:14:45 +00:00
Michael Tremer
3ece78597a make.sh: Build xz earlier in the build process
XZ compression is becoming more popular and being used
by various other libraries and should therefore be available
to be linked.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:12:43 +00:00
Michael Tremer
1c053ccee2 strongswan: Update to 5.7.1
Fixes security vulnerabilities: CVE-2018-16151, CVE-2018-16152 and
CVE-2018-17540.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:10:58 +00:00
Michael Tremer
5a40f7aebb haproxy: Update to 1.8.14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:02:08 +00:00
Michael Tremer
3ed2de1251 Merge branch 'haproxy' into next 2018-10-29 11:59:18 +01:00
Michael Tremer
02776a0dc2 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-10-29 10:51:44 +00:00
Michael Tremer
65ff71dc06 Merge branch 'toolchain' into next 2018-10-29 10:51:00 +00:00
Michael Tremer
aba59b7c76 Merge branch 'glibc-2.28' into next 2018-10-29 10:50:56 +00:00
Michael Tremer
9040a476cc core125: Ship glibc for i586
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 10:50:35 +00:00
Michael Tremer
f4027e9b41 Remove removed files from rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 10:47:10 +00:00
Arne Fitzenreiter
ca9c45b3f2 graphs: add NVMe disks
Add NVMe disks to media and hardwaregraphs.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-10-28 17:56:37 +01:00
Arne Fitzenreiter
d823d5f072 hostapd: add switch to disable neigborhood scan
this may violate regulatory rules because 40Mhz channels should disabled
if there are other networks but nearly every commercial router ignore this.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-10-27 16:47:12 +02:00
Michael Tremer
1a7db13406 json-c: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-26 11:23:55 +00:00
Michael Tremer
b9e02ee6b3 libaio: Link against standard libraries
This patch fixes a build error when stack smashing protecion
is being enabled and __stack_chk_fail_local needs to be pulled
from libc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-26 11:31:40 +01:00
Michael Tremer
ce48278b21 perl: Fix build in toolchain
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-25 19:50:28 +01:00
Michael Tremer
adfa49e118 toolchain: Bump version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-24 17:27:55 +01:00
Michael Tremer
fa9cfe5a02 coreutils+gzip: Allow building with 32 bit time_t on 32 bit arches
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-24 17:27:38 +01:00
Michael Tremer
b26071d378 Config: Set IS_32BIT when running on 32 bit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-24 17:27:10 +01:00