Commit Graph

15439 Commits

Author SHA1 Message Date
Michael Tremer
2cb220fd3c freeradius: Depend on samba again
The package requires more libraries than libtalloc from
the samba package and therefore we need this dependency
again.

Fixes: #12538
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-23 15:12:54 +00:00
Adolf Belka
d0d63bbbee apcupsd: addition of backup/includes definition
Added a backup/includes file for apcupsd to backup the
/etc/apcupsd/ directory where all the configuration files
are stored. Currently there is no backup available to
save the state of any changes carried out to the configuration
or action files.
Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-23 15:12:54 +00:00
Arne Fitzenreiter
17a8437e82 pcengines-firmware: update to 4.12.0.6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-23 15:12:54 +00:00
Arne Fitzenreiter
9e245967d2 kernel: update to 4.14.208
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-23 14:24:15 +01:00
Michael Tremer
7a6bac40fd core153: Remove reloading microcode
This requires that we can load the "microcode" module, but
since the kernel was replaced in this release, we can't load
it any more.

Fixes: #12537
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-20 20:04:13 +00:00
Daniel Weismüller
82973fae14 network-hotplug-bridges: Apply STP_PRIORITY
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-20 19:59:31 +00:00
Michael Tremer
74e19a563c core153: Ship network-hotplug-bridges
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-20 13:47:01 +00:00
Daniel Weismüller
f8bf19c92e Core 152: the script "network-hotplug-bridges" now reads the variable ${ZONE}_STP from /var/ipfire/ethernet/settings so that STP can be turned on and off for each bridge
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-20 13:46:27 +00:00
Stefan Schantl
a4420101a8 Core 153: Ship libhtp
libhtp has been updated and suricata 6 requires the new version, so
this lib has to be shipped with the core update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-19 20:46:45 +00:00
Michael Tremer
6cab8977e0 amazon-ssm-agent: Package /usr/bin/ssm-agent-worker
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-19 18:35:36 +00:00
Arne Fitzenreiter
5929646842 kernel: update to 4.14.207
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-19 19:08:33 +01:00
Michael Tremer
78a6918d34 libloc: Import more changes from upstream
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-19 13:08:22 +00:00
Michael Tremer
05db64d0ea libloc: Import recent patches from upstream
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-18 19:18:40 +00:00
Michael Tremer
e704dbe6bd network: Mount/umount network file systems at the correct time
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-17 16:35:13 +00:00
Michael Tremer
1a3c53556e ipinfo.cgi: Align flag icon
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-17 16:04:10 +00:00
Peter Müller
7b405169be en.pl: fix accidentially removed line by ./make.sh langs
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-16 18:42:44 +00:00
Arne Fitzenreiter
a832b5c2e6 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-13 18:21:20 +00:00
Michael Tremer
11b46800a5 Update contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-13 11:13:08 +00:00
ummeegge
1c612d9e32 OpenVPN: Add start of static routes in client N2N
Fixes: #12529

- If a client N2N configuration will be imported into IPFire systems,
a line will be added which calls the --up script to restart the
static route initscript. Since this is IPFire specific, i will only be
added via import on IPFire system.
- Deleted unneeded line in CLIENTCONF section.
- Added description to SERVERCONF section.

Signed-off-by: ummeegge <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-13 11:12:39 +00:00
Michael Tremer
ff69976021 amazon-ssm-agent: Update to 3.0.356.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-13 11:11:47 +00:00
Michael Tremer
64d6b06a6d go: Update to 1.15.4
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-13 11:11:47 +00:00
Arne Fitzenreiter
81e87afb7b intel-microcode: update to 20201112
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-13 09:03:00 +01:00
Arne Fitzenreiter
2e1bf458e2 kernel: update to 4.14.206
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-12 09:02:02 +01:00
Michael Tremer
1ba481b3f4 Run "./make.sh lang"
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 18:30:45 +00:00
Peter Müller
358e42ffbf langs: add changed strings to German and English translations
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 16:01:51 +00:00
Peter Müller
4dc8de6f22 ipinfo.cgi: display AS information as well
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 16:01:49 +00:00
Peter Müller
7b82ca1fc8 location-functions.pl: add functions for fetching AS information
The second version of this patch only unifies the licence banner, but
leaves GPLv2 untouched. In addition, functions have been changed to use
a script-wide location database handle, as introduced in commit
b62d7e0cc7.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 16:01:47 +00:00
Michael Tremer
81f80af987 core153: Ship rules.pl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 15:53:39 +00:00
Peter Müller
2293e1de0b rules.pl: apply location filter to ppp0 if configured
In order to prevent collateral damage to internal traffic, commit
c69c820025 introduced applying location
block on red0 as a sanity check.

On systems configured to use PPPoE, however, traffic appears on the ppp0
interface instead. This patch checks if a system is configured to use
this connection method, and applies the location filter to this
interface. red0 is used otherwise.

Fixes: #12519

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 15:53:05 +00:00
Peter Müller
66c9d821d6 spectre-meltdown-checker: update to 0.44
Full changelog as per https://github.com/speed47/spectre-meltdown-checker/releases/tag/v0.44 :

    feat: add support for SRBDS related vulnerabilities
    feat: add zstd kernel decompression (#370)
    enh: arm: add experimental support for binary arm images
    enh: rsb filling: no longer need the 'strings' tool to check for kernel support in live mode
    fix: fwdb: remove Intel extract tempdir on exit
    fix: has_vmm: ignore kernel threads when looking for a hypervisor (fixes #278)
    fix: fwdb: use the commit date as the intel fwdb version
    fix: fwdb: update Intel's repository URL
    fix: arm64: cve-2017-5753: kernels 4.19+ use a different nospec macro
    fix: on CPU parse info under FreeBSD
    chore: github: add check run on pull requests
    chore: fwdb: update to v165.20201021+i20200616

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 15:50:33 +00:00
Michael Tremer
d08452c505 core153: Ship unbound initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 12:08:57 +00:00
Michael Tremer
65ef52a335 DNS: Make YouTube configurable for Safe Search
When safe search is enabled, it is being enabled on YouTube, too.

This creates problems in some scenarios like schools where politics
is being tought as well as other subjects that might be censored by
YouTube (i.e. election TV spots).

Therefore it is now possible to exclude YouTube from Safe Search
but keep it enabled for the search engines.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 12:08:21 +00:00
Michael Tremer
f60ae20cc8 core153: Update language cache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:53:34 +00:00
Michael Tremer
5cebcd805a core153: Ship Intel mircocode and ask for reboot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:53:23 +00:00
Arne Fitzenreiter
1c217406f2 intel-microcode: update to 20201110
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:50:14 +00:00
Arne Fitzenreiter
0163c62dee kernel: aarch64: enable ahci
this is needed to boot on ESXi on arm.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:50:12 +00:00
Michael Tremer
85c2e400ff git: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-10 11:17:46 +00:00
ummeegge
e23b3b08a8 git: Add missing Error.pm and LoadCPAN submodules
Fixes #12511

Signed-off-by: ummeegge <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-10 11:17:29 +00:00
Michael Tremer
1e2c442c9e samba: Add support for custom configuration changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-09 18:43:15 +00:00
Michael Tremer
7b97337afb core153: Ship location changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-09 14:11:16 +00:00
Stefan Schantl
07e42be978 Adjust CGI files to work with latest location-function.pl changes.
Fixes #12515.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-09 14:07:21 +00:00
Stefan Schantl
427190d578 locations-functions.pl: Allow get_locations() function to skip special locations.
When adding "no_special_locations" to the function call as argument
the special locations liks "A1, A2, A3 etc" will not be added to the
returned array as available locations.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-09 14:07:14 +00:00
Stefan Schantl
5bf91fe1b1 location-functions.pl: Add get_continent_code() function.
This tiny function is used to get the continent code for a given
country code.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-09 14:07:09 +00:00
Stefan Schantl
f46fd07814 location-functions.pl: Add END block to release the database handle.
Reference #12515.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-09 14:07:00 +00:00
Stefan Schantl
b62d7e0cc7 location-functions.pl: Use a single script-wide db_handle.
Create and use a single script-wide database handle for libloc to
prevent from creating multiple ones.

This helps saving memory, especially on small systems.

Reference #12515.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-09 14:06:53 +00:00
Michael Tremer
9141282b09 core153: Ship dns.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-07 13:28:44 +00:00
Michael Tremer
0c6112b0b3 Run "./make.sh lang"
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-07 13:27:43 +00:00
Matthias Fischer
743808bb8e dns.cgi: Cosmetics and customized translations
Updated/deleted redundant, unused or missing translation strings for dns.cgi

Affected:  'dns', 'dns title', 'dns server', 'dns servers'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-07 13:27:25 +00:00
Matthias Fischer
0e42d81285 core152: Ship header.pl
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-06 10:22:33 +00:00
Michael Tremer
f521556111 usb-modeswitch: Update rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-06 10:13:19 +00:00