Commit Graph

13381 Commits

Author SHA1 Message Date
Michael Tremer
d48ea6b5a7 python3-jmespath: New package as required by python3-botocore
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 13:57:02 +01:00
Michael Tremer
9e25fe5c1b python3-six: New package as required by python3-dateutil
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 13:18:00 +01:00
Michael Tremer
e0a05a8059 python3-dateutil: New package required by python3-botocore
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 13:13:07 +01:00
Michael Tremer
4ab80c5daf python3-botocore: Required by aws-cli
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 12:54:23 +01:00
Michael Tremer
280ee7e767 aws-cli: New package
Needed to communicate with AWS services like EC2, S3, etc...

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 12:45:38 +01:00
Stefan Schantl
f2f0d61fc1 logs.cgi/ids.dat: Rework linking to external rule documentation.
Check if the sid of a rule belongs to sourcefire and link to the
changed URL for gathering more details. If the sid of the rule belongs
to emergingthreads now link to the emergingthreads documentation.

Fixes #11806.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 11:48:03 +01:00
Michael Tremer
89f634ff9e Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 08:36:19 +01:00
Michael Tremer
df74fcbff9 Revert "usbutils: update to 010"
This reverts commit b07b1bef22.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 19:50:06 +01:00
Michael Tremer
9d0601917f Revert "core123: Ship updated usbutils"
This reverts commit a65d07ec6d.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 19:49:58 +01:00
Michael Tremer
d179a9d0a7 Revert "usbutils: Update rootfile"
This reverts commit 9aefd1ed07.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 19:49:48 +01:00
Michael Tremer
397d627eab Revert "avahi: Build without dbus"
This reverts commit 5221a852e8.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 18:59:10 +01:00
Michael Tremer
8defa50e73 aws: Execute user-data script while we have networking up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 12:14:49 +01:00
Stefan Schantl
cc60d3dfd3 suricata: Fix include of used rulefiles yaml
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-12 18:40:31 +02:00
Stefan Schantl
4230305558 suricata: Use HOME_NET declaration from external file
Use the gernerated HOME_NET details from
/var/ipfire/suricata/suricata-homenet.yaml which will be
generated by the WUI.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-12 07:05:24 +02:00
Stefan Schantl
6187da5055 IDS: Add reload option to initscript
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-11 22:28:07 +02:00
Stefan Schantl
e2e7880dc7 ids.cgi: Add code to start/stop/reload the IDS when neccessary
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-11 22:11:18 +02:00
Stefan Schantl
5240a80987 ids-functions.pl: Add function to call suricatactrl binary
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-11 22:10:29 +02:00
Arne Fitzenreiter
3d0e252e35 intel-microcode: update to 20180807
fixes #11590

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-11 20:52:45 +02:00
Stefan Schantl
f7d76eecc6 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-08-11 19:50:20 +02:00
Michael Tremer
98ce897520 avahi: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 12:20:38 +01:00
Michael Tremer
5221a852e8 avahi: Build without dbus
We don't have any services connected to dbus, so what is the
point of avahi trying to connect to it?

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 12:20:06 +01:00
Michael Tremer
4ec7c2936d avahi: Build with -U_FORTIFY_SOURCE
Avahi locks up when built with -D_FORTIFY_SOURCE=2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 12:18:29 +01:00
Michael Tremer
467581b8ab avahi: Update to 0.7
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 11:19:25 +01:00
Michael Tremer
6064cd87cc Revert "avahi: Drop package"
This reverts commit aa6ee515c5.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 11:11:48 +01:00
Michael Tremer
ebbca90d70 openssh: Disable password authentication by default
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-09 16:28:14 +01:00
Stefan Schantl
8d2f6b0b59 ids.cgi: Dynamically generate the HOME_NET details for suricata.
Introduce generate_home_net_file() which uses the current network
config to obtain the network address and subnetmask for each
available network zone, generate and write these HOME_NET information
into a yaml compatible file which can be included into the suricata
configuration file.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-09 15:33:25 +02:00
Arne Fitzenreiter
7f841117c5 kernel: fix build on x86_64
oops i deleted a wrong line...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-08 10:26:38 +02:00
Arne Fitzenreiter
07664187ac kernel: fix build on armv5tel
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-07 19:05:35 +02:00
Stefan Schantl
e0bfd338ee ids.cgi: Rename form name from SNORT to IDS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-05 19:42:33 +02:00
Arne Fitzenreiter
7529349754 kernel: apu2 leds: update string for newer bios
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-05 17:19:52 +02:00
Arne Fitzenreiter
28b252145a Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2018-08-05 17:19:36 +02:00
Stefan Schantl
8766096429 ids.cgi: Display if the IDS is running
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-05 14:24:20 +02:00
Stefan Schantl
796eea2154 ids-functions.pl: Add function to check if the IDS is running
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-05 14:23:45 +02:00
Arne Fitzenreiter
b403b04a13 initrd: add early microcode load
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-05 13:32:36 +02:00
Stefan Schantl
1286e0d41e ids.cgi: Rework section to configure the IDS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-05 12:57:44 +02:00
Erik Kapfer
4a50681905 tor: Update to version 0.3.3.9
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-05 11:10:28 +01:00
Erik Kapfer
351567966d nginx: Update to version 1.15.1
Deleted last slash in --prefix configure option to prevent such -->
https://forum.ipfire.org/viewtopic.php?t=19213#p109787 problems.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-05 11:10:28 +01:00
Matthias Fischer
b856ad695a rng-tools: Update to 6.3.1
Bugfix release, for details see:
https://github.com/nhorman/rng-tools/releases

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-05 11:10:28 +01:00
Michael Tremer
1fb7f56e11 make.sh: Add command to update list of contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-05 11:10:28 +01:00
Stefan Schantl
1cae702c22 ids-functions.pl: Add function to get the available network zones
The get_available_network_zones() function uses the /var/ipfire/ethernet/settings
file and translates the configured mode into an array, which contains the names
of the configured network zones.

The array will be returned and easily can be used to loop over this list of
available network zones and perform any kind of actions in other scripts.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-05 10:33:46 +02:00
Arne Fitzenreiter
79bcc6f769 collectd: fix cpufreq plugin enable
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-03 16:13:12 +02:00
Michael Tremer
f32cbd89d9 backup: Bump release number in ISO download script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-03 13:07:31 +01:00
Stefan Schantl
ab114c276b ids.cgi: Call suricatactrl for restarting the IDS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 13:51:59 +02:00
Stefan Schantl
06b569a442 oinkmaster: Install config file to /var/ipfire/suricata
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 13:48:46 +02:00
Stefan Schantl
d33874f496 daq: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:20:18 +02:00
Stefan Schantl
843a8c570c snort: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:19:35 +02:00
Stefan Schantl
914cca3d8e initscripts: Link against suricata initscript in runlevels and red.up hook
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:02:34 +02:00
Stefan Schantl
74b7d695c6 misc-progs: Rename snortctrl to suricatactrl
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 09:50:31 +02:00
Arne Fitzenreiter
b5a1294c98 linux-firmware: update to 30.7.2018
include new amd microcodes for Spectre updates

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-02 21:15:11 +02:00
Stefan Schantl
ef640882ab make.sh: Add ids-ruleset-source
I accidently forgot to commit this file in 1d9b879140

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 19:58:41 +02:00