webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-13 12:32:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
12,269 Commits 2 Branches 1 Tag
4ca0cb33543e780f02142cd70b18bb341d2eabad
Commit Graph

12269 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Tremer
4ca0cb3354 core124: Ship updated redirect page template 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-10 16:30:52 +01:00
Peter Müller
b67e79a4f1 embed background image in redirect template 
Embed the IPFire background image into the redirect template
directly via CSS instead of loading it from somewhere else.
This is necessary because of Content Security Policy (CSP).

This patch inserts the base64 encoded image during build so
nothing needs to be updated twice in case background image
changes.

It supersedes first to fourth version of this patch and has
been successfully tested during a clean build.

Fixes #11650

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-10 16:30:09 +01:00
Michael Tremer
a0d612be7a core124: Rebuild initrd 
This script was missing in the last update and therefore
no microcodes were included.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-09 18:27:56 +01:00
Michael Tremer
505b886d0d core124: Apply changed sysctl.conf 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-09 17:48:14 +01:00
Peter Müller
d5fe332283 do not expose kernel address spaces even to privileged users 
Change this setting from 1 to 2 so kernel addresses are not
displayed even if a user has CAPS_SYSLOG privileges.

See also:
- https://lwn.net/Articles/420403/
- https://tails.boum.org/contribute/design/kernel_hardening/

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-09 17:47:08 +01:00
Michael Tremer
65ae069c21 core124: Ship updated rng-tools 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-09 17:43:53 +01:00
Michael Tremer
fd0a0384f0 rng-tools: Update to 6.4 
Also add a patch that keeps RDRAND enabled on i586

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Fixes: #11853
 2018-09-09 17:42:17 +01:00
Michael Tremer
3da2a66193 aws: Don't update the system on first boot 
This will violate AWS policy and therefore had to be removed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-31 11:08:53 +01:00
Arne Fitzenreiter
fd313a1ae6 Merge branch 'master' into next 2018-08-29 07:44:59 +02:00
Arne Fitzenreiter
574a71177b kernel: fix dtb handling 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-28 12:39:08 +02:00
Michael Tremer
aa61d769b7 core124: Ship latest pakfire changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-27 07:34:28 +01:00
Michael Tremer
06d55142e5 pakfire: Remove any reference to counter.py 
The concept has been retired a very log time ago
and the web service only responds with 200 what ever
it is being sent.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-27 07:29:19 +01:00
Michael Tremer
e32591e7bf pakfire: Remove mirror health check 
This is not really necessary because pakfire will automatically
failover to the next mirror anyways and that a mirror responds
to an ICMP echo request doesn't necessarily mean that it can
deliver the requested file.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-27 07:23:03 +01:00
Arne Fitzenreiter
e5eedea01d Merge branch 'core123' of git.ipfire.org:/pub/git/ipfire-2.x into core123 2018-08-24 20:22:05 +02:00
Arne Fitzenreiter
1ce35de5cc intel-microcode: update to 20180807a 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-24 20:19:29 +02:00
Michael Tremer
973ffc2987 core124: Ship updated ntp package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-24 12:25:59 +01:00
Matthias Fischer
db5360ee9a ntp: Update to 4.2.8p12 
For details see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-24 12:17:57 +01:00
Michael Tremer
b31d55a79d core124: Ship updated fwhosts.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-24 11:45:44 +01:00
Alexander Marx
2754623fa9 BUG11825: firewall: Renaming a network/host group doesn't update rules 
Code only changed field 6 of hash (target group) and not field 4 (source group).
Also if using geoip it was only field 4 of hash (source group) and not field 6 of hash (target group)
Added new code that changes both fields to reflect the change in the firewallrules immediately.

fixes: #11825

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-24 11:44:45 +01:00
Michael Tremer
aec1925bea IPsec: Show connected status for waiting connections that are active 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-23 17:34:50 +01:00
Michael Tremer
366b40c740 setup: Don't write any mount errors over the GUI 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-23 11:17:23 +01:00
Michael Tremer
95b87f39ac localnet: Set FQDN without using domainname command 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-23 10:18:59 +01:00
Michael Tremer
702f0ba835 core124: Ship updated firewall.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:46:53 +01:00
Alexander Marx
d303638793 BUG11805: Firewall rule with source orange and target firewall-interface-orange not possible 
Now its possible to create a rule with orange source and target orange interface of the firewall.

Fixes: #11805

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:46:10 +01:00
Michael Tremer
7141cb1ee4 core124: Fix typo in rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:17:15 +01:00
Michael Tremer
8e11e1e869 core124: Ship updated AWS setup scripts 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:06:53 +01:00
Michael Tremer
84cd9b9162 Drop the network-trigger script 
This is done at boot time and doesn't normally need to be done again.

On AWS or in the setup, renaming any network interfaces is being
handled automatically.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:05:43 +01:00
Michael Tremer
f3d59d2c94 firstsetup: There is no need to restart udev here 
All network interfaces are renamed accordingly in setup

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:02:43 +01:00
Michael Tremer
c5465a9453 aws: Let udev rename all network interfaces 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:00:39 +01:00
Matthias Fischer
caf5dcb1e7 nano: Update to 2.9.8 
For details see:
https://www.nano-editor.org/news.php

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 19:50:02 +01:00
Michael Tremer
0ff9099443 core124: Ship updated backup include/exclude files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 15:06:22 +01:00
Michael Tremer
f868ccb763 backup: Add root's SSH keys and settings 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 15:05:40 +01:00
Michael Tremer
9b0618c09f backup: Add custom squid configuration files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 15:05:13 +01:00
Michael Tremer
7486e30eeb backup: Order incldue/exclude alphabetically 
Nothing has been added or removed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 11:32:04 +01:00
Arne Fitzenreiter
3b81e38a08 gcc: x86_64 add libspp to rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-20 17:38:31 +02:00
Arne Fitzenreiter
a019c963a2 core123: ship libssp (was missing on x86_64) 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-20 17:05:10 +02:00
Arne Fitzenreiter
66c449c053 gcc: x86_64 add libspp to rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-20 16:22:20 +02:00
Arne Fitzenreiter
b38239f907 core123: ship xtables-addons. 
xtables are build for installed iptables version so we need
to ship it even if it was not updated.
Also clean /lib/xtables because some modules are renamed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-17 22:24:32 +02:00
Arne Fitzenreiter
ee84b26a27 core123: ship openssl sse2 version on i586 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-17 07:06:45 +02:00
Matthias Fischer
943cfcc311 bind: Update to 9.11.4-P1 
Fixes CVE-2018-5740 and CVE-2018-5738.

For details see:
http://ftp.isc.org/isc/bind9/9.11.4-P1/RELEASE-NOTES-bind-9.11.4-P1.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 20:11:39 +01:00
Michael Tremer
c6b97a0681 core124: Ship updated pciutils 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:55:49 +01:00
Peter Müller
70e4a5b276 pciutils: update to 3.5.6 
The third version of this patch superseds the first and
second one which were broken due to bugs in the MUAs GPG
implementation.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:55:13 +01:00
Michael Tremer
c708276290 core124: Ship updated ids.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:54:41 +01:00
Peter Müller
5ed6cdd920 download ET IDS rules via HTTPS 
The Emerging Threats ruleset server supports HTTPS. It should
be used for downloading the ruleset in IPFire, too.

This also needs to be applied on the upcoming ids.cgi file for Suricata
which I will do in a second patch.

The third version of this patch superseds the first and
second one which were broken due to bugs in the MUAs GPG
implementation.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:54:06 +01:00
Peter Müller
f0d62e2f53 Postfix: update to 3.3.1 
This updates Postfix to recent 3.3.x series, which contains
some new features. Release announcement available at
http://www.postfix.org/announcements/postfix-3.3.1.html

The third version of this patch superseds the first and
second one which were broken due to bugs in the MUAs GPG
implementation.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:53:48 +01:00
Michael Tremer
8098a76b52 core124: Ship updated bind 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:05:47 +01:00
Matthias Fischer
d8106d993d bind: Update to 9.11.4 
For details see:
http://ftp.isc.org/isc/bind9/9.11.4/RELEASE-NOTES-bind-9.11.4.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:05:32 +01:00
Michael Tremer
1233d81f21 core124: Don't re-generate the initrd 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:02:56 +01:00
Michael Tremer
4c01f489f6 core124: Re-install bootloader during update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:02:37 +01:00
Michael Tremer
de0566323f core124: Ship EFI changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:01:42 +01:00