Commit Graph

2799 Commits

Author SHA1 Message Date
Arne Fitzenreiter
ef14d8a064 core153: ship strongswan
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-24 11:08:13 +01:00
Michael Tremer
7a6bac40fd core153: Remove reloading microcode
This requires that we can load the "microcode" module, but
since the kernel was replaced in this release, we can't load
it any more.

Fixes: #12537
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-20 20:04:13 +00:00
Michael Tremer
74e19a563c core153: Ship network-hotplug-bridges
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-20 13:47:01 +00:00
Stefan Schantl
a4420101a8 Core 153: Ship libhtp
libhtp has been updated and suricata 6 requires the new version, so
this lib has to be shipped with the core update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-19 20:46:45 +00:00
Michael Tremer
e704dbe6bd network: Mount/umount network file systems at the correct time
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-17 16:35:13 +00:00
Arne Fitzenreiter
a832b5c2e6 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-13 18:21:20 +00:00
Arne Fitzenreiter
2e1bf458e2 kernel: update to 4.14.206
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-12 09:02:02 +01:00
Michael Tremer
81f80af987 core153: Ship rules.pl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 15:53:39 +00:00
Michael Tremer
d08452c505 core153: Ship unbound initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 12:08:57 +00:00
Michael Tremer
f60ae20cc8 core153: Update language cache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:53:34 +00:00
Michael Tremer
5cebcd805a core153: Ship Intel mircocode and ask for reboot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:53:23 +00:00
Michael Tremer
7b97337afb core153: Ship location changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-09 14:11:16 +00:00
Michael Tremer
9141282b09 core153: Ship dns.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-07 13:28:44 +00:00
Matthias Fischer
0e42d81285 core152: Ship header.pl
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-06 10:22:33 +00:00
Michael Tremer
731fc207de core153: Ship and apply changes to sysctl.conf
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:39:06 +00:00
Michael Tremer
dcd0bcef7e core153: Ship curl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:33:45 +00:00
Michael Tremer
7f235b5b01 core153: Ship location-block.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:32:29 +00:00
Michael Tremer
f717db9172 core153: Ship tzdata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:30:58 +00:00
Michael Tremer
3bd2e64eb2 core152: Ship file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:29:44 +00:00
Michael Tremer
0f2d70a313 core153: Ship bash
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-03 10:39:08 +00:00
Michael Tremer
1b2ddfa449 core153: Ship hwdata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-03 10:37:56 +00:00
Michael Tremer
9c6fd77927 core153: Ship libarchive
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-30 16:29:39 +00:00
Michael Tremer
7f5d63c9e6 core153: Ship usb_modeswitch
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-30 15:20:33 +00:00
Michael Tremer
9d29a52d7d core153: Ship NTP changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-30 15:11:05 +00:00
Michael Tremer
ae432a5f39 core153: Ship language files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-29 13:49:40 +00:00
Michael Tremer
2d43d770d2 core152: Ship language files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-29 13:48:58 +00:00
Michael Tremer
af94be24fe core153: Ship logwatch
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-28 11:55:48 +00:00
Michael Tremer
8a2105b284 core153: Ship updated index.cgi and vpnmain.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 18:38:35 +00:00
Michael Tremer
0b9c2434f0 core152: Ship updated SSH initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 13:32:19 +00:00
Michael Tremer
c472a30f30 core153: Ship suricata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:52:48 +00:00
Michael Tremer
150378eae9 Start Core Update 153
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:50:10 +00:00
Michael Tremer
201ad7ff80 Merge remote-tracking branch 'origin/next' 2020-10-27 11:46:16 +00:00
Michael Tremer
d4afeb5250 core152: Ship CA certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-23 15:52:18 +00:00
Michael Tremer
449b1aeea7 core152: Ship proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-19 09:26:17 +00:00
Michael Tremer
7ad39d931a core152: Ship suricata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:35:13 +00:00
Michael Tremer
488f36e446 core152: Ship libhtp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:34:25 +00:00
Michael Tremer
43e1c88ea4 core152: Ship yaml
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:33:59 +00:00
Michael Tremer
c9f30dc9fc core151: Do not ship the location database again
This might potentially downgrade the database and is a waste
of space in the update. Therefore we simply do not ship it here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-14 13:51:25 +00:00
Michael Tremer
b5c4c15af3 core151: Ship libloc again
This is necessary because some installations have a version
of Core Update 150 installed without the latest version.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-14 13:49:46 +00:00
Michael Tremer
c69c820025 firewall: Filter only on RED and exclude any private address space
Since libloc is built as a tree we cannot simply exclude any address
space in the middle of it. Therefore we create some firewall rules
which simply avoid checking non-globally routable address space.

Fixes: #12499
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-14 11:32:05 +01:00
Michael Tremer
13e455aec7 samba: Log to syslog
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:16 +01:00
Michael Tremer
a836a2787c core151: Remove multiple calls of rm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-12 20:07:30 +00:00
Matthias Fischer
decb7e61f1 update.sh: Delete obsolete files from Net-DNS 1.25
Fixes Bug #12491

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-12 20:06:42 +00:00
Michael Tremer
79131c6e47 firewall hits graph: Fix order of values
The fields were mixed up and therefore graph showed incorrect
values.

Fixes: #12496
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-12 10:27:15 +00:00
Michael Tremer
63d55ec0c9 core152: Ship knot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-12 10:07:27 +00:00
Michael Tremer
b98d3a7e10 core152: Ship unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-12 10:06:22 +00:00
Michael Tremer
a9f69cbf01 core151: Apply local SSH configuration
Fixes: #12494
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-10 11:48:26 +00:00
Michael Tremer
5e4f76bb71 core151: Ship /etc/os-release
Fixes: #12495
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-10 11:43:44 +00:00
Michael Tremer
d5808f3095 core152: Fix typo in rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-07 14:27:29 +00:00
Michael Tremer
b67f02d512 /var/ipfire/ethernet/settings: Drop BROADCAST variable
This variable is no longer being used and was only used to
assign IP addresses to the individual interfaces.

However, the kernel knows best which IP address to select
as broadcast address for each network. Therefore we depend
on the kernel which allows us to support RFC3021.

Fixes: #12486 - no /31 transfer net available on red
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-07 11:46:46 +00:00