Commit Graph

6212 Commits

Author SHA1 Message Date
Michael Tremer
968ad8ba8d samba: Update rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 11:09:34 +00:00
Adolf Belka
ecf0ba6d12 minicom: Update to 2.8
- Update minicom from 2.7.1 to 2.8
- Changelog for version 2.8
	New timestamp mode: Delta to previous line.
	Add HPA ESC sequence
	Add alternative window support (ti/te)
	Fix file name of non-global configuration settings.
	Update translations: Indonesian, French, Swedish, Spanish, German, Brazilian Portuguese, Vietnamese, Polish, Danish, Norwegian, Serbian
	New translation: Serbian, Simplified chinese
	Fix F10 macro key used in current setups
	Add F11 and F12 for macro use
	Fixed DTR for recent systems
	Add support for RS485.
	Add --capturefile-buffer-mode option
	Bug fixes
- Updated rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-28 16:49:00 +00:00
Adolf Belka
ff5aef9d30 tshark: Update to 3.4.2
- Update tshark from 3.2.6 (Old Stable Release line) to 3.4.2 (Stable Release line)
- Changelog at https://www.wireshark.org/docs/relnotes/
- Rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-28 16:48:09 +00:00
Michael Tremer
d52d707381 core154: Ship arping
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-28 16:44:51 +00:00
Michael Tremer
ffe6303b2b core154: Ship tzdata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 22:10:22 +00:00
Michael Tremer
37fe3658a0 samba: Add helper script to pipe password
It is complicated to set the password in the C helper binary.

Therefore it is being set by a helper script.

This is still not an optimal solution since the password might be
exposed to the shell environment, but has the advantage that shell
command injection is no longer possible.

Fixes: #12562
Reported-by: Albert Schwarzkopf <ipfire@quitesimple.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 21:06:57 +00:00
Michael Tremer
5d482a74fa core154: Manually set capabilites for etherwake
The changes are not available in the running instance of
pakfire and tar.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 21:06:57 +00:00
Michael Tremer
d9f9f16366 Drop launch-ether-wake
The helper binary is being dropped and etherwake is enabled
for CAP_NET_RAW. This allows execution by unprivileged users
as needed by the web user interface (nobody).

Reported-by: Albert Schwarzkopf <ipfire@quitesimple.org>
Fixes: #12562
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 21:06:57 +00:00
Michael Tremer
1035570fb0 core154: Do not package libloc database files
This is carried over from Core Update 153

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 18:43:30 +00:00
Adolf Belka
53f04366ed iptables: Update to version 1.8.7
- Update from 1.8.6 to 1.8.7
Florian Westphal (4):
      xtables-monitor: fix rule printing
      xtables-monitor: fix packet family protocol
      xtables-monitor: print packet first
      xtables-monitor:

Pablo Neira Ayuso (2):
      tests: shell: update format of registers in bitwise payloads.
      configure: bump version for 1.8.7 release

Phil Sutter (21):
      nft: Optimize class-based IP prefix matches
      ebtables: Optimize masked MAC address matches
      tests/shell: Add test for bitwise avoidance fixes
      ebtables: Fix for broken chain renaming
      iptables-test.py: Accept multiple test files on commandline
      iptables-test.py: Try to unshare netns by default
      libxtables: Extend MAC address printing/parsing support
      xtables-arp: Don't use ARPT_INV_*
      xshared: Merge some command option-related code
      tests/shell: Test for fixed extension registration
      extensions: dccp: Fix for DCCP type 'INVALID'
      nft: Fix selective chain compatibility checks
      nft: cache: Introduce nft_cache_add_chain()
      nft: Implement nft_chain_foreach()
      nft: cache: Move nft_chain_find() over
      nft: Introduce struct nft_chain
      nft: Introduce a dedicated base chain array
      nft: cache: Sort custom chains by name
      tests: shell: Drop any dump sorting in place
      nft: Avoid pointless table/chain creation
      tests/shell: Fix nft-only/0009-needless-bitwise_0
- Rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-25 21:23:49 +00:00
Michael Tremer
adc2aa5f67 core154: Ship updated perl files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-25 19:34:16 +00:00
Michael Tremer
502f6c63a3 network-hotplug-bridges: Fix logical error in STP_PRIORITY check
Reported-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-18 17:09:10 +00:00
Michael Tremer
387d4b5e43 core154: Ship logrotate
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-18 13:06:25 +00:00
Michael Tremer
597e584f3d core154: Ship ipsec-interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-18 13:05:42 +00:00
Michael Tremer
37ff8e005d core154: Ship sudo
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-18 13:04:55 +00:00
Adolf Belka
161613165a sudo: Upgrade to 1.9.5p1
- Upgrade sudo from 1.8.10p3 to 1.9.5p1
- Move sudo from legacy release (1.8) branch to stable release (1.9) branch
- Update rootfile
- Changelog available at https://www.sudo.ws/changes.html
- Tested out on vm testbed and sudo is working correctly

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-18 13:04:33 +00:00
Michael Tremer
50f75f8806 core154: Ship kmod
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-13 11:23:07 +00:00
Michael Tremer
5c21f1a078 kmod: Update to 28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-13 11:22:59 +00:00
Michael Tremer
5c3f3da559 core154: Ship SSH initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-13 11:14:30 +00:00
Michael Tremer
0b58804370 core154: Ship initscript functions
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-13 10:54:07 +00:00
Michael Tremer
ad594123b6 core154: Ship header.pl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-13 10:53:15 +00:00
Michael Tremer
611c2b7103 iw: Update to 5.9
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-12 10:43:52 +00:00
Michael Tremer
a4cfeae49b core154: Ship WiFi changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-12 10:40:28 +00:00
Michael Tremer
0c2be650b0 core154: Ship setup
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-12 10:37:17 +00:00
Michael Tremer
acc82ade06 core154: Ship unbound initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-07 11:57:53 +00:00
Michael Tremer
eb2cf5d0f3 core154: Ship ddns.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:33:36 +00:00
Michael Tremer
f6557ced12 core154: Ship ddns
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:32:41 +00:00
Adolf Belka
02037c964f sshfs: Update to 3.7.1
- Update sshfs from 2.2 to 3.7.1
- Changelog is available at https://github.com/libfuse/sshfs/releases
- Build had to be changed from autotools to meson/ninja
- Change in rootfiles

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:21:42 +00:00
Michael Tremer
6f20cb9688 core154: Ship fuse
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:21:32 +00:00
Adolf Belka
35b8dc552d fuse: Update to 3.10.1
- Update fuse from 2.9.7 to 3.10.1
- Update also required by sshfs update
- Changelog is available at https://github.com/libfuse/libfuse/releases
- Build had to be changed from autools to meson/ninja
- Rootfiles changed
- namespace conflict fix patch no longer required. Fix now built into kernel.h

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:21:02 +00:00
Michael Tremer
8468f164ab core154: Ship iproute2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:17:50 +00:00
Michael Tremer
6ae847429e core154: Ship iptables
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:15:22 +00:00
Adolf Belka
84e4274e59 iptables: Update to 1.8.6
- Update from 1.8.5 to 1.8.6
- Changelog info
Arturo Borrero Gonzalez (1):
      xtables-translate: don't fail if help was requested

Giuseppe Scrivano (1):
      iptables: accept lock file name at runtime

Jan Engelhardt (2):
      doc: document danger of applying REJECT to INVALID CTs
      build: resolve iptables-apply not getting installed

Maciej Żenczykowski (1):
      libxtables: compiler warning fixes for NO_SHARED_LIBS

Pablo Neira Ayuso (4):
      extensions: libxt_conntrack: provide translation for DNAT and SNAT --ctstate
      iptables: replace libnftnl table list by linux list
      iptables-nft: fix basechain policy configuration
      configure: bump version for 1.8.6 release

Phil Sutter (31):
      xtables-restore: Fix verbose mode table flushing
      build: Fix for failing 'make uninstall'
      xtables-translate: Use proper clear_cs function
      tests: shell: Add help output to run-tests.sh
      nft: Make table creation purely implicit
      nft: Be lazy when flushing
      nft: cache: Drop duplicate chain check
      nft: Drop pointless nft_xt_builtin_init() call
      nft: Turn nft_chain_save() into a foreach-callback
      nft: Use nft_chain_find() in two more places
      nft: Reorder enum nft_table_type
      nft: Eliminate table list from cache
      nft: Fix command name in ip6tables error message
      tests: shell: Merge and extend return codes test
      xtables-monitor: Fix ip6tables rule printing
      nft: Fix for ruleset flush while restoring
      Makefile: Add missing man pages to CLEANFILES
      nft: cache: Check consistency with NFT_CL_FAKE, too
      nft: Extend use of nftnl_chain_list_foreach()
      nft: Fold nftnl_rule_list_chain_save() into caller
      nft: Use nft_chain_find() in nft_chain_builtin_init()
      nft: Fix for broken address mask match detection
      extensions: libipt_icmp: Fix translation of type 'any'
      libxtables: Make sure extensions register in revision order
      libxtables: Simplify pending extension registration
      libxtables: Register multiple extensions in ascending order
      nft: Make batch_add_chain() return the added batch object
      nft: Fix error reporting for refreshed transactions
      libiptc: Avoid gcc-10 zero-length array warning
      nft: Fix for concurrent noflush restore calls
      tests: shell: Improve concurrent noflush restore test a bit
- Rootfiles updated

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:11:01 +00:00
Michael Tremer
36f253d291 configroot: Make extrahd.pl executable
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 14:50:29 +00:00
Michael Tremer
1a79ef8e43 misc-progs: Drop unused upnpctrl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 14:50:07 +00:00
Michael Tremer
5cef36ccb1 misc-progs: Drop unused applejuicectrl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 14:48:34 +00:00
Michael Tremer
b37678e922 Package extended attributes in distro.img and Core Updates
System capabilities are stored in extended file system attributes
which are by default not stored in tar balls.

This patch ensures that they are packaged and extracted.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 14:45:02 +00:00
Michael Tremer
241bf919fc make.sh: Build acl and attr earlier
These libraries are needed to link tar against them for
extended attribute support

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 14:44:39 +00:00
Michael Tremer
d0a16dba28 core154: Ship general-functions.pl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-04 10:44:56 +00:00
Michael Tremer
21970dd75f core154: Ship knot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-03 11:18:06 +00:00
Michael Tremer
86bd9ccc95 Drop unused Asterisk CGI files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-03 11:17:28 +00:00
Michael Tremer
edd2710520 Drop unused upnp.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-03 11:16:22 +00:00
Michael Tremer
2b4110cd64 core154: Ship updated CGI files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-03 11:15:45 +00:00
Michael Tremer
da310b2246 core154: Ship logwatch
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-29 10:18:44 +00:00
Adolf Belka
2abcb7ee5f bacula: Update to 9.6.7
- Update bacula from 9.6.6 to 9.6.7
	This is a minor bug release
	See https://sourceforge.net/projects/bacula/files/bacula/9.6.7/ReleaseNotes/
- This is the last of the version 9 series. The next update will be the version 11 series.
- Update of lfs and rootfiles

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-28 13:15:29 +00:00
Michael Tremer
3a4d52603d core154: Ship new procps
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-27 10:58:37 +00:00
Adolf Belka
50992c7321 procps: Update to 3.3.16
- update from 3.2.8 to 3.3.16
	This is also an update from procps to procps-ng
	The previous version was no longer being maintained.
- Added autogen.sh into lfs as ity is needed to create the config script.
- Added libdir=/lib line into configure command as default is /usr/lib
- Added mv commands for kill, ps & sysctl to place them into the same locations
	as the previous version of procps
- Moved lfsmake2 procps line to after pkg-config in make.sh
	The autogen line requires autoconf, libtool, gettext and pkg-config
	to be available so procps moved to after them.
- procps-3.2.8-fix_unknown_HZ_value.patch no longer required with new
	version so removed.
- rootfile updated.
- libprocps library being maintained by the same people now maitaining this
	version of procps.
- information on the releases from 3.3.13 to 3.3.16 available on
	https://gitlab.com/procps-ng/procps/-/releases

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-27 10:55:03 +00:00
Stefan Schantl
630e8601f8 meson: New package.
More and more packages uses meson as build environment instead of
autotools or cmake.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-27 10:30:15 +00:00
Stefan Schantl
f8c5644dc5 ninja: New package
This tool required to build more and more packages.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-27 10:29:55 +00:00
Michael Tremer
642316370f core154: Ship pakfire.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-24 12:00:39 +00:00