Stefan Schantl
b5350c4d6e
ruleset-sources: Fix website url for community ruleset.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:59 +01:00
Stefan Schantl
923a644107
ruleset-sources: Replace subscription code placeholder.
...
Replace the <oinkcode> placeholder by the more generic
<subscription_code>.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:59 +01:00
Stefan Schantl
73eb03a333
ids.cgi: Add code to handle enable/disable a provider.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:59 +01:00
Stefan Schantl
9bf260ded2
ids.cgi: Add code to handle enable/disable autoupdate for a provider.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:59 +01:00
Stefan Schantl
7323c72d03
ids.cgi: Fix type in method.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:59 +01:00
Stefan Schantl
2acb3c8d00
ids.cgi: Remove accidently commited commented code snipped.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:59 +01:00
Stefan Schantl
bb4c30c653
ids.cgi: Correctly use "enabled" for checked checkboxes.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:59 +01:00
Stefan Schantl
aba3cbe5bc
ids.cgi: Read-in providers settings file when neccessary.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:58 +01:00
Stefan Schantl
4c067847c5
ids.cgi: Add code to add/edit a ruleset provider.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:58 +01:00
Stefan Schantl
18fb2dbd5c
Update language files.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:58 +01:00
Stefan Schantl
a8d36d3e1f
ids-functions.pl: Introduce providers_settings_file.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:58 +01:00
Stefan Schantl
2f252efa0d
ids.cgi: Rework rulesetsettings section.
...
* The page and section now supports multiple ruleset providers at once.
* Adding / Editing a ruleset provider has been moved to a own sub-page.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:58 +01:00
Stefan Schantl
a49a30d1ba
ruleset-sources: Fix website details for emergingthreats provider.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:58 +01:00
Stefan Schantl
77351a6b76
ids.cgi: Move configuration of ruleset autoupdate intervall to IDS main
...
section.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:58 +01:00
Stefan Schantl
87df37da7a
ids.cgi: Stop showing ruleset date on customize rulest sub-page.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:22:47 +01:00
Stefan Schantl
4efc8ccd8a
ids.cgi: Add "Back" button to customize ruleset sub-page.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
2bbe6ede23
ids.cgi: Move / Splitt main page and customize ruleset subpage.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
a468b62b62
ids.cgi: Only read-in ruleset if neccessary.
...
This process takes some time, especially on huge rulesets.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
dd2ce333f7
ids.cgi: Add button to customize the ruleset.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
019e5e9baf
ids.cgi: Introduce and use get_provider_name() function.
...
This function is used to grab the name of a provider by the given
handle.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
fed57fe7f0
ids.cgi: Move the section to customize the IDS ruleset to a function.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
1033cf2d0a
ids.cgi: Remove unused rulesetsources hashes.
...
They have been superseeded by the new ruleset sources file.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
4e4c3f1459
ids-functions.pl: Require ruleset-sources file for provider details.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
3e12c6e688
ids.cgi: Make CGI work with new ruleset-sources file.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
70cc13158d
ids-functions.pl: Add get_ruleset_providers() function.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
179b75107e
ids-functions.pl: Make downloader work with new ruleset-sources file
...
format.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
5e891296f0
ruleset-sources: Rework file format and data.
...
The file now contains a lot more of data and easily can be extended
to provide more and new providers.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-19 13:21:51 +01:00
Stefan Schantl
41b52755b8
Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x
2021-12-19 13:19:03 +01:00
Stefan Schantl
68b5761089
suricata: Do not load rules for dnp3 and modbus.
...
The parsers for those are disabled in the suricata config so
the rules are not needed, on the contrary they massively will spam
warnings when launching suricate because of the disabled parsers.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-17 08:06:26 +00:00
Stefan Schantl
d088562406
suricata: Do not load rules for dnp3 and modbus.
...
The parsers for those are disabled in the suricata config so
the rules are not needed, on the contrary they massively will spam
warnings when launching suricate because of the disabled parsers.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2021-12-16 20:04:41 +01:00
Stefan Schantl
a52ea4b008
Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x
2021-12-16 20:00:18 +01:00
Stefan Schantl
65d5ec52ce
suricata: Disable sid 2210059.
...
This rule emits a massive logspam and temporary will be disabled until
a better solution is found.
Fixes #12738 .
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-11 09:51:24 +00:00
Stefan Schantl
f23e0e5a7f
suricata: Cleanup default loaded rules file.
...
There are no such rules file available and therefore cannot be loaded.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-11 09:49:41 +00:00
Stefan Schantl
74070fe153
suricata: Move default loaded rulefiles to own included file.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Acked-by: Michael Tremer <michael.tremer@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-11 09:49:22 +00:00
Adolf Belka
3b1482e939
pcengines-apu-firmware: Update to version 4.15.0.1
...
- Update from 4.14.0.4 to 4.15.0.1
- Update of rootfile
- Changelog
v4.15.0.1
rebased with official coreboot repository commit 6973a3e7
v4.14.0.6
rebased with official coreboot repository commit d06c0917
Re-added GPIO bindings to fix LED and button functionality
v4.14.0.5
rebased with official coreboot repository commit d4c55353
Updated CPU declarations in ACPI to comply with newer ACPI standard
Removed GPIO bindings to fix conflict with OS drivers
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-11 09:46:12 +00:00
Jon Murphy
ccf19569ab
manualpages: Complete the list of user manual pages
...
Jon Murphy gathered all the links and made the updated file
available on the mailing list:
https://lists.ipfire.org/pipermail/development/2021-October/011383.html
https://lists.ipfire.org/pipermail/development/2021-December/011737.html
With kind permission from him, this patch contains the completed list.
The list was successfully checked with "./make.sh check-manualpages".
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de >
Reported-by: Jon Murphy <jcmurphy26@gmail.com >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-11 09:45:27 +00:00
Stefan Schantl
ba15416119
Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x
2021-12-08 17:03:31 +01:00
Arne Fitzenreiter
2c13fafb7f
installer: add network phy kernel modules to rd
...
network for download the sources has not worked with some nic's
like realtek 8169 because the phy driver was missing.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-06 12:24:56 +00:00
Michael Tremer
d2d98018fd
keepalived: Update to 2.2.4
...
This patch re-enables this package for build and it builds against next
with Linux 5.15.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-04 14:41:33 +00:00
Arne Fitzenreiter
5fc3f779a5
./make.sh lang
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-02 13:04:03 +01:00
Arne Fitzenreiter
471e4846a3
index.cgi: set arch eol warning link color to white
...
The link was red on red backround which is unreadable.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-02 12:59:13 +01:00
Arne Fitzenreiter
65067248d1
kernel: update to 5.15.6
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-02 11:34:38 +01:00
Arne Fitzenreiter
727c76f09a
index.cgi: fix eol link
...
<li> not official has a href parameter.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-12-01 07:42:06 +01:00
Arne Fitzenreiter
d638cffb35
rtl8812au: update to git-307d694...
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-11-30 14:12:08 +01:00
Arne Fitzenreiter
11a3bd4898
mountkernfs: fix typo (wrong space character)
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-11-30 13:51:13 +01:00
Arne Fitzenreiter
b7cf050eeb
core162: add systctl.conf to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-11-30 09:58:27 +01:00
Arne Fitzenreiter
ffd857d098
sysctl: kernel 5.13 has removed some scheduler variables.
...
sched_min_granularity_ns and sched_migration_cost_ns are not
available for sysctl anymore. They can only altered via debugfs
if scheduler debugging is enabled.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-11-30 09:50:38 +01:00
Arne Fitzenreiter
5a7f7dd587
issue/motd: add architecture warning also to console and ssh logins.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-11-30 09:35:19 +01:00
Arne Fitzenreiter
616de7524f
core162: add index.cgi
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-11-30 09:34:20 +01:00
Jonatan Schlag
b55e2b8a35
Inform users about the eol of i?86
...
The warning point to a wiki page which is currently in construction.
This should give us the opportunity to add further information for
these users even if we do not provide updates anymore.
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2021-11-30 07:54:46 +00:00