Commit Graph

6150 Commits

Author SHA1 Message Date
Michael Tremer
d45d524725 python3-rsa: New package as required by aws-cli
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 14:44:30 +01:00
Michael Tremer
953f6f7332 python3-s3transfer: New package as required by aws-cli
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 14:38:11 +01:00
Michael Tremer
d2da17a182 python3-yaml: New paclage as required by aws-cli
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 14:19:33 +01:00
Michael Tremer
041d2116c0 python3-docutils: New package as required by aws-cli
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 14:11:38 +01:00
Michael Tremer
a33ca4cc6f python3-colorama: New package as required by aws-cli
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 14:04:03 +01:00
Michael Tremer
d48ea6b5a7 python3-jmespath: New package as required by python3-botocore
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 13:57:02 +01:00
Michael Tremer
9e25fe5c1b python3-six: New package as required by python3-dateutil
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 13:18:00 +01:00
Michael Tremer
e0a05a8059 python3-dateutil: New package required by python3-botocore
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 13:13:07 +01:00
Michael Tremer
4ab80c5daf python3-botocore: Required by aws-cli
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 12:54:23 +01:00
Michael Tremer
280ee7e767 aws-cli: New package
Needed to communicate with AWS services like EC2, S3, etc...

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 12:45:38 +01:00
Michael Tremer
89f634ff9e Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 08:36:19 +01:00
Michael Tremer
9d0601917f Revert "core123: Ship updated usbutils"
This reverts commit a65d07ec6d.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 19:49:58 +01:00
Michael Tremer
d179a9d0a7 Revert "usbutils: Update rootfile"
This reverts commit 9aefd1ed07.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 19:49:48 +01:00
Michael Tremer
397d627eab Revert "avahi: Build without dbus"
This reverts commit 5221a852e8.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 18:59:10 +01:00
Stefan Schantl
cc60d3dfd3 suricata: Fix include of used rulefiles yaml
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-12 18:40:31 +02:00
Stefan Schantl
4230305558 suricata: Use HOME_NET declaration from external file
Use the gernerated HOME_NET details from
/var/ipfire/suricata/suricata-homenet.yaml which will be
generated by the WUI.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-12 07:05:24 +02:00
Stefan Schantl
5240a80987 ids-functions.pl: Add function to call suricatactrl binary
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-11 22:10:29 +02:00
Arne Fitzenreiter
3d0e252e35 intel-microcode: update to 20180807
fixes #11590

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-11 20:52:45 +02:00
Stefan Schantl
f7d76eecc6 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-08-11 19:50:20 +02:00
Michael Tremer
5221a852e8 avahi: Build without dbus
We don't have any services connected to dbus, so what is the
point of avahi trying to connect to it?

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 12:20:06 +01:00
Michael Tremer
467581b8ab avahi: Update to 0.7
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 11:19:25 +01:00
Michael Tremer
6064cd87cc Revert "avahi: Drop package"
This reverts commit aa6ee515c5.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 11:11:48 +01:00
Stefan Schantl
796eea2154 ids-functions.pl: Add function to check if the IDS is running
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-05 14:23:45 +02:00
Arne Fitzenreiter
b403b04a13 initrd: add early microcode load
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-05 13:32:36 +02:00
Stefan Schantl
1cae702c22 ids-functions.pl: Add function to get the available network zones
The get_available_network_zones() function uses the /var/ipfire/ethernet/settings
file and translates the configured mode into an array, which contains the names
of the configured network zones.

The array will be returned and easily can be used to loop over this list of
available network zones and perform any kind of actions in other scripts.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-05 10:33:46 +02:00
Michael Tremer
f32cbd89d9 backup: Bump release number in ISO download script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-03 13:07:31 +01:00
Stefan Schantl
06b569a442 oinkmaster: Install config file to /var/ipfire/suricata
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 13:48:46 +02:00
Stefan Schantl
d33874f496 daq: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:20:18 +02:00
Stefan Schantl
843a8c570c snort: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:19:35 +02:00
Stefan Schantl
914cca3d8e initscripts: Link against suricata initscript in runlevels and red.up hook
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:02:34 +02:00
Stefan Schantl
74b7d695c6 misc-progs: Rename snortctrl to suricatactrl
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 09:50:31 +02:00
Arne Fitzenreiter
b5a1294c98 linux-firmware: update to 30.7.2018
include new amd microcodes for Spectre updates

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-02 21:15:11 +02:00
Stefan Schantl
d72b3e64c2 suricata: Introduce basic initscript
Add a very basic initscript, which currently allows to start/stop/restart suricata and
check if the daemon is running.

The script will detect when starting suricata how many CPU cores are present on the system and
will launch suricata in inline mode (NFQUEUE) and listen to as much queues as CPU cores are
detected.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 19:54:22 +02:00
Stefan Schantl
101d3ece24 ids-ruleset-sources: Update download URL for snort rules
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 19:33:37 +02:00
Stefan Schantl
bce84f3975 ids-functions.pl: Rename ruleset-sources.list to ruleset-sources
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 19:31:52 +02:00
Stefan Schantl
1d9b879140 ids-ruleset-sources: New package
Move the file which contains the download URL's for the IDS rulesets
into an own common package. This will allow us in future to easily ship
a changed file with a core update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 19:29:36 +02:00
Stefan Schantl
72b2109c72 configroot: Move from snort to suricata
Create /var/ipfire/suricata and /var/ipfire/suricata/settings instead of
/var/ipfire/snort and /var/ipfire/snort/settings.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 15:47:31 +02:00
Stefan Schantl
4c6d6c1ee3 suricata: Install very basic config file
This config file is mostly based on the example configuration shipped
by the suricata project and needs to be enhanched.

See #11808.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 09:10:25 +02:00
Stefan Schantl
164eab6627 ids-functions.pl: Move path details from snort to suricata
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-30 21:36:07 +02:00
Stefan Schantl
a8b8c9e5b2 Merge branch 'next-new-ids.cgi' into next-suricata-and-cgi 2018-07-30 21:33:25 +02:00
Stefan Schantl
67752a9510 suricata: New package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-30 21:31:15 +02:00
Stefan Schantl
3498300d87 libhtp: New package
This is build and runtime dependency for suricata.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-29 09:45:05 +02:00
Stefan Schantl
91cc908f84 yaml: New package
This is a build and runtime dependency for suricata.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-29 09:44:52 +02:00
Stefan Schantl
434001d0a0 IDS: Rework error and log handling in ids-functions.pl
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-28 16:34:50 +02:00
Stefan Schantl
02844177af IDS: Introduce settingsdir variable
The $settingsdir variable is declared in the ids-functions.pl and used to to
store the path where the various files which contains the settings for the IDS and
oinkmaster is located.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-27 07:58:23 +02:00
Stefan Schantl
298ef5bafa IDS: Move rulepath declaration to ids-functions.pl
This will help if the path ever changed. Also remove hard coded rulepath
from oinkmaster call.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-26 15:56:47 +02:00
Michael Tremer
a580a31c0f core123: Ship and restart squid and apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-26 14:46:53 +01:00
Stefan Schantl
eb5592c1ce ids-functions.pl: Also log errors to syslog
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-26 11:59:15 +02:00
Stefan Schantl
0e40e1e772 ids-functions.pl: Use pure perl to log oinkmaster result to syslog
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-26 11:58:54 +02:00
Stefan Schantl
7791079275 ids-functions.pl: Make variables globally accessible
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-26 11:58:39 +02:00