Commit Graph

8474 Commits

Author SHA1 Message Date
Michael Tremer
b6bfdcc2cd core158: Uninstall libupnp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:41:39 +00:00
Peter Müller
06f03f5bbb Drop libupnp
This library has received no attention within the last three years. By
design, UPnP is a security risk on any firewall, and and outdated
version of a UPnP library definitely is.

This patch therefore drops libupnp completely.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:39:46 +00:00
Michael Tremer
a915cdd6c9 intltool: Move into the core system and don't ship any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:39:12 +00:00
Michael Tremer
cb69bf13ca Drop miniupnpd stuff from rootfiles and all systems
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:38:02 +00:00
Peter Müller
5f16813c8a miniupnpd: Delete files that would have become orphaned after deletion of miniupnpd add-on as well
This patch requires
https://patchwork.ipfire.org/project/ipfire/list/?series=2059 to be
applied in the first place.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:32:33 +00:00
Peter Müller
28cffbc51c Drop sendEmail add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:32:10 +00:00
Peter Müller
937748f96d Drop fbset
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Please note this patch does not remove fbset on existing installations,
that has to be done via the corresponding upgrade script.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:32:03 +00:00
Peter Müller
a5ee98176c Drop miniupnpd add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Frankly, if you need or use UPnP, you probably do not even need to _think_
about running a firewall...

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:43 +00:00
Peter Müller
e55b268a4b Drop SANE add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:18 +00:00
Peter Müller
86f5f42f6b Drop orphaned dependency "libsrtp"
This was solely needed by Asterisk and is no longer used anymore.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:03 +00:00
Peter Müller
a326c9a623 Drop Asterisk add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:30:48 +00:00
Peter Müller
04bd81530a Drop orphaned dependency add-on libmicrohttpd
This was solely needed by "motion". It can be safely removed now.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:30:21 +00:00
Peter Müller
a7da7bcb07 Drop motion add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:30:05 +00:00
Michael Tremer
43f7b1d7d2 core158: Ship IPsec changes for iOS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:28:38 +00:00
Michael Tremer
616d3bf9ac Merge remote-tracking branch 'ms/ipsec-ios' into next 2021-05-20 09:25:05 +00:00
Michael Tremer
9ae65c8e08 fireinfo: Update to 2.2.0
This release ports fireinfo to Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-18 13:52:11 +00:00
Michael Tremer
b4d83d1af3 Start Core Update 158
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-18 13:34:15 +00:00
Michael Tremer
d267131be3 Fix merge error in samba rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-18 12:51:59 +00:00
Michael Tremer
504e72e173 Merge branch 'next' 2021-05-18 09:33:05 +00:00
Adolf Belka
81fba41961 elfutils: Update to 0.184
- Update from 0.183 to 0.184
- Update rootfiles
- Changelog
     2021-05-10  Mark Wielaard  <mark@klomp.org>
	* configure.ac (AC_INIT): Set version to 0.184.
	* NEWS: Add libdw, translation and debuginfod-client entries.
     2021-03-30  Frank Ch. Eigler  <fche@redhat.com>
	* configure.ac: Look for pthread_setname_np.
     2021-02-17  Timm Bäder  <tbaeder@redhat.com>
	* configure.ac: Add -Wno-packed-not-aligned check.
     2021-02-17  Timm Bäder  <tbaeder@redhat.com>
	* configure.ac: Add -Wtrampolines check.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:51:32 +00:00
Adolf Belka
51128aa36d gdb: Update to 10.2
- Update from 10.1 to 10.2
- Update rootfiles
- Changelog
   GDB 10.2 brings the following fixes and enhancements over GDB 10.1:
    * PR remote/26614 (AddressSanitizer: heap-use-after-free of extended_remote_target in remote_async_inferior_event_handler)
    * PR gdb/26828 (SIGSEGV in follow_die_offset dwarf2/read.c:22950)
    * PR gdb/26861 (internal-error: void target_mourn_inferior(ptid_t): Assertion `ptid == inferior_ptid' failed. OS: Mac OSX Catalina; Compiler: GCC; Language: C)
    * PR gdb/26876 (gdb error: internal-error: Unknown CFA rule when debugging the linux kernel with qemu)
    * PR breakpoints/26881 (infrun.c:6384: internal-error: void process_event_stop_test(execution_control_state*): Assertion `ecs->event_thread->control.exception_resume_breakpoint != NULL' failed)
    * PR gdb/26901 (Array subscript fails with flexible array member without size)
    * PR tui/26973 (gdb crashes when not including the status window in a new layout)
    * PR python/26974 (Wrong Value.format_string docu for static members argument)
    * PR breakpoints/27009 ([s390] GDB branches randomly for BC instruction while displaced stepping)
    * PR tdep/27015 (ARC: "eret" value is collected from the wrong data in register cache)
    * PR backtrace/27147 ([GNU/Linux, sparc64] GDB is unable to print full stack trace (got "previous frame inner to this frame" errors))
    * PR rust/27194 (put rust demangler on 10.x branch)
    * PR threads/27239 (gdb/cp-support.c:1619:(.text+0x5502): relocation truncated to fit: R_X86_64_PC32 against undefined symbol `TLS init function for thread_local_segv_handler')
    * PR breakpoints/27330 (nextoverthrow.exp FAILs on arm-none-eabi)
    * PR symtab/27333 ([dwarf-5] abort on unhandled DW_TAG_type_unit in process_psymtab_comp_unit)
    * PR fortran/27341 ([dwarf-5] FAIL: gdb.fortran/function-calls.exp: p derived_types_and_module_calls::pass_cart_nd(c_nd))
    * PR tdep/27369 (ARC: Stepping over atomic instruction sequences loops infinitely)
    * PR build/27385 (Cannot compile arc.c with gcc-4.8 (error: no matching function for call to 'std::pair...'))
    * PR gdb/27435 (Attach on solaris segfaults GDB)
    * PR build/27535 (amd64-linux-siginfo.c fails to compile after updating to glibc-2.33 headers)
    * PR build/27536 (aarch64-linux-hw-point.c fails to compile after updating to glibc-2.33)
    * PR symtab/27541 (gdb crashes on "file -readnow")
    * PR gdb/27750 (local variables have wrong address and values on sparc64)
    * PR varobj/27757 (-var-list-children coredump)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:51:19 +00:00
Peter Müller
cd1f7722dc Core Update 157: Apply changed permissions to /srv/web/ipfire/cgi-bin/cachemgr.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:49:13 +00:00
Peter Müller
4dfde0c088 Core Update 157: Remove executable bit less ugly
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:49:07 +00:00
Peter Müller
07bf7d14d6 Core Update 157: Apply changed permissions to /var/ipfire/ovpn/ovpn-leases.db
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:49:05 +00:00
Peter Müller
60259fe135 Core Update 157: Apply changed permissions to /var/ipfire/updatexlrator/bin/
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:49:03 +00:00
Peter Müller
ef929318f6 Core Update 157: Apply changed permissions to /var/ipfire/urlfilter/bin/
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:49:01 +00:00
Peter Müller
c8874ee012 Core Update 157: Ship changed iputils due to /usr/bin/ping changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:48:57 +00:00
Peter Müller
e621c85c71 Core Update 157: /var/ipfire/fwhosts/icmp-types does not have to be executable
See commit 183ccaa5a5.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:48:56 +00:00
Peter Müller
becfea1d38 Core Update 157: Delete orphaned DMA mail box creation binary as well
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:48:55 +00:00
Peter Müller
b59bb1201a DMA: do not ship a binary for creating mail boxes
This is only needed in case of bounces generated by locally emitted
messages. We neither store these, nor do we create mail boxes on a
firewall. Safe to drop.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:48:54 +00:00
Peter Müller
09a2001d49 Core Update 157: Delete ssh-keysign binary
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:48:53 +00:00
Peter Müller
92c6c8d11d Core Update 157: remove SUID bit from /usr/bin/gpg
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:48:51 +00:00
Michael Tremer
83e5f67256 unbound-dhcp-leases-bridge: Fix exception when running without debug
Fixes: https://bugzilla.ipfire.org/show_bug.cgi?id=12622
Fixes: #12622
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 15:33:13 +00:00
Peter Müller
7bb9bbb732 OpenSSH: do not ship ssh-keysign anymore
To my surprise, this binary comes with suid flag set, and since we do
not have SSH key signing enabled, there is no need to ship it with
IPFire.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 14:07:33 +00:00
Arne Fitzenreiter
e982ae5fb1 python-docutils: drop python2 docutils
we merging from python2 to 3 and this is not needed anymore

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 13:22:55 +00:00
Arne Fitzenreiter
05fed71761 python3-docutils: build prior python3-daemon
python3-daemon has a builddepency to python3-docutils

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 13:22:45 +00:00
Adolf Belka
3a533f70a0 python-distutils-extra: Removal of this python2 module
- python-distutils-extra is linked to python-distutils which is no longer
   used as it has been replaced by setuptools.
- python-distutils-extra is currently from 2011 and the latest version
   is from 2016. No development occurring on this.
- No problem on a clean build with this module being removed.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 12:23:21 +00:00
Adolf Belka
05a8e4c71d python-distutils: Removal of this python2 module
- python-distutils has been replaced by setuptools.
- python-distutils was not being built anyway as it was not listed in
   make.sh
- lfs has missing sections. There are no source and no build sections

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 12:22:42 +00:00
Adolf Belka
49ee22fcac python-optional-src: Removal of this python2 module
- python-optional-src was not getting built anyway as it was not listed
   in make.sh
- lfs file was missing most of the standard content. No source info
   and no build instructions
- missing source file from IPFire source system
- grep on build/ found no dependencies on this module

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 12:22:28 +00:00
Adolf Belka
38b4dcd729 nmap: Migrate to python3
- Added PYTHON=python3 prior to configure. This then builds nmap with
   python3.
- ndiff is written as python2 only and currently no patches to make it
   work wih python3 have been accepted by the nmap team. It looks like ndiff
   will stay as it is for some time so ndiff will be removed from the nmap
   package install.
- Added --without-ndiff to configure so nmap is built without ndiff
- Updated rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 12:21:16 +00:00
Michael Tremer
13da37db56 core157: Ship sudo
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 11:59:16 +00:00
Arne Fitzenreiter
10ce44b0c6 kernel: update to 4.14.232
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 11:58:42 +00:00
Michael Tremer
954ea759d6 core157: Ship python3-daemon
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-14 13:30:47 +00:00
Michael Tremer
a8b1843bf7 unbound-dhcp-leases-bridge: Fix shebang
Reported-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-14 13:22:37 +00:00
Michael Tremer
0882b3e44e python-daemon: Port to Python 3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-14 13:22:09 +00:00
Michael Tremer
4b0d8ba79a core157: Ship unbound-dhcp-leases-bridge
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-14 11:54:50 +00:00
Michael Tremer
96c86cf621 unbound-dhcp-leases-bridge: Migrate to Python 3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-14 11:54:21 +00:00
Adolf Belka
35032d1db1 python-ipaddress: Remove this python2 module
- python-ipaddress is the python2 backport of the python3 built in
   ipaddress module. Therefore python-ipaddress is not needed with the
   move to try and remove python2
- Remove the lfs and rootfiles and adjust make.sh

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-14 11:54:14 +00:00
Adolf Belka
d55a968a72 python3-inotify: Update to 0.2.10 and convert to python3
- Update from 0.2.7 to 0.2.10
- Convert from python-inotify to python3-inotify
   make.sh, lfs & rootfiles
- Update rootfiles
- Changelog
  0.2.8: - We now just *skip* the event if not known
    - Implement InotifyTree and InotifyTrees as sub-classes of new BaseTree
      class
    - Made InotifyTree and InotifyTrees sub-classes of new base class
      BaseTree
    - Recursively watch a list of paths/trees
  0.2.9: - Added getter for Inotify object from tree objects
    - Added note to docs about race-conditions. Added small change for
      redundant adds.
    - Slightly reorganized documentation. Updated example.
    - Merge pull request #35 from dsoprea/dustin. Added extensive unit-test
      coverage. Closes all bug requests.
    - Added large amount of unit-test coverage.
       - Now handle rename-specific events.
       - Can now also ignore issues with new directories not existing if
         you're created *and* deleted or renamed a folder since the last
         time events were read.
       - Adjusted requirements for simplicity.
       - Added Python 3 compatibility.
       - Fixed Unicode support.
       - Can now provide `filter_predicate` to event_gen() to allow custom
         loop termination based on events.
       - We'll now terminate the loop when certain events are encountered.
         These events are passed into event_gen() as `terminal_events`. By
         default these are the IN_Q_OVERFLOW and IN_UNMOUNT types.
       - Fixes #28
       - Fixes #23
       - Fixes #22
       - Fixes #19
       - Fixes #16
       - Fixes #15
       - Fixes #5
    - Check presence of both glibc errno and musl libc err
    - Support for musl libc (Alpine Linux)
    - Merge pull request #27 from jessesuen/master. Support for musl libc
      (Alpine Linux)
    - Check presence of both glibc errno and musl libc err
    - Merge pull request #26 from hathcock/hathcock/issue-25. resolves #25,
      list of binary paths can't be logged with existing call
       - Support for musl libc (Alpine Linux)
       - Resolves #25, list of binary paths can't be logged with existing
         call
  0.2.10: - Merge pull request #34 from davidparsson/
            feature/support-moved-directories
      - Support MOVED_FROM and MOVED_TO in BaseTree
    - events: Now log event types from epoll vs data stream.
    - This release implicitly fixed the botched binary package released
      in 0.2.9

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-14 11:42:06 +00:00
Adolf Belka
3a61ae73fa python-six: Removal of python2 & 3 addon versions of six
- six is a python compatibility module to enable modules to run on
   both python2 and python3. The code from six has to be copied into
   any other module/project that is intending to use it.
- With the planned removal of python2 then neither version of this
   compatibility module is needed.
- Removal of the lfs and rootfiles. Although python-six is an addon
   its rootfile was installed into the common folder rather than the
   packages folder.
- Removal of the python-six and python3-six entries in make.sh

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-14 11:37:41 +00:00