Commit Graph

12423 Commits

Author SHA1 Message Date
Michael Tremer
c19d29f701 Revert "haproxy: Make /dev/log available in chroot"
This reverts commit 699f0aa710.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-07 20:07:53 +00:00
Michael Tremer
9f60aa9679 syslog: Listen to network and block access from anywhere but localhost
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-07 20:07:53 +00:00
Arne Fitzenreiter
6104f2e816 backupiso: fix boot on EFI
the grub on EFI serch the config on volume "IPFire 2.21 arch"
so the custom "ipfire backup ..." volume name is not working
anymore.
This is now fixed and a backup-version.media tag will added.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-11-07 19:16:57 +01:00
Arne Fitzenreiter
84902aa499 backup: fix backupiso mastering
fixes: #11916

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-11-04 10:16:26 +01:00
Arne Fitzenreiter
912c590bb6 clamav: fix rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-11-04 08:41:43 +01:00
Arne Fitzenreiter
e9dbafa8a1 freeradius: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-11-03 21:08:52 +01:00
Arne Fitzenreiter
582775709f clamav: rootfile update 2018-11-03 21:08:30 +01:00
Arne Fitzenreiter
966b92a83b glibc: rootfile update armv5tel
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-11-03 12:09:47 +01:00
Arne Fitzenreiter
1e2e78e6ff Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2018-11-02 15:16:22 +00:00
Arne Fitzenreiter
5edc6b10e0 directfb: fix comile on 32bit arm
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-11-02 15:14:11 +00:00
Michael Tremer
898b355abd core125: Ship updated ca-certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:31:45 +00:00
Peter Müller
6eb221c2e5 update ca-certificates CA bundle
Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

The second version of this patch superseds the first one and
bumps the LFS version of ca-certificate, too. Me stupid...

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:31:30 +00:00
Peter Müller
2e0660f9ce Unbound: output statistics daily instead of just on shutdown
Currently, Unbound only prints statistics if it is being shutdown
(mostly because of a machine reboot). This makes detecting DNS
anomalies hard as no intermediate statistic result is being logged.

This patch changes Unbound's behaviour in order to log statistics
every 86,400 seconds (i.e. 24 hours).

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:31:09 +00:00
Michael Tremer
c22498887d core125: Ship updated ids.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:30:49 +00:00
Peter Müller
0c451a4a32 fix downloading Snort rules if behind upstream proxy
Currently, the wget call only uses proxy information for HTTP.
Since rulesets are downloaded via HTTPS now, the same information
also needs to be applied for HTTPS.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:30:08 +00:00
Michael Tremer
c3070d32e3 core125: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:29:48 +00:00
Matthias Fischer
e2bd68dfad squid 3.5.28: latest patches (01-02)
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:29:05 +00:00
Michael Tremer
4f10c0b3a3 backup: Fix expanding glogging
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:27:09 +00:00
Arne Fitzenreiter
a4e5b80b91 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2018-10-31 18:44:43 +01:00
Michael Tremer
c7b7a70deb backup: Rewrite backup script
The old script was quite messy and written in perl although
it was only calling shell commands.

This version is now written in shell although keeping the .pl
file suffix and is a drop-in replacement.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 14:22:56 +00:00
Michael Tremer
c81dffc942 core125: Ship updated backup include
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 12:55:55 +00:00
Michael Tremer
ac1fc6ea5e backup: Include addon backups in main backup
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 12:10:18 +00:00
Michael Tremer
33d2002767 backup: Include custom include/exclude files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 12:08:57 +00:00
Michael Tremer
b3cc1932e4 Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 10:56:24 +00:00
Michael Tremer
0faf9c7869 core125: Ship JSON-C
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 09:32:01 +00:00
Michael Tremer
ed1349aa76 Merge remote-tracking branch 'ms/frr' into next 2018-10-31 09:31:38 +00:00
Michael Tremer
58e0aa18cc frr: Add backup include file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-31 09:30:44 +00:00
Michael Tremer
e1def10e29 frr: Set configuration file permissions correctly
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-30 17:32:48 +00:00
Michael Tremer
ebd6fe2b50 frr: Add initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-30 17:27:28 +00:00
Michael Tremer
a90f7faf78 frr: Install users and make backup when package is installed/uinstalled
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-30 17:20:37 +00:00
Arne Fitzenreiter
1b24eec502 toolchain: bump version
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-10-30 18:15:14 +01:00
Arne Fitzenreiter
ea4e88cbbe perl: fix toolchain build
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-10-30 18:13:45 +01:00
Michael Tremer
feaa3d91bd frr: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-30 16:55:42 +00:00
Arne Fitzenreiter
ebaecf2c96 Revert "make.sh: Log into subdirectory for each architecture"
This reverts commit 35ce207ff7.
2018-10-30 15:07:12 +01:00
Michael Tremer
7261a4987d Update translations
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 13:43:37 +00:00
Stéphane
fc95fb0303 French translation improvements
- Adding missing syntaxes
- Improved syntax translation
- Minor corrections (spelling, conjugation)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 13:43:21 +00:00
Michael Tremer
35ce207ff7 make.sh: Log into subdirectory for each architecture
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 13:42:51 +00:00
Michael Tremer
81e838ebde tzdata: Update to 2018g
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:30:12 +00:00
Michael Tremer
92505ef003 Drop paxctl
We do not have grsecurity and more and there is no point
in shipping this tool.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:27:34 +00:00
Michael Tremer
aeefbca730 clamav: Move database directory to /var partition
The clamav database is quite large and occupies valuable
space on the root partition that on older systems is only
2GB large. This change moves the virus definition database
to the /var partition which is larger and supposed to hold
data like this anyway.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:25:24 +00:00
Michael Tremer
2f1d27e3d8 kmod: Build with support for XZ compressed modules
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:14:45 +00:00
Michael Tremer
3ece78597a make.sh: Build xz earlier in the build process
XZ compression is becoming more popular and being used
by various other libraries and should therefore be available
to be linked.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:12:43 +00:00
Michael Tremer
1c053ccee2 strongswan: Update to 5.7.1
Fixes security vulnerabilities: CVE-2018-16151, CVE-2018-16152 and
CVE-2018-17540.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:10:58 +00:00
Michael Tremer
5a40f7aebb haproxy: Update to 1.8.14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 11:02:08 +00:00
Michael Tremer
3ed2de1251 Merge branch 'haproxy' into next 2018-10-29 11:59:18 +01:00
Michael Tremer
02776a0dc2 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-10-29 10:51:44 +00:00
Michael Tremer
65ff71dc06 Merge branch 'toolchain' into next 2018-10-29 10:51:00 +00:00
Michael Tremer
aba59b7c76 Merge branch 'glibc-2.28' into next 2018-10-29 10:50:56 +00:00
Michael Tremer
9040a476cc core125: Ship glibc for i586
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 10:50:35 +00:00
Michael Tremer
f4027e9b41 Remove removed files from rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-29 10:47:10 +00:00