webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-21 16:32:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
14,498 Commits 2 Branches 1 Tag
c24bb323e129e047fae0de03383d5e7aeed1825d
Commit Graph

7304 Commits

Author SHA1 Message Date
Arne Fitzenreiter
c24bb323e1 core144: add bind 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 19:14:58 +00:00
Arne Fitzenreiter
2d52362dcb core144: add squid 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 19:13:33 +00:00
Arne Fitzenreiter
2399b70dc2 openssl: update rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 16:51:53 +02:00
Arne Fitzenreiter
a95c8b9781 core144: ship /etc/os-release 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 13:52:01 +00:00
Arne Fitzenreiter
83cee5f02e core144: add openssl 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 13:50:43 +00:00
Arne Fitzenreiter
88ba9a2480 core144: remove gcc go binary and libs 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:41:09 +00:00
Michael Tremer
20253656fc Add /etc/os-release 
This file is being read by some packages to find out on what
distribution they are running on.

This file needs to be included in every Core Update.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:27:50 +00:00
Michael Tremer
6b75121120 gcc: Drop Go on i586 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:51 +00:00
Michael Tremer
6d5e9f40f8 gcc: Drop Go on armv5tel 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:42 +00:00
Michael Tremer
c22cee9288 gcc: Drop Go on aarch64 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:34 +00:00
Michael Tremer
d2315d00c2 Package the official Go compiler 
Since Go has a horrible build system which requires a Go
compiler to build the Go compiler and takes a very long
time to compile, we are following Rust and are using the
"official" pre-compiled release tarball.

We no longer ship the Go runtime, which mitigates the
risk of shipping any malware.

Because we currently only have one package using this
and which is only being compiled for x86_64, we are
only making Go available on this architecture.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:24:51 +00:00
Michael Tremer
eed179acdc gcc: Drop support for Go 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:24:38 +00:00
Arne Fitzenreiter
7f4780ba71 core144: add apache 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:22:57 +00:00
Matthias Fischer
fb241a29c5 apache: Update to 2.4.43 
For details see:
http://mirror.dkd.de/apache//httpd/CHANGES_2.4.43

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:19:25 +00:00
Arne Fitzenreiter
34b7b98616 core144: add dhcpcd initskript and user 
this commit also re/create the user after backup restore.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-19 17:39:47 +00:00
Arne Fitzenreiter
533c4312fa dhcpcd: create dhcpcd user and chroot folder 
dhcpcd 9.x adds privelege seperation by creating a chroot
and running parts of the client not as root.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-19 17:27:23 +00:00
Arne Fitzenreiter
296675c9ee Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2020-04-12 08:25:40 +02:00
Arne Fitzenreiter
f5dba19edf core144: add dhcpcd 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-12 08:18:51 +02:00
Arne Fitzenreiter
b3e2c3ce26 dhcpcd: update to 9.00 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-12 08:16:28 +02:00
Arne Fitzenreiter
89445161b0 core144: start update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-12 08:14:26 +02:00
Arne Fitzenreiter
975bd8bc17 Revert "Revert "OpenSSH: update to 8.2p1"" 
This reverts commit e7fcf874e7.
 2020-04-10 16:23:09 +02:00
Arne Fitzenreiter
e7fcf874e7 Revert "OpenSSH: update to 8.2p1" 
ssh skips login before asking for credentials at i586.

This reverts commit 3fd3f4de44.
 2020-04-09 20:26:33 +00:00
Arne Fitzenreiter
551bc48940 suricata: disable dns flood protection 
this causes errors in unbound and also other linux clients if
a dns rule triggers.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 15:48:20 +00:00
Arne Fitzenreiter
b8fcb49567 suricata: update ET rulesets sources for suricata 5 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 15:43:35 +00:00
Arne Fitzenreiter
e049d6fcbe core143: touch need reboot flag 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 07:43:50 +02:00
Arne Fitzenreiter
9246069398 pcengines-apu-firmware: update rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 15:14:39 +02:00
Arne Fitzenreiter
21be3871b9 core143: add zoneconf.cgi 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:59:32 +00:00
Arne Fitzenreiter
cce7aa9bb8 core143: add unbmound initskript 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:57:50 +00:00
Arne Fitzenreiter
e4013c9dab core143: add suricata http port changes 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:54:27 +00:00
Stefan Schantl
e698090e7f IDS: Dynamically generate and import the HTTP ports. 
With this commit suricata reads the HTTP port declarations from a newly
introduced external file
(/var/ipfire/suricata/suricata-http-ports.yaml).

This file dynamically will be generated. HTTP ports always are the
default port "80" and "81" for update Accelerator and HTTP access to the
WUI. In case the Web-proxy is used, the configured proxy port and/or Transparent
Proxy port also will be declared as a HTTP port and written to that file.

In case one of the proxy ports will be changed, the HTTP port file will
be re-generated and suricate restarted if launched. Also if an old
backup with snort will be restored the convert script handles the
generation of the HTTP ports file.

Finally the suricata-generate-http-ports-file as a tiny script which
simply generates the http ports file and needs to be launched during the
installation of a core update. (The script will no be required
anymore, so it could be deleted afterwards.)

Fixes #12308.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-06 14:04:00 +00:00
Stefan Schantl
6084e66e70 suricata.yaml: Re-add EVE log section. 
Hopefully the EVE log will display some more content when trying to
debug suricata events and rules.

Fixes #12315.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-06 14:03:26 +00:00
Arne Fitzenreiter
b563d5bd69 core143: add backup include and ids-functions 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:58:07 +00:00
Stefan Schantl
7b97359b99 IDS: Add GREEN and BLUE addresses to the list of DNS servers. 
Fixes #12349.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:35:08 +00:00
Stefan Schantl
92206da35a Backup: Add idsrules tarball. 
The tarball is required to generate and restore the IDS ruleset.

Fixes #12319.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:34:07 +00:00
Stefan Schantl
00a083aaf2 Backup: Add suricata rules-settings file. 
This file contains the configured ruleset and oinkcode settings and
therefore needs to be backuped and restored.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:33:45 +00:00
Arne Fitzenreiter
2f8a33e182 suricata: increase dns flood trigger 
on slow lines unbound trigger the floodprotection at init.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-02 16:31:18 +00:00
Arne Fitzenreiter
0b0a3634cd core143: stop/start updated services 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:59:42 +00:00
Arne Fitzenreiter
55f4de214f core143: add suricata.yaml 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:50:47 +00:00
Stefan Schantl
d383248063 Suricata: Add port 81 (UpdateAccelerator) to group of HTTP ports. 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:46:27 +00:00
Arne Fitzenreiter
006b79aaa9 core143: add ids.cgi 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:42:55 +00:00
Michael Tremer
2ff56df4e0 strongswan: Build sha3 plugin 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:40:39 +00:00
Arne Fitzenreiter
3c90dd92a5 core143: add dma, mail.cgi and vpnmain.cgi 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-30 19:13:08 +00:00
Arne Fitzenreiter
37533b0dea core143: apply changed sysctl settings 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-30 17:09:34 +00:00
Peter Müller
29a8992b72 sysctl.conf: Turn on hard- and symlink protection 
Cc: Michael Tremer <michael.tremer@ipfire.org>
Cc: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-30 17:07:26 +00:00
Arne Fitzenreiter
2d599cca34 core143: add oinkmaster.conf 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-30 16:43:50 +00:00
Stefan Schantl
1d84b352df oinkmaster: Do not skip threshold.conf 
Fixes #12096.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-30 16:41:25 +00:00
Arne Fitzenreiter
2480c416d6 core143: set user of /var/spool/cron to cron 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-30 16:39:06 +00:00
Michael Tremer
e4a0b55881 fcron: Fix reloading crontab 
fcrontab -z fails on a freshly installed system since
/var/spool/cron is now owned by cron:cron and a temporary
file cannot be created.

This will have to be manually changed in the updater by
calling:

  chown cron:cron /var/spool/cron

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-30 16:37:38 +00:00
Arne Fitzenreiter
5192ceae53 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2020-03-29 06:35:21 +00:00
Arne Fitzenreiter
54e6ded417 smartmontools: update rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-29 06:34:18 +00:00