webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-15 13:32:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
14,097 Commits 2 Branches 1 Tag
c8dcd46537bebe4f59cd7c22d09c45e98bfecb1f
Commit Graph

3630 Commits

Author SHA1 Message Date
Jonatan Schlag
afb143bd7c clamav: move initscripts to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 17:37:23 +01:00
Jonatan Schlag
db8a26e718 nfs: move initscripts to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 16:15:06 +01:00
Jonatan Schlag
1f68460f5a watchdog: move initscripts to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 16:11:57 +01:00
Jonatan Schlag
c8b7d517d0 Libvirt: move initscripts to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 13:16:12 +01:00
Jonatan Schlag
6a4df2fd3b Move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 13:13:49 +01:00
Jonatan Schlag
be2732c217 Install initscript with the new macro 
- Move the cups initscript to src/initscripts/packages
 2017-02-22 12:26:54 +01:00
Jonatan Schlag
38888b3d92 Add new make macro for installing initscripts 
We also move the initscript for also to src/initscripts/packages
and use this new macro to install the initscript
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 12:25:42 +01:00
Jonatan Schlag
629fcb1d47 Move network initscripts to src/initscripts/networking 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 11:57:20 +01:00
Jonatan Schlag
33f53d55cc Move all initscripts for the system to src/initscripts/system 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 11:54:00 +01:00
Jonatan Schlag
c6060f2dcf Move the initscript of the hostapd package into the packages directory 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 11:24:00 +01:00
Jonatan Schlag
cb144b4f8a Move the initscripts of the libvirt package into the packages directory 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 11:21:17 +01:00
Jonatan Schlag
1d8dab5404 Move the initscript of the cups package into the packages directory 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 11:18:36 +01:00
Jonatan Schlag
8bc8c282c9 Move all Initscripts of the system, into an extra directory 
Till now all init scripts going into src/initscripts/init.d so they are
installed by the lfs file initscripts. Because of that they also appear
in the rootfile of the "package" initscripts.

This has some disadvantages:
- the initscripts of the packages appear in the 3 rootfiles (one for
each arch) which are annoying because for every package with an
initscript 4 rootfiles (the 3 of the initscript package + the rootfile
of the package) are important.
- The rootfiles for a package are installed by lfs/initscripts but this
should happen only in the build of the package

To solve this issues all rootfiles for the core system are moved into
src/initscripts/init.d/common. Only the initscript in this directory are
installed by lfs/initscripts. So all initscripts for packages are
located in src/initscripts/init.d and are not installed by
lfs/initscripts.
So only the initscripts of the system appear in the 3 rootfiles of the
initscripts package. The initscript of a package appear only in the
rootfile of the package. This makes the maintaining of initscript
easier.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-02-22 10:23:10 +01:00
Matthias Fischer
e01b933cc2 squid 3.5.24: latest patch (14142) 
(Fixed: wrong squid version from previous commit)

"Bump SSL client on [more] errors encountered before ssl_bump evaluation"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-02-15 14:55:26 +00:00
Arne Fitzenreiter
91648bd166 kernel: updated to 4.9.8 
at the moment its only for x86_64 and layer7 is disabled because it crashs.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-02-12 19:58:43 +01:00
Arne Fitzenreiter
c18f333f9c udev: fix build with kernel 4.9 headers 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-02-12 19:51:22 +01:00
Arne Fitzenreiter
d93a661b2d ppp: fix build with kernel 4.9 headers 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-02-12 19:50:15 +01:00
Arne Fitzenreiter
24247159dd postfix: fix build with kernel 4.9 headers 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-02-12 19:48:53 +01:00
Arne Fitzenreiter
a58a2e67ec net-tools: fix build with kernel 4.9 headers 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-02-12 19:47:59 +01:00
Matthias Fischer
a0a33a8f10 BUG11271 / GeoIP: Download GeoIP database via HTTPS 
For details see:
https://bugzilla.ipfire.org/show_bug.cgi?id=11271

Download GEoIP database per HTTPS download.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-02-04 13:31:35 +00:00
Matthias Fischer
48db07db14 squid: Update to 3.5.24 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-29 19:27:07 +00:00
Arne Fitzenreiter
ba957627e2 kernel: support for newer eMMC modules 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-01-19 18:21:38 +01:00
Matthias Fischer
d38c8a6794 GeoIP: Update to 1.25 / changed database path 
Database path changed to '/usr/share/GeoIP'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-16 16:54:59 +00:00
Michael Tremer
5056b4f104 Drop mldonkey files 
The packages has been dropped years ago. However, some
files remained in the source tree.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-16 16:53:35 +00:00
Jonatan Schlag
b1b6e9f396 Fix the backup iso script once again. 
In commit 391560854f was an error in the
case statement. On i?586 the check fails. Removing the "" fixes the
error.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-04 11:21:28 +00:00
Jonatan Schlag
391560854f Improvement of backup iso script 
The backup iso script did not check the arch of the host. On x86_64 host
the wrong iso was downloaded.

Furthermore, there were some if clauses which could cause trouble which
I also tried to improve.
(For example: -e is valid if we have a directory or a file, but we want
to check for a file only )

Fixes: 11258

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-02 19:12:14 +00:00
Matthias Fischer
22dbd018f1 squid 3.5.23: latest patch (14129) 
Seems to be a serious one.
"Bug #3940 pt2: Make 'cache deny' do what is documented".
(Duplicate of Bug 3783)

For details see:

http://bugs.squid-cache.org/show_bug.cgi?id=3940

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-29 15:37:07 +00:00
Arne Fitzenreiter
e11038354b hwdata: update databases 
pci.ids 2016.12.19
usb.ids 2016.12.05

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-12-22 21:53:39 +01:00
Matthias Fischer
a1bc7f3ab9 squid: Update to 3.5.23 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-17 17:26:38 +00:00
Matthias Fischer
3c22a549ab squid 3.5.22: latest patches (14123-14126) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-17 17:26:36 +00:00
Michael Tremer
b2f96a94e3 unbound: EDNS buffer size defaults to 4096 
If this is changed, a warning will be shown.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-14 12:51:46 +00:00
Michael Tremer
8f3034d0db unbound: Test for working EDNS buffer size and adjust accordingly 
Some networks have equipment that fails to forward DNS queries
with EDNS and the DO bit set. They might even lose the replies.

This patch will adjust unbound so that it will not try to receive
too large replies and falls back to TCP earlier. This creates
some higher load on the DNS servers but at least gives us
working DNS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-14 12:45:07 +00:00
Matthias Fischer
a5f09f8e5b squid 3.5.22: latest patches (14119-14122) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-12 11:20:21 +00:00
Matthias Fischer
4ce082a4dd squid 3.5.22: latest patches (14114-14118) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-06 14:19:20 +00:00
Matthias Fischer
262c48be60 squid 3.5.22: latest patches (14103-14113) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-06 14:19:12 +00:00
Matthias Fischer
cc8f79f95f squid 3.5.22: latest patches (14100-14102) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-06 14:19:06 +00:00
Matthias Fischer
cc2a2209d8 squid 3.5.22: latest patch (14099) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-06 14:19:03 +00:00
Michael Tremer
2aa15dee66 unbound: Fix DNS forwarder test 
The previous version aborted when the validation test
suceeded, but this is not always sufficient in case a
provider filters any DNSKEY, DS or RRSIG records.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-01 17:13:07 +00:00
Michael Tremer
cd812106b1 unbound: Do not try removing forwarders when unbound is not running 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-29 12:28:23 +00:00
Michael Tremer
adb11e90df Always enable asynchronous logging 
This patch always enables asynchronous logging which slows
down the system a lot on slow storage and some virtual environments.

It also removes the configuration options in the web
user interface, since this is not configurable any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-29 12:18:41 +00:00
Stefan Schantl
0b5b6a594c ddns: Import patches for schokokeks.org support. 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-28 21:50:24 +00:00
Arne Fitzenreiter
34f6a3f1b5 Merge remote-tracking branch 'origin/core107' 2016-11-04 20:52:00 +01:00
Arne Fitzenreiter
2d646e9838 ntp: init with hardcoded ip if dns not work 
DNSSec need the correct time to validate the zones so we need
a workaround to init the time without dns.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-11-04 19:31:07 +01:00
Michael Tremer
7ebc0a16e2 unbound: Allow list of INSECURE_ZONES being set in sysconfig 
A list of DNS zones can be given for which DNSSEC validation
will be disabled.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-04 17:43:05 +00:00
Michael Tremer
3ddad158cd unbound: Allow recursion from everywhere 
Users use the IPFire DNS service from VPNs and other
routed networks.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-04 17:08:13 +00:00
Arne Fitzenreiter
2872f345b0 guardian: add path to update-lang-cache 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-11-03 06:51:49 +01:00
Arne Fitzenreiter
f8571e07be guardian: add languange cache regeneration at (un)install 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-11-02 20:26:58 +01:00
Michael Tremer
a6dcc5bb77 unbound: Fix for DNS forwarding of .local zones 
These are traditionally used for Windows domains and should not
be used for that. However if they are used like this, DNSSEC
validation cannot be used.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-02 15:51:49 +00:00
Arne Fitzenreiter
4bdbf22ee4 kernel: fix CVE-2016-5159 (Dirty COW) 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-10-22 20:20:22 +02:00
Arne Fitzenreiter
ed7a7f77db kernel: add support aes-ni support for aes-192 and 256 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-10-22 16:52:40 +02:00