webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 11:13:24 +02:00
Code Issues Packages Projects Releases Wiki Activity
12,181 Commits 2 Branches 1 Tag
cc60d3dfd3cd6ae9d38470d40edd646691e422ac
Commit Graph

6006 Commits

Author SHA1 Message Date
Michael Tremer
b4208f1845 core123: Ship updated sysctl.conf 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-03 10:33:23 +01:00
Peter Müller
373590b7c3 hide kernel addresses in /proc 
Make sure kernel address space is hidden from files somewhere
in /proc . This reduces attack surface and partially addresses #11659.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-03 10:32:56 +01:00
Michael Tremer
a65d07ec6d core123: Ship updated usbutils 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-03 10:32:43 +01:00
Michael Tremer
b06e1f696d core123: Ship updated GeoIP.dat 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-03 10:32:08 +01:00
Michael Tremer
571cfa9718 multipath-tools: Update to 0.7.7 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-02 19:10:36 +01:00
Arne Fitzenreiter
cf7a7a874f Merge remote-tracking branch 'origin/master' into aarch64 2018-07-02 19:07:22 +01:00
Michael Tremer
4d2c384543 core123: Ship changed vpnmain.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 13:34:56 +01:00
Michael Tremer
54e3be22f2 core123: Ship updated packages and files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 13:34:19 +01:00
Peter Müller
352796cad7 lynis: update to 2.6.4 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 12:36:16 +01:00
Peter Müller
df5cc48dd6 update StrongSwan to 5.6.3 
This also takes advantage of changed crypto plugins (see first
patch) and updates the rootfile.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 12:36:11 +01:00
Peter Müller
0779907e1b libgcrypt: update to 1.8.3 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 12:36:09 +01:00
Matthias Fischer
79d32988c5 unbound: Update to 1.7.3 
For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 12:36:04 +01:00
Peter Müller
c6e5fcdf12 conntrack-tools: update to 1.4.5 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 12:35:54 +01:00
Peter Müller
eeab80f8dc libnetfilter_conntrack: update to 1.0.7 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 12:35:53 +01:00
Peter Müller
733fae2abe iptables: update to 1.6.2 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 12:35:52 +01:00
Michael Tremer
080e79f149 Don't show proxy configuration pages when GREEN is not available 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 12:21:59 +01:00
Michael Tremer
dc845b6c81 AWS: Hide certain things on the web UI 
Those are practically unusable on AWS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 12:15:00 +01:00
Michael Tremer
475ae4b3db firewall: Suppress more warnings when initialising without GREEN 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-07-01 11:49:57 +01:00
Michael Tremer
a1c5ceeb34 nsswitch.conf: Use nss-myhostname to resolve local hostname 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-30 19:56:56 +01:00
Michael Tremer
4e9000b4d8 nss-myhostname: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-30 19:51:38 +01:00
Arne Fitzenreiter
4838034131 random: update initskript for machines with low entropy 
the script wait until crng is correct initialized before restore the
random seed and make some disc io to work around low entropy at boot
on some machines. Not really a fix but it should be better than reverting
CVE-2018-1108 fixes from kernel.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-28 20:48:58 +02:00
Stefan Schantl
74c193f266 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-06-27 19:33:43 +02:00
Michael Tremer
0009de91e8 Ship default settings for language, theme, etc. in all images 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-27 09:59:47 +01:00
Michael Tremer
bd3bcb45d6 AWS: Import aws setup script 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-25 10:55:39 +01:00
Michael Tremer
563c502163 dhcp: Ship dhclient 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-25 10:54:36 +01:00
Michael Tremer
3483602929 ssh: Update default configuration 
This patch removes an old switch to enable SSH 1 and
makes port 22 the default port.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-25 10:53:53 +01:00
Michael Tremer
1c21ebf8d5 Add initscript that automatically configures IPFire on AWS EC2 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-21 16:45:40 +01:00
Arne Fitzenreiter
5b17da41c1 kernel: add config for aarch64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-21 06:20:35 +01:00
Arne Fitzenreiter
2bd9316d9d rpi-firmware: build for aarch64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-21 06:17:49 +01:00
Arne Fitzenreiter
963f6e973a u-boot: add config for aarch64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-21 06:12:59 +01:00
Michael Tremer
bc91a66281 core123: Ship updated iana-etc 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-19 11:34:38 +01:00
Erik Kapfer
823c6d270a libstatgrab: Update tp 0.91 
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-19 11:33:51 +01:00
Michael Tremer
1feef6be7c core123: Ship /var/ipfire/backup/exclude 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-19 11:31:01 +01:00
Erik Kapfer
291bfda71e backup: Exclude OpenVPNs ovpn.cnf from backup 
This fixes also bug #11773

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-19 11:30:40 +01:00
Michael Tremer
b1f4acadde core123: Ship updated gnupg 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-19 11:30:26 +01:00
Arne Fitzenreiter
9f73293568 core122: run sensors-detect with new kernel 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-19 11:02:51 +02:00
Arne Fitzenreiter
d2f0bae8cb core121/122: update needed diskspace 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-19 10:58:47 +02:00
Michael Tremer
28aacf565b Start Core Update 123 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-18 16:43:04 +01:00
Erik Kapfer
7ea54fee01 ipset: Update to 6.38 
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-18 15:06:22 +01:00
Erik Kapfer
e64526f952 mtr: Update to 0.92 
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-18 14:12:43 +01:00
Peter Müller
dec940e157 tzdata: update to 2018e 
Some lines in the rootfile were sort incorrectly, this has been fixed.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-17 18:20:08 +01:00
Peter Müller
c069312790 coreutils: update to 8.29 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-17 18:20:07 +01:00
Peter Müller
ba05c8af80 libgcrypt: update to 1.8.2 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-17 18:20:06 +01:00
Peter Müller
770b458766 attr: fix rootfile 
There was a man page missing in the attr rootfile.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-17 18:20:03 +01:00
Peter Müller
7a3772381f unbound: update to 1.7.2 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-06-17 18:19:56 +01:00
Arne Fitzenreiter
a45c7981df core122: update space req for pae kernel 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-16 15:44:11 +02:00
Arne Fitzenreiter
8c67e13fab core122: install updated grub 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-16 13:26:54 +02:00
Arne Fitzenreiter
78aaf71665 core122: add missing "then" at microcode reload 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-16 11:45:32 +02:00
Arne Fitzenreiter
458c7d36cc core-updates: don't restart pakfire at error 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-16 11:36:06 +02:00
Arne Fitzenreiter
a97d2fb794 core122: add code needed for kernel update 
force reinstall pae kernel,
update /boot/uenv.txt

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-06-15 09:24:50 +02:00