webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-26 19:00:34 +02:00
Code Issues Packages Projects Releases Wiki Activity
14,587 Commits 2 Branches 1 Tag
dbdfd030b4c195c2aa7e4b91f3f2b4ce280604f1
Commit Graph

14587 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Tremer
c22cee9288 gcc: Drop Go on aarch64 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:34 +00:00
Michael Tremer
0c4cd7f393 amazon-ssm-agent: Bump version to ship package built with golang 
gccgo compiles this, but unfortunately the binaries malfunction
sometimes. golang generates a bug-free binary.

https://github.com/aws/amazon-ssm-agent/issues/271

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:25 +00:00
Michael Tremer
8bded835a2 amazon-ssm-agent: Remove temporary shared files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:15 +00:00
Michael Tremer
3a56d70ce7 strip: Do not try to strip Go binaries 
There is loads of stuff for PowerPC and other architectures
in the directory which we cannot strip. Therefore we ignore
the whole directory.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:02 +00:00
Michael Tremer
d2315d00c2 Package the official Go compiler 
Since Go has a horrible build system which requires a Go
compiler to build the Go compiler and takes a very long
time to compile, we are following Rust and are using the
"official" pre-compiled release tarball.

We no longer ship the Go runtime, which mitigates the
risk of shipping any malware.

Because we currently only have one package using this
and which is only being compiled for x86_64, we are
only making Go available on this architecture.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:24:51 +00:00
Michael Tremer
eed179acdc gcc: Drop support for Go 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:24:38 +00:00
Michael Tremer
b4863d7d14 Config: Set some Go environment variables 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:24:25 +00:00
Arne Fitzenreiter
7f4780ba71 core144: add apache 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:22:57 +00:00
Matthias Fischer
fb241a29c5 apache: Update to 2.4.43 
For details see:
http://mirror.dkd.de/apache//httpd/CHANGES_2.4.43

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:19:25 +00:00
Arne Fitzenreiter
34b7b98616 core144: add dhcpcd initskript and user 
this commit also re/create the user after backup restore.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-19 17:39:47 +00:00
Arne Fitzenreiter
533c4312fa dhcpcd: create dhcpcd user and chroot folder 
dhcpcd 9.x adds privelege seperation by creating a chroot
and running parts of the client not as root.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-19 17:27:23 +00:00
Arne Fitzenreiter
18136c5ce9 dhcpcd: new pid path for dhcpcd 9.x 
dhcpcd 9.x move the path of the pids to an own folder.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-19 17:27:12 +00:00
Matthias Fischer
03e4f8d60e dhcpcd: Update to 9.0.1 
For details see:
https://roy.marples.name/archives/dhcpcd-discuss/0002921.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-16 05:42:58 +00:00
Arne Fitzenreiter
651fa25f8f haproxy: update config file 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-14 15:30:51 +00:00
Michael Tremer
f6a92fd856 haproxy: Update to 2.1.4 
This is a security release:
  https://www.mail-archive.com/haproxy@formilux.org/msg36876.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-14 15:23:06 +00:00
Arne Fitzenreiter
b5fe45bbbc core143: disable vnstat ramdisk before clean tag file 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-14 09:55:29 +00:00
Arne Fitzenreiter
296675c9ee Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2020-04-12 08:25:40 +02:00
Arne Fitzenreiter
f5dba19edf core144: add dhcpcd 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-12 08:18:51 +02:00
Arne Fitzenreiter
b3e2c3ce26 dhcpcd: update to 9.00 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-12 08:16:28 +02:00
Arne Fitzenreiter
89445161b0 core144: start update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-12 08:14:26 +02:00
Arne Fitzenreiter
b14b37ba67 OpenSSH: fix login on i?86 
glibc calls clock_nanosleep_time64 syscall even if it not defined in
the headers for this arch and the seccomp filter kills the process
with because an unknown syscall.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-10 21:41:14 +02:00
Arne Fitzenreiter
975bd8bc17 Revert "Revert "OpenSSH: update to 8.2p1"" 
This reverts commit e7fcf874e7.
 2020-04-10 16:23:09 +02:00
Arne Fitzenreiter
e7fcf874e7 Revert "OpenSSH: update to 8.2p1" 
ssh skips login before asking for credentials at i586.

This reverts commit 3fd3f4de44.
 2020-04-09 20:26:33 +00:00
Michael Tremer
5947f92a5a unbound: skip empty domains at local-data import 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-09 20:24:42 +00:00
Arne Fitzenreiter
551bc48940 suricata: disable dns flood protection 
this causes errors in unbound and also other linux clients if
a dns rule triggers.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 15:48:20 +00:00
Arne Fitzenreiter
b8fcb49567 suricata: update ET rulesets sources for suricata 5 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 15:43:35 +00:00
Arne Fitzenreiter
b518bee95c icinga: bump PAKVER 
some installations has a copy installed that still try to include
perl-5.12.3 libs.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 07:44:45 +02:00
Arne Fitzenreiter
e049d6fcbe core143: touch need reboot flag 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 07:43:50 +02:00
Arne Fitzenreiter
9246069398 pcengines-apu-firmware: update rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 15:14:39 +02:00
Arne Fitzenreiter
16b499c4b9 pcengines-apu-firmware: fix lfs file 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 11:15:03 +02:00
Arne Fitzenreiter
21be3871b9 core143: add zoneconf.cgi 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:59:32 +00:00
Michael Tremer
bb90622c2c zoneconf.cgi: Skip checks for non-existing zones 
On systems with RED on PPP and no BLUE or ORANGE zones,
there would always be an error when handling non-existant input.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:58:48 +00:00
Arne Fitzenreiter
154bb705b1 pcengines-apu-firmware: update to v4.11.0.5 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:58:34 +00:00
Arne Fitzenreiter
cce7aa9bb8 core143: add unbmound initskript 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:57:50 +00:00
Michael Tremer
1b6b8d97aa unbound: Set domains with local data into type transparent mode 
Records which are from the same domain than the IPFire hostname
might not be returned by unbound. This change explicitely instructs
unbound to check local data before checking the global DNS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:55:31 +00:00
Arne Fitzenreiter
e4013c9dab core143: add suricata http port changes 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:54:27 +00:00
Stefan Schantl
e698090e7f IDS: Dynamically generate and import the HTTP ports. 
With this commit suricata reads the HTTP port declarations from a newly
introduced external file
(/var/ipfire/suricata/suricata-http-ports.yaml).

This file dynamically will be generated. HTTP ports always are the
default port "80" and "81" for update Accelerator and HTTP access to the
WUI. In case the Web-proxy is used, the configured proxy port and/or Transparent
Proxy port also will be declared as a HTTP port and written to that file.

In case one of the proxy ports will be changed, the HTTP port file will
be re-generated and suricate restarted if launched. Also if an old
backup with snort will be restored the convert script handles the
generation of the HTTP ports file.

Finally the suricata-generate-http-ports-file as a tiny script which
simply generates the http ports file and needs to be launched during the
installation of a core update. (The script will no be required
anymore, so it could be deleted afterwards.)

Fixes #12308.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-06 14:04:00 +00:00
Stefan Schantl
6084e66e70 suricata.yaml: Re-add EVE log section. 
Hopefully the EVE log will display some more content when trying to
debug suricata events and rules.

Fixes #12315.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-06 14:03:26 +00:00
Stefan Schantl
1622e5c1f3 ids.cgi: Fix logic if suricata needs to be restarted. 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-06 14:02:59 +00:00
Arne Fitzenreiter
b563d5bd69 core143: add backup include and ids-functions 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:58:07 +00:00
Stefan Schantl
7b97359b99 IDS: Add GREEN and BLUE addresses to the list of DNS servers. 
Fixes #12349.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:35:08 +00:00
Stefan Schantl
92206da35a Backup: Add idsrules tarball. 
The tarball is required to generate and restore the IDS ruleset.

Fixes #12319.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:34:07 +00:00
Stefan Schantl
00a083aaf2 Backup: Add suricata rules-settings file. 
This file contains the configured ruleset and oinkcode settings and
therefore needs to be backuped and restored.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:33:45 +00:00
Arne Fitzenreiter
2f8a33e182 suricata: increase dns flood trigger 
on slow lines unbound trigger the floodprotection at init.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-02 16:31:18 +00:00
Arne Fitzenreiter
702b59cd02 paks: fix meta size entry 
remove the doublequotes around the size because pakfire not
accept this.

fixes: #12348

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-02 16:28:39 +00:00
Arne Fitzenreiter
0b0a3634cd core143: stop/start updated services 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:59:42 +00:00
Arne Fitzenreiter
55f4de214f core143: add suricata.yaml 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:50:47 +00:00
Peter Müller
8bf1c9f65d OpenSSL: update to 1.1.1f 
Fixes #12345 (yes, that's the real bug ID :-) )

Cc: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:46:55 +00:00
Stefan Schantl
d383248063 Suricata: Add port 81 (UpdateAccelerator) to group of HTTP ports. 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:46:27 +00:00
Arne Fitzenreiter
006b79aaa9 core143: add ids.cgi 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-01 14:42:55 +00:00