]>
git.ipfire.org Git - people/pmueller/ipfire-2.x.git/log
Arne Fitzenreiter [Fri, 5 Apr 2019 05:46:34 +0000 (07:46 +0200)]
kernel: update to 4.14.110
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Thu, 4 Apr 2019 08:05:25 +0000 (09:05 +0100)]
core130: Do not search for sensors on AWS
This causes some i2c drivers to load and tons of error messages
being created in syslog. So we skip searching for any sensors
that do not exist.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 4 Apr 2019 10:52:30 +0000 (11:52 +0100)]
vpnmain.cgi: Set MTU to a default when editing an old connection
This field is required and therefore we need to initialize it
for old connections. Right now, the CGI throws an error message
when editing an existing connection without the MTU being filled
in.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 4 Apr 2019 01:07:16 +0000 (02:07 +0100)]
core130: Ship updated wget
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 4 Apr 2019 07:43:50 +0000 (09:43 +0200)]
wget: Update to 1.20.2
For details see:
https://fossies.org/linux/wget/ChangeLog
Excerpt from "NEWS":
* Changes in Wget 1.20.2
** NTLM authentication will retry under certain cases
** Fixed a buffer overflow vulnerability"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 4 Apr 2019 01:06:41 +0000 (02:06 +0100)]
core130: Ship updated nettle
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 4 Apr 2019 07:37:25 +0000 (09:37 +0200)]
nettle: Update to 3.4.1
For details see:
https://fossies.org/linux/nettle/ChangeLog
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 4 Apr 2019 01:05:52 +0000 (02:05 +0100)]
core130: Ship updated GnuTLS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 4 Apr 2019 07:31:00 +0000 (09:31 +0200)]
gnutls: Update to 3.6.7.1
For details see:
https://lists.gnupg.org/pipermail/gnutls-help/2019-March/004497.html
Please note:
A few days after the "3.6.7" release, "3.6.7.1" came out.
See:
https://www.gnupg.org/ftp/gcrypt/gnutls/v3.6/
But the compressed directory version is still versioned 3.6.7.
Because of this, the fourth (sub)-version number required some lfs adjustments.
And:
This version requires "nettle 3.4.1", which is sent in another commit.
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 4 Apr 2019 01:04:28 +0000 (02:04 +0100)]
core130: Ship updated apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 4 Apr 2019 07:15:00 +0000 (09:15 +0200)]
apache: Update to 2.4.39
For details see:
http://mirror.checkdomain.de/apache//httpd/CHANGES_2.4.39
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 4 Apr 2019 01:00:29 +0000 (02:00 +0100)]
freeradius: Fix extra whitespace
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Wed, 3 Apr 2019 21:53:22 +0000 (21:53 +0000)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Michael Tremer [Wed, 3 Apr 2019 21:52:04 +0000 (21:52 +0000)]
freeradius: handle special LDFLAGS to configure
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Tue, 2 Apr 2019 23:42:19 +0000 (00:42 +0100)]
pcengines-apu-firmware: New package
This package ships the latest BIOS for PC Engines APU boards.
With help of the firmware-update package, this can be very easily
updated when running IPFire.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 2 Apr 2019 23:33:44 +0000 (00:33 +0100)]
firmware-update: New package
This is a script that can update firmware on PC Engines APU systems
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 2 Apr 2019 23:26:13 +0000 (00:26 +0100)]
flashrom: New package
This is required to flash firmware
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 1 Apr 2019 20:58:23 +0000 (21:58 +0100)]
kernel: Disable some debugging in expactation to increase performance
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 1 Apr 2019 20:55:03 +0000 (21:55 +0100)]
kernel: Enable strict checks for /dev/mem
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 1 Apr 2019 20:35:56 +0000 (21:35 +0100)]
freeradius: Fix build on armv5tel
Reported-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 1 Apr 2019 15:53:50 +0000 (16:53 +0100)]
Update translations
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Mon, 1 Apr 2019 15:32:34 +0000 (17:32 +0200)]
IDS: Rename sourcefire VRT rulesets to Talos VRT rulesets
Fixes #12019
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 31 Mar 2019 16:36:44 +0000 (18:36 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Jonatan Schlag [Sun, 31 Mar 2019 12:29:45 +0000 (13:29 +0100)]
Update borgbackup to version 1.1.9
Fixes: #12016
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 31 Mar 2019 09:46:34 +0000 (11:46 +0200)]
kernel: update to 4.14.109
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 30 Mar 2019 15:56:56 +0000 (16:56 +0100)]
kernel: update user regd patch from openwrt
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 30 Mar 2019 15:55:35 +0000 (16:55 +0100)]
Merge remote-tracking branch 'ms/dfs' into next
Erik Kapfer [Fri, 29 Mar 2019 09:44:43 +0000 (10:44 +0100)]
freeradius: Update to version 3.0.18
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Wed, 27 Mar 2019 19:54:10 +0000 (20:54 +0100)]
clamav: Update to 0.101.2
For details see:
https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html
"ClamAV 0.101.2 is a patch release to address a handful of security related bugs."
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 28 Mar 2019 12:51:06 +0000 (12:51 +0000)]
unbound-dhcp-leases-bridge: Replace leases file atomically
When there is a large number of leases, writing the file may
take a long time. When unbound is re-reading its configuration
in that time, the file might syntactically incorrect.
This change writes the file first and then moves it
to the right place in one transaction.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 26 Mar 2019 21:58:01 +0000 (21:58 +0000)]
suricata: Enable CPU affinity
This will tie the detection threads to a certain CPU and
slightly increases throughput on my system.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 26 Mar 2019 21:18:45 +0000 (21:18 +0000)]
suricata: Tie queues to a CPU core
This should improve performance by a small margin
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Tue, 26 Mar 2019 06:15:16 +0000 (07:15 +0100)]
nginx: Update to 1.15.9
Fixes #12023 .
Added support for http2.
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 22 Mar 2019 07:28:23 +0000 (07:28 +0000)]
freeradius: Bump version because package is linked against old version of OpenSSL
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 22 Mar 2019 03:28:23 +0000 (03:28 +0000)]
DHCP: Remove double colon
In some languages, there were double colons in the DNS Update section
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 22 Mar 2019 02:58:57 +0000 (02:58 +0000)]
GeoIP: Do not crash when locations database does not exist
Fixes: #12021
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 21 Mar 2019 20:50:30 +0000 (20:50 +0000)]
make.sh: Build libedit very early
Many packages can make use of this
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 21 Mar 2019 20:48:39 +0000 (20:48 +0000)]
core130: Ship updated lua
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 24 Mar 2019 17:34:37 +0000 (18:34 +0100)]
lua: Update to 5.3.5
For details see:
http://www.lua.org/bugs.html
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 21 Mar 2019 20:39:51 +0000 (20:39 +0000)]
core130: Ship rrdtool and collectd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 24 Mar 2019 17:21:20 +0000 (18:21 +0100)]
rrdtool: Update to 1.7.1
Disabled 'lua' because otherwise building failed.
I didn't find any place or reason where 'lua' was used by 'rrdtool', so it
was deactivated.
Disabling had no noticeable effects by now. Running.
Please note:
'/usr/lib/collectd/rrdcached.so' and '/usr/lib/collectd/rrdtool.so' have to
be updated, too.
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 22 Mar 2019 15:22:43 +0000 (15:22 +0000)]
openvpn: Remove subnet check for static pools
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 18 Mar 2019 04:38:41 +0000 (04:38 +0000)]
dnsdist: Update to 1.3.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 18 Mar 2019 02:54:37 +0000 (02:54 +0000)]
dnsdist: Install some symlinks to start the service
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 18 Mar 2019 02:54:15 +0000 (02:54 +0000)]
dnsdist: Add backup include
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 16 Mar 2019 23:09:11 +0000 (23:09 +0000)]
Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Mon, 18 Mar 2019 19:33:28 +0000 (20:33 +0100)]
Core 130: Remove files after convert-snort has been launched
The converter requires /etc/snort/snort.conf to grab the used rule files
(categories). After all settings have been converted, we are fine to delete all
snort related files, because none of them is needed anymore.
Also the /var/ipfire/snort directory needs to be deleted. If it will be left on the
system and at any later time a backup will get restored, the converter will be
started by the backup script, because it detects that a snort settins dir exists
and would be restore the old snort settings and replaces all current IPS settings.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 18 Mar 2019 17:26:16 +0000 (17:26 +0000)]
dnsforward.cgi: Add DNSSEC option to legend
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 18 Mar 2019 15:35:29 +0000 (15:35 +0000)]
dnsforward.cgi: Check DISABLE_DNSSEC checkbox when editing
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 18 Mar 2019 15:24:56 +0000 (15:24 +0000)]
ipsec-interfaces: Apply static routes (again) after creating IPsec interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 13 Mar 2019 17:37:28 +0000 (18:37 +0100)]
hostapd: Always enable 80 MHz channel width for 802.11ac
This is mandatory to support by all hardware and works well.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 13 Mar 2019 17:24:01 +0000 (18:24 +0100)]
hostapd: Automatically disassociate any clients with high error rates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 14 Mar 2019 13:07:11 +0000 (13:07 +0000)]
kernel: Enable debugging for Atheros drivers
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 8 Mar 2019 11:05:26 +0000 (11:05 +0000)]
kernel: Enable DFS support for ath*k drivers
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 16 Mar 2019 12:34:19 +0000 (12:34 +0000)]
hostapd: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Sat, 16 Mar 2019 14:20:00 +0000 (14:20 +0000)]
hostapd: make client isolation configurable via WebUI
hostapd supports client-isolation, but this feature could
not be configured via the WebUI so far. Since it might be
desired in public wireless networks, or even private ones,
it makes sense to provide a radio button to let the user
decide on.
Fixes #11974.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Fri, 15 Mar 2019 17:00:00 +0000 (17:00 +0000)]
ensure Tor daemon files have correct permissions
Set permissions for /var/lib/tor and /var/ipfire/tor to
tor:tor, regardless whether Tor user has been created before
or not.
This ensures Tor starts properly on existing systems after
reinstallation of the add-on. Thanks to Michael for the hint.
Further, a comment for new Tor user in /etc/passwd has been added.
Fixes #11779.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 16 Mar 2019 12:32:10 +0000 (12:32 +0000)]
core130: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 15 Mar 2019 18:15:19 +0000 (19:15 +0100)]
unbound: Update to 1.9.1
For details see:
https://nlnetlabs.nl/pipermail/unbound-users/2019-March/011415.html
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 16 Mar 2019 12:30:22 +0000 (12:30 +0000)]
core130: Ship updated ntp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 15 Mar 2019 18:10:11 +0000 (19:10 +0100)]
ntp: Update to 4.2.8p13
For details see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Sat, 16 Mar 2019 12:04:18 +0000 (13:04 +0100)]
suricata: Fix ownership and file permissions of files inside /var/lib/suricata.
These files needs to have nobody.nobody as owner but requires read-acces from everyone
to allow the suricata user reading-in this files during startup.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Sat, 16 Mar 2019 11:57:25 +0000 (12:57 +0100)]
logs.cgi/ids.dat: Fixup processing dates from logfiles which contains a year
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 16 Mar 2019 10:00:19 +0000 (10:00 +0000)]
Fix python3-yaml rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Fri, 15 Mar 2019 14:33:29 +0000 (15:33 +0100)]
core130: Fix another error in rootfile
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 15 Mar 2019 13:20:23 +0000 (13:20 +0000)]
core130: Fix errors in rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 14 Mar 2019 16:52:38 +0000 (16:52 +0000)]
Update IPS translation
* Fix typos
* Fix compound nouns (especially in German)
* Remove unused strings
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 14 Mar 2019 14:01:45 +0000 (14:01 +0000)]
nut: Disable parallel build
nut just fails to build when running in parallel
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 14 Mar 2019 13:48:25 +0000 (13:48 +0000)]
core130: Ship suricata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 14 Mar 2019 13:20:56 +0000 (13:20 +0000)]
Update contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 14 Mar 2019 13:20:22 +0000 (13:20 +0000)]
Update translations
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 14 Mar 2019 13:19:35 +0000 (13:19 +0000)]
Merge remote-tracking branch 'stevee/next-suricata' into next
Michael Tremer [Thu, 14 Mar 2019 13:16:33 +0000 (13:16 +0000)]
core130: Ship updated firewall script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 11 Mar 2019 20:07:00 +0000 (20:07 +0000)]
add IPtables chain for outgoing Tor traffic
If Tor is operating in relay mode, it has to open a lot of outgoing
TCP connections. These should be separated from any other outgoing
connections, as allowing _all_ outgoing traffic will be unwanted and
risky in most cases.
Thereof, Tor will be running as a dedicated user (see second patch),
allowing usage of user-based IPtables rulesets.
Partially fixes #11779.
Singed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 11 Mar 2019 20:07:00 +0000 (20:07 +0000)]
run Tor under dedicated user
This allows more-fine granular firewall rules (see first patch for
further information). Further, it prevents other services running as
"nobody" (Apache, ...) from reading Tor relay keys.
Fixes #11779.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 14 Mar 2019 13:15:03 +0000 (13:15 +0000)]
Start Core Update 130
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Wed, 13 Mar 2019 11:14:30 +0000 (12:14 +0100)]
suricata: Fix amount of listened nfqueues
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Peter Müller [Mon, 11 Mar 2019 19:35:00 +0000 (19:35 +0000)]
amavisd: update to 2.11.1
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 11 Mar 2019 19:28:00 +0000 (19:28 +0000)]
Postfix: update to 3.4.3
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 13 Mar 2019 08:05:27 +0000 (08:05 +0000)]
installer: Set the clock correctly when installing over network
If a system has a not very up to date clock, downloading files
over HTTPS is impossible.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Wed, 13 Mar 2019 14:18:52 +0000 (15:18 +0100)]
core129: finish update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 13 Mar 2019 14:17:28 +0000 (15:17 +0100)]
u-boot: try to boot without ramdisk if the system cannot load it
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 13 Mar 2019 14:06:23 +0000 (15:06 +0100)]
knot: update to 2.8.0 and build/install only kdig
This fix compile errors on small arm boards. (cc1 internal error)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 13 Mar 2019 14:04:40 +0000 (15:04 +0100)]
groff: update to 1.22.4
This fix compile problems on small arm boards. (cc1 internal error)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Stefan Schantl [Wed, 13 Mar 2019 09:03:48 +0000 (10:03 +0100)]
suricata: Remove unneeded stuff during build
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Arne Fitzenreiter [Wed, 13 Mar 2019 08:38:21 +0000 (09:38 +0100)]
Revert "kernel: cleanup unused rpi patch"
This reverts commit
a2d49659f3947e5a5a77cbc1bf384eb0b2760ca9 .
The patch is still needed to prevent strange crashes
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Mon, 11 Mar 2019 15:58:45 +0000 (15:58 +0000)]
Update list of contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 11 Mar 2019 15:58:04 +0000 (15:58 +0000)]
core129: Ship updated dnsforward.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 11 Mar 2019 15:57:15 +0000 (15:57 +0000)]
Merge remote-tracking branch 'ms/dns-forwarding' into next
Michael Tremer [Mon, 11 Mar 2019 09:54:19 +0000 (09:54 +0000)]
core129: Ship updated dhcp.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 11 Mar 2019 09:53:56 +0000 (09:53 +0000)]
Merge remote-tracking branch 'ms/dhcp' into next
Peter Müller [Fri, 8 Mar 2019 19:17:00 +0000 (19:17 +0000)]
Tor WebUI: drop relay bandwith options < 1 MBit/s
Tor requires at least 1 MBit/s in order to participate.
Fixes #12001
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 11 Mar 2019 09:38:56 +0000 (09:38 +0000)]
dnsdist: Limit to fewer concurrent build processes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 10 Mar 2019 18:23:22 +0000 (18:23 +0000)]
core129: Ship updated less
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Fri, 8 Mar 2019 19:19:00 +0000 (19:19 +0000)]
less: update to 530
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Fri, 8 Mar 2019 19:22:00 +0000 (19:22 +0000)]
Postfix: update to 3.4.1
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 10 Mar 2019 17:04:31 +0000 (18:04 +0100)]
slang: revert parallelized build
This partially reverts https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=lfs/slang;h=
217e74c77317d4c829913f934458779fd278bf29 ;hb=
23164efba5f57b3d8ccb07a166b613f2f951e1b6
'slang 2.3.0' doesn't like "$(MAKETUNING)"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Sun, 10 Mar 2019 17:52:40 +0000 (18:52 +0100)]
IDS: Set owner of suricata logging directory to correct user
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 10 Mar 2019 17:50:37 +0000 (18:50 +0100)]
Rename snort user and group to suricata
This only affects new installations.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 17:26:34 +0000 (17:26 +0000)]
suricata: Run as non-root user
This patch does not have any effect (yet) and is untested
because suricata needs to be built against libcap-ng which
is currently not being packaged for IPFire.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>