]>
git.ipfire.org Git - ipfire-2.x.git/log
Michael Tremer [Mon, 29 Oct 2018 13:43:37 +0000 (13:43 +0000)]
Update translations
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stéphane [Fri, 26 Oct 2018 16:32:14 +0000 (18:32 +0200)]
French translation improvements
- Adding missing syntaxes
- Improved syntax translation
- Minor corrections (spelling, conjugation)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 13:42:51 +0000 (13:42 +0000)]
make.sh: Log into subdirectory for each architecture
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 11:30:12 +0000 (11:30 +0000)]
tzdata: Update to 2018g
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 11:27:34 +0000 (11:27 +0000)]
Drop paxctl
We do not have grsecurity and more and there is no point
in shipping this tool.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 11:25:24 +0000 (11:25 +0000)]
clamav: Move database directory to /var partition
The clamav database is quite large and occupies valuable
space on the root partition that on older systems is only
2GB large. This change moves the virus definition database
to the /var partition which is larger and supposed to hold
data like this anyway.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 11:14:45 +0000 (11:14 +0000)]
kmod: Build with support for XZ compressed modules
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 11:12:43 +0000 (11:12 +0000)]
make.sh: Build xz earlier in the build process
XZ compression is becoming more popular and being used
by various other libraries and should therefore be available
to be linked.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 11:10:58 +0000 (11:10 +0000)]
strongswan: Update to 5.7.1
Fixes security vulnerabilities: CVE-2018-16151, CVE-2018-16152 and
CVE-2018-17540.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 11:02:08 +0000 (11:02 +0000)]
haproxy: Update to 1.8.14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 10:59:18 +0000 (11:59 +0100)]
Merge branch 'haproxy' into next
Michael Tremer [Mon, 29 Oct 2018 10:51:44 +0000 (10:51 +0000)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Mon, 29 Oct 2018 10:51:00 +0000 (10:51 +0000)]
Merge branch 'toolchain' into next
Michael Tremer [Mon, 29 Oct 2018 10:50:56 +0000 (10:50 +0000)]
Merge branch 'glibc-2.28' into next
Michael Tremer [Mon, 29 Oct 2018 10:50:35 +0000 (10:50 +0000)]
core125: Ship glibc for i586
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 29 Oct 2018 10:47:10 +0000 (10:47 +0000)]
Remove removed files from rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 28 Oct 2018 16:56:37 +0000 (17:56 +0100)]
graphs: add NVMe disks
Add NVMe disks to media and hardwaregraphs.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 27 Oct 2018 07:55:19 +0000 (09:55 +0200)]
hostapd: add switch to disable neigborhood scan
this may violate regulatory rules because 40Mhz channels should disabled
if there are other networks but nearly every commercial router ignore this.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Fri, 26 Oct 2018 10:31:40 +0000 (11:31 +0100)]
libaio: Link against standard libraries
This patch fixes a build error when stack smashing protecion
is being enabled and __stack_chk_fail_local needs to be pulled
from libc.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 25 Oct 2018 18:50:28 +0000 (19:50 +0100)]
perl: Fix build in toolchain
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 24 Oct 2018 16:27:55 +0000 (17:27 +0100)]
toolchain: Bump version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 24 Oct 2018 16:27:38 +0000 (17:27 +0100)]
coreutils+gzip: Allow building with 32 bit time_t on 32 bit arches
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 24 Oct 2018 16:27:10 +0000 (17:27 +0100)]
Config: Set IS_32BIT when running on 32 bit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 24 Oct 2018 10:23:00 +0000 (11:23 +0100)]
Update langs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 24 Oct 2018 10:21:12 +0000 (11:21 +0100)]
pakfire: Remove option to enable/disable checks for updates
This does not change anything
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 24 Oct 2018 08:30:29 +0000 (09:30 +0100)]
glibc: Update to 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 24 Oct 2018 08:25:57 +0000 (09:25 +0100)]
libvirt: Update to 4.6.0
Fixes builds against glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 24 Oct 2018 08:15:28 +0000 (09:15 +0100)]
parted: Fix build with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 24 Oct 2018 08:14:43 +0000 (09:14 +0100)]
syslinux: Fix build with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Tue, 23 Oct 2018 16:58:58 +0000 (18:58 +0200)]
installer: remove set of pmbr_boot on gpt partitions
this fix the efi boot on hdd's larger than 2TB and raid installations.
fixes: #11890
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Tue, 23 Oct 2018 15:45:33 +0000 (16:45 +0100)]
collectd: Fix compiling against newer xfsprogs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 22 Oct 2018 19:47:05 +0000 (21:47 +0200)]
haproxy: Log to syslog and install logrotate script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 22 Oct 2018 19:39:31 +0000 (21:39 +0200)]
haproxy: Make /dev/log available in chroot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 22 Oct 2018 18:52:23 +0000 (19:52 +0100)]
nfs: Update to 2.3.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 22 Oct 2018 18:49:14 +0000 (19:49 +0100)]
keyutils: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 22 Oct 2018 13:58:29 +0000 (14:58 +0100)]
ntfs-3g: Update to 2017.3.23
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 22 Oct 2018 13:56:34 +0000 (14:56 +0100)]
xfsprogs: Update to 4.18.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 22 Oct 2018 09:53:18 +0000 (10:53 +0100)]
reiserfsprogs: Update to 3.6.27
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 21 Oct 2018 21:18:35 +0000 (22:18 +0100)]
LVM2: Update to 2.02.181
Update required to build against newer versions of glibc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 21 Oct 2018 21:14:26 +0000 (22:14 +0100)]
libaio: New package
This library is required by newer version of LVM2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 21 Oct 2018 21:03:21 +0000 (22:03 +0100)]
ppp: Build against openssl
libcrypt has been removed from glibc and openssl
can be used instead for cryptographic operations.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 21 Oct 2018 21:01:28 +0000 (22:01 +0100)]
Build openssl earlier in the build process
This is a basic library that is used by so many other packages
and more and more are being added. To have those packages take
advantage of it, we build it very early.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 21 Oct 2018 11:47:36 +0000 (12:47 +0100)]
core125: Ship updated kmod
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 21 Oct 2018 11:43:37 +0000 (12:43 +0100)]
udev: Migrate to eudev
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 21 Oct 2018 11:43:12 +0000 (12:43 +0100)]
kmod: Update to version 25
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 20 Oct 2018 11:56:30 +0000 (12:56 +0100)]
sysvinit: Fix build with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 19 Oct 2018 13:20:48 +0000 (14:20 +0100)]
gzip: Fix build with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 19 Oct 2018 12:39:58 +0000 (13:39 +0100)]
findutils: Fix building against glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 19 Oct 2018 08:07:56 +0000 (09:07 +0100)]
e2fsprogs: Update to 1.44.4
Fixes build with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 19 Oct 2018 08:00:04 +0000 (09:00 +0100)]
bison: Fix building with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 19 Oct 2018 07:59:46 +0000 (08:59 +0100)]
m4: Fix building with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 19 Oct 2018 07:59:25 +0000 (08:59 +0100)]
gcc: Fix building with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 19 Oct 2018 07:57:11 +0000 (08:57 +0100)]
coreutils: Update to 8.30
Builds with newer versions of glibc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:54:22 +0000 (14:54 +0100)]
core125: Ship updated SSH configuration
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 8 Oct 2018 17:30:09 +0000 (19:30 +0200)]
fix broken SFTP in OpenSSH server
Fixes #11887
The second version of this patch uses the correct path on IPFire systems
and supersedes the first one. It also referrs to the correct issue ID.
Thanks to Matthias Fischer for reporting this.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:52:57 +0000 (14:52 +0100)]
core125: Ship updated dhcpcd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 7 Oct 2018 16:27:40 +0000 (18:27 +0200)]
dhcpcd: Update to 7.0.8
Hi,
No explicit changelog. I used:
https://roy.marples.name/search/query:dhcpcd
Running here.
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:51:38 +0000 (14:51 +0100)]
core125: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Tue, 9 Oct 2018 17:03:22 +0000 (19:03 +0200)]
unbound: Update to 1.8.1
For details see:
https://nlnetlabs.nl/projects/unbound/download/
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 6 Oct 2018 16:36:30 +0000 (17:36 +0100)]
hostapd: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 6 Oct 2018 16:36:29 +0000 (17:36 +0100)]
hostapd: Compile with debugging messages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 6 Oct 2018 16:36:28 +0000 (17:36 +0100)]
hostapd: Add support for 802.11ac
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:49:47 +0000 (14:49 +0100)]
core125: Update language files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Thu, 4 Oct 2018 16:27:35 +0000 (18:27 +0200)]
update OpenSSH default port in language files
Fixes #11881
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 4 Oct 2018 03:09:36 +0000 (05:09 +0200)]
clamav: Update to 0.100.2
Hi,
"This is a patch release to address several vulnerabilities..."
For details see:
https://blog.clamav.net/2018/10/clamav-01002-has-been-released.html
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:36:48 +0000 (14:36 +0100)]
core125: Ship updated GnuTLS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 28 Sep 2018 16:58:20 +0000 (18:58 +0200)]
gnutls: Update to 3.5.19
Hi,
For changelogs since '3.5.15' see:
https://lists.gnupg.org/pipermail/gnutls-devel/2017-October/008523.html
https://lists.gnupg.org/pipermail/gnutls-devel/2018-January/008538.html
https://lists.gnupg.org/pipermail/gnutls-devel/2018-February/008540.html
https://lists.gnupg.org/pipermail/gnutls-devel/2018-July/008583.html
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:35:46 +0000 (14:35 +0100)]
core125: Apply changed sysctl.conf immediately
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tim FitzGeorge [Tue, 25 Sep 2018 17:52:30 +0000 (18:52 +0100)]
Allow kernel to swap memory on high demand
Signed-off-by: Tim FitzGeorge <ipfr@tfitzgeorge.me.uk>
Fixes: Bug 11839
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:34:00 +0000 (14:34 +0100)]
core125: Ship updated bind
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 24 Sep 2018 16:34:38 +0000 (18:34 +0200)]
bind: Update to 9.11.4-P2
For details see:
http://ftp.isc.org/isc/bind9/9.11.4-P2/RELEASE-NOTES-bind-9.11.4-P2.html
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:33:23 +0000 (14:33 +0100)]
core125: Ship updated apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 23 Sep 2018 17:12:06 +0000 (19:12 +0200)]
Apache: Update to 2.4.35
For details see:
http://apache.mirror.digionline.de//httpd/CHANGES_2.4.35
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:30:05 +0000 (14:30 +0100)]
core125: Ship recently updated sqlite
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:29:23 +0000 (14:29 +0100)]
Update list of contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:28:33 +0000 (14:28 +0100)]
Start Core Update 125
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 18 Oct 2018 13:23:29 +0000 (14:23 +0100)]
sqlite: Update to 3.25.2.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Fri, 28 Sep 2018 16:43:15 +0000 (18:43 +0200)]
Merge branch 'core124' of git.ipfire.org:/pub/git/ipfire-2.x into core124
Arne Fitzenreiter [Fri, 28 Sep 2018 15:53:03 +0000 (17:53 +0200)]
core124: add apache initskript and nsswitch.conf to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 28 Sep 2018 15:49:10 +0000 (17:49 +0200)]
core124: don't remove network trigger script
this script is still needed if /var/ipfire is on an extra partition.
New installations works without this script.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 27 Sep 2018 19:53:53 +0000 (21:53 +0200)]
core124: fix removing old initrd files on arm systems
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 27 Sep 2018 06:03:45 +0000 (08:03 +0200)]
kernel: update to 4.14.72
this commit has many important driver updates so we need to ship it fast...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 26 Sep 2018 12:09:57 +0000 (14:09 +0200)]
Merge remote-tracking branch 'origin/master' into core124
Michael Tremer [Tue, 25 Sep 2018 19:24:39 +0000 (20:24 +0100)]
ssh: Revert MaxAuthTries setting
This is entirely not practicable and should have been changed
before. I missed this when I tested the configuration.
It is common that multiple SSH keys exist and three is common
number (RSA, ECDSA &
Ed25519 ). A key passed with ssh -i and
password authentication are not even tried.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 23 Sep 2018 00:44:03 +0000 (02:44 +0200)]
core124: fix updater
fix some missing files on arm
remove not needed rebuild initrd because we ship it already built
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Sat, 22 Sep 2018 07:50:48 +0000 (09:50 +0200)]
nano: Update to 3.1
Hi,
This update was published just a few days after my "3.0"-commit - running.
For details see:
https://www.nano-editor.org/news.php
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Fri, 21 Sep 2018 13:26:52 +0000 (15:26 +0200)]
core124: finish updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 21 Sep 2018 13:18:24 +0000 (15:18 +0200)]
arm: boot.scr: add setting to edit fdt via uEnv.txt
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 20 Sep 2018 18:03:26 +0000 (20:03 +0200)]
rebuild-initrd: update for grub2
this was was not used for years because we usually ship a prebuild ramdisk
so this incompatiblity was not noticed long time...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 20 Sep 2018 17:51:43 +0000 (19:51 +0200)]
kernel: update to 4.14.71
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Thu, 20 Sep 2018 13:54:02 +0000 (14:54 +0100)]
core124: Ship updated iproute2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Tue, 18 Sep 2018 17:35:10 +0000 (19:35 +0200)]
iproute2: Update to 4.18.0
Triggered by https://bugzilla.ipfire.org/show_bug.cgi?id=11866 ;-)
For details see:
https://lwn.net/Articles/762515/
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 20 Sep 2018 13:52:17 +0000 (14:52 +0100)]
core124: Ship updated openssh package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 10 Sep 2018 17:38:17 +0000 (19:38 +0200)]
openssh: Update to 7.8p1
For details see:
http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ChangeLog
I didn't find an official lfs-patch for openssl-1.1-compatibility,
so I used the patch from here:
https://git.archlinux.org/svntogit/packages.git/plain/trunk/openssl-1.1.0.patch?h=packages/openssh
Building ran without any errors.
I tested with both machines (test on Core 120 - and productive - on Core 122) and found no errors so far:
...
[root@ipfiretest ~]# ssh -V
OpenSSH_7.8p1, OpenSSL 1.1.0h 27 Mar 2018
...
...
root@ipfire: / # ssh -V
OpenSSH_7.8p1, OpenSSL 1.1.0h 27 Mar 2018
...
All ssh-connections ran fine but I'm not REALLY sure if this is sufficient for anyone else.
Could someone please check and confirm!?
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Tested-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 20 Sep 2018 13:51:13 +0000 (14:51 +0100)]
core124: Ship updated OpenSSH configuration
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 20 Sep 2018 13:50:25 +0000 (14:50 +0100)]
ssh: Remove AuthenticationMethods directive
This is only setting something that is default anyways and
prevents sshd from starting if one of the listed methods
is not activated.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 10 Sep 2018 15:52:23 +0000 (17:52 +0200)]
use custom SSH server configuration in LFS file
Include OpenSSH server configuration file during build.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 10 Sep 2018 15:52:22 +0000 (17:52 +0200)]
add hardened SSH server configuration
In order to harden OpenSSH server in IPFire, using the upstream default configuration
and edit it via sed commands in LFS file is error-prone and does not scale.
Thereof we ship a custom and more secure OpenSSH server configuration which
is copied into the image during build time.
The fourth version of this patch disables password authentication by
default, since this is required by some cloud hosters in order to apply
the image. Further, this method is less secure than pubkey
authentication.
Non-AEAD ciphers have been re-added to provide compatibility to older
RHEL systems.
Fixes #11750
Fixes #11751
Partially fixes #11538
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Cc: Marcel Lorenz <marcel.lorenz@ipfire.org>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 20 Sep 2018 13:21:41 +0000 (14:21 +0100)]
backup: Fix deleting backup files
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Mon, 17 Sep 2018 05:44:55 +0000 (07:44 +0200)]
kernel: arm32-bit: update rootfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>