pkg-config: update lfs to build in toolchain

This is needed by ncureses 6.0

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

igmpproxy: fix build fail and move binary to /usr/sbin

Add "--prefix=/usr" to lfs file

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

log.dat: Fix identation for clamav

Fixes unneeded tabs in 'log.dat'.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

findutils: update to 4.6.0

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

expect: update to 5.45

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

coreutils: update to 8.25 v3

Coreutils 8.25 needs the automake 1.15
I have send this patch earlier.
Plaese merge automake before coreutils 8.25

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

automake: update to 1.15

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libyajl: Fix broken syntax

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package libvirt

Libvirt is buidl only on i585 and x86_64 because qemu is build only
on this arches.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package libyajl

libyajl is a dependency of libvirt

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Ship gettext, gettext.sh, envsubst

Libvirt needs gettest.sh gettext and envsubst for the libvirt-guests
init script.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package libpciaccess

libpciacces is a dependdency of libvirt

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package util-macros

This package is a build dependency of libpciaccess, we do not need this
as a package. That's why the rootfiles goes into common and all lines
are excluded.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Network: add macvtap mode

This change make it possible to use a macvtap interface as a
standard interface (green0).
This is required by libvirt, because libvirt adds macvtap interfaces to
the physical interface, but this causes a problem. A VM  with this
configuration can communicate with the whole network,
but not with the Host (IPFire).
To solve this problem, the host interface must be also a macvtap interface.
This is achieved by:
1. In /var/ipfire/ethernet/settings the mode of a interface could set
with GREEN_MODE= ...
When the mode is macvtap the physical interface is renamed to green0phys
instead of green0. If the mode is not set the normal configuration is
applied .
2. The  network-hotplug-macvtap script checks if a physical nic ends
with "phys".
When the interface ends with "phys", the script adds a macvtap interface
to the physical nic which is named green0. The MAC address of this
interface is set to the MAC address of the physical nic. The MAC address
of the physical is set to a random value. We do this because the MAC
address of green0 should not change.
All services, IP addresses then binds to the macvatap interface, the
physical nic is not used.
PS.:  The script works also with the orange or blue interface, just
replace green with orange or blue.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buildsystem: Escape curly brackets

Newer versions of perl complain about using unescaped
left curly brackets.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

log.dat: Added 'squid' and 'snort' plus translations

Added 'squid' and 'snort' to section dropdown in LOGS / SYSTEM LOGS,
added translations.

Added translation string for 'web proxy' in '30-network.menu'.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

log.dat: fix missing quotation marks for 'ddns'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid 3.5.19: latest patches from upstream

For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

flex: update rootfile

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

samba: import updated rpc security patchset from red hat.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

gcc: fix bootstrap with gcc-6

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

dnsmasq: Update to 2.76

Final version.

For a detailed changelog, see:
http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Midnight Commander: Update to 4.8.17

For Details see:
http://www.midnight-commander.org/wiki/NEWS-4.8.17

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nfs: Bump release to install rpcbind dependency

This update will pull in rpcbind as new dependency which
will automatically remove portmap when installed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Fix indentation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Kill redirector processes only after squid has stopped

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Rework initscript

The initscript now takes care that the squid proxy server process
is properly shut down. If that fails, it will remove the cache
index and let it be recreated at the next start. A warning is
shown to the user.

The "flush" command will now remove the entire proxy cache.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Replace portmap with rpcbind

Portmap is not maintained anymore that's why it is replaced by rpcbind.
Rpcbind provides also rpcinfo which is quite useful for debugging.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package libtirpc

libtirpc is a dependency of rpcbind

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

7zip: update to 15.14.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core103: Ship updated dnsmasq

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dnsmasq: Update to 2.76rc2

- Updated to 2.76rc2 and deleted obsolete patch files from 2.76rc1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dnsmasq: Update to 2.76rc1 - added latest patches (001-002)

Update, added latest patches and deleted obsolete patch files.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dnsmasq: Update to 2.76test13 with latest patches (001-006)

Update from 'dnsmasq 2.76test10' to '2.76test13'

Includes latest patches (001-006) from upstream.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

procps: Update to 3.2.8

For details see:
http://procps.sourceforge.net/changelog.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid init: small cosmetic fixes

- Deleted a few absolutely unneeded tabs.
- Inserted/deleted some needed/unnecessary line breaks.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

linux-pae: fix typo at remove meta on non-pae systems.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

squid 3.4: remove obsolete patch files

Obsolete, no longer needed.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Update to 3.5.19

Activated 'ipv6', as discussed in ipfire-list with Michael:

"I had a look what the IPv6 switch actually changes. And that is not really much.
Essentially nothing. It just probes if the system supports IPv6 and if not it
disables it internally.

http://git.ipfire.org/?p=thirdparty%2Fsquid.git&a=search&h=refs%2Fheads%2Ftrunk&st=grep&s=USE_IPV6

I think we can as well enable this."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Update to 3.5.18

Removed unecessary quotations and two configure-options, see:
ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.1/squid-3.1.0.16-RELEASENOTES.html

--with-aio
Deprecated. POSIX AIO is now auto-detected and enabled.
Use --without-aio to disable, but only if you really have to.

--with-pthreads
Deprecated. pthreads library is now auto-detected and enabled.
Use --without-pthreads to disable, but only if you really have to.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tor: Update to 0.2.7.6

Fixes #11117

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

initskripts: remove obsolete checkfstab

the file update the bootdevice to uuid in fstab and grub1 config.
this is not needed since we use uuid at default and grub2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core103: start

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

linux-pae: prevent install on non pae systems

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

clamav: rework initskript

display download wait, increase time to 15min and
remove tmp files at freshclam terminate.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

clamav: update to 0.99.2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/master' into next

general-functions.pl: Allow underscores in domain names

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core102: ship openssl and openssl updates

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssl: security update to 1.0.2g

see https://www.openssl.org/news/secadv/20160503.txt for details

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssh: Update to 7.2p2

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

clamav: save signature database at update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

toolchain: enable build on aarch64 multilib hosts

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

Revert "ncurses: update to 6.0 and rename 5.9 to ncurses-compat"

This reverts commit a420b3e7b9f3672b6c436cd7b773683fbf0c1f90.

toolchain build fails on all architectures.

make-functions: enable build on aarch64 multilib

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

squid: Add forgetten patch file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

rtpproxy: Add initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Update to 3.5.17

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

setup: Show more than 6 NICs

http://lists.ipfire.org/pipermail/development/2016-April/002074.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

samba: import rpc server and client fixes.

should fix: #11110

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

rtpproxy: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update: less to 481

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wpa_supplicant: Update to 2.5

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Bump release version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update: hostapd to 2.5

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tzdata: Update to 2016d

fixes: #11103

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
The 2016d release of the tz code and data is available. It reflects the
following changes, which were either circulated on the tz mailing list
or are relatively minor technical or administrative changes:

   Changes affecting future time stamps

     America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
     (Thanks to Alexander Krivenyshev for the heads-up.)

     Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
     (Thanks to Alexander Krivenyshev and Matt Johnson.)

     New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
     Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
     at 02:00.  (Thanks to Stepan Golosunov.)

   Changes affecting past time stamps

     New zone Europe/Kirov, split off from Europe/Volgograd.  It covers
     Kirov Oblast, Russia, which switched from +04/+05 to +03/+04 on
     1989-03-26 at 02:00, roughly a year after Europe/Volgograd made
     the same change.  (Thanks to Stepan Golosunov.)

     Russia and nearby locations had daylight-saving transitions on
     1992-03-29 at 02:00 and 1992-09-27 at 03:00, instead of on
     1992-03-28 at 23:00 and 1992-09-26 at 23:00.  (Thanks to Stepan
     Golosunov.)

     Many corrections to historical time in Kazakhstan from 1991
     through 2005.  (Thanks to Stepan Golosunov.)  Replace Kazakhstan's
     invented time zone abbreviations with numeric abbreviations.

Here are links to the release files:

   ftp://ftp.iana.org/tz/releases/tzcode2016d.tar.gz
   ftp://ftp.iana.org/tz/releases/tzdata2016d.tar.gz

The files are also available via HTTP as follows:

http://www.iana.org/time-zones/repository/releases/tzcode2016d.tar.gz
http://www.iana.org/time-zones/repository/releases/tzdata2016d.tar.gz

As usual, links to the latest release files are here:

http://www.iana.org/time-zones/repository/tzcode-latest.tar.gz
http://www.iana.org/time-zones/repository/tzdata-latest.tar.gz

   ftp://ftp.iana.org/tz/tzcode-latest.tar.gz
   ftp://ftp.iana.org/tz/tzdata-latest.tar.gz
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update: grep to 2.24

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update: curl to 7.48.0

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

sdparm: Update to 1.10

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ncurses: update to 6.0 and rename 5.9 to ncurses-compat

This patch updates the ncurses to 6.0. The old 5.9 are renamed to ncurses-compat.
The compat makes the old libs maintainable and the compat rootfile is cleaned up.
The 6.0 is build after 5.9 and all IPFire componentes will build with 6.0
In version 6 only the wide-character libraries are build. The are usable
in both multibyte and traditional 8-bit locales while normal libraries work
properly only in 8-bit locales. The toolchain is only bild with 6.0.

Please ignore my first ncurses 6.0 patch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nfs: Fix whitespace issues in nfs-server initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nfs: Fixes for NFS server

Fixes: #11098
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid 3.4.14: latest patches, sorted options

The 'configure'-options were sorted (kind of) to get a better overview.

Added latest patches from upstream.

Changed '--enable-async-io=8' to '--enable-async-io=16' because of
http://www.squid-cache.org/mail-archive/squid-users/200705/0768.html :

"The default number of threads is dependent on the number of aufs
cache_dir lines, based on a reasonable estimate of how the code behaves."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core101: close core update.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

backports: ath9k fix ht40 init.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core101: remove old rpi kernel modules.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core101: add changed packages to updater.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

conntrack: Remove old disable_nf_sip indicator file

This is not used any more and not needed either.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core101: Migrate conntrack settings that broke in 100

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core101: Add recent changes on firewall

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

optionsfw.cgi: Clean up code

Add translation to radio buttons. No functional changes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

firewall: Fix connection tracking for PPTP

GRE connections were not correctly forwarded without the helper
being enabled. Choosing the wrong protocol here did not allow
us to load it properly.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

firewall: fix nat module load for application layer gateways

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/core100' into next

kernel: fix mac80211 build on rpi.

mac80211 depends on CRYPTO_GCM don't know why this was off before in
rpi config.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: change stackprotector from strong to regular.

Xen/Paravirt crash with stackprotect in strong mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

xen-image-maker: fix typos and missing doublequote.

core101: Ship updated dma

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dma: Update to 0.11

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lcdproc 0.5.7: Fixes for rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Add missing end-quote to xen-image-maker

Signed-off-by: Eberhard Beilharz <eb1@sil.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core101: exclude grub.cfg and grubenv from updates.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: remove grub.cfg and grubenv from updater.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>