ipfire-3.x.git
3 days agokmod: Update to 26 master
Stefan Schantl [Sun, 16 Jun 2019 11:10:43 +0000 (13:10 +0200)]
kmod: Update to 26

This is a major update to the latest stable version of kmod.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 days agolibnftnl: Update to 1.1.3
Stefan Schantl [Sun, 16 Jun 2019 11:03:44 +0000 (13:03 +0200)]
libnftnl: Update to 1.1.3

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 days agolibmnl: Update to 1.0.4
Stefan Schantl [Sun, 16 Jun 2019 11:02:56 +0000 (13:02 +0200)]
libmnl: Update to 1.0.4

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 days agokernel: update to 5.0
Arne Fitzenreiter [Sat, 15 Jun 2019 17:36:43 +0000 (18:36 +0100)]
kernel: update to 5.0

fixes #12028

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
8 days agohostapd: Update to 2.8
Michael Tremer [Mon, 10 Jun 2019 08:43:30 +0000 (09:43 +0100)]
hostapd: Update to 2.8

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agoupdate ca-certificates CA bundle
Peter Müller [Wed, 15 May 2019 16:44:00 +0000 (16:44 +0000)]
update ca-certificates CA bundle

Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agogcc: Update to 9.1.0
Michael Tremer [Wed, 8 May 2019 03:04:18 +0000 (04:04 +0100)]
gcc: Update to 9.1.0

This patch also removes libmpx which has been removed from GCC.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agoccache: Update to 3.7.1
Michael Tremer [Tue, 7 May 2019 14:11:41 +0000 (15:11 +0100)]
ccache: Update to 3.7.1

The project also moved to a new home at https://ccache.dev.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoqemu: Update to 3.1.0
Michael Tremer [Mon, 15 Apr 2019 21:01:38 +0000 (22:01 +0100)]
qemu: Update to 3.1.0

Also use libseccomp for sandboxing

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agolibseccomp: New package
Michael Tremer [Mon, 15 Apr 2019 20:37:35 +0000 (21:37 +0100)]
libseccomp: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoautomake: Update to 1.16.1
Michael Tremer [Mon, 15 Apr 2019 20:14:57 +0000 (21:14 +0100)]
automake: Update to 1.16.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agobinutils: Update to 2.32
Michael Tremer [Tue, 9 Apr 2019 19:59:21 +0000 (20:59 +0100)]
binutils: Update to 2.32

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoscreen: Update to 4.6.2
Michael Tremer [Tue, 9 Apr 2019 01:42:04 +0000 (02:42 +0100)]
screen: Update to 4.6.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agotmux: Update to 2.8
Michael Tremer [Tue, 9 Apr 2019 01:38:53 +0000 (02:38 +0100)]
tmux: Update to 2.8

The project has also moved to GitHub.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoncurses: Install in base system
Michael Tremer [Tue, 9 Apr 2019 01:33:10 +0000 (02:33 +0100)]
ncurses: Install in base system

This package has tools like reset in it that I use often
and therefore I think it should be installed in the base system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agohyperscan: Drop cmake parameters that are passed anyways
Michael Tremer [Tue, 9 Apr 2019 01:32:45 +0000 (02:32 +0100)]
hyperscan: Drop cmake parameters that are passed anyways

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agocmake: Update to 3.14.1
Michael Tremer [Tue, 9 Apr 2019 01:32:13 +0000 (02:32 +0100)]
cmake: Update to 3.14.1

The testsuite does not run through any more and has
therefore been disabled.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agooinkmaster: Drop package
Michael Tremer [Mon, 8 Apr 2019 22:27:42 +0000 (23:27 +0100)]
oinkmaster: Drop package

This will be replaced by suricata-update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoclamav: Update to 0.101.2
Michael Tremer [Mon, 8 Apr 2019 22:25:17 +0000 (23:25 +0100)]
clamav: Update to 0.101.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agocurl: Update to 7.64.1
Michael Tremer [Mon, 8 Apr 2019 22:21:12 +0000 (23:21 +0100)]
curl: Update to 7.64.1

Also fixes linking issues with the library. Development packages
that libcurl was linking against were not pulled in.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoiperf3: New package
Michael Tremer [Mon, 8 Apr 2019 21:29:52 +0000 (22:29 +0100)]
iperf3: New package

iPerf3 is a tool for active measurements of the maximum achievable
bandwidth on IP networks. It supports tuning of various parameters
related to timing, buffers and protocols (TCP, UDP, SCTP with IPv4
and IPv6). For each test it reports the bandwidth, loss, and other
parameters.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoiperf: Update to 2.0.13
Michael Tremer [Mon, 8 Apr 2019 21:18:13 +0000 (22:18 +0100)]
iperf: Update to 2.0.13

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agolibuv: New package
Michael Tremer [Mon, 8 Apr 2019 21:11:59 +0000 (22:11 +0100)]
libuv: New package

libuv is a multi-platform support library with a focus on
asynchronous I/O.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agorhash: New package
Michael Tremer [Mon, 8 Apr 2019 21:10:46 +0000 (22:10 +0100)]
rhash: New package

RHash (Recursive Hasher) is a console utility for calculation and
verification of magnet links and various hash sums, including CRC32,
CRC32C, MD4, MD5, SHA1, SHA256, SHA512, SHA3, AICH, ED2K, DC++ TTH,
BitTorrent BTIH, Tiger, GOST R 34.11-94, GOST R 34.11-2012, RIPEMD-160,
HAS-160, EDON-R, and Whirlpool.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agohyperscan: Build only on x86
Michael Tremer [Sat, 6 Apr 2019 14:51:34 +0000 (15:51 +0100)]
hyperscan: Build only on x86

This package does not compile on ARM

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agosuricata: Enable hyperscan
Michael Tremer [Sat, 6 Apr 2019 12:03:45 +0000 (13:03 +0100)]
suricata: Enable hyperscan

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agohyperscan: New package
Michael Tremer [Sat, 6 Apr 2019 11:55:30 +0000 (12:55 +0100)]
hyperscan: New package

Hyperscan is a high-performance multiple regex matching library. It
follows the regular expression syntax of the commonly-used libpcre
library, but is a standalone library with its own C API.

Hyperscan uses hybrid automata techniques to allow simultaneous
matching of large numbers (up to tens of thousands) of regular
expressions and for the matching of regular expressions across
streams of data.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoragel: New package
Michael Tremer [Sat, 6 Apr 2019 11:54:28 +0000 (12:54 +0100)]
ragel: New package

Ragel compiles executable finite state machines from regular languages.

Ragel targets C, C++ and ASM. Ragel state machines can not only
recognize byte sequences as regular expression machines do, but can
also execute code at arbitrary points in the recognition of a regular
language. Code embedding is done using inline operators that do not
disrupt the regular language syntax.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agognutls: Update to 3.6.7
Michael Tremer [Thu, 4 Apr 2019 13:46:13 +0000 (14:46 +0100)]
gnutls: Update to 3.6.7

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agowget: Update to 1.20.1
Michael Tremer [Thu, 4 Apr 2019 13:25:01 +0000 (14:25 +0100)]
wget: Update to 1.20.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoDrop radvd package
Michael Tremer [Sun, 31 Mar 2019 12:30:06 +0000 (14:30 +0200)]
Drop radvd package

This is being replaced by bird

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agohostapd: Enable 802.11ax and SAE (aka WPA3)
Michael Tremer [Sat, 30 Mar 2019 16:54:41 +0000 (17:54 +0100)]
hostapd: Enable 802.11ax and SAE (aka WPA3)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agokernel: Ensure that we compile the kernel with GCC >= 8
Michael Tremer [Wed, 27 Mar 2019 09:46:45 +0000 (10:46 +0100)]
kernel: Ensure that we compile the kernel with GCC >= 8

The kernel cannot be compiled with a compiler that does
not support retpoline.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agopcengines-apu-firmware: New package
Michael Tremer [Fri, 29 Mar 2019 11:42:28 +0000 (11:42 +0000)]
pcengines-apu-firmware: New package

This is the latest firmware for PC Engines APU boards

This can now be updated with firmware-update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agofirmware-update: New package
Michael Tremer [Fri, 29 Mar 2019 11:42:01 +0000 (11:42 +0000)]
firmware-update: New package

This tools makes it easy to update the firmware on various
boards.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agokernel: Drop ld.so placeholder files
Michael Tremer [Fri, 29 Mar 2019 03:58:56 +0000 (03:58 +0000)]
kernel: Drop ld.so placeholder files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agospectre-meltdown-checker: New package
Michael Tremer [Fri, 29 Mar 2019 03:54:30 +0000 (03:54 +0000)]
spectre-meltdown-checker: New package

Handy to have this available to check how well a system is protected
against Spectre & Meltdown

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months ago.gitignore: Ignore any files edited by vim
Michael Tremer [Fri, 29 Mar 2019 03:38:48 +0000 (03:38 +0000)]
.gitignore: Ignore any files edited by vim

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoflashrom: New package
Michael Tremer [Fri, 29 Mar 2019 03:37:59 +0000 (03:37 +0000)]
flashrom: New package

This tool can flash firmware on various chipsets and BIOSes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agokernel: Enable /dev/mem
Michael Tremer [Fri, 29 Mar 2019 03:37:27 +0000 (03:37 +0000)]
kernel: Enable /dev/mem

This is required to be able to flash any firmware.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agotzdata: Update to 2019a
Michael Tremer [Tue, 26 Mar 2019 11:53:22 +0000 (11:53 +0000)]
tzdata: Update to 2019a

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agolua: Update to 5.3
Michael Tremer [Tue, 26 Mar 2019 11:52:44 +0000 (11:52 +0000)]
lua: Update to 5.3

This drops the autotool patch which is unnecessary and hard
to carry around.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agontp: Drop package
Michael Tremer [Mon, 25 Mar 2019 22:47:52 +0000 (22:47 +0000)]
ntp: Drop package

ntp is not really fit for purpose any more.

It fails to sync time on my systems all the time, is full
of (security) bugs and offers loads of features that we
potentially do not need.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agorrdtool: Update to 1.7.1
Michael Tremer [Mon, 25 Mar 2019 22:34:23 +0000 (22:34 +0000)]
rrdtool: Update to 1.7.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoca-certificates: Update to version from Jan 23, 2019
Michael Tremer [Mon, 25 Mar 2019 22:28:39 +0000 (22:28 +0000)]
ca-certificates: Update to version from Jan 23, 2019

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agochrony: Update to 3.4
Michael Tremer [Mon, 25 Mar 2019 22:01:17 +0000 (22:01 +0000)]
chrony: Update to 3.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoiw: Update to 5.0.1
Michael Tremer [Fri, 22 Mar 2019 08:06:03 +0000 (08:06 +0000)]
iw: Update to 5.0.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agohostapd: Update to 2.7
Michael Tremer [Fri, 22 Mar 2019 10:45:39 +0000 (11:45 +0100)]
hostapd: Update to 2.7

Enable to get randomness from getrandom() syscall instead
of opening /dev/random directly

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoless: update to 530
Peter Müller [Mon, 11 Mar 2019 20:25:00 +0000 (20:25 +0000)]
less: update to 530

Backporting package updates to IPFire 3.x, too...

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoguile: Update to 2.2.4
Stefan Schantl [Sun, 10 Mar 2019 14:41:17 +0000 (15:41 +0100)]
guile: Update to 2.2.4

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agolibgcrypt: Make sure that we are building with libgpg-error >= 1.25
Michael Tremer [Sat, 9 Mar 2019 15:40:15 +0000 (15:40 +0000)]
libgcrypt: Make sure that we are building with libgpg-error >= 1.25

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agogpgme: Update to 1.12.0
Michael Tremer [Sat, 9 Mar 2019 15:39:58 +0000 (15:39 +0000)]
gpgme: Update to 1.12.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agolibcap-ng: Update to 0.7.9
Stefan Schantl [Sun, 3 Mar 2019 09:47:17 +0000 (10:47 +0100)]
libcap-ng: Update to 0.7.9

* Re-enabled testsuite

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agogcc: Update to 8.3.0
Michael Tremer [Wed, 27 Feb 2019 22:01:11 +0000 (22:01 +0000)]
gcc: Update to 8.3.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agosuricata: Update to 4.0.6
Stefan Schantl [Sat, 23 Feb 2019 09:32:32 +0000 (10:32 +0100)]
suricata: Update to 4.0.6

This is a major update to the latest 4.0 series which does not require rust.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agolibhtp: Update to 0.5.29
Stefan Schantl [Sat, 23 Feb 2019 09:22:46 +0000 (10:22 +0100)]
libhtp: Update to 0.5.29

This is a minor release to the latest stable version of libhtp

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agopython: Update to 2.7.15
Michael Tremer [Fri, 22 Feb 2019 22:04:48 +0000 (22:04 +0000)]
python: Update to 2.7.15

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agonasm: Update to 2.14.02
Michael Tremer [Sun, 17 Feb 2019 11:06:57 +0000 (11:06 +0000)]
nasm: Update to 2.14.02

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agognutls: Update to 3.6.6
Michael Tremer [Sat, 16 Feb 2019 20:36:58 +0000 (20:36 +0000)]
gnutls: Update to 3.6.6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agolibtasn1: Update to 4.13
Michael Tremer [Sat, 16 Feb 2019 20:36:29 +0000 (20:36 +0000)]
libtasn1: Update to 4.13

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agolibunistring: Update to 0.9.10
Michael Tremer [Sat, 16 Feb 2019 20:35:12 +0000 (20:35 +0000)]
libunistring: Update to 0.9.10

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agonettle: Update to 3.4.1
Michael Tremer [Sat, 16 Feb 2019 20:34:37 +0000 (20:34 +0000)]
nettle: Update to 3.4.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoxz: Update to 5.2.4
Michael Tremer [Sat, 16 Feb 2019 17:53:23 +0000 (17:53 +0000)]
xz: Update to 5.2.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agogrep: Update to 3.3
Michael Tremer [Sat, 16 Feb 2019 17:42:28 +0000 (17:42 +0000)]
grep: Update to 3.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agotcpdump: Update to 4.9.2
Michael Tremer [Thu, 14 Feb 2019 21:33:26 +0000 (21:33 +0000)]
tcpdump: Update to 4.9.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agotransifex-client: Drop package
Michael Tremer [Thu, 14 Feb 2019 21:21:22 +0000 (21:21 +0000)]
transifex-client: Drop package

We no longer use this

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agompfr: Update to 4.0.2
Michael Tremer [Thu, 14 Feb 2019 21:15:38 +0000 (21:15 +0000)]
mpfr: Update to 4.0.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agomtr: Update to 0.92
Michael Tremer [Thu, 14 Feb 2019 21:02:16 +0000 (21:02 +0000)]
mtr: Update to 0.92

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agocurl: Update to 7.64.0
Michael Tremer [Thu, 14 Feb 2019 20:59:47 +0000 (20:59 +0000)]
curl: Update to 7.64.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoflex: Update to 2.6.4
Michael Tremer [Thu, 14 Feb 2019 20:56:40 +0000 (20:56 +0000)]
flex: Update to 2.6.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoglibc: Update to 2.29
Michael Tremer [Thu, 14 Feb 2019 20:08:21 +0000 (20:08 +0000)]
glibc: Update to 2.29

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agobison: Update to 3.3.2
Michael Tremer [Thu, 14 Feb 2019 20:05:38 +0000 (20:05 +0000)]
bison: Update to 3.3.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agocoreutils: Update to 8.30
Michael Tremer [Thu, 14 Feb 2019 18:03:31 +0000 (18:03 +0000)]
coreutils: Update to 8.30

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agounbound: Update to 1.9.0
Michael Tremer [Thu, 14 Feb 2019 16:33:43 +0000 (16:33 +0000)]
unbound: Update to 1.9.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agopcre: Enable JIT
Michael Tremer [Thu, 14 Feb 2019 16:27:11 +0000 (16:27 +0000)]
pcre: Enable JIT

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohtop: Update to 2.2.0
Michael Tremer [Thu, 14 Feb 2019 16:26:58 +0000 (16:26 +0000)]
htop: Update to 2.2.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agostrongswan: Update to 5.7.2
Michael Tremer [Tue, 22 Jan 2019 03:48:34 +0000 (03:48 +0000)]
strongswan: Update to 5.7.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohide kernel addresses in /proc against privileged users
Peter Müller [Mon, 21 Jan 2019 20:43:26 +0000 (21:43 +0100)]
hide kernel addresses in /proc against privileged users

In order to make local privilege escalation more harder, hide
kernel addresses in various /proc files against users with
root (or similar) permissions, too.

Common system hardening tools such as lynis recommend this.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agoreadline: Update to 8.0
Michael Tremer [Sun, 6 Jan 2019 07:50:27 +0000 (07:50 +0000)]
readline: Update to 8.0

This also bumps the compat package to 7.0 so that other applications
continue to function.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agodmidecode: update to 3.2
Peter Müller [Mon, 7 Jan 2019 17:24:29 +0000 (18:24 +0100)]
dmidecode: update to 3.2

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agotzdata: update to 2018i
Peter Müller [Sat, 5 Jan 2019 10:30:40 +0000 (11:30 +0100)]
tzdata: update to 2018i

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: enable IWLWIFI module.
Arne Fitzenreiter [Sun, 6 Jan 2019 13:17:32 +0000 (13:17 +0000)]
kernel: enable IWLWIFI module.

IWLWIFI seems disabled by a mistake. Enable it.

fixes #11867

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agotar: Update to 1.31
Michael Tremer [Fri, 4 Jan 2019 02:41:54 +0000 (02:41 +0000)]
tar: Update to 1.31

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agoed: Update to 1.15
Michael Tremer [Thu, 3 Jan 2019 23:02:09 +0000 (23:02 +0000)]
ed: Update to 1.15

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agoprevent kernel address space leak via dmesg or /proc files
Peter Müller [Thu, 3 Jan 2019 17:05:40 +0000 (18:05 +0100)]
prevent kernel address space leak via dmesg or /proc files

Enable runtime sysctl hardening in order to avoid kernel
addresses being disclosed via dmesg (in case it was built
in without restrictions) or various /proc files.

See https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
for further information.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agodracut: update to 048
Arne Fitzenreiter [Thu, 3 Jan 2019 13:49:25 +0000 (13:49 +0000)]
dracut: update to 048

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agoccache: Update to version 3.5.1
Michael Tremer [Thu, 3 Jan 2019 14:04:24 +0000 (14:04 +0000)]
ccache: Update to version 3.5.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Fix compiled-in version number
Michael Tremer [Thu, 3 Jan 2019 14:02:56 +0000 (14:02 +0000)]
kernel: Fix compiled-in version number

When we have a .0 release of the kernel, the internal kernel
versioning is 4.20.0, but the tarball is called 4.20 only.

This causes the kernel to look for its modules in the wrong place.

This patch overwrites the compiled-in version number so that
it is in sync with the directory of the installed modules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokmod: update to 25
Arne Fitzenreiter [Thu, 3 Jan 2019 12:28:26 +0000 (12:28 +0000)]
kmod: update to 25

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Build in AT keyboard support
Michael Tremer [Thu, 3 Jan 2019 10:56:30 +0000 (10:56 +0000)]
kernel: Build in AT keyboard support

This is the default PS/2 keyboard on virtual machines, some laptops
and so on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Enable MSR module
Michael Tremer [Sun, 30 Dec 2018 18:34:03 +0000 (18:34 +0000)]
kernel: Enable MSR module

This is required for cpupower

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Configure cpufreq governor to performance
Michael Tremer [Sun, 30 Dec 2018 14:28:53 +0000 (14:28 +0000)]
kernel: Configure cpufreq governor to performance

This patch also enabled all cpufreq drivers as modules

Fixes: #11373
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Change ASPM policy to default
Michael Tremer [Sun, 30 Dec 2018 14:23:52 +0000 (14:23 +0000)]
kernel: Change ASPM policy to default

Fixes: #11372
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Disable support for 6RD
Michael Tremer [Sun, 30 Dec 2018 14:22:13 +0000 (14:22 +0000)]
kernel: Disable support for 6RD

Fixes: #11370
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: configure: Pass arch as an extra argument
Michael Tremer [Sun, 30 Dec 2018 14:20:51 +0000 (14:20 +0000)]
kernel: configure: Pass arch as an extra argument

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Align ARM configuration with remaining architectures
Michael Tremer [Sun, 30 Dec 2018 00:20:09 +0000 (00:20 +0000)]
kernel: Align ARM configuration with remaining architectures

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Use host's spinlocks when running in PV mode
Michael Tremer [Sun, 30 Dec 2018 00:09:41 +0000 (00:09 +0000)]
kernel: Use host's spinlocks when running in PV mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: configure: Allow passing --arch= to edit a certain configuration
Michael Tremer [Sun, 30 Dec 2018 00:06:39 +0000 (00:06 +0000)]
kernel: configure: Allow passing --arch= to edit a certain configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Make all crypto acceleration a module
Michael Tremer [Sat, 29 Dec 2018 23:52:27 +0000 (23:52 +0000)]
kernel: Make all crypto acceleration a module

This will allow a slightly smaller kernel on many systems that
do not have any support for any crypto acceleration.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agokernel: Disable some unused network protocols
Michael Tremer [Sat, 29 Dec 2018 23:45:56 +0000 (23:45 +0000)]
kernel: Disable some unused network protocols

This disables BATMAN (which has been dropped some time ago
from userspace), L2TP and ebtables.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>