From 3e60ed14e2baf771d3d4f6f86f9ff3054b99aa87 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Peter=20M=C3=BCller?= Date: Wed, 2 Jun 2021 21:37:55 +0200 Subject: [PATCH] Clean up whatever remained from ALGs in userspace MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit This patch removes translations, directives in LFS files, and ALG shared object files which all became orphaned after we disabled ALGs due to NAT Slipstreaming vulnerability in Core Update 155. Signed-off-by: Peter Müller Signed-off-by: Michael Tremer --- config/rootfiles/common/conntrack-tools | 18 +++++++++--------- config/rootfiles/core/158/update.sh | 1 + langs/de/cgi-bin/de.pl | 1 - langs/en/cgi-bin/en.pl | 1 - langs/fr/cgi-bin/fr.pl | 1 - langs/tr/cgi-bin/tr.pl | 1 - lfs/configroot | 5 ----- 7 files changed, 10 insertions(+), 18 deletions(-) diff --git a/config/rootfiles/common/conntrack-tools b/config/rootfiles/common/conntrack-tools index 27161b1fb5..b6632ec079 100644 --- a/config/rootfiles/common/conntrack-tools +++ b/config/rootfiles/common/conntrack-tools @@ -1,24 +1,24 @@ #usr/lib/conntrack-tools #usr/lib/conntrack-tools/ct_helper_amanda.la -usr/lib/conntrack-tools/ct_helper_amanda.so +#usr/lib/conntrack-tools/ct_helper_amanda.so #usr/lib/conntrack-tools/ct_helper_dhcpv6.la #usr/lib/conntrack-tools/ct_helper_dhcpv6.so #usr/lib/conntrack-tools/ct_helper_ftp.la -usr/lib/conntrack-tools/ct_helper_ftp.so +#usr/lib/conntrack-tools/ct_helper_ftp.so #usr/lib/conntrack-tools/ct_helper_mdns.la -usr/lib/conntrack-tools/ct_helper_mdns.so +#usr/lib/conntrack-tools/ct_helper_mdns.so #usr/lib/conntrack-tools/ct_helper_rpc.la -usr/lib/conntrack-tools/ct_helper_rpc.so +#usr/lib/conntrack-tools/ct_helper_rpc.so #usr/lib/conntrack-tools/ct_helper_sane.la -usr/lib/conntrack-tools/ct_helper_sane.so +#usr/lib/conntrack-tools/ct_helper_sane.so #usr/lib/conntrack-tools/ct_helper_slp.la -usr/lib/conntrack-tools/ct_helper_slp.so +#usr/lib/conntrack-tools/ct_helper_slp.so #usr/lib/conntrack-tools/ct_helper_ssdp.la -usr/lib/conntrack-tools/ct_helper_ssdp.so +#usr/lib/conntrack-tools/ct_helper_ssdp.so #usr/lib/conntrack-tools/ct_helper_tftp.la -usr/lib/conntrack-tools/ct_helper_tftp.so +#usr/lib/conntrack-tools/ct_helper_tftp.so #usr/lib/conntrack-tools/ct_helper_tns.la -usr/lib/conntrack-tools/ct_helper_tns.so +#usr/lib/conntrack-tools/ct_helper_tns.so usr/sbin/conntrack usr/sbin/conntrackd usr/sbin/nfct diff --git a/config/rootfiles/core/158/update.sh b/config/rootfiles/core/158/update.sh index 68fe116a99..2568ea836c 100644 --- a/config/rootfiles/core/158/update.sh +++ b/config/rootfiles/core/158/update.sh @@ -36,6 +36,7 @@ rm -vrf \ /etc/rc.d/init.d/upnpd \ /etc/rc.d/init.d/networking/red.down/10-miniupnpd \ /etc/rc.d/init.d/networking/red.up/10-miniupnpd \ + /usr/lib/conntrack-tools \ /usr/lib/libixml.so.* \ /usr/lib/libupnp.so.* \ /var/ipfire/upnp diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 95af3155b5..0bc579cd26 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -437,7 +437,6 @@ 'alt vpn' => 'VPNs', 'and' => 'Und', 'apcupsd' => 'APC-UPS Status', -'application layer gateways' => 'Application-Layer-Gateways', 'apply' => 'Jetzt anwenden', 'april' => 'April', 'archive not exist' => 'Konfigurationsarchiv existiert nicht', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index d867057727..1c69b37988 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -436,7 +436,6 @@ 'and' => 'And', 'ansi t1.483' => 'TO BE REMOVED', 'apcupsd' => 'APC-UPS status', -'application layer gateways' => 'Application Layer Gateways', 'apply' => 'Apply now', 'april' => 'April', 'archive not exist' => 'Configuration archive does not exist', diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index 3011094772..7cabaccdec 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -442,7 +442,6 @@ 'alt vpn' => 'VPNs', 'and' => 'Et', 'apcupsd' => 'Statut UPS-APC', -'application layer gateways' => 'Passerelles de couche d\'application', 'apply' => 'Appliquer maintenant', 'april' => 'Avril', 'archive not exist' => 'L\'archive de configuration n\'existe pas', diff --git a/langs/tr/cgi-bin/tr.pl b/langs/tr/cgi-bin/tr.pl index 36c4782d67..e02320a582 100644 --- a/langs/tr/cgi-bin/tr.pl +++ b/langs/tr/cgi-bin/tr.pl @@ -424,7 +424,6 @@ 'and' => 've', 'ansi t1.483' => 'KALDIRILACAK', 'apcupsd' => 'APC-UPS durumu', -'application layer gateways' => 'Uygulama Katmanı Ağ Geçitleri', 'apply' => 'Şimdi uygula', 'april' => 'Nisan', 'archive not exist' => 'Yapılandırma arşivi yok', diff --git a/lfs/configroot b/lfs/configroot index 02b2883ba4..c528bd6d96 100644 --- a/lfs/configroot +++ b/lfs/configroot @@ -138,11 +138,6 @@ $(TARGET) : cp $(DIR_SRC)/config/suricata/convert-snort /usr/sbin/convert-snort cp $(DIR_SRC)/config/suricata/convert-ids-modifysids-file /usr/sbin/convert-ids-modifysids-file - # Add conntrack helper default settings - for proto in AMANDA FTP H323 IRC PPTP SIP TFTP; do \ - echo "CONNTRACK_$${proto}=off" >> $(CONFIG_ROOT)/optionsfw/settings; \ - done - # set converters executable chmod 755 /usr/sbin/convert-* -- 2.39.2