Development November 2023

development@lists.ipfire.org

11 participants
45 discussions

[PATCH] elfutils: Update to version 0.190
by Adolf Belka 10 Nov '23

10 Nov '23

- Update from version 0.189 to 0.190 - Update of rootfile - Changelog 0.190 CONTRIBUTING: Switch from real name policy to known identity policy. Updated ChangeLog policy (no more separate ChangeLog files). There is a SECURITY bug policy now. The default branch is now 'main'. libelf: Add RELR support. libdw: Recognize .debug_[ct]u_index sections readelf: Support readelf -Ds, --use-dynamic --symbol. Support .gdb_index version 9 scrlines: New tool that compiles a list of source files associated with a specified dwarf/elf file. debuginfod: Schema change (reindexing required, sorry!) for a 60% compression in filename representation, which was a large part of the sqlite index; also, more deliberate sqlite -wal management during scanning using the --scan-checkpoint option. backends: Various LoongArch updates. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/elfutils | 8 +++++--- lfs/elfutils | 6 +++--- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/config/rootfiles/packages/elfutils b/config/rootfiles/packages/elfutils index 85a6f25f4..f7d56ad89 100644 --- a/config/rootfiles/packages/elfutils +++ b/config/rootfiles/packages/elfutils @@ -11,6 +11,7 @@ usr/bin/eu-objdump usr/bin/eu-ranlib usr/bin/eu-readelf usr/bin/eu-size +usr/bin/eu-srcfiles usr/bin/eu-stack usr/bin/eu-strings usr/bin/eu-strip @@ -27,15 +28,15 @@ usr/bin/eu-unstrip #usr/include/gelf.h #usr/include/libelf.h #usr/include/nlist.h -usr/lib/libasm-0.189.so +usr/lib/libasm-0.190.so #usr/lib/libasm.a #usr/lib/libasm.so usr/lib/libasm.so.1 -usr/lib/libdw-0.189.so +usr/lib/libdw-0.190.so #usr/lib/libdw.a #usr/lib/libdw.so usr/lib/libdw.so.1 -usr/lib/libelf-0.189.so +usr/lib/libelf-0.190.so #usr/lib/libelf.a #usr/lib/libelf.so usr/lib/libelf.so.1 @@ -50,6 +51,7 @@ usr/lib/libelf.so.1 #usr/share/locale/uk/LC_MESSAGES/elfutils.mo #usr/share/man/man1/eu-elfclassify.1 #usr/share/man/man1/eu-readelf.1 +#usr/share/man/man1/eu-srcfiles.1 #usr/share/man/man3/elf_begin.3 #usr/share/man/man3/elf_clone.3 #usr/share/man/man3/elf_getdata.3 diff --git a/lfs/elfutils b/lfs/elfutils index c262c45f4..9fb69af62 100644 --- a/lfs/elfutils +++ b/lfs/elfutils @@ -26,7 +26,7 @@ include Config SUMMARY = Higher-level library to access ELF files -VER = 0.189 +VER = 0.190 THISAPP = elfutils-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = elfutils -PAK_VER = 9 +PAK_VER = 10 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 30596271e14cf3408326abc38a9775b849b8cb0ee119a5455df9434a7d3b9a57afb15e0236a179a26c7bd400d303749964c9d6350c419f747784fd99d12517e0 +$(DL_FILE)_BLAKE2 = 9934aff08f1898377708b28595fb52130ef9f80408132ac7d306845b10672ba45cf1ac69783da07b3eea9fd647741d44da45b8b2626c45a768cb2844c6186513 install : $(TARGET) -- 2.42.1

1 12

Core Update 181 (testing) report
by Peter Müller 07 Nov '23

07 Nov '23

Hello *, Core Update 181 (testing; https://blog.ipfire.org/post/ipfire-2-27-core-update-181-is-available-for-t…) is running here for about 24 hours by now without any issues observed so far. Tested IPFire functionalities in detail: - PPPoE dial-up via a DSL connection - IPsec (N2N connections only) - Squid (authentication enabled, using an upstream proxy) - OpenVPN (RW connections only) - IPS/Suricata (with Emerging Threats community ruleset enabled) - Guardian - Quality of Service - DNS (using DNS over TLS and strict QNAME minimisation) - Dynamic DNS - Tor (relay mode) I am looking forward to the release of this Core Update. Thanks, and best regards, Peter Müller

2 1

[PATCH] firewall: Reject outgoing TCP connections to port 25 by default
by Peter Müller 05 Nov '23

05 Nov '23

This will affect new IPFire installations only, implementing a long-standing BCP for preemptively combating botnet spam. Reject is chosen over drop to reduce the likelihood for confusion during network troubleshooting. Cc: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Tested-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/firewall/config | 1 + lfs/configroot | 5 +++-- 2 files changed, 4 insertions(+), 2 deletions(-) create mode 100644 config/firewall/config diff --git a/config/firewall/config b/config/firewall/config new file mode 100644 index 000000000..c871576f2 --- /dev/null +++ b/config/firewall/config @@ -0,0 +1 @@ +1,REJECT,FORWARDFW,ON,std_net_src,ALL,std_net_tgt,RED,,TCP,,,ON,,,cust_srv,SMTP,Block port 25 (TCP) for outgoing connections to the internet,,,,,,,,,,00:00,00:00,,AUTO,,dnat,,,,,second diff --git a/lfs/configroot b/lfs/configroot index 2c09ae4a8..66efe04b5 100644 --- a/lfs/configroot +++ b/lfs/configroot @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -64,7 +64,7 @@ $(TARGET) : for i in auth/users backup/include.user backup/exclude.user \ captive/settings captive/agb.txt captive/clients captive/voucher_out certs/index.txt certs/index.txt.attr ddns/config ddns/settings ddns/ipcache dhcp/settings \ dhcp/fixleases dhcp/advoptions dhcp/dhcpd.conf.local dns/settings dns/servers dnsforward/config ethernet/aliases ethernet/settings ethernet/known_nics ethernet/scanned_nics \ - ethernet/wireless extrahd/scan extrahd/devices extrahd/partitions extrahd/settings firewall/settings firewall/config firewall/locationblock firewall/input firewall/outgoing \ + ethernet/wireless extrahd/scan extrahd/devices extrahd/partitions extrahd/settings firewall/settings firewall/locationblock firewall/input firewall/outgoing \ fwhosts/customnetworks fwhosts/customhosts fwhosts/customgroups fwhosts/customservicegrp fwhosts/customlocationgrp fwlogs/ipsettings fwlogs/portsettings ipblocklist/modified \ ipblocklist/settings mac/settings main/hosts main/routing main/security main/settings optionsfw/settings \ ovpn/ccd.conf ovpn/ccdroute ovpn/ccdroute2 pakfire/settings portfw/config ppp/settings-1 ppp/settings-2 ppp/settings-3 ppp/settings-4 \ @@ -102,6 +102,7 @@ $(TARGET) : cp $(DIR_SRC)/config/cfgroot/logging-settings $(CONFIG_ROOT)/logging/settings cp $(DIR_SRC)/config/cfgroot/ethernet-vlans $(CONFIG_ROOT)/ethernet/vlans cp $(DIR_SRC)/langs/list $(CONFIG_ROOT)/langs/ + cp $(DIR_SRC)/config/firewall/config $(CONFIG_ROOT)/firewall/config cp $(DIR_SRC)/config/firewall/convert-xtaccess /usr/sbin/convert-xtaccess cp $(DIR_SRC)/config/firewall/convert-outgoingfw /usr/sbin/convert-outgoingfw cp $(DIR_SRC)/config/firewall/convert-dmz /usr/sbin/convert-dmz -- 2.35.3

2 1

[PATCH] kernel: update to 6.1.61
by Arne Fitzenreiter 02 Nov '23

02 Nov '23

Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> --- config/kernel/kernel.config.aarch64-ipfire | 2 +- config/kernel/kernel.config.x86_64-ipfire | 2 +- lfs/linux | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire index 76655eabf..2a2cba76d 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 6.1.60-ipfire Kernel Configuration +# Linux/arm64 6.1.61-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index 6d646c618..9375ddf79 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.1.60-ipfire Kernel Configuration +# Linux/x86 6.1.61-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/lfs/linux b/lfs/linux index ca82b6522..bd60cb5a6 100644 --- a/lfs/linux +++ b/lfs/linux @@ -24,7 +24,7 @@ include Config -VER = 6.1.60 +VER = 6.1.61 ARM_PATCHES = 6.1.y-ipfire2 THISAPP = linux-$(VER) @@ -75,7 +75,7 @@ objects = \ $(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE) arm-multi-patches-$(ARM_PATCHES).patch.xz = $(URL_IPFIRE)/arm-multi-patches-$(ARM_PATCHES).patch.xz -$(DL_FILE)_BLAKE2 = 6d6723dd839b9003ea2a46be849e36516a97497ba3743860c8081795b372c70536465c46defd6ab4f97e81127b1bf40d78270b1a3a721a7331a935d1ef8417c4 +$(DL_FILE)_BLAKE2 = b5177aec27fb2fd0e6c846b34194c35a2435894f46ef74f282c3dd5f06b1e01c968fe50664a6e1342d0098f709a90a0d7ece0b2780f90c684889e93876cccc87 arm-multi-patches-$(ARM_PATCHES).patch.xz_BLAKE2 = 7afc460562fb24bcd75784fc79de768f9b60780aedd88d1a847927169e31920bbb475b1ac1466c4a224a7876d16bd8d465b96202de12b74f6e2ccbfcec731ad3 install : $(TARGET) -- 2.42.0

1 0

pakfire-builder problems after git pull
by Adolf Belka 02 Nov '23

02 Nov '23

Hi Michael, I just ran git pull which took me to commit build: Add implicit dist() when a makefile is passed -- followed by make and make install. Running pakfire-builder build beep/beep.nm gave the error message "Segmentation fault" Rolling back to cli: pakfire-builder: Implement "image create" then worked with beep fine. Then tried git pull, make, make install again and this time beep built without any problems. Then I tried sqlite and I got the segmentation fault again. Then I rolled back and sqlite built okay. Then ran sqlite again and this time part way through building my laptop logged out from my session. Logged back in and ran sqlite again and this after a short while everything froze and I had to reset the laptop. So rolling back to cli: pakfire-builder: Implement "image create" Does not stop the problem happening it just seems to show itself in different forms. I have now rolled back to cli: pakfire: Implement --yes which I think is where my last git pull had placed me. Running pakfire-builder on beep twice and sqlite four times has given no problems so that commit stage is confirmed good. Let me know if there is anything else I should try to narrow the problem down. Regards, Adolf. -- Sent from my laptop

3 16

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development November 2023