Development March 2023

development@lists.ipfire.org

11 participants
71 discussions

[PATCH] FHS: Allow /var/mail owned by root:mail
by Stefan Schantl 20 Mar '23

20 Mar '23

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/libpakfire/fhs.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libpakfire/fhs.c b/src/libpakfire/fhs.c index 8e85f29d..4582feaa 100644 --- a/src/libpakfire/fhs.c +++ b/src/libpakfire/fhs.c @@ -99,7 +99,7 @@ static const struct pakfire_fhs_check { { "/var/empty", S_IFDIR, 0755, "root", "root", 0 }, { "/var/lib", S_IFDIR, 0755, "root", "root", 0 }, { "/var/log", S_IFDIR, 0755, "root", "root", 0 }, - { "/var/mail", S_IFDIR, 0755, "root", "root", 0 }, + { "/var/mail", S_IFDIR, 0755, "root", "mail", 0 }, { "/var/opt", S_IFDIR, 0755, "root", "root", 0 }, { "/var/run", S_IFLNK, 0755, "root", "root", 0 }, { "/var/spool", S_IFDIR, 0755, "root", "root", 0 }, -- 2.30.2

1 0

[PATCH] FHS: Drop /usr/bin/su from list of allowed SUID binaries
by Stefan Schantl 20 Mar '23

20 Mar '23

In the Makefile (util-linx.nm) we specify some capabilities to avoid setting the suid bit. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/libpakfire/fhs.c | 1 - 1 file changed, 1 deletion(-) diff --git a/src/libpakfire/fhs.c b/src/libpakfire/fhs.c index f0ddc37c..8e85f29d 100644 --- a/src/libpakfire/fhs.c +++ b/src/libpakfire/fhs.c @@ -69,7 +69,6 @@ static const struct pakfire_fhs_check { { "/usr/bin/ksu", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/passwd", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/pkexec", S_IFREG, S_ISUID|0755, "root", "root", 0 }, - { "/usr/bin/su", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/sudo", S_IFREG, S_ISUID|0755, "root", "root", 0 }, // Any files in /usr/{,s}bin must be owned by root and have 0755 -- 2.30.2

1 0

[PATCH] Makefile.am: Fix typo defining the logdir
by Stefan Schantl 19 Mar '23

19 Mar '23

The correct value name should be "localstatedir" Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- Makefile.am | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile.am b/Makefile.am index 893f1b8..5dc4629 100644 --- a/Makefile.am +++ b/Makefile.am @@ -51,7 +51,7 @@ hooks_zonesdir = $(hooksdir)/zones triggersdir = $(networkdir)/triggers -logdir = $(localestatedir)/log/network +logdir = $(localstatedir)/log/network utildir = $(networkdir) CLEANFILES = -- 2.30.2

1 0

[PATCH] bind: Update to 9.16.39
by Matthias Fischer 18 Mar '23

18 Mar '23

For details see: https://downloads.isc.org/isc/bind9/9.16.39/doc/arm/html/notes.html#notes-f… "Notes for BIND 9.16.39 Feature Changes libuv support for receiving multiple UDP messages in a single recvmmsg() system call has been tweaked several times between libuv versions 1.35.0 and 1.40.0; the current recommended libuv version is 1.40.0 or higher. New rules are now in effect for running with a different version of libuv than the one used at compilation time. These rules may trigger a fatal error at startup: Building against or running with libuv versions 1.35.0 and 1.36.0 is now a fatal error. Running with libuv version higher than 1.34.2 is now a fatal error when named is built against libuv version 1.34.2 or lower. Running with libuv version higher than 1.39.0 is now a fatal error when named is built against libuv version 1.37.0, 1.38.0, 1.38.1, or 1.39.0. This prevents the use of libuv versions that may trigger an assertion failure when receiving multiple UDP messages in a single system call. [GL #3840] Bug Fixes named could crash with an assertion failure when adding a new zone into the configuration file for a name which was already configured as a member zone for a catalog zone. This has been fixed. [GL #3911]" When named starts up, it sends a query for the DNSSEC key for each configured trust anchor to determine whether the key has changed. In some unusual cases, the query might depend on a zone for which the server is itself authoritative, and would have failed if it were sent before the zone was fully loaded. This has now been fixed by delaying the key queries until all zones have finished loading. [GL #3673]" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/bind | 14 +++++++------- lfs/bind | 4 ++-- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index 49a56107e..aabaae6fa 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -271,24 +271,24 @@ usr/bin/nsupdate #usr/include/pk11/site.h #usr/include/pkcs11 #usr/include/pkcs11/pkcs11.h -usr/lib/libbind9-9.16.38.so +usr/lib/libbind9-9.16.39.so #usr/lib/libbind9.la #usr/lib/libbind9.so -usr/lib/libdns-9.16.38.so +usr/lib/libdns-9.16.39.so #usr/lib/libdns.la #usr/lib/libdns.so -usr/lib/libirs-9.16.38.so +usr/lib/libirs-9.16.39.so #usr/lib/libirs.la #usr/lib/libirs.so -usr/lib/libisc-9.16.38.so +usr/lib/libisc-9.16.39.so #usr/lib/libisc.la #usr/lib/libisc.so -usr/lib/libisccc-9.16.38.so +usr/lib/libisccc-9.16.39.so #usr/lib/libisccc.la #usr/lib/libisccc.so -usr/lib/libisccfg-9.16.38.so +usr/lib/libisccfg-9.16.39.so #usr/lib/libisccfg.la #usr/lib/libisccfg.so -usr/lib/libns-9.16.38.so +usr/lib/libns-9.16.39.so #usr/lib/libns.la #usr/lib/libns.so diff --git a/lfs/bind b/lfs/bind index 6782ab24a..584cb7e5a 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.16.38 +VER = 9.16.39 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = af74f3867837741102f9e1b9eb0fa44948131fc2122a5ea6a707b92408604d62f95350ff561ec98787ce516c96ef971b1a03d775aaba99ebc4ea334cd9800ed2 +$(DL_FILE)_BLAKE2 = d9fb51435dce11c8854084cc21de79df3ae6529baead76dcf27711bcff33469d1fd6fbd3366b61bc921f92850620c9b7464d4dbe08dd0c7e2f3e5e1c1100cb79 install : $(TARGET) -- 2.34.1

1 0

[PATCH] Update french translations
by Stefan Schantl 18 Mar '23

18 Mar '23

From: Stéphane Pautrel <stephane.pautrel(a)acb78.com> Signed-off-by: Stéphane Pautrel <stephane.pautrel(a)acb78.com> Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- langs/fr/cgi-bin/fr.pl | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index 6ef4075a1..bcfcec976 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -135,6 +135,9 @@ 'a connection with this name already exists' => 'Une connexion avec ce nom existe déjà.', 'abort' => 'Annuler', 'access allowed' => 'Accès autorisé de :', +'access point name' => 'Nom du point d\'accès', +'access point name is invalid' => 'Le nom du point d\'accès n\'est pas valide', +'access point name is required' => 'Le nom du point d\'accès est requis', 'access refused with this oinkcode' => 'Accès refusé avec ce code Oink', 'accounting' => 'Comptage', 'accounting user nonpdc' => 'Comptage - pas en mode contrôleur principal de domaine', @@ -346,7 +349,7 @@ 'advproxy log enabled' => 'Journaux activés ', 'advproxy log query' => 'Termes de recherche en rapports ', 'advproxy log settings' => 'Configuration des rapports', -'advproxy log useragent' => 'Rapport des robots (de recherche) ', +'advproxy log useragent' => 'Rapport robots (de recherche) ', 'advproxy max download size' => 'Volume de téléchargement max. (Ko) ', 'advproxy max size' => 'Volume d\'objet max. (Ko) ', 'advproxy max upload size' => 'Volume d\'envoi max. (Ko) ', @@ -690,7 +693,7 @@ 'core notice 1' => '<strong>Remarque :</strong> Une mise à jour est disponible depuis la version', 'core notice 2' => 'vers', 'core notice 3' => '', -'core update' => 'Mise à jour du coeur', +'core update' => 'Mise à jour du noyau', 'could not be opened' => 'ne peut pas être ouvert', 'could not connect to' => 'Impossible de se connecter à', 'could not connect to www ipcop org' => 'Impossible de se connecter à www.ipcop.org', @@ -828,6 +831,7 @@ 'dhcp dns update' => 'Mise à jour DNS', 'dhcp dns update algo' => 'Algorithme ', 'dhcp dns update secret' => 'Secret ', +'dhcp fixed ip address in dynamic range' => 'Adresse IP fixe dans la plage dynamique', 'dhcp fixed lease err1' => 'Pour un bail fixe, vous devez saisir l\'adresse MAC et/ou le nom d\'hôte.', 'dhcp fixed lease help1' => 'L\'adresse IP doit être saisie comme FQDN', 'dhcp make fixed lease' => 'Ajouter pour fixer les baux', @@ -1413,7 +1417,6 @@ 'hour-graph' => 'Heure', 'hours' => 'heure(s)', 'hours2' => 'Heures', -'ibod for dual isdn only' => 'iBOD peut seulement être utilisé avec un double ISDN.', 'icmp selected but no type' => 'ICMP est le protocole sélectionné, mais il n\'y a aucun type ICMP spécifié.', 'icmp type' => 'Type ICMP', 'id' => 'ID', @@ -1633,10 +1636,6 @@ 'iptmangles' => 'Table IP Mangle ', 'iptnats' => 'Traduction d\'adresses réseaux table IP ', 'ipts' => 'Tables IP ', -'isdn' => 'RNIS', -'isdn settings' => 'Réglages RNIS supplémentaires :', -'isdn1' => 'RNIS unique', -'isdn2' => 'RNIS double', 'itlb multihit' => 'ITLB - erreur vérification machine', 'january' => 'Janvier', 'javascript menu error1' => 'Si les menus déroulants ne fonctionnent pas, désactivez le Javascript sur la', @@ -1948,6 +1947,8 @@ 'open connections' => 'Connexions ouvertes', 'open to all' => 'Autoriser l\'accès externe à TOUS', 'openssl produced an error' => 'Une erreur a été produite par Openssl', +'openvpn cert expires soon' => 'Expire bientôt', +'openvpn cert has expired' => 'A expiré', 'openvpn client' => 'Client OpenVPN', 'openvpn default' => 'Par défaut', 'openvpn destination port used' => 'Le port de destination est déjà utilisé par un autre serveur OpenVPN.', @@ -2071,7 +2072,7 @@ 'pakfire core update auto' => 'Installer automatiquement les mises à jour du noyau et des modules :', 'pakfire core update level' => 'Version de mise à jour du noyau ', 'pakfire finished' => 'Pakfire a fini ! Retour...', -'pakfire finished error' => 'Pakfire a fini ! Des erreurs se sont produites, veuillez vérifier la sortie du journal avant de continuer.', +'pakfire finished error' => 'Pakfire a fini ! Des erreurs se sont produites, veuillez vérifier les rapports système des journaux avant de continuer.', 'pakfire health check' => 'Vérifier si le miroir est accessible (ping) :', 'pakfire install description' => 'Veuillez choisir un ou plusieurs modules dans la liste ci-dessous<br>et cliquer sur le signe PLUS pour le(s) installer.', 'pakfire install package' => 'Vous souhaitez installer le(s) module(s) suivant(s) : ', -- 2.30.2

1 0

[PATCH] macros: Define docdir
by Stefan Schantl 18 Mar '23

18 Mar '23

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- macros/arch.macro | 1 + 1 file changed, 1 insertion(+) diff --git a/macros/arch.macro b/macros/arch.macro index 32641015..2c41a979 100644 --- a/macros/arch.macro +++ b/macros/arch.macro @@ -13,6 +13,7 @@ localstatedir = /var lib = lib libdir = %{exec_prefix}/%{lib} includedir = %{prefix}/include +docdir = %{datadir}/doc infodir = %{datadir}/info mandir = %{datadir}/man firmwaredir = %{prefix}/lib/firmware -- 2.30.2

1 0

[PATCH] qemu: Drop unused firmware files and /var/run
by Stefan Schantl 17 Mar '23

17 Mar '23

* Drop firmware files for platforms we do not support. * Drop /var/run directory which violetes the FSH. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- qemu/qemu.nm | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/qemu/qemu.nm b/qemu/qemu.nm index 84a9f8d4d..f0ca0b84f 100644 --- a/qemu/qemu.nm +++ b/qemu/qemu.nm @@ -5,7 +5,7 @@ name = qemu version = 7.2.0 -release = 2 +release = 3 groups = Applications/Virtualization url = https://www.qemu.org @@ -92,6 +92,19 @@ build # Remove ivshm stuff rm -vf %{BUILDROOT}%{bindir}/ivshmem* %{BUILDROOT}%{mandir}/ivshmem* + # Remove deprecated run directory. + rm -rvf %{BUILDROOT}/var/run + + # Remove firmware files for non supported platforms. + rm -rvf %{BUILDROOT}%{datadir}/%{name}/hppa-firmware.img + rm -rvf %{BUILDROOT}%{datadir}/%{name}/openbios-ppc + rm -rvf %{BUILDROOT}%{datadir}/%{name}/openbios-sparc32 + rm -rvf %{BUILDROOT}%{datadir}/%{name}/openbios-sparc64 + rm -rvf %{BUILDROOT}%{datadir}/%{name}/palcode-clipper + rm -rvf %{BUILDROOT}%{datadir}/%{name}/s390-ccw.img + rm -rvf %{BUILDROOT}%{datadir}/%{name}/s390-netboot.img + rm -rvf %{BUILDROOT}%{datadir}/%{name}/u-boot.e500 + # Make firmware non-executable find %{BUILDROOT}%{datadir}/%{name} -type f -executable | xargs chmod -v a-x end -- 2.30.2

1 0

[PATCH] perl: Fix library permissions
by Stefan Schantl 17 Mar '23

17 Mar '23

They did not fit the FSH and our own specs. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- perl/perl.nm | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/perl/perl.nm b/perl/perl.nm index 3a7bad525..a19be3dcc 100644 --- a/perl/perl.nm +++ b/perl/perl.nm @@ -10,7 +10,7 @@ ver_plevel = 0 version = %{ver_major}.%{ver_minor}.%{ver_plevel} # Never reset release in this package, just increase. -release = 3 +release = 4 thisver = %{version}-%{_release} @@ -143,6 +143,9 @@ build install_cmds # Remove precreated directories rm -rfv %{BUILDROOT}/usr/local + + # Fix filer permissions of the so files. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" -exec chmod 755 {} \; end end -- 2.30.2

1 0

[PATCH] header.pl: Add reference to colors.txt into header.pl
by Adolf Belka 17 Mar '23

17 Mar '23

- With change of common css entries into header.pl with commit https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=b52a84ddc77f9db7e4ad7b1… I had missed that color20 and color22 etc, that come from colors.txt, are not known in header.pl so that the alternate colours in tables were missing. Even though I tested the previous commit I obviously did not look well enough because I missed that the tables had no alternate colours. I just found it now when looking at Core Update 174 Testing. - Confirmed by copying this version of header.pl into my CU174 Testing system and the alternate colour rows came back again as they should be. I am sure now that they are correct. Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/cfgroot/header.pl | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/cfgroot/header.pl b/config/cfgroot/header.pl index 955ed2646..3f80ce9b4 100644 --- a/config/cfgroot/header.pl +++ b/config/cfgroot/header.pl @@ -17,6 +17,9 @@ use HTML::Entities(); use Socket; use Time::Local; +our %color = (); +&General::readhash("/srv/web/ipfire/html/themes/ipfire/include/colors.txt", \%color); + $|=1; # line buffering $Header::revision = 'final'; -- 2.39.2

2 1

[PATCH] util-linux: Do no create /run/uuidd
by Stefan Schantl 17 Mar '23

17 Mar '23

The folder will be created by systemd and violates the FSH. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- util-linux/util-linux.nm | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/util-linux/util-linux.nm b/util-linux/util-linux.nm index 684e57b0a..f5290c1c8 100644 --- a/util-linux/util-linux.nm +++ b/util-linux/util-linux.nm @@ -6,7 +6,7 @@ name = util-linux ver_maj = 2.38 version = %{ver_maj}.1 -release = 1 +release = 2 maintainer = Stefan Schantl <stefan.schantl(a)ipfire.org> groups = System/Base @@ -70,7 +70,6 @@ build %{BUILDROOT}/var/lib/libuuid \ %{BUILDROOT}/var/lib/hwclock \ %{BUILDROOT}/usr/share/man/man8 \ - %{BUILDROOT}/run/uuidd \ %{BUILDROOT}/var/log touch %{BUILDROOT}/var/log/lastlog -- 2.30.2

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development March 2023