Development September 2023

development@lists.ipfire.org

10 participants
81 discussions

[PATCH 1/2] kernel: enable CONFIG_INPUT_EUDEV
by Arne Fitzenreiter 15 Sep '23

15 Sep '23

this is needed for ACPI power button handling --- kernel/config-generic | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/config-generic b/kernel/config-generic index d8b106c43..dc255842c 100644 --- a/kernel/config-generic +++ b/kernel/config-generic @@ -2800,7 +2800,7 @@ CONFIG_INPUT_VIVALDIFMAP=y # # CONFIG_INPUT_MOUSEDEV is not set # CONFIG_INPUT_JOYDEV is not set -# CONFIG_INPUT_EVDEV is not set +CONFIG_INPUT_EVDEV=m # CONFIG_INPUT_EVBUG is not set # -- 2.39.2

1 1

[PATCH] spectre-meltdown-checker: Update to 0.46
by Peter Müller 15 Sep '23

15 Sep '23

See https://github.com/speed47/spectre-meltdown-checker/releases/tag/v0.46 for this version's release notes. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/spectre-meltdown-checker | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/spectre-meltdown-checker b/lfs/spectre-meltdown-checker index bfb429363..4bfe5274f 100644 --- a/lfs/spectre-meltdown-checker +++ b/lfs/spectre-meltdown-checker @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Spectre & Meltdown Vulnerability Checker -VER = 0.45 +VER = 0.46 THISAPP = spectre-meltdown-checker-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = spectre-meltdown-checker -PAK_VER = 6 +PAK_VER = 7 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 14d49f40458167ab9af04cc31c9a0b9f8cb5f1e9417f5ac0bab0290be01cf14a737c716d8d28873fee1870535c0b36a56dac2d39f2cc7a000d27f0643a94cff7 +$(DL_FILE)_BLAKE2 = 355469c2176fffa8fb40695b47174959c9112e66cd870545ed424ef7b6ef4c10a5aa94bfbc6912510c979e16b0f8a18c0b822200eb69e9ded8300305d779fa79 install : $(TARGET) -- 2.39.2

1 0

[PATCH 1/2] Tor: Update to 0.4.8.5
by Peter Müller 14 Sep '23

14 Sep '23

Changes in version 0.4.8.5 - 2023-08-30 Quick second release after the first stable few days ago fixing minor annoying bugfixes creating log BUG stacktrace. We also fix BSD compilation failures and PoW unit test. o Minor features (fallbackdir): - Regenerate fallback directories generated on August 30, 2023. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2023/08/30. o Minor bugfix (NetBSD, compilation): - Fix compilation issue on NetBSD by avoiding an unnecessary dependency on "huge" page mappings in Equi-X. Fixes bug 40843; bugfix on 0.4.8.1-alpha. o Minor bugfix (NetBSD, testing): - Fix test failures in "crypto/hashx" and "slow/crypto/equix" on x86_64 and aarch64 NetBSD hosts, by adding support for PROT_MPROTECT() flags. Fixes bug 40844; bugfix on 0.4.8.1-alpha. o Minor bugfixes (conflux): - Demote a relay-side warn about too many legs to ProtocolWarn, as there are conditions that it can briefly happen during set construction. Also add additional set logging details for all error cases. Fixes bug 40841; bugfix on 0.4.8.1-alpha. - Prevent non-fatal assert stacktrace caused by using conflux sets during their teardown process. Fixes bug 40842; bugfix on 0.4.8.1-alpha. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/tor | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tor b/lfs/tor index f735b0ca4..d7be53a1c 100644 --- a/lfs/tor +++ b/lfs/tor @@ -26,7 +26,7 @@ include Config SUMMARY = Anonymizing overlay network for TCP (The onion router) -VER = 0.4.8.4 +VER = 0.4.8.5 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 79 +PAK_VER = 80 DEPS = libseccomp @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e283d828fede259b1186b45214d466ff7ee79c835d68d0253537cd44b4dfdc4effe97ffb864d788eb0c65e7c09dc79673b1f191662c3641917a36af935cb9e7f +$(DL_FILE)_BLAKE2 = 71a4807284ecefc4a18d6bc15ce798844304f860338b786590779fb171f851d630e8af3114dbc84fe854561e0085dcb147b4dd87787988a8fb6c3628bfcc8175 install : $(TARGET) -- 2.39.2

1 1

[PATCH] logrotate: Rotate wtmp files monthly, and keep them for a year
by Peter Müller 14 Sep '23

14 Sep '23

This prevents "last" being rendered unusable, and allows for better and faster auditing of previous logins. Fixes: #13322 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/etc/logrotate.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/etc/logrotate.conf b/config/etc/logrotate.conf index 0b6b48573..c5f9883c7 100644 --- a/config/etc/logrotate.conf +++ b/config/etc/logrotate.conf @@ -15,9 +15,9 @@ include /etc/logrotate.d # wtmp /var/log/wtmp { - weekly + monthly create 0664 root utmp - rotate 1 + rotate 12 } /var/log/httpd/access_log /var/log/httpd/error_log /var/log/httpd/ssl_request_log /var/log/httpd/ssl_engine_log { -- 2.39.2

1 0

[PATCH] postfix: Update to version 3.8.2
by Adolf Belka 13 Sep '23

13 Sep '23

- Update from version 3.8.1 to 3.8.2 - Update of rootfile not required - Changelog 3.8.2 Bugfix (defect introduced: Postfix alpha, 19980207): the valid_hostname() check in the Postfix DNS client library was blocking unusual but legitimate wildcard names (*.name) in some DNS lookup results and lookup requests. Examples: name class/type result *.one.example IN CNAME *.other.example *.other.example IN A 10.0.0.1 *.other.example IN TLSA ..certificate info... Such syntax is blesed in RFC 1034 section 4.3.3. Bugfix (defect introduced: Postfix 3.0, 20140218): when an address verification probe fails during or after an opportunistic TLS handshake, don't enforce a minimum time-in-queue before falling back to plaintext. Problem reported by Serg. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/postfix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/postfix b/lfs/postfix index f2ae45007..532ec37ca 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -26,7 +26,7 @@ include Config SUMMARY = A fast, secure, and flexible mailer -VER = 3.8.1 +VER = 3.8.2 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 41 +PAK_VER = 42 DEPS = @@ -70,7 +70,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 83c043d6e74cbbf0c5d739838ff99d4905aa711b13483fe0f427956b962c432e6f76d9828b5c141260e210c9605ac260df950d273d5729c36666c935a3ed4518 +$(DL_FILE)_BLAKE2 = 233693e088901e8ed986e34d60b55fb6b786c37868095ab914e6049c5ad6aee09f07d3b5d1f2bec64d8570e215bb15196760d30074cd8ddfaeff3897ad117b81 install : $(TARGET) -- 2.42.0

1 0

[PATCH] alsa: Update to version 1.2.10
by Adolf Belka 13 Sep '23

13 Sep '23

- Update alsa-lib, alsa-utils & alsa-ucn-conf from version 1.2.9 to 1.2.10 - Update of rootfile - Changelog is too large to include here. Details can be found at https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/alsa | 35 ++++++++++++++++++++++++++++++++++ lfs/alsa | 14 +++++++------- 2 files changed, 42 insertions(+), 7 deletions(-) diff --git a/config/rootfiles/packages/alsa b/config/rootfiles/packages/alsa index 8ec82d8c3..a18368e4a 100644 --- a/config/rootfiles/packages/alsa +++ b/config/rootfiles/packages/alsa @@ -141,6 +141,7 @@ usr/bin/aseqnet usr/bin/aserver usr/bin/axfer usr/bin/iecset +usr/bin/nhlt-dmic-info usr/bin/speaker-test #usr/include/alsa #usr/include/alsa/asoundef.h @@ -189,6 +190,8 @@ usr/bin/speaker-test #usr/include/alsa/sound/uapi/tlv.h #usr/include/alsa/timer.h #usr/include/alsa/topology.h +#usr/include/alsa/ump.h +#usr/include/alsa/ump_msg.h #usr/include/alsa/use-case.h #usr/include/alsa/version.h #usr/include/asoundlib.h @@ -572,6 +575,9 @@ usr/share/alsa/ucm2/Rockchip/max98090/max98090.conf #usr/share/alsa/ucm2/Rockchip/rk3399-gru-sound usr/share/alsa/ucm2/Rockchip/rk3399-gru-sound/HiFi.conf usr/share/alsa/ucm2/Rockchip/rk3399-gru-sound/rk3399-gru-sound.conf +#usr/share/alsa/ucm2/Rockchip/rk3588-es8316 +usr/share/alsa/ucm2/Rockchip/rk3588-es8316/HiFi.conf +usr/share/alsa/ucm2/Rockchip/rk3588-es8316/rk3588-es8316.conf #usr/share/alsa/ucm2/Rockchip/rk817-sound usr/share/alsa/ucm2/Rockchip/rk817-sound/HiFi.conf usr/share/alsa/ucm2/Rockchip/rk817-sound/rk817-sound.conf @@ -584,9 +590,16 @@ usr/share/alsa/ucm2/Samsung/snow/snow.conf usr/share/alsa/ucm2/Tegra/alc5632/HiFi.conf usr/share/alsa/ucm2/Tegra/alc5632/Record.conf usr/share/alsa/ucm2/Tegra/alc5632/alc5632.conf +#usr/share/alsa/ucm2/Tegra/max98089 +usr/share/alsa/ucm2/Tegra/max98089/lge-x3-HiFi.conf +usr/share/alsa/ucm2/Tegra/max98089/lge-x3-VoiceCall.conf +usr/share/alsa/ucm2/Tegra/max98089/lge-x3.conf #usr/share/alsa/ucm2/Tegra/max98090 usr/share/alsa/ucm2/Tegra/max98090/HiFi.conf usr/share/alsa/ucm2/Tegra/max98090/max98090.conf +#usr/share/alsa/ucm2/Tegra/rt5631 +usr/share/alsa/ucm2/Tegra/rt5631/Asus-Transformer-HiFi.conf +usr/share/alsa/ucm2/Tegra/rt5631/Asus-Transformer.conf #usr/share/alsa/ucm2/Tegra/rt5640 usr/share/alsa/ucm2/Tegra/rt5640/Google-Nexus-7-HiFi.conf usr/share/alsa/ucm2/Tegra/rt5640/Google-Nexus-7.conf @@ -596,6 +609,8 @@ usr/share/alsa/ucm2/Tegra/tegra-hda/tegra-hda.conf #usr/share/alsa/ucm2/Tegra/wm8903 usr/share/alsa/ucm2/Tegra/wm8903/Acer-A500-HiFi.conf usr/share/alsa/ucm2/Tegra/wm8903/Acer-A500.conf +usr/share/alsa/ucm2/Tegra/wm8903/Asus-Transformer-HiFi.conf +usr/share/alsa/ucm2/Tegra/wm8903/Asus-Transformer.conf #usr/share/alsa/ucm2/USB-Audio #usr/share/alsa/ucm2/USB-Audio/Arturia usr/share/alsa/ucm2/USB-Audio/Arturia/Minifuse-12-HiFi.conf @@ -667,6 +682,9 @@ usr/share/alsa/ucm2/USB-Audio/Steinberg/UR24C.conf usr/share/alsa/ucm2/USB-Audio/Steinberg/UR44-HiFi.conf usr/share/alsa/ucm2/USB-Audio/Steinberg/UR44.conf usr/share/alsa/ucm2/USB-Audio/USB-Audio.conf +#usr/share/alsa/ucm2/USB-Audio/UniversalAudio +usr/share/alsa/ucm2/USB-Audio/UniversalAudio/Volt2-HiFi.conf +usr/share/alsa/ucm2/USB-Audio/UniversalAudio/Volt2.conf #usr/share/alsa/ucm2/codecs #usr/share/alsa/ucm2/codecs/cx2072x usr/share/alsa/ucm2/codecs/cx2072x/DisableSeq.conf @@ -836,6 +854,10 @@ usr/share/alsa/ucm2/conf.d/acp/acp.conf usr/share/alsa/ucm2/conf.d/acp3xalc5682m98/acp3xalc5682m98.conf #usr/share/alsa/ucm2/conf.d/acp5x usr/share/alsa/ucm2/conf.d/acp5x/Valve-Jupiter-1.conf +#usr/share/alsa/ucm2/conf.d/acp62 +usr/share/alsa/ucm2/conf.d/acp62/acp62.conf +#usr/share/alsa/ucm2/conf.d/acp63 +usr/share/alsa/ucm2/conf.d/acp63/acp63.conf #usr/share/alsa/ucm2/conf.d/acp6x usr/share/alsa/ucm2/conf.d/acp6x/acp6x.conf #usr/share/alsa/ucm2/conf.d/bdw-rt5677 @@ -878,6 +900,8 @@ usr/share/alsa/ucm2/conf.d/mt8365-evk/mt8365-evk.conf usr/share/alsa/ucm2/conf.d/mtk-rt5650/mtk-rt5650.conf #usr/share/alsa/ucm2/conf.d/rk3399-gru-soun usr/share/alsa/ucm2/conf.d/rk3399-gru-soun/rk3399-gru-soun.conf +#usr/share/alsa/ucm2/conf.d/rk3588-es8316 +usr/share/alsa/ucm2/conf.d/rk3588-es8316/rk3588-es8316.conf #usr/share/alsa/ucm2/conf.d/rockchip_es8316 usr/share/alsa/ucm2/conf.d/rockchip_es8316/rockchip_es8316.conf #usr/share/alsa/ucm2/conf.d/sc8280xp @@ -915,9 +939,18 @@ usr/share/alsa/ucm2/conf.d/sof-soundwire/sof-soundwire.conf usr/share/alsa/ucm2/conf.d/tegra-hda/tegra-hda.conf usr/share/alsa/ucm2/conf.d/tegra/ASUS Google Nexus 7 ALC5642.conf usr/share/alsa/ucm2/conf.d/tegra/Acer Iconia Tab A500 WM8903.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus EeePad Slider WM8903.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus EeePad Transformer WM8903.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Infinity TF700T RT5631.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Pad TF300T WM8903.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Pad TF300TG RT5631.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Pad TF300TL RT5631.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Prime TF201 RT5631.conf usr/share/alsa/ucm2/conf.d/tegra/Compal PAZ00.conf usr/share/alsa/ucm2/conf.d/tegra/GoogleNyanBig.conf usr/share/alsa/ucm2/conf.d/tegra/GoogleNyanBlaze.conf +usr/share/alsa/ucm2/conf.d/tegra/LG Optimus 4X HD MAX98089.conf +usr/share/alsa/ucm2/conf.d/tegra/LG Optimus Vu MAX98089.conf #usr/share/alsa/ucm2/conf.virt.d usr/share/alsa/ucm2/conf.virt.d/.gitignore #usr/share/alsa/ucm2/lib @@ -963,6 +996,7 @@ usr/share/alsa/ucm2/ucm.conf #usr/share/locale/ja/LC_MESSAGES/alsaconf.mo #usr/share/locale/ka/LC_MESSAGES/alsa-utils.mo #usr/share/locale/ka/LC_MESSAGES/alsaconf.mo +#usr/share/locale/ko/LC_MESSAGES/alsa-utils.mo #usr/share/locale/ru/LC_MESSAGES/alsaconf.mo #usr/share/locale/sk/LC_MESSAGES/alsa-utils.mo #usr/share/man/fr/man8/alsaconf.8 @@ -984,6 +1018,7 @@ usr/share/alsa/ucm2/ucm.conf #usr/share/man/man1/axfer-transfer.1 #usr/share/man/man1/axfer.1 #usr/share/man/man1/iecset.1 +#usr/share/man/man1/nhlt-dmic-info.1 #usr/share/man/man1/speaker-test.1 #usr/share/man/man8/alsaconf.8 #usr/share/sounds diff --git a/lfs/alsa b/lfs/alsa index 7931a94fc..a0a517ed8 100644 --- a/lfs/alsa +++ b/lfs/alsa @@ -26,9 +26,9 @@ include Config SUMMARY = Advanced Linux Sound Architecture -VER = 1.2.9 -UVER = 1.2.9 -CVER = 1.2.9 +VER = 1.2.10 +UVER = 1.2.10 +CVER = 1.2.10 FVER = 1.2.4 VERSUFIX = ipfire$(KCFG) @@ -38,7 +38,7 @@ DL_FILE = $(THISAPP).tar.bz2 DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) PROG = alsa -PAK_VER = 17 +PAK_VER = 18 DEPS = @@ -58,10 +58,10 @@ alsa-utils-$(UVER).tar.bz2 = $(DL_FROM)/alsa-utils-$(UVER).tar.bz2 alsa-firmware-$(FVER).tar.bz2 = $(DL_FROM)/alsa-firmware-$(FVER).tar.bz2 alsa-ucm-conf-$(CVER).tar.bz2 = $(DL_FROM)/alsa-ucm-conf-$(CVER).tar.bz2 -$(DL_FILE)_BLAKE2 = ec0c6966802196016679652292a579c6301cce33a2e887fce79cdb80629b6df047269787445cf0645e6cf43d3d2aae8fa57ddad5ab79fc254ee65a0ed695f449 -alsa-utils-$(UVER).tar.bz2_BLAKE2 = 9d75f63c7ff8b0d7ee835a1ad8fc242dee9b59770b1ad0ff9cd233caf50ac844323fb2ebb8e649f03a0a30a161ec72cba472ac79e390c3f0eb6e2a184d8f576c +$(DL_FILE)_BLAKE2 = b2e4f8431e61f5bb56b2b5d124e67d5a68bbca3c647bebfa93f5e5ff092ec9ef3f6cb6315801fcd93e21151784814ff238d357313b8b44f32d4e7c9ee565388f +alsa-utils-$(UVER).tar.bz2_BLAKE2 = 077b4ad090c1ab40dd4fa22db01ae2a080ca849a5564dfe612654993297c80bd3584541c7e68aaad56c4c05538ba0de449e4677b1c4a9dfe56d8e11706c4ca35 alsa-firmware-$(FVER).tar.bz2_BLAKE2 = 0f844f6cc4859b72635f24d347b4c790469aee39aa60d9addb2c168dcf06b48e7e3cbba26ff21c7e1f5aa355641eec7ab934cb09bfac8ca116a6ac6a7db9d548 -alsa-ucm-conf-$(CVER).tar.bz2_BLAKE2 = fe71790aa8658ab12378baa55f95a03aaebd3eb0aef2535b65b89884de6cb404a75b44fd238d2089e0a005ca81720f3c44d1912452908e97aa75fcda513908cf +alsa-ucm-conf-$(CVER).tar.bz2_BLAKE2 = 215842f1f59c2dea5e3f3fe880dc49d6263998746a50c2591b8a9786ead3afae2c713e179ff6e8caa518b3a8516a1b031872c1fad2a17fbd3afbb0390a803693 install : $(TARGET) -- 2.42.0

2 7

[PATCH] extrahd.cgi: Fix broken UUID check
by Stefan Schantl 13 Sep '23

13 Sep '23

This check was totaly broken and resulted into not beeing able to configure/mount more than one extra harddrive. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- html/cgi-bin/extrahd.cgi | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/html/cgi-bin/extrahd.cgi b/html/cgi-bin/extrahd.cgi index 9cdfc69f8..c3a14c9e4 100644 --- a/html/cgi-bin/extrahd.cgi +++ b/html/cgi-bin/extrahd.cgi @@ -113,13 +113,16 @@ if ($extrahdsettings{'ACTION'} eq $Lang::tr{'add'}) { # Split the line into pieces and assign nice variables. my ($uuid, $fs, $path) = split( /\;/, $entry ); + # Remove tailing UUID= from uuid string. + $uuid =~ s{^UUID=}{}; + # Check if the path is allready used. if ( "$extrahdsettings{'PATH'}" eq "$path" ) { $errormessage = "$Lang::tr{'extrahd you cant mount'} $extrahdsettings{'DEVICE'} $Lang::tr{'extrahd to'} $extrahdsettings{'PATH'} $Lang::tr{'extrahd because there is already a device mounted'}."; } # Check if the uuid is allready used. - if ("$extrahdsettings{'DEVICE'} eq $uuid") { + if ("$extrahdsettings{'UUID'}" eq "$uuid") { $errormessage = "$extrahdsettings{'DEVICE'} is allready mounted."; } } -- 2.39.2

2 1

[PATCH] Add Ellio Community feed to ipblocklist/sources
by Ayush Tomar 13 Sep '23

13 Sep '23

From 13c58a87843a73df34d370edc7c505eb6b6c60f3 Mon Sep 17 00:00:00 2001 From: Ayush Tomar <ayush.tomar(a)ellio.tech> Date: Wed, 13 Sep 2023 11:32:43 +0200 Subject: [PATCH] Add Ellio Community feed to ipblocklist/sources --- config/ipblocklist/sources | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources index be0cf0229..26699ff56 100644 --- a/config/ipblocklist/sources +++ b/config/ipblocklist/sources @@ -67,6 +67,12 @@ our %sources = ( 'EMERGING_FWRULE' => { 'name' => 'Emerging Threats Blocklis 'parser' => 'dshield', 'rate' => '1h', 'category' => 'attacker' }, + 'ELLIO_TECH' => {'name' => 'ELLIO: IP Feed (Community version)', + 'url' => 'https://cdn.ellio.tech/community-feed', + 'info' => 'https://ellio.tech', + 'parser' => 'ip-or-net-list', + 'rate' => '24h', + 'category' => 'attacker' }, 'FEODO_RECOMMENDED'=> {'name' => 'Feodo Trojan IP Blocklist (Recommended)', 'url' => 'https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt', 'info' => 'https://feodotracker.abuse.ch/blocklist', -- 2.39.2 (Apple Git-143

2 1

test of lzo option in OpenVPN
by Adolf Belka 12 Sep '23

12 Sep '23

Hi All, As discussed in the conf call I did a test of the LZO option and the result was not what I had hoped for, at least with Network Manager - openvpn plugin. Using my vm testbed, I created a client with LZO option enabled. I made an opnvpn connection which was successful and worked. Then I disabled LZO on the server but left the client as it was. Remade the connection. The connection showed as CONNECTED in the openvpn WUI page but in my Arch Linux log for the network manager I got a periodic message of nm-openvpn[1266]: Bad LZO decompression header byte: 42 Additionally trying to use the browser through the tunnel failed with the web sites timing out. So at least with Network Manager Openvpn plugin turning LZO off on the server ,when the client has it specified, does not work the way we discussed. I will do a further test with openvpn directly on the command line but if one openvpn client doesn't accept LZO being turned off on the server if it is enabled in the client this means we can't remove the LZO option and default it to disabled on the WUI page. Regards, Adolf. -- Sent from my laptop

2 7

Getting everyone started with Pakfire
by Michael Tremer 12 Sep '23

12 Sep '23

Hello everyone, For our meet-up that is starting soon, I would like everyone to have a working installation of Pakfire - our new build system. I am not sure yet in what way we are going to use it, but generally there will be an intro for everyone who hasn’t had one yet, and maybe we even get a chance to update a few packages of the distribution or something… Because I don’t know which distributions you are using, and because we don’t have any packages for any major distribution just yet, I would like to ask everyone to install Pakfire manually on their systems in advance of our meet-up, so that we can start straight away. We should also use the time to find any issues that might occur on other distributions than Debian which is what I have been using. Please find the source here: https://git.ipfire.org/?p=pakfire.git;a=summary On Debian, I have to install these packages as dependencies (yes it is quite a lot): * asciidoc, autoconf, automake, bison, build-essential, flex, intltool, libarchive-dev, libcap-dev, libcurl4-openssl-dev, libelf-dev, libgpgme-dev, libjson-c-dev, liblzma-dev, libmagic-dev, libmount-dev, libnl-3-dev, libnl-route-3-dev, libpcre2-dev, libpython3-dev, libseccomp-dev, libsolv-dev, libsqlite3-dev, libssl-dev, libsystemd-dev, libtool, libzstd-dev, pkg-config, python3-cpuinfo, python3-kerberos, python3-tornado, python3-psutil, python3-setproctitle, uuid-dev I have no idea what the package names will be for your distribution, but I am sure you will all figure it out :) You can use the usual three-clause build process after generating the configure script: ./autogen.sh ./configure —-prefix=/usr —-sysconfdir=/etc —-enable-debug make (make check) make install After that, you should be able to run pakfire-builder —-help. Please let me know if that works for you up to this point and please file a bug if changes are required to make Pakfire work on your distribution. All the best, -Michael

2 27

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development September 2023