Development September 2017

development@lists.ipfire.org

12 participants
43 discussions

[PATCH] Typo in en.pl
by Matthias Fischer 20 Sep '17

20 Sep '17

Fixes typo in http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=15f19ed8… Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- langs/en/cgi-bin/en.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index adebbf4b4..6774ae41f 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -2752,7 +2752,7 @@ 'wlan clients' => 'Wireless clients', 'wlanap' => 'Access Point', 'wlanap channel' => 'Channel', -'wlanap configuration' => 'Access Point Konfiguration', +'wlanap configuration' => 'Access Point Configuration', 'wlanap country' => 'Country Code', 'wlanap debugging' => 'Debugging', 'wlanap del interface' => 'Remove selected interface?', -- 2.14.1

2 2

Security issue in Apache 2.4.27 ("optionsbleed")
by Peter Müller 20 Sep '17

20 Sep '17

Hello, a security issue has been found in Apache 2.4.27, which is at the moment scheduled for the "next" branch in IPFire. It is a memory leak (called "optionsbleed"), more details are available here: * https://nvd.nist.gov/vuln/detail/CVE-2017-9798 * https://heise.de/-3835313 (german only) A patch has been published on Apache's SVN repository (but I am not sure how to add it to the LFS build file :-) ): https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1… Although IPFire is not vulnerable as far as I know, it might be good to deploy this. Affects the 2.2.x series, too. Just in case anyone is interested. Best regards, Peter Müller

3 2

[PATCH] apache2: Import patch for CVE-2017-9798 ("optionsbleed")
by Matthias Fischer 20 Sep '17

20 Sep '17

Imported from: https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1… For details see: https://nvd.nist.gov/vuln/detail/CVE-2017-9798 Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/apache2 | 2 +- src/patches/apache-2.4.27-CVE-2017-9798-fix.patch | 15 +++++++++++++++ 2 files changed, 16 insertions(+), 1 deletion(-) create mode 100644 src/patches/apache-2.4.27-CVE-2017-9798-fix.patch diff --git a/lfs/apache2 b/lfs/apache2 index e434d1b24..b7a741614 100644 --- a/lfs/apache2 +++ b/lfs/apache2 @@ -76,7 +76,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && patch -Np0 -i $(DIR_SRC)/src/patches/apache-2.4.27-PR61382-fix.patch - + cd $(DIR_APP) && patch -Np0 -i $(DIR_SRC)/src/patches/apache-2.4.27-CVE-2017-9798-fix.patch ### Add IPFire's layout, too echo "# IPFire layout" >> $(DIR_APP)/config.layout echo "<Layout IPFire>" >> $(DIR_APP)/config.layout diff --git a/src/patches/apache-2.4.27-CVE-2017-9798-fix.patch b/src/patches/apache-2.4.27-CVE-2017-9798-fix.patch new file mode 100644 index 000000000..eb82c8bcd --- /dev/null +++ b/src/patches/apache-2.4.27-CVE-2017-9798-fix.patch @@ -0,0 +1,15 @@ +--- server/core.c 2017/08/16 16:50:29 1805223 ++++ server/core.c 2017/09/08 13:13:11 1807754 +@@ -2262,6 +2262,12 @@ + /* method has not been registered yet, but resource restriction + * is always checked before method handling, so register it. + */ ++ if (cmd->pool == cmd->temp_pool) { ++ /* In .htaccess, we can't globally register new methods. */ ++ return apr_psprintf(cmd->pool, "Could not register method '%s' " ++ "for %s from .htaccess configuration", ++ method, cmd->cmd->name); ++ } + methnum = ap_method_register(cmd->pool, + apr_pstrdup(cmd->pool, method)); + } -- 2.14.1

1 0

[PATCH] unbound: Update to 1.6.6
by Matthias Fischer 19 Sep '17

19 Sep '17

For details see: http://www.unbound.net/download.html Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/unbound | 2 +- lfs/unbound | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index b029c8b98..6d153f265 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.2 -usr/lib/libunbound.so.2.5.4 +usr/lib/libunbound.so.2.5.5 usr/sbin/unbound usr/sbin/unbound-anchor usr/sbin/unbound-checkconf diff --git a/lfs/unbound b/lfs/unbound index 462528418..39ad0def7 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.6.5 +VER = 1.6.6 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 5825332b72bae9d8793f9cba16cb13fd +$(DL_FILE)_MD5 = f2cc56bd88c9634fe18334d2421205f1 install : $(TARGET) -- 2.14.1

1 0

[PATCH] wlanap.cgi: Some cosmetics...
by Matthias Fischer 17 Sep '17

17 Sep '17

- Added missing box heading ('Access Point Configuration') in 'wlanap.cgi'. - For this to work, added missing string 'wlanap configuration' in translations. - Changed existing translation strings in 'de.pl' and 'en.pl': 'wlanap' means 'wlan access point', so why is it called 'wlan*ap* access point'? Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- html/cgi-bin/wlanap.cgi | 4 ++-- langs/de/cgi-bin/de.pl | 3 ++- langs/en/cgi-bin/en.pl | 3 ++- 3 files changed, 6 insertions(+), 4 deletions(-) diff --git a/html/cgi-bin/wlanap.cgi b/html/cgi-bin/wlanap.cgi index 844c395e2..bb40021cf 100644 --- a/html/cgi-bin/wlanap.cgi +++ b/html/cgi-bin/wlanap.cgi @@ -154,7 +154,7 @@ if ( $wlanapsettings{'ACTION'} eq "$Lang::tr{'save'}" ){ $memory=0; } -&Header::openpage('', 1, '', ''); +&Header::openpage($Lang::tr{'wlanap configuration'}, 1, '', ''); &Header::openbigbox('100%', 'left', '', $errormessage); if ( $errormessage ){ @@ -323,7 +323,7 @@ if ( $wlan_card_status ne '' ){ print "<tr><td class='base'>$Lang::tr{'wlanap wlan card'} ($wlanapsettings{'DRIVER'})</td>"; print $wlan_card_status eq 'up' ? $status_started : $status_stopped; print"<td colspan='4'></td></tr>"; - print "<tr><td class='base' bgcolor='$color{'color22'}'>$Lang::tr{'wlanap access point'}</td>"; + print "<tr><td class='base' bgcolor='$color{'color22'}'>$Lang::tr{'wlanap'}</td>"; print $wlan_ap_status eq 'up' ? $status_started : $status_stopped; if ( ($memory != 0) && (@pid[0] ne "///") ){ print "<td bgcolor='$color{'color22'}' align='center'>@pid[0]</td>"; diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 0138cbc02..7bc1c495d 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -2703,8 +2703,9 @@ 'wlan client wpa mode ccmp tkip' => 'CCMP-TKIP', 'wlan client wpa mode tkip tkip' => 'TKIP-TKIP', 'wlan clients' => 'WLAN-Clients', -'wlanap access point' => 'Access Point', +'wlanap' => 'Access Point', 'wlanap channel' => 'Kanal', +'wlanap configuration' => 'Access Point Konfiguration', 'wlanap country' => 'Ländercode', 'wlanap debugging' => 'Debugging', 'wlanap del interface' => 'Ausgewähltes Interface zurücksetzen?', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index b3aee5a2b..9732a6e9d 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -2748,8 +2748,9 @@ 'wlan client wpa mode ccmp tkip' => 'CCMP-TKIP', 'wlan client wpa mode tkip tkip' => 'TKIP-TKIP', 'wlan clients' => 'Wireless clients', -'wlanap access point' => 'Access Point', +'wlanap' => 'Access Point', 'wlanap channel' => 'Channel', +'wlanap configuration' => 'Access Point Konfiguration', 'wlanap country' => 'Country Code', 'wlanap debugging' => 'Debugging', 'wlanap del interface' => 'Remove selected interface?', -- 2.14.1

1 0

CAs and Let's encrypt
by Wolfgang Apolinarski 16 Sep '17

16 Sep '17

Hi Michael, I think Peter already discussed the advantages/disadvantages of using your own CA vs. Verisign&Co vs. Let's encrypt. Is there a specific reason why you don't like LE? I saw also companies switching to that - and you actually do not need to use the certbot client (although you can run it without root privileges, for example by using the webroot plugin - which I am using for my own systems). I will have a look at the Apache configuration changes soon, sorry. I'm currently quite busy with other things, but this is on my list. Best regards, Wolfgang

1 0

[PATCH] Embellishment of the caption on the connection.cgi
by jbsky 12 Sep '17

12 Sep '17

From: Julien Blais <blais.julien.30(a)gmail.com> This is a first patch, like a test because I've been wanting to participate in the development for a while, that is to say improve the ipfire web service. For a first patch, I equalize the width of the legend columns to make it cleaner. I also apply the bold typeface to all headings in the legend. After an infinite number of attempts to send a small patch, will I succeed? modified: html/cgi-bin/connections.cgi --- html/cgi-bin/connections.cgi | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/html/cgi-bin/connections.cgi b/html/cgi-bin/connections.cgi index 96f09012b..ff19726d0 100644 --- a/html/cgi-bin/connections.cgi +++ b/html/cgi-bin/connections.cgi @@ -305,31 +305,31 @@ if (-e "${General::swroot}/ovpn/n2nconf") { print <<END; <table style='width:100%'> <tr> - <td style='text-align:center;'> + <td style='text-align:center;width:12%;'> $Lang::tr{'legend'} : </td> - <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourgreen}; font-weight:bold;'> + <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourgreen}; font-weight:bold; width:11%;'> $Lang::tr{'lan'} </td> - <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourred};'> + <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourred}; font-weight:bold; width:11%;'> $Lang::tr{'internet'} </td> - <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourorange};'> + <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourorange}; font-weight:bold; width:11%;'> $Lang::tr{'dmz'} </td> - <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourblue};'> + <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourblue}; font-weight:bold; width:11%;'> $Lang::tr{'wireless'} </td> - <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourfw};'> + <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourfw}; font-weight:bold; width:11%;'> IPFire </td> - <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourvpn};'> + <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourvpn}; font-weight:bold; width:11%;'> $Lang::tr{'vpn'} </td> - <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourovpn};'> + <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourovpn}; font-weight:bold; width:11%;'> $Lang::tr{'OpenVPN'} </td> - <td style='text-align:center; color:#FFFFFF; background-color:$colour_multicast;'> + <td style='text-align:center; color:#FFFFFF; background-color:$colour_multicast; font-weight:bold; width:11%;'> Multicast </td> </tr> -- 2.12.2

1 0

[PATCH] tcpdump: Update to 4.9.2
by Matthias Fischer 11 Sep '17

11 Sep '17

Changelog: "Sunday September 3, 2017 denis(a)ovsienko.info Summary for 4.9.2 tcpdump release Do not use getprotobynumber() for protocol name resolution. Do not do any protocol name resolution if -n is specified. Improve errors detection in the test scripts. Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage. Clean up IS-IS printing. Fix buffer overflow vulnerabilities: CVE-2017-11543 (SLIP) CVE-2017-13011 (bittok2str_internal) Fix infinite loop vulnerabilities: CVE-2017-12989 (RESP) CVE-2017-12990 (ISAKMP) CVE-2017-12995 (DNS) CVE-2017-12997 (LLDP) Fix buffer over-read vulnerabilities: CVE-2017-11541 (safeputs) CVE-2017-11542 (PIMv1) CVE-2017-12893 (SMB/CIFS) CVE-2017-12894 (lookup_bytestring) CVE-2017-12895 (ICMP) CVE-2017-12896 (ISAKMP) CVE-2017-12897 (ISO CLNS) CVE-2017-12898 (NFS) CVE-2017-12899 (DECnet) CVE-2017-12900 (tok2strbuf) CVE-2017-12901 (EIGRP) CVE-2017-12902 (Zephyr) CVE-2017-12985 (IPv6) CVE-2017-12986 (IPv6 routing headers) CVE-2017-12987 (IEEE 802.11) CVE-2017-12988 (telnet) CVE-2017-12991 (BGP) CVE-2017-12992 (RIPng) CVE-2017-12993 (Juniper) CVE-2017-11542 (PIMv1) CVE-2017-11541 (safeputs) CVE-2017-12994 (BGP) CVE-2017-12996 (PIMv2) CVE-2017-12998 (ISO IS-IS) CVE-2017-12999 (ISO IS-IS) CVE-2017-13000 (IEEE 802.15.4) CVE-2017-13001 (NFS) CVE-2017-13002 (AODV) CVE-2017-13003 (LMP) CVE-2017-13004 (Juniper) CVE-2017-13005 (NFS) CVE-2017-13006 (L2TP) CVE-2017-13007 (Apple PKTAP) CVE-2017-13008 (IEEE 802.11) CVE-2017-13009 (IPv6 mobility) CVE-2017-13010 (BEEP) CVE-2017-13012 (ICMP) CVE-2017-13013 (ARP) CVE-2017-13014 (White Board) CVE-2017-13015 (EAP) CVE-2017-11543 (SLIP) CVE-2017-13016 (ISO ES-IS) CVE-2017-13017 (DHCPv6) CVE-2017-13018 (PGM) CVE-2017-13019 (PGM) CVE-2017-13020 (VTP) CVE-2017-13021 (ICMPv6) CVE-2017-13022 (IP) CVE-2017-13023 (IPv6 mobility) CVE-2017-13024 (IPv6 mobility) CVE-2017-13025 (IPv6 mobility) CVE-2017-13026 (ISO IS-IS) CVE-2017-13027 (LLDP) CVE-2017-13028 (BOOTP) CVE-2017-13029 (PPP) CVE-2017-13030 (PIM) CVE-2017-13031 (IPv6 fragmentation header) CVE-2017-13032 (RADIUS) CVE-2017-13033 (VTP) CVE-2017-13034 (PGM) CVE-2017-13035 (ISO IS-IS) CVE-2017-13036 (OSPFv3) CVE-2017-13037 (IP) CVE-2017-13038 (PPP) CVE-2017-13039 (ISAKMP) CVE-2017-13040 (MPTCP) CVE-2017-13041 (ICMPv6) CVE-2017-13042 (HNCP) CVE-2017-13043 (BGP) CVE-2017-13044 (HNCP) CVE-2017-13045 (VQP) CVE-2017-13046 (BGP) CVE-2017-13047 (ISO ES-IS) CVE-2017-13048 (RSVP) CVE-2017-13049 (Rx) CVE-2017-13050 (RPKI-Router) CVE-2017-13051 (RSVP) CVE-2017-13052 (CFM) CVE-2017-13053 (BGP) CVE-2017-13054 (LLDP) CVE-2017-13055 (ISO IS-IS) CVE-2017-13687 (Cisco HDLC) CVE-2017-13688 (OLSR) CVE-2017-13689 (IKEv1) CVE-2017-13690 (IKEv2) CVE-2017-13725 (IPv6 routing headers) Sunday July 23, 2017 denis(a)ovsienko.info Summary for 4.9.1 tcpdump release CVE-2017-11108/Fix bounds checking for STP. Make assorted documentation updates and fix a few typos in tcpdump output. Fixup -C for file size >2GB (GH #488). Show AddressSanitizer presence in version output. Fix a bug in test scripts (exposed in GH #613). On FreeBSD adjust Capsicum capabilities for netmap. On Linux fix a use-after-free when the requested interface does not exist." Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/tcpdump | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tcpdump b/lfs/tcpdump index 42536f16a..acf752ce2 100644 --- a/lfs/tcpdump +++ b/lfs/tcpdump @@ -24,7 +24,7 @@ include Config -VER = 4.9.0 +VER = 4.9.2 THISAPP = tcpdump-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tcpdump -PAK_VER = 8 +PAK_VER = 9 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 2b83364eef53b63ca3181b4eb56dab0c +$(DL_FILE)_MD5 = 9bbc1ee33dab61302411b02dd0515576 install : $(TARGET) -- 2.14.1

2 1

[PATCH] show GeoIP information in WebUI connection list
by Peter Müller 08 Sep '17

08 Sep '17

Show country flag for source and destination IP addresses at the connection list ("connections.cgi"). This might be useful for debugging geoip based firewall rules and to identify possible harmful connections (i.e. to offshore locations or other countries rarely used). This is another "nice to have" patch (trying to gain experience by adding some simple features I always missed) but could come in handy sometimes. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- diff --git a/html/cgi-bin/connections.cgi b/html/cgi-bin/connections.cgi index 96f09012b..b3348f04a 100644 --- a/html/cgi-bin/connections.cgi +++ b/html/cgi-bin/connections.cgi @@ -23,12 +23,14 @@ use strict; use Net::IPv4Addr qw( :all ); use Switch; +use Geo::IP::PurePerl; # enable only the following on debugging purpose #use warnings; #use CGI::Carp 'fatalsToBrowser'; require '/var/ipfire/general-functions.pl'; +require "${General::swroot}/geoip-functions.pl"; require "${General::swroot}/lang.pl"; require "${General::swroot}/header.pl"; @@ -379,6 +382,7 @@ print <<END; <a href="?sort_field=3&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a> <a href="?sort_field=3&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a> </th> + <th> </th> <th style='text-align:center' colspan='2'> <a href="?sort_field=2&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a> <a href="?sort_field=2&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a> @@ -386,6 +390,7 @@ print <<END; <a href="?sort_field=4&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a> <a href="?sort_field=4&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a> </th> + <th> </th> <th style='text-align:center'> <a href="?sort_field=8&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a> <a href="?sort_field=8&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a> @@ -409,10 +414,16 @@ print <<END; <th style='text-align:center' colspan='2'> $Lang::tr{'source ip and port'} </th> + <th style='text-align:center'> + $Lang::tr{'country'} + </th> <th style='text-align:center' colspan='2'> $Lang::tr{'dest ip and port'} </th> <th style='text-align:center'> + $Lang::tr{'country'} + </th> + <th style='text-align:center'> $Lang::tr{'download'} / $Lang::tr{'upload'} </th> @@ -551,6 +562,12 @@ foreach my $line (@conntrack) { $sip_extra .= "</a>"; } + my $gi1 = Geo::IP::PurePerl->new(); + my $ccode1 = $gi1->country_code_by_name($sip_ret); + my $fcode1 = lc($ccode1); + my $flag_icon1 = &GeoIP::get_flag_icon($fcode1); + + my $dip_extra; if ($dip_ret && $dip ne $dip_ret) { $dip_extra = "> "; @@ -559,6 +576,10 @@ foreach my $line (@conntrack) { $dip_extra .= "</a>"; } + my $gi2 = Geo::IP::PurePerl->new(); + my $ccode2 = $gi2->country_code_by_name($dip_ret); + my $fcode2 = lc($ccode2); + my $flag_icon2 = &GeoIP::get_flag_icon($fcode2); my $sport_extra; if ($sport ne $sport_ret) { @@ -601,6 +622,9 @@ foreach my $line (@conntrack) { </a> $sport_extra </td> + <td style='text-align:center; background-color:$sip_colour;'> + <a href='country.cgi#$fcode1'><img src='$flag_icon1' border='0' align='absmiddle' title='$ccode1'></a> + </td> <td style='text-align:center; background-color:$dip_colour;'> <a href='/cgi-bin/ipinfo.cgi?ip=$dip'> $dip @@ -613,6 +637,9 @@ foreach my $line (@conntrack) { </a> $dport_extra </td> + <td style='text-align:center; background-color:$dip_colour;'> + <a href='country.cgi#$fcode2'><img src='$flag_icon2' border='0' align='absmiddle' title='$ccode2'></a> + </td> <td style='text-align:center'> $bytes_in / $bytes_out </td> @@ -683,3 +710,4 @@ sub ipcolour($) { } 1; +

1 0

[PATCH] show RNGD status at WebUI service page, too
by Peter Müller 08 Sep '17

08 Sep '17

Also show the status of the hardware random number generator ("RNGD") at the services.cgi page in the WebUI. Before, this was only shown at the entropy.cgi page, which was a bit inconsistent. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- diff --git a/html/cgi-bin/services.cgi b/html/cgi-bin/services.cgi index 64fdbba05..6629ee006 100644 --- a/html/cgi-bin/services.cgi +++ b/html/cgi-bin/services.cgi @@ -56,6 +56,7 @@ my %servicenames =( $Lang::tr{'secure shell server'} => 'sshd', $Lang::tr{'vpn'} => 'charon', $Lang::tr{'web proxy'} => 'squid', + $Lang::tr{'random number generator daemon'} => 'rngd', 'OpenVPN' => 'openvpn' ); @@ -74,7 +75,8 @@ my %link =( "$Lang::tr{'intrusion detection system'} (GREEN)" => "<a href=\'ids.cgi\'>$Lang::tr{'intrusion detection system'} (GREEN)</a>", "$Lang::tr{'intrusion detection system'} (RED)" => "<a href=\'ids.cgi\'>$Lang::tr{'intrusion detection system'} (RED)</a>", "$Lang::tr{'intrusion detection system'} (ORANGE)" => "<a href=\'ids.cgi\'>$Lang::tr{'intrusion detection system'} (ORANGE)</a>", - "$Lang::tr{'intrusion detection system'} (BLUE)" => "<a href=\'ids.cgi\'>$Lang::tr{'intrusion detection system'} (BLUE)</a>" + "$Lang::tr{'intrusion detection system'} (BLUE)" => "<a href=\'ids.cgi\'>$Lang::tr{'intrusion detection system'} (BLUE)</a>", + "$Lang::tr{'random number generator daemon'}" => "<a href=\'entropy.cgi\'>$Lang::tr{'random number generator daemon'}</a>" ); my $lines=0; # Used to count the outputlines to make different bgcolor @@ -327,3 +329,4 @@ sub isrunningaddon{ } return $status; } + diff --git a/src/initscripts/system/rngd b/src/initscripts/system/rngd index df4aa7da2..5cd3b53ec 100644 --- a/src/initscripts/system/rngd +++ b/src/initscripts/system/rngd @@ -34,6 +34,7 @@ case "${1}" in echo_ok else loadproc /usr/sbin/rngd --no-tpm=1 + test -f /run/rngd.pid && chmod 755 /run/rngd.pid fi ;;

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development September 2017