Development June 2021

development@lists.ipfire.org

12 participants
93 discussions

[PATCH] memory.cgi: Fix missing qoutes.
by Stefan Schantl 20 Jun '21

20 Jun '21

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- html/cgi-bin/memory.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/memory.cgi b/html/cgi-bin/memory.cgi index dea7e3668..441b1d4e7 100644 --- a/html/cgi-bin/memory.cgi +++ b/html/cgi-bin/memory.cgi @@ -56,7 +56,7 @@ if ( $querry[0] =~ "memory"){ &Graphs::makegraphbox("memory.cgi","memory","day"); &Header::closebox(); - if (-f $mainsettings{'RRDLOG'}/collectd/localhost/swap) { + if (-f "$mainsettings{'RRDLOG'}/collectd/localhost/swap") { &Header::openbox('100%', 'center', "Swap $Lang::tr{'graph'}"); &Graphs::makegraphbox("memory.cgi","swap","day"); &Header::closebox(); -- 2.20.1

2 1

[PATCH] Tor: update to 0.4.6.5
by Peter Müller 20 Jun '21

20 Jun '21

Please refer to the .tar.gz's ReleaseNote file for the full changelog since version 0.4.5.8; it is too large to include it here. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/tor | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tor b/lfs/tor index c6bc5c43f..97f2cf04e 100644 --- a/lfs/tor +++ b/lfs/tor @@ -24,7 +24,7 @@ include Config -VER = 0.4.5.8 +VER = 0.4.6.5 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 61 +PAK_VER = 62 DEPS = libseccomp @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = a39d9b930a19936b57f097051c0ad509 +$(DL_FILE)_MD5 = 5a678a32c5a8b4bf97c9cb541df22b71 install : $(TARGET) -- 2.26.2

2 1

[PATCH] knot: Update to 3.0.7
by Matthias Fischer 20 Jun '21

20 Jun '21

For details see: https://www.knot-dns.cz/2021-06-16-version-307.html Features: knotd: new configuration policy option for CDS digest algorithm setting #738 keymgr: new command for primary SOA serial manipulation in on-secondary signing mode Improvements: knotd: improved algorithm rollover to shorten the last step of old RRSIG publication Bugfixes: knotd: zone is flushed upon server start, despite DNSSEC signing is up-to-date knotd: wildcard nonexistence is proved on empty-non-terminal query knotd: redundant wildcard proof for non-authoritative data in a reply knotd: missing wildcard proofs in a wildcard-cname loop reply knotd: incorrectly synthesized CNAME owner from a wildcard record #715 knotd: zone-in-journal changeset ignores journal-max-usage limit #736 knotd: incorrect processing of zone-in-journal changeset with SOA serial 0 knotd: broken initialization of processing workers if SO_REUSEPORT(_LB) not available kjournalprint: reported journal usage is incorrect #736 keymgr: cannot parse algorithm name ed448 #739 keymgr: default key size not set properly kdig: failed to process huge DoH responses libknot/probe: some corner-case bugs Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/knot | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/knot b/lfs/knot index ec6ec4deb..7e8bbc202 100644 --- a/lfs/knot +++ b/lfs/knot @@ -24,7 +24,7 @@ include Config -VER = 3.0.6 +VER = 3.0.7 THISAPP = knot-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 0d8aaa8e5214623c12123c67b5f2c460 +$(DL_FILE)_MD5 = a7ac9e92989184437a45578d0e23990a install : $(TARGET) -- 2.18.0

2 1

[PATCH] nano: Update to 5.8
by Matthias Fischer 20 Jun '21

20 Jun '21

For details see: https://www.nano-editor.org/news.php Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/nano | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/nano b/lfs/nano index 70d605601..3bb7806aa 100644 --- a/lfs/nano +++ b/lfs/nano @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 5.7 +VER = 5.8 THISAPP = nano-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nano -PAK_VER = 37 +PAK_VER = 38 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = c2d6540a33248edc31a5830861b4b4ea +$(DL_FILE)_MD5 = d2249e3dd108c830df00efd7c1b79d86 install : $(TARGET) -- 2.18.0

2 1

Trying to update gd
by Adolf Belka 20 Jun '21

20 Jun '21

Hi All, I found that gd was at version 2.0.33 from 2006 and there have been several updates all the way up to May this year, some of them to fix bugs or security concerns. So I did a build for version 2.3.1 also taking the opportunity to disable-static libraries. This built successfully and I also ran the find-dependencies as the libraries changed from libgd.so.2.0.0 to libgd.3.0.9 There were no dependencies on libgd.so.2 or libgd.2.0.0 As gd is used for the charts I installed the generated iso into a vm on my testbed system to confirm they worked. None of the charts showed any data. Also the log pie charts did not work. The error message from httpd/error_log was:- Can't load '/usr/lib/perl5/site_perl/5.32.1/x86_64-linux-thread-multi/auto/GD/GD.so' for module GD: libtiff.so.5: cannot open shared object file: No such file or directory at /usr/lib/perl5/5.32.1/x86_64-linux-thread-multi/DynaLoader.pm line 193. ^@ at /srv/web/ipfire/cgi-bin/getrrdimage.cgi line 24. Compilation failed in require at /srv/web/ipfire/cgi-bin/getrrdimage.cgi line 24. BEGIN failed--compilation aborted at /srv/web/ipfire/cgi-bin/getrrdimage.cgi line 24. [Thu Jun 17 16:38:29.559844 2021] [cgid:error] [pid 3156:tid 127227853231680] [client 192.168.200.50:49220] End of script output before headers: getrrdimage.cgi, referer: https://ipfire.localdomain:444/ This seems to be saying it can't find libtiff.so.5 Looking through the source tarballs over time I found that version 2.1.0 was where it started to look for libtiff. I then installed the libtiff addon in my vm and the charts were all working. So the new gd requires the libtiff shared object libraries. The addon installs a lot more than just the libtiff so libs so it does not seem right to build that structurally into the firewall. The only option I have come up with is to copy the libtiff so's into /usr/lib/ after the install stage of gd. libtiff is built before gd so the files are available in the build. This would seem to then provide the required libs without the rest of the libtiff files. Is this a reasonable approach to use or is there a different method I should be using. Regards, Adolf. -- Sent from my laptop

3 6

Improve configuration file functions
by Leo Hofmann 19 Jun '21

19 Jun '21

Hi all, while working on bug #12603, I needed to improve the configuration file handling functions. I soon thought that it might be a good idea to move these important functions to a library. If you like, please have a look at the attached perl file. This library is intended to replace the read/writehash and read/writehasharray functions in general-functions.pl. I attempted to improve the existing functions while maintaining compatibily to the file formats. There are more checks to ensure that only usable data ends up in the files and CGIs. The former "hasharray" format has been extended and now supports CSV encoding. In addition, the library can be more easily tested and further checks can be added. As this changes critical core functions, this library should be reviewed thoroughly. Please let me know if this is of interest and if I should submit this as a patch :) Best regards Leo

1 0

[PATCH 0/3] Pakfile metadata enhancements
by Robin Roevens 18 Jun '21

18 Jun '21

Hi folks During my discussion with Michael in the zabbix_agentd patchset thread about knowing what addon services should be running or not, it came up that it would be handy for several reasons if we had a bit more metadata for pak-files as we currently have. Mostly knowing which services (initscripts) are installed by a pak-file. This would allow for services.cgi to not have to manually try to find out if an installed addon actually has an initscript or not. Also paks like libvirt install 2 initscripts, those can now both be displayed on the services.cgi page. Idem for monitoring agents, which was my main objective. So here is an attempt to achieve this. This is not yet a patchset to be applied yet, but rather a proposal as this change would require all addon LFS-files to be changed. But I didn't want to do that yet as this patchset may very wel be rejected completely :-). The first patch introduces 2 new macro's: - SUMMARY for a short, one-line summary of the package - INITSCRIPTS for a space seperated list of initscripts provided by the package. And an alternative INSTALL_INITSCRIPTS method instead of the current INSTALL_INITSCRIPT method. As we now have all initscripts in the INITSCRIPTS macro, the INSTALL_INITSCRIPTS will install all initscripts listed in that macro, so a simple call to INSTALL_INITSCRIPTS will now do the job instead of multiple calls in case of multiple initscripts (for example libvirt. I noticed clamav actually uses 1 initscript for starting 2 services, this could maybe also be split up again) I included 2 examples in the first patch: libvirt and zabbix_agentd. But when implemented ofcourse all makefiles should be updated. During the pak packaging process in the build procedure, those new macro's will be inheritted in the generated pakfire meta-* files. The second patch adds an extra 'info <pak(s)>' commandline parameter to pakfire, which will in turn call a new Pakfire::pakinfo function. This function wil parse the meta-* file of the requested pak and functions in 2 modes: - "latest" which is the behaviour of the info parameter. This will display the latest available metadata of the pak and the status of the pak on the system as in: is it installed?, and if so, is it up-to-date. - "installed" wich will display only information about the currently installed pak and bail out of the requested pak is not currently installed. This function was added to provide a 'central' point/method to get pak information. I don't know if there are other scripts beside services.cgi that currently try parsing meta-* files. But they should then be changed to use this function instead. Example output of the new pakfire info command: `pakfire info zabbix_agentd`: when installed and up-to-date: --- Name: zabbix_agentd Version: 4.2.6-4 Summary: Zabbix Agent Size: 250.00 KB Dependencies: Pakfile: zabbix_agentd-4.2.6-4.ipfire InitScripts: zabbix_agentd Installed: Yes Status: up-to-date --- When an update is available: --- Name: zabbix_agentd Version: 5.0.10-5 Summary: Zabbix Agent Size: 276.00 KB Dependencies: fping Pakfile: zabbix_agentd-5.0.10-5.ipfire InitScripts: zabbix_agentd Installed: Yes Status: outdated (version 4.2.6-4 is installed) --- Or when a pak was discontinued and no longer supplied by ipfire, but still installed on the system: --- Name: zabbix_agentd Version: - Summary: Zabbix Agent Size: 250.00 KB Dependencies: Pakfile: zabbix_agentd-4.2.6-4.ipfire InitScripts: zabbix_agentd Installed: Yes Status: obsolete (version 4.2.6-4 is installed) --- and at last when a pak is available, but not installed: --- Name: zabbix_agentd Version: 5.0.10-5 Summary: Zabbix Agent Size: 276.00 KB Dependencies: fping Pakfile: zabbix_agentd-5.0.10-5.ipfire InitScripts: zabbix_agentd Installed: No Status: not installed --- And then the last patch is an update of service.cgi now using the new Pakfire::pakinfo function in "installed"-mode. If there are any suggestions on more metadata.. I think this is the moment to throw them at me. And ofcourse suggestions/comments are welcome as this is currently only a proposal for change. But I think we win in robustness of services.cgi and user experience in both using pakfire and ability to provide available services to monitoring agents. On top of that could the whole meta-* files system be overhauled in the future, if wanted, with only pakfire itself needing change as the rest will then depend on pakfire for correctly parsing it's "database". Regards Robin -- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud door MailScanner en lijkt schoon te zijn.

4 25

[PATCH] proxy.cgi: Suppress Squid version by default
by Peter Müller 18 Jun '21

18 Jun '21

While hiding version information does not come with any _actual_ security improvements, it is generally a good thing to do so by default: Attackers will still be able to reasonably guess or enumerate the software version running, but need to conduct additional effort to do so, hence more likely raising alerts and drawing attention on their operation. In addition, we suppress version details somewhere else in IPFire 2.x by default, too (e. g. Unbound and Apache), so we can justify this patch by aiming to stay consistent, I guess. :-) Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- html/cgi-bin/proxy.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/proxy.cgi b/html/cgi-bin/proxy.cgi index 78ad33ad2..1b949d5b6 100644 --- a/html/cgi-bin/proxy.cgi +++ b/html/cgi-bin/proxy.cgi @@ -188,7 +188,7 @@ $proxysettings{'ADMIN_MAIL_ADDRESS'} = ''; $proxysettings{'ADMIN_PASSWORD'} = ''; $proxysettings{'ERR_LANGUAGE'} = 'en'; $proxysettings{'ERR_DESIGN'} = 'ipfire'; -$proxysettings{'SUPPRESS_VERSION'} = 'off'; +$proxysettings{'SUPPRESS_VERSION'} = 'on'; $proxysettings{'FORWARD_VIA'} = 'off'; $proxysettings{'FORWARD_IPADDRESS'} = 'off'; $proxysettings{'FORWARD_USERNAME'} = 'off'; -- 2.26.2

1 0

[PATCH] proxy.cgi: drop options for faking Referer and User-Agent HTTP headers
by Peter Müller 17 Jun '21

17 Jun '21

While maintaining privacy when accessing web sites probably has never been more important than it is today, faking Referer and User-Agent headers is both obsolete and counterproductive: (a) Most web sites require HTTPS, thwarting manipulation attempts to HTTP headers in transit. Given todays' internet landscape, faking these headers is unlikely to work for the vast majority of web sites. (b) It is trivial to detect faked HTTP User-Agent headers by obtaining corresponding browser information via JavaScript. Any difference most likely indicates (trivial) header manipulation attempts, hence rendering this feature useless if browsers do not behave in the same manner, which we cannot control on IPFire. (c) Especially static Referer headers make users stick out like a sore thumb, as nobody else in the world is likely to have the same Referer set _all the time_. Modern browsers attempt to strip sensitive information from Referer headers, or ditch them completely, particularly to 3rd party sites. Given the state of the web ecosystem as we know it today, enforcing privacy in a centralised manner does not even come close to being sufficient. Without gaining control over users' browsers, their settings, and their infrastructure (such as setting up terminal environments for accessing the web, preventing hardware fingerprinting), a centralised attempt will at best fail, if not making things worse, as highlighted in (c). Therefore, removing these features from the Squid GUI is the least worse option we have. We should not give our users a false sense of privacy. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- html/cgi-bin/proxy.cgi | 44 ++---------------------------------------- langs/de/cgi-bin/de.pl | 3 --- langs/en/cgi-bin/en.pl | 3 --- langs/es/cgi-bin/es.pl | 3 --- langs/fr/cgi-bin/fr.pl | 3 --- langs/it/cgi-bin/it.pl | 3 --- langs/nl/cgi-bin/nl.pl | 3 --- langs/pl/cgi-bin/pl.pl | 3 --- langs/ru/cgi-bin/ru.pl | 3 --- langs/tr/cgi-bin/tr.pl | 3 --- 10 files changed, 2 insertions(+), 69 deletions(-) diff --git a/html/cgi-bin/proxy.cgi b/html/cgi-bin/proxy.cgi index b6d71db84..b3c2d0713 100644 --- a/html/cgi-bin/proxy.cgi +++ b/html/cgi-bin/proxy.cgi @@ -2,7 +2,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -226,8 +226,6 @@ $proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited'; $proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited'; $proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited'; $proxysettings{'ENABLE_MIME_FILTER'} = 'off'; -$proxysettings{'FAKE_USERAGENT'} = ''; -$proxysettings{'FAKE_REFERER'} = ''; $proxysettings{'AUTH_METHOD'} = 'none'; $proxysettings{'AUTH_REALM'} = ''; $proxysettings{'AUTH_MAX_USERIP'} = ''; @@ -1629,21 +1627,6 @@ END print <<END </table> -<hr size='1'> - -<table width='100%'> -<tr> - <td><b>$Lang::tr{'advproxy privacy'}</b></td> -</tr> -<tr> - <td class='base'>$Lang::tr{'advproxy fake useragent'}:</td> - <td class='base'>$Lang::tr{'advproxy fake referer'}:</td> -</tr> -<tr> - <td><input type='text' name='FAKE_USERAGENT' value='$proxysettings{'FAKE_USERAGENT'}' size='40%' /></td> - <td><input type='text' name='FAKE_REFERER' value='$proxysettings{'FAKE_REFERER'}' size='40%' /></td> -</tr> -</table> <hr size='1'> END ; @@ -3846,8 +3829,7 @@ END print FILE "http_access deny all\n\n"; - if (($proxysettings{'FORWARD_IPADDRESS'} eq 'off') || ($proxysettings{'FORWARD_VIA'} eq 'off') || - (!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq ''))) + if (($proxysettings{'FORWARD_IPADDRESS'} eq 'off') || ($proxysettings{'FORWARD_VIA'} eq 'off')) { print FILE "#Strip HTTP Header\n"; @@ -3861,31 +3843,9 @@ END print FILE "request_header_access Via deny all\n"; print FILE "reply_header_access Via deny all\n"; } - if (!($proxysettings{'FAKE_USERAGENT'} eq '')) - { - print FILE "request_header_access User-Agent deny all\n"; - print FILE "reply_header_access User-Agent deny all\n"; - } - if (!($proxysettings{'FAKE_REFERER'} eq '')) - { - print FILE "request_header_access Referer deny all\n"; - print FILE "reply_header_access Referer deny all\n"; - } print FILE "\n"; - if ((!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq ''))) - { - if (!($proxysettings{'FAKE_USERAGENT'} eq '')) - { - print FILE "header_replace User-Agent $proxysettings{'FAKE_USERAGENT'}\n"; - } - if (!($proxysettings{'FAKE_REFERER'} eq '')) - { - print FILE "header_replace Referer $proxysettings{'FAKE_REFERER'}\n"; - } - print FILE "\n"; - } } if ($proxysettings{'SUPPRESS_VERSION'} eq 'on') { print FILE "httpd_suppress_version_string on\n\n" } diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index eee51575b..0d2228ede 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -326,8 +326,6 @@ 'advproxy errmsg wpad invalid ip or mask' => 'WPAD: Ungültige IP oder Subnetz für ausgenommenes IP-Subnetz', 'advproxy error design' => 'Design der Fehlermeldungen', 'advproxy error language' => 'Sprache der Fehlermeldungen', -'advproxy fake referer' => 'Gefälschter Referer für externe Webseiten', -'advproxy fake useragent' => 'Gefälschter User-Agent für externe Webseiten', 'advproxy friday' => 'Fr', 'advproxy from' => 'Von', 'advproxy group access control' => 'Gruppenbasierte Zugriffskontrolle', @@ -357,7 +355,6 @@ 'advproxy off' => 'Proxy aus', 'advproxy offline mode' => 'Aktiviere Offline-Modus', 'advproxy on' => 'Proxy ein', -'advproxy privacy' => 'Datenschutz', 'advproxy proxy port' => 'Proxyport', 'advproxy proxy port transparent' => 'Transparenter Port', 'advproxy ram cache size' => 'Cachegröße im Arbeitsspeicher (MB)', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index a48deeeca..2ba6961f3 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -323,8 +323,6 @@ 'advproxy errmsg wpad invalid ip or mask' => 'WPAD: Invalid IP or subnet for excluded IP subnet', 'advproxy error design' => 'Error messages design', 'advproxy error language' => 'Error messages language', -'advproxy fake referer' => 'Fake referer submitted to external sites', -'advproxy fake useragent' => 'Fake useragent submitted to external sites', 'advproxy friday' => 'Fri', 'advproxy from' => 'From', 'advproxy group access control' => 'Group based access control', @@ -354,7 +352,6 @@ 'advproxy off' => 'Proxy off', 'advproxy offline mode' => 'Enable offline mode', 'advproxy on' => 'Proxy on', -'advproxy privacy' => 'Privacy', 'advproxy proxy port' => 'Proxy port', 'advproxy proxy port transparent' => 'Transparent port', 'advproxy ram cache size' => 'Memory cache size (MB)', diff --git a/langs/es/cgi-bin/es.pl b/langs/es/cgi-bin/es.pl index e76c987bc..1080afdea 100644 --- a/langs/es/cgi-bin/es.pl +++ b/langs/es/cgi-bin/es.pl @@ -297,8 +297,6 @@ 'advproxy errmsg time restriction' => 'Restricción de tiempo no válida', 'advproxy error design' => 'Diseño de mensajes de error', 'advproxy error language' => 'Idioma de Mensajes de error', -'advproxy fake referer' => 'Referer falso enviado a sitios externos', -'advproxy fake useragent' => 'Useragent falso enviado a sitios externos', 'advproxy friday' => 'Vie', 'advproxy from' => 'De', 'advproxy hdd cache size' => 'Tamaño del caché en disco duro (MB)', @@ -326,7 +324,6 @@ 'advproxy off' => 'Proxy Apagado', 'advproxy offline mode' => 'Activar modo fuera de línea', 'advproxy on' => 'Proxy Encendido', -'advproxy privacy' => 'Privacidad', 'advproxy proxy port' => 'Puerto del proxy', 'advproxy ram cache size' => 'Tamaño de memoria caché', 'advproxy redirector children' => 'Número de procesos filtrados', diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index 840292f9c..1b6d30111 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -330,8 +330,6 @@ 'advproxy errmsg wpad invalid ip or mask' => 'WPAD : IP ou sous-réseau invalide pour le sous-réseau IP exclu', 'advproxy error design' => 'Construction messages erronés ', 'advproxy error language' => 'Langage des messages erronés ', -'advproxy fake referer' => 'Fausses références soumises aux sites externes ', -'advproxy fake useragent' => 'Faux useragent soumis aux sites externes ', 'advproxy friday' => 'Ven', 'advproxy from' => 'De', 'advproxy group access control' => 'Contrôle d\'accès basé sur le groupe', @@ -361,7 +359,6 @@ 'advproxy off' => 'Proxy inactif', 'advproxy offline mode' => 'Autoriser le mode hors connexion ', 'advproxy on' => 'Proxy actif', -'advproxy privacy' => 'Privé', 'advproxy proxy port' => 'Port proxy ', 'advproxy proxy port transparent' => 'Port transparent ', 'advproxy ram cache size' => 'Taille cache mémoire (Mo) ', diff --git a/langs/it/cgi-bin/it.pl b/langs/it/cgi-bin/it.pl index 57585dd27..e9bd157a3 100644 --- a/langs/it/cgi-bin/it.pl +++ b/langs/it/cgi-bin/it.pl @@ -257,8 +257,6 @@ 'advproxy errmsg time restriction' => 'Invalid time restriction', 'advproxy error design' => 'Design dei messaggi di errore', 'advproxy error language' => 'Lingua dei messaggi di errore', -'advproxy fake referer' => 'Fake referer submitted to external sites', -'advproxy fake useragent' => 'Fake useragent submitted to external sites', 'advproxy friday' => 'Ven', 'advproxy from' => 'Da', 'advproxy hdd cache size' => 'Harddisk cache size (MB)', @@ -286,7 +284,6 @@ 'advproxy off' => 'Proxy off', 'advproxy offline mode' => 'Attiva modalità offline', 'advproxy on' => 'Proxy Acceso', -'advproxy privacy' => 'Privacy', 'advproxy proxy port' => 'Porta Proxy', 'advproxy proxy port transparent' => 'Porta Transparente', 'advproxy ram cache size' => 'Dimensione della Memoria di cache (MB)', diff --git a/langs/nl/cgi-bin/nl.pl b/langs/nl/cgi-bin/nl.pl index fb5a932f9..d607e4f89 100644 --- a/langs/nl/cgi-bin/nl.pl +++ b/langs/nl/cgi-bin/nl.pl @@ -256,8 +256,6 @@ 'advproxy errmsg time restriction' => 'Ongeldige tijdsbeperking', 'advproxy error design' => 'Opmaak foutmeldingen', 'advproxy error language' => 'Taal foutmeldingen', -'advproxy fake referer' => 'Nepverwijzing die wordt gestuurd naar externe sites', -'advproxy fake useragent' => 'Nep useragent die wordt gestuurd naar externe sites', 'advproxy friday' => 'Vri', 'advproxy from' => 'Van', 'advproxy hdd cache size' => 'Harddisk cache-grootte (MB)', @@ -285,7 +283,6 @@ 'advproxy off' => 'Proxy uit', 'advproxy offline mode' => 'Schakel offline modus in', 'advproxy on' => 'Proxy aan', -'advproxy privacy' => 'Privacy', 'advproxy proxy port' => 'Proxy poort', 'advproxy proxy port transparent' => 'Transparante poort', 'advproxy ram cache size' => 'Geheugen cache-grootte (MB)', diff --git a/langs/pl/cgi-bin/pl.pl b/langs/pl/cgi-bin/pl.pl index d3540cc62..a44f43fa4 100644 --- a/langs/pl/cgi-bin/pl.pl +++ b/langs/pl/cgi-bin/pl.pl @@ -245,8 +245,6 @@ 'advproxy errmsg time restriction' => 'Niepoprawne ograniczenia czase', 'advproxy error design' => 'Styl komunikatów o błędach', 'advproxy error language' => 'Język komunikatów o błędach', -'advproxy fake referer' => 'Fake referer submitted to external sites', -'advproxy fake useragent' => 'Fake useragent submitted to external sites', 'advproxy friday' => 'Pią', 'advproxy from' => 'Od', 'advproxy hdd cache size' => 'Rozmiar cache na dysku (MB)', @@ -274,7 +272,6 @@ 'advproxy off' => 'Proxy wyłączone', 'advproxy offline mode' => 'Włącz tryb offline', 'advproxy on' => 'Proxy wł', -'advproxy privacy' => 'Prywatność', 'advproxy proxy port' => 'Port proxy', 'advproxy ram cache size' => 'Rozmiar RAM cache (MB)', 'advproxy redirector children' => 'Liczba procesów filtrujących', diff --git a/langs/ru/cgi-bin/ru.pl b/langs/ru/cgi-bin/ru.pl index 12afa0b92..c0342eb25 100644 --- a/langs/ru/cgi-bin/ru.pl +++ b/langs/ru/cgi-bin/ru.pl @@ -243,8 +243,6 @@ 'advproxy errmsg time restriction' => 'Неверное ограничение по времени', 'advproxy error design' => 'Оформление ошибок', 'advproxy error language' => 'Язык, на котором отображаются ошибки', -'advproxy fake referer' => 'Липовый referer Для внешних сайтов', -'advproxy fake useragent' => 'Липовый useragent для внешних сайтов', 'advproxy friday' => 'Пт', 'advproxy from' => 'C', 'advproxy hdd cache size' => 'Размер кэша жёсткого диска (MB)', @@ -272,7 +270,6 @@ 'advproxy off' => 'Proxy выкл', 'advproxy offline mode' => 'Включить автономный режим', 'advproxy on' => 'Proxy вкл', -'advproxy privacy' => 'Приватность', 'advproxy proxy port' => 'Порт Proxy', 'advproxy ram cache size' => 'Размер памяти кэша (MB)', 'advproxy redirector children' => 'Количество фильтруемых процессов', diff --git a/langs/tr/cgi-bin/tr.pl b/langs/tr/cgi-bin/tr.pl index 83416ebe7..f90bee0ea 100644 --- a/langs/tr/cgi-bin/tr.pl +++ b/langs/tr/cgi-bin/tr.pl @@ -318,8 +318,6 @@ 'advproxy errmsg time restriction' => 'Geçersiz zaman kısıtlaması', 'advproxy error design' => 'Hata mesajları tasarımı', 'advproxy error language' => 'Hata mesajları dili', -'advproxy fake referer' => 'Sahte referansı harici sitelere gönder', -'advproxy fake useragent' => 'Sahte yönlendiriciyi harici sitelere gönder', 'advproxy friday' => 'Cum', 'advproxy from' => 'Başlangıç', 'advproxy group access control' => 'Grup tabanlı erişim kontrolü', @@ -349,7 +347,6 @@ 'advproxy off' => 'Vekil sunucu kapalı', 'advproxy offline mode' => 'Çevrimdışı yöntemi aktifleştir', 'advproxy on' => 'Vekil sunucu', -'advproxy privacy' => 'Gizlilik', 'advproxy proxy port' => 'Vekil sunucu bağlantı noktası', 'advproxy proxy port transparent' => 'Şeffaf bağlantı noktası', 'advproxy ram cache size' => 'Bellek önbellek boyutu (MB)', -- 2.26.2

3 2

[PATCH] xfsprogs: Update to 5.12.0
by Adolf Belka 17 Jun '21

17 Jun '21

- Update from 5.11.0 to 5.12.0 - Update of rootfile not required - Changelog xfsprogs-5.12.0 (21 May 2021) - No further changes xfsprogs-5.12.0-rc1 (07 May 2021) - mkfs: don't default to too-large physical sector size (Jeff Moyer) - repair: phase 6 speedups (Dave Chinner, Gao Xiang) - man: Add dax mount option to man xfs(5) (Carlos Maiolino) - xfs_admin: pick up log arguments correctly (Darrick Wong) - xfs_growfs: support shrinking unused space (Gao Xiang) - libfrog: report inobtcount in geometry (Darrick Wong) - xfs_logprint: Fix buffer overflow printing quotaoff (Carlos Maiolino) - xfsprogs: include <signal.h> for platform_crash (Leah Neukirchen) - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag (Anthony Iliopoulos) - workqueue: bound maximum queue depth (Dave Chinner) xfsprogs-5.12.0-rc0 (12 Apr 2021) - libxfs changes merged from kernel 5.12 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/xfsprogs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/xfsprogs b/lfs/xfsprogs index 47298e634..90a43d34d 100644 --- a/lfs/xfsprogs +++ b/lfs/xfsprogs @@ -24,7 +24,7 @@ include Config -VER = 5.11.0 +VER = 5.12.0 THISAPP = xfsprogs-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 803bcddd983803b339acfb76064dfd84 +$(DL_FILE)_MD5 = b401d76ccd66e4fdf3d123193e5e1b91 install : $(TARGET) -- 2.32.0

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development June 2021