Development December 2024

development@lists.ipfire.org

8 participants
40 discussions

Core 190 - ISO is missing => Error 404
by Matthias Fischer 19 Dec '24

19 Dec '24

Hi, Core 190 was released, but trying to download https://downloads.ipfire.org/releases/ipfire-2.x/2.29-core190/ipfire-2.29-c… ends with: "Oops - We Are Sorry, But Something Went Wrong Error 404" Can anyone confirm? Best Matthias

3 2

Two commits have been merged that need to be redone
by Adolf Belka 18 Dec '24

18 Dec '24

Hi Arne, Commits https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=7b29acfbb597b89837dcbe1… https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=f32ca6cd79124c4fcfc722a… were flagged by Michael as needing reworking by me as the approach I had used had some bad code in it. So I think these should be reverted. See third post in this thread https://lists.ipfire.org/hyperkitty/list/development@lists.ipfire.org/threa… It is on my list to work on a v2 version but it is not urgent that it gets into CU191. Regards, Adolf.

1 0

[DEV PATCH] createfiles: Update status log filename
by Adolf Belka 15 Dec '24

15 Dec '24

- status log filename updated to openvpn-rw.log otherwise it was root:root with 600 and this prevented the status of client connections being shown Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- src/initscripts/sysconfig/createfiles | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/initscripts/sysconfig/createfiles b/src/initscripts/sysconfig/createfiles index cf7d6e146..2545c9586 100644 --- a/src/initscripts/sysconfig/createfiles +++ b/src/initscripts/sysconfig/createfiles @@ -25,7 +25,7 @@ # <major> and <minor> are the major and minor numbers used for the device. ######################################################################## -/var/run/ovpnserver.log file 644 nobody nobody +/var/run/openvpn-rw.log file 644 nobody nobody /var/run/openvpn dir 644 nobody nobody # End /etc/sysconfig/createfiles -- 2.47.1

1 0

[PATCH] suricata: Update to version 7.0.8
by Adolf Belka 14 Dec '24

14 Dec '24

- Update from version 7.0.7 to 7.0.8 - Update of rootfile not required - Changelog 7.0.8 Security #7412: tcp: generic detection bypass using TCP urgent support (7.0.x backport)(HIGH - CVE 2024-55629) Security #7405: dns: quadratic complexity in logging and invalid json as output (7.0.x backport)(HIGH - CVE 2024-55628) Security #7404: tcp: segfault on StreamingBufferSlideToOffsetWithRegions (7.0.x backport)(CRITICAL - CVE 2024-55627) Security #7367: bpf: oversized bpf file can lead to buffer overflow (7.0.x backport)(LOW - CVE 2024-55626) Security #7306: detect: write to read-only memory in transforms (7.0.x backport) (CRITICAL - CVE 2024-55605) Bug #7445: dpdk: RSS key length missmatch on ice (E810) card with DPDK version 22.11.6 (7.0.x backport) Bug #7434: requires: rules with unmet requirements are still loaded (7.0.x backport) Bug #7432: detect: decoder event rules fail to match on invalid packets (7.0.x backport) Bug #7407: detect: missing app-layer metadata in alerts (7.0.x backport) Bug #7368: flow: flow timeout pseudo packet triggers unexpected alert (7.0.x backport) Bug #7362: rules: unknown internal events not being detected as errors (7.0.x backport) Bug #7339: rust: different int types turn garbage on FFI boundary (7.0.x backport) Bug #7335: asan/profiling: global-buffer-overflow error (7.0.x backport) Bug #7327: http: FN with prefilter if the first of multi buffer did not match (7.0.x backport) Bug #7324: mqtt: wrong and missing direction for keywords (7.0.x backport) Bug #7310: http: incorrect file direction handling (7.0.x backport) Bug #7308: conf: memleak if yaml parser is initialized before checking if file exists (7.0.x backport) Bug #7307: detect: memleak in case of errors during initialization (7.0.x backport) Bug #7301: output: oversized records lead to invalid json (7.0.x backport) Bug #7295: detect: sip.stat_code keyword uses wrong buffer name Bug #7294: conf: nullptr dereference if mem alloc fails for a node in yaml parser (7.0.x backport) Optimization #7316: template: remove usage of template-rust (7.0.x backport) Optimization #7275: tcp/reassemble: GetBlock takes O(nlgn) in worst case (7.0.x backport) Feature #7439: eve/alert: enrich decoder event rules (7.0.x backport) Task #7427: flowint: add isnotset support (7.0.x backport) Task #7288: schema: add missing tls fields certificate and chain (7.0.x backport) Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/suricata | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/suricata b/lfs/suricata index b563ff9da..2b05c3c54 100644 --- a/lfs/suricata +++ b/lfs/suricata @@ -24,7 +24,7 @@ include Config -VER = 7.0.7 +VER = 7.0.8 THISAPP = suricata-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = dc39279b99880762bee2b1788fea9046dc63c01560332ffc167844673314165456dcbff3b0d05d32c931741b397fd68e9e294d2ee6c526a3d286445c2a83b789 +$(DL_FILE)_BLAKE2 = 8571a6368b90e18046cdcf71f53e1b59e895ea8fe2d8f996ef614a890b520671f5dcac10014555880e408060913df1dab4c473bf083e7c0451c6a4b93bedd047 install : $(TARGET) -- 2.47.1

2 2

[DEV PATCH 1/3] ovpnmain.cgi: Allow the openvpn-rw status to be shown in openvpn WUI
by Adolf Belka 14 Dec '24

14 Dec '24

- The main openvpn process name has been changed to openvpn-rw. This change is needed so that if openvpn-rw is running the status shows that on the OpenVPN WUI page Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- html/cgi-bin/ovpnmain.cgi | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) mode change 100755 => 100644 html/cgi-bin/ovpnmain.cgi diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi old mode 100755 new mode 100644 index bd102f4bc..843edc519 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -2,7 +2,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -5063,8 +5063,8 @@ END # Show the service status &Header::ServiceStatus({ $Lang::tr{'ovpn roadwarrior server'} => { - "process" => "openvpn", - "pidfile" => "/var/run/openvpn.pid", + "process" => "openvpn-rw", + "pidfile" => "/var/run/openvpn-rw.pid" } }); -- 2.47.1

1 3

[PATCH] monit: Update to 5.34.3
by Matthias Fischer 14 Dec '24

14 Dec '24

For details see: https://mmonit.com/monit/changes/ "Fixed: If the ping statement did not explicitly specify an outgoing address but a previous ping statement did, the same address was shared by both statements. Fixed: Monit may crash upon stopping if the ping statement is used in conjunction with the address option. Fixed: If a directory is set in the allow option of the set httpd statement, instead of a file or string, Monit hangs on startup." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/monit | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/monit b/lfs/monit index 4d687ae0f..b31a6ad0e 100644 --- a/lfs/monit +++ b/lfs/monit @@ -24,7 +24,7 @@ include Config -VER = 5.34.2 +VER = 5.34.3 SUMMARY = Utility for monitoring services on a Unix system THISAPP = monit-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = monit -PAK_VER = 25 +PAK_VER = 26 DEPS = @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d4e5587299a44697d0c7d26b0fcc1a7fe4330693de188cf82301e4ab8fa8b2aea141f3aaa99bd1c598655ba993c616faf0a559dbb9c538d2d9421c6791f36880 +$(DL_FILE)_BLAKE2 = 444bc0918fefc59214f9513fa134d4abea9cb0bbfc3e71fa4c3d76d9134821a54e1949bf89a4dc483593862a629a03ac347df9c12f07476c1fcbf2c2e2d4d507 install : $(TARGET) -- 2.43.0

2 1

[PATCH 1/2] installer: Remove the option to install without journal
by Michael Tremer 14 Dec '24

14 Dec '24

It was possible to install a new system without a journal. I think this is a very outdated concept now and should be avoided in favour of filesystem integrity. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- src/installer/hw.c | 5 ----- src/installer/hw.h | 7 +++---- src/installer/main.c | 1 - 3 files changed, 3 insertions(+), 10 deletions(-) diff --git a/src/installer/hw.c b/src/installer/hw.c index 6bf05b185..577780af9 100644 --- a/src/installer/hw.c +++ b/src/installer/hw.c @@ -923,10 +923,6 @@ static int hw_format_filesystem(const char* path, int fs, const char* output) { } else if (fs == HW_FS_EXT4) { snprintf(cmd, sizeof(cmd), "/sbin/mke2fs -FF -T ext4 %s", path); - // EXT4 w/o journal - } else if (fs == HW_FS_EXT4_WO_JOURNAL) { - snprintf(cmd, sizeof(cmd), "/sbin/mke2fs -FF -T ext4 -O ^has_journal %s", path); - // XFS } else if (fs == HW_FS_XFS) { snprintf(cmd, sizeof(cmd), "/sbin/mkfs.xfs -f %s", path); @@ -1027,7 +1023,6 @@ int hw_mount_filesystems(struct hw_destination* dest, const char* prefix) { const char* filesystem; switch (dest->filesystem) { case HW_FS_EXT4: - case HW_FS_EXT4_WO_JOURNAL: filesystem = "ext4"; break; diff --git a/src/installer/hw.h b/src/installer/hw.h index 92f32b67f..e1c3d345f 100644 --- a/src/installer/hw.h +++ b/src/installer/hw.h @@ -43,10 +43,9 @@ #define HW_FS_SWAP 0 #define HW_FS_EXT4 1 -#define HW_FS_EXT4_WO_JOURNAL 2 -#define HW_FS_XFS 3 -#define HW_FS_FAT32 4 -#define HW_FS_BTRFS 5 +#define HW_FS_XFS 2 +#define HW_FS_FAT32 3 +#define HW_FS_BTRFS 4 #define HW_FS_DEFAULT HW_FS_EXT4 diff --git a/src/installer/main.c b/src/installer/main.c index 9e3f4af83..9b9c630c3 100644 --- a/src/installer/main.c +++ b/src/installer/main.c @@ -644,7 +644,6 @@ int main(int argc, char *argv[]) { char* description; } filesystems[] = { { HW_FS_EXT4, _("ext4 Filesystem") }, - { HW_FS_EXT4_WO_JOURNAL, _("ext4 Filesystem without journal") }, { HW_FS_XFS, _("XFS Filesystem") }, { HW_FS_BTRFS, _("BTRFS Filesystem (EXPERIMENTAL)") }, { 0, NULL }, -- 2.39.5

2 3

[PATCH] fr.pl: Update to French translations for the optionsfw.cgi page
by Adolf Belka 14 Dec '24

14 Dec '24

Reported-by: Phil SCAR <p27m(a)orange.fr> Fixes: Bug13800 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- langs/fr/cgi-bin/fr.pl | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index 21f7b645f..1b6d89eed 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -956,17 +956,17 @@ 'drop action' => 'Comportement par défaut du pare-feu (avancé) en mode "Bloqué"', 'drop action1' => 'Comportement par défaut du pare-feu (sortant) en mode "Bloqué"', 'drop action2' => 'Comportement par défaut du pare-feu (entrant)', -'drop forward' => 'Abandon des paquets avancés par le journal', +'drop forward' => 'Journaliser les paquets abandonnés transférés', 'drop hostile' => 'Abandonner les paquets depuis et vers des réseaux hostiles (répertoriés sur <a href="https://www.spamhaus.org/blocklists/do-not-route-or-peer/" target="_blank">Spamhaus DROP</a>, etc.)', -'drop input' => 'Suppression des paquets entrants du journal', -'drop newnotsyn' => 'Supprimer les anciens paquets de synchronisation du journal', -'drop outgoing' => 'Abandon des paquets sortants par le journal', -'drop portscan' => 'Suppression des paquets portscan du journal', +'drop input' => 'Journaliser les paquets abandonnés entrants', +'drop newnotsyn' => 'Journaliser les paquets abandonnés de synchronisation', +'drop outgoing' => 'Journaliser les paquets abandonnés sortants', +'drop portscan' => 'Journaliser les paquets abandonnés portscan', 'drop proxy' => 'Suppression de tous les paquets qui ne sont pas adressés au proxy', 'drop samba' => 'Suppression de tous les ports Microsoft 135, 137, 138, 139, 445, 1025', -'drop spoofed martians' => 'Enregistrer les paquets usurpés abandonnés et martiens', -'drop wirelessforward' => 'Suppression des paquets transférés du journal', -'drop wirelessinput' => 'Suppression des paquets entrants du journal', +'drop spoofed martians' => 'Journaliser les paquets abandonnés usurpés et martiens', +'drop wirelessforward' => 'Journaliser des paquets abandonnés sans fil transférés', +'drop wirelessinput' => 'Journaliser les paquets abandonnés sans fil entrants', 'dst port' => 'Port de destination ', 'dstprt range overlaps' => 'La plage de port de destination chevauche un port déjà défini.', 'dstprt within existing' => 'Le port de destination est dans une plage de port déjà définie.', -- 2.47.1

1 0

[PATCH] libcap: Update to version 2.73
by Adolf Belka 14 Dec '24

14 Dec '24

- Update from version 2.72 to 2.73 - Update of rootfile - This version builds correctly with aarch64 - tested out building on the aarch64-builder system - Changelog 2.73 Bug fixes for libpsx changes in the 2.72 release. Some architectures do not support the system call getdents(). More modern architectures only support getdents64(), so use that. Patch provided by Xi Ruoyao. gettid() isn't consistently defined in all *libc's so create a macro for using it in the libpsx sources. Fix some static analysis found issues, surfaced by Carlos Rodriguez-Fernandez from an analysis performed on Fedora's libcap-2.71 release. Third attempt to get an executable cap package runnable example into the documentation on go.pkg.dev. It still isn't working, but I think the issue is now one for the go.dev website: Filed go/issues/70630 which got duped into this go/issues/70611 and a fix was requested by Ian Taylor. Remove a redundant c.String() function since fmt.Println(c) can figure this detail out. Freshen up setcap.c sources. Sort the argument help. Add go vet to the tests for cap and psx packages. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/libcap | 4 ++-- lfs/libcap | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap index 82754304e..dc411f3e5 100644 --- a/config/rootfiles/common/libcap +++ b/config/rootfiles/common/libcap @@ -6,10 +6,10 @@ sbin/setcap #usr/include/sys/psx_syscall.h #usr/lib/libcap.so usr/lib/libcap.so.2 -usr/lib/libcap.so.2.72 +usr/lib/libcap.so.2.73 #usr/lib/libpsx.so #usr/lib/libpsx.so.2 -usr/lib/libpsx.so.2.72 +usr/lib/libpsx.so.2.73 #usr/lib/pkgconfig/libcap.pc #usr/lib/pkgconfig/libpsx.pc #usr/lib/security diff --git a/lfs/libcap b/lfs/libcap index c4a50b2c7..99fd26bb7 100644 --- a/lfs/libcap +++ b/lfs/libcap @@ -24,7 +24,7 @@ include Config -VER = 2.72 +VER = 2.73 THISAPP = libcap-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2c854fd9a714ab1daae3831829b4b7a890a0894953ba88ae1e190274e7fc635275ce4bf2c668b390ba8196248cb1f953fafb3a9af3907e688c1ab40774f7c6e0 +$(DL_FILE)_BLAKE2 = c8ea9b8accc4034adfd31295ec9356dcce3ae46b3e532e089248c20d0f148de17c9a0525e9f15ac839f83351cdff9e0f9e91ee8966c34116ad1411917f9358b2 install : $(TARGET) -- 2.47.1

2 1

Re: [FAILED] Nightly Build of next (c004ed4) for aarch64 on arm64-01.zrh.ipfire.org
by Adolf Belka 13 Dec '24

13 Dec '24

Hi Arne, I saw that my libcap build failed on aarch64. libcap have issued version 2.73 which has the following as one of the bug fixes for libcap-2.72 * Some architectures do not support the system call getdents(). More modern architectures only support getdents64() <https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=304089b078…>,so use that. Patch provided by Xi Ruoyao. I will do a fresh patch submit for libcap-2.73 Should I do this as a patch from 2.72 or will you revert my 2.72 patch and I do a fresh patch from 2.70, the previous working version. Regards, Adolf. On 13/12/2024 11:48, IPFire Nightly Builder wrote: > https://nightly.ipfire.org/next/2024-12-13%2010%3A05%3A31%20%2B0100-c004ed4… > > commit c004ed4755890f575729aefefad567ac033c8cb5 > Author: Arne Fitzenreiter <arne_f(a)ipfire.org> > Date: Fri Dec 13 10:05:31 2024 +0100 > > core191: ship libxml2 > > Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> > > https://git.ipfire.org/?p=ipfire-2.x.git;a=shortlog;h=c004ed4755890f575729a… > > Packaged toolchain compilation > Building IPFire > stage2 [ 1 ][ DONE ] > linux (6.6.63) HEADERS=1 [ 35 ][ DONE ] > man-pages (6.9.1) [ 16 ][ DONE ] > glibc (2.40) [ 8:06 ][ DONE ] > tzdata (2024a) [ 2 ][ DONE ] > cleanup-toolchain [ 0 ][ DONE ] > zlib (1.3.1) [ 1 ][ DONE ] > zstd (1.5.6) [ 3 ][ DONE ] > autoconf (2.71) [ 3 ][ DONE ] > autoconf-archive (2024.10.16) [ 2 ][ DONE ] > automake (1.17) [ 3 ][ DONE ] > help2man (1.49.3) [ 1 ][ DONE ] > libtool (2.4.7) [ 8 ][ DONE ] > binutils (2.43) [ 1:09 ][ DONE ] > gmp (6.3.0) [ 44 ][ DONE ] > mpfr (4.2.1) [ 25 ][ DONE ] > libmpc (1.3.1) [ 8 ][ DONE ] > libxcrypt (4.4.36) [ 17 ][ DONE ] > file (5.45) [ 10 ][ DONE ] > gcc (14.2.0) [ 7:37 ][ DONE ] > attr (2.5.2) [ 7 ][ DONE ] > acl (2.3.2) [ 11 ][ DONE ] > sed (4.9) [ 31 ][ DONE ] > berkeley (5.3.28) [ 34 ][ DONE ] > coreutils (9.5) [ 1:22 ][ DONE ] > iana-etc (20241024) [ 0 ][ DONE ] > m4 (1.4.19) [ 40 ][ DONE ] > bison (3.8.2) [ 39 ][ DONE ] > ncurses (6.5) [ 38 ][ DONE ] > perl (5.36.0) [ 2:19 ][ DONE ] > readline (8.2) [ 8 ][ DONE ] > bzip2 (1.0.8) [ 1 ][ DONE ] > xz (5.4.5) [ 18 ][ DONE ] > lzip (1.24.1) [ 0 ][ DONE ] > pcre (8.45) [ 11 ][ DONE ] > pcre2 (10.44) [ 9 ][ DONE ] > gettext (0.22.5) [ 3:44 ][ DONE ] > bash (5.2) [ 36 ][ DONE ] > diffutils (3.10) [ 33 ][ DONE ] > ed (1.20.2) [ 0 ][ DONE ] > findutils (4.10.0) [ 51 ][ DONE ] > flex (2.6.4) [ 11 ][ DONE ] > gawk (5.3.1) [ 19 ][ DONE ] > go (1.20.4) [ 23 ][ DONE ] > grep (3.11) [ 35 ][ DONE ] > groff (1.23.0) [ 43 ][ DONE ] > gperf (3.1) [ 4 ][ DONE ] > gzip (1.13) [ 21 ][ DONE ] > hostname (3.20) [ 1 ][ DONE ] > whois (5.5.23) [ 0 ][ DONE ] > kbd (2.6.4) [ 16 ][ DONE ] > less (668) [ 8 ][ DONE ] > pkg-config (0.29.2) [ 32 ][ DONE ] > procps (v4.0.4) [ 20 ][ DONE ] > make (4.4.1) [ 16 ][ DONE ] > libpipeline (1.5.8) [ 32 ][ DONE ] > man (2.12.0) [ 1:01 ][ DONE ] > net-tools (2.10) [ 3 ][ DONE ] > patch (2.7.6) [ 31 ][ DONE ] > psmisc (23.7) [ 7 ][ DONE ] > shadow (4.16.0) [ 17 ][ DONE ] > sysklogd (1.5.1) [ 1 ][ DONE ] > sysvinit (3.10) [ 1 ][ DONE ] > tar (1.35) [ 43 ][ DONE ] > texinfo (7.1.1) [ 39 ][ DONE ] > util-linux (2.40.2) [ 45 ][ DONE ] > vim (9.1) [ 21 ][ DONE ] > e2fsprogs (1.47.1) [ 20 ][ DONE ] > jq (1.7.1) [ 14 ][ DONE ] > configroot [ 1 ][ DONE ] > initscripts [ 1 ][ DONE ] > backup [ 0 ][ DONE ] > rust (1.67.0) [ 21 ][ DONE ] > openssl (3.3.2) [ 3:46 ][ DONE ] > popt (1.19) [ 6 ][ DONE ] > libedit (20240808-3.1) [ 9 ][ DONE ] > pam (1.6.1) [ 40 ][ DONE ] > libcap (2.72) [ 2 ][ FAIL ] > > gcc -O2 -g0 -pipe -Wall -fexceptions -fPIC -Wp,-U_FORTIFY_SOURCE -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Dlinux -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/src/libcap-2.72/libcap/../libcap/include/uapi -I/usr/src/libcap-2.72/libcap/../libcap/include -c cap_file.c -o cap_file.o > gcc -O2 -g0 -pipe -Wall -fexceptions -fPIC -Wp,-U_FORTIFY_SOURCE -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Dlinux -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/src/libcap-2.72/libcap/../libcap/include/uapi -I/usr/src/libcap-2.72/libcap/../libcap/include -c cap_syscalls.c -o cap_syscalls.o > ar rcs libcap.a cap_alloc.o cap_proc.o cap_extint.o cap_flag.o cap_text.o cap_file.o cap_syscalls.o > ranlib libcap.a > make libcap.so > make[3]: Entering directory '/usr/src/libcap-2.72/libcap' > gcc -O2 -g0 -pipe -Wall -fexceptions -fPIC -Wp,-U_FORTIFY_SOURCE -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Dlinux -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/src/libcap-2.72/libcap/../libcap/include/uapi -I/usr/src/libcap-2.72/libcap/../libcap/include empty.c -o empty > objcopy --dump-section .interp=loader.txt empty /dev/null > gcc -O2 -g0 -pipe -Wall -fexceptions -fPIC -Wp,-U_FORTIFY_SOURCE -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Dlinux -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/src/libcap-2.72/libcap/../libcap/include/uapi -I/usr/src/libcap-2.72/libcap/../libcap/include -DLIBRARY_VERSION=\"libcap-2.72\" -DSHARED_LOADER=\"/lib/ld-linux-aarch64.so.1\" -include ./libcap.h -c exec > able.c -o cap_magic.o > gcc -Wl,-x -shared -Wl,-shared -O2 -g0 -pipe -Wall -fexceptions -fPIC -Wp,-U_FORTIFY_SOURCE -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Wl,-soname,libcap.so.2 -o libcap.so.2.72 cap_alloc.o cap_proc.o cap_extint.o cap_flag.o cap_text.o cap_file.o cap_syscalls.o cap_magic.o -Wl,-e,__so_start > ln -sf libcap.so.2.72 libcap.so.2 > ln -sf libcap.so.2 libcap.so > make[3]: Leaving directory '/usr/src/libcap-2.72/libcap' > make libpsx.a > make[3]: Entering directory '/usr/src/libcap-2.72/libcap' > gcc -O2 -g0 -pipe -Wall -fexceptions -fPIC -Wp,-U_FORTIFY_SOURCE -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Wall -Wwrite-strings -Wpointer-arith -Wcast-qual -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Winline -Wshadow -Wunreachable-code -fPIC -D_LIBPSX_PTHREAD_LINKAGE -Dlinux -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/src/libcap-2.72/libcap/../libcap/include/uapi -I/usr/src/libcap-2.72/libcap/../libcap/include -c ../psx/psx.c -o ../psx/psx.o > ../psx/psx.c: In function '__psx_syscall': > ../psx/psx.c:489:36: error: 'SYS_getdents' undeclared (first use in this function); did you mean 'SYS_getdents64'? > 489 | size_t nread = syscall(SYS_getdents, fd, buf, BUF_SIZE); > | ^~~~~~~~~~~~ > | SYS_getdents64 > ../psx/psx.c:489:36: note: each undeclared identifier is reported only once for each function it appears in > make[3]: *** [Makefile:139: ../psx/psx.o] Error 1 > make[3]: Leaving directory '/usr/src/libcap-2.72/libcap' > make[2]: *** [Makefile:46: all] Error 2 > make[2]: Leaving directory '/usr/src/libcap-2.72/libcap' > make[1]: *** [Makefile:12: all] Error 2 > make[1]: Leaving directory '/usr/src/libcap-2.72' > make: *** [libcap:75: /usr/src/log/libcap-2.72] Error 2 > make: Leaving directory '/usr/src/lfs' > > ERROR: Building libcap [ FAIL ] > Check /build/nightly/next/log_aarch64/_build.ipfire.log for errors if applicable[ FAIL ]

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development December 2024