IPFire-SCM February 2018

ipfire-scm@lists.ipfire.org

1 participants
36 discussions

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 63b515dc260f2da9bd413fea254d2e5b634c793a
by git＠ipfire.org 28 Feb '18

28 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 63b515dc260f2da9bd413fea254d2e5b634c793a (commit) via 464426d36348cdb468f5c03f50132cf6583e23bd (commit) via 263d1e6484ad61711f07cad35057c324db28b480 (commit) via 592949344560592807b5155d1c0ed085ac02c8ab (commit) from e707599d2cd8af8a1464ce31ee89a5401d5df0e2 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 63b515dc260f2da9bd413fea254d2e5b634c793a Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 28 11:55:35 2018 +0000 apache: Require TLSv1.2 for access to the web user interface This will work fine for FF 27 or newer, Chrome 30 or newer, IE 11 on Windows 7 or newer, Opera 17 or newer, Safari 9 or newer, Android 5.0 or newer and Java 8 or newer Since IPFire is not supposed to host any other applications and all have been removed in the last few Core Updates, only the web user interface is served over HTTPS here. We clearly prefer security over compatibility. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 464426d36348cdb468f5c03f50132cf6583e23bd Author: Peter Müller <peter.mueller(a)link38.eu> Date: Tue Nov 7 20:51:32 2017 +0100 change Apache TLS cipher list to "Mozilla Modern" Change the TLS cipher list of Apache to "Mozilla Modern". ECDSA is preferred over RSA to save CPU time on both server and client. Clients without support for TLS 1.2 and AES will experience connection failures. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 263d1e6484ad61711f07cad35057c324db28b480 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 28 11:49:47 2018 +0000 openssl: Apply ciphers patch before running Configure This works just fine here. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 592949344560592807b5155d1c0ed085ac02c8ab Author: Peter Müller via Development <development(a)lists.ipfire.org> Date: Tue Feb 27 18:35:22 2018 +0100 set OpenSSL 1.1.0 DEFAULT cipher list to secure value Only use secure cipher list for the OpenSSL DEFAULT list: * ECDSA is preferred over RSA since it is faster and more scalable * TLS 1.2 suites are preferred over anything older * weak ciphers such as RC4 and 3DES have been eliminated * AES-GCM is preferred over AES-CBC (known as "mac-then-encrypt" problem) * ciphers without PFS are moved to the end of the cipher list This patch leaves AES-CCM, AES-CCM8 and CHACHA20-POLY1305 suites where they are since they are considered secure and there is no need to change anything. The DEFAULT cipher list is now (output of "openssl ciphers -v"): ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(256) Mac=AEAD ECDHE-ECDSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH Au=ECDSA Enc=CHACHA20/POLY1305(256) Mac=AEAD ECDHE-ECDSA-AES256-CCM8 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESCCM8(256) Mac=AEAD ECDHE-ECDSA-AES256-CCM TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESCCM(256) Mac=AEAD ECDHE-ECDSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(128) Mac=AEAD ECDHE-ECDSA-AES128-CCM8 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESCCM8(128) Mac=AEAD ECDHE-ECDSA-AES128-CCM TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESCCM(128) Mac=AEAD ECDHE-ECDSA-AES256-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AES(256) Mac=SHA384 ECDHE-ECDSA-CAMELLIA256-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=Camellia(256) Mac=SHA384 ECDHE-ECDSA-AES128-SHA256 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AES(128) Mac=SHA256 ECDHE-ECDSA-CAMELLIA128-SHA256 TLSv1.2 Kx=ECDH Au=ECDSA Enc=Camellia(128) Mac=SHA256 ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD ECDHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH Au=RSA Enc=CHACHA20/POLY1305(256) Mac=AEAD ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(128) Mac=AEAD ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA384 ECDHE-RSA-CAMELLIA256-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=Camellia(256) Mac=SHA384 ECDHE-RSA-AES128-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(128) Mac=SHA256 ECDHE-RSA-CAMELLIA128-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=Camellia(128) Mac=SHA256 DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD DHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=DH Au=RSA Enc=CHACHA20/POLY1305(256) Mac=AEAD DHE-RSA-AES256-CCM8 TLSv1.2 Kx=DH Au=RSA Enc=AESCCM8(256) Mac=AEAD DHE-RSA-AES256-CCM TLSv1.2 Kx=DH Au=RSA Enc=AESCCM(256) Mac=AEAD DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(128) Mac=AEAD DHE-RSA-AES128-CCM8 TLSv1.2 Kx=DH Au=RSA Enc=AESCCM8(128) Mac=AEAD DHE-RSA-AES128-CCM TLSv1.2 Kx=DH Au=RSA Enc=AESCCM(128) Mac=AEAD DHE-RSA-AES256-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AES(256) Mac=SHA256 DHE-RSA-CAMELLIA256-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=Camellia(256) Mac=SHA256 DHE-RSA-AES128-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AES(128) Mac=SHA256 DHE-RSA-CAMELLIA128-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=Camellia(128) Mac=SHA256 ECDHE-ECDSA-AES256-SHA TLSv1 Kx=ECDH Au=ECDSA Enc=AES(256) Mac=SHA1 ECDHE-ECDSA-AES128-SHA TLSv1 Kx=ECDH Au=ECDSA Enc=AES(128) Mac=SHA1 ECDHE-RSA-AES256-SHA TLSv1 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA1 ECDHE-RSA-AES128-SHA TLSv1 Kx=ECDH Au=RSA Enc=AES(128) Mac=SHA1 DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1 DHE-RSA-CAMELLIA256-SHA SSLv3 Kx=DH Au=RSA Enc=Camellia(256) Mac=SHA1 DHE-RSA-AES128-SHA SSLv3 Kx=DH Au=RSA Enc=AES(128) Mac=SHA1 DHE-RSA-CAMELLIA128-SHA SSLv3 Kx=DH Au=RSA Enc=Camellia(128) Mac=SHA1 AES256-GCM-SHA384 TLSv1.2 Kx=RSA Au=RSA Enc=AESGCM(256) Mac=AEAD AES256-CCM8 TLSv1.2 Kx=RSA Au=RSA Enc=AESCCM8(256) Mac=AEAD AES256-CCM TLSv1.2 Kx=RSA Au=RSA Enc=AESCCM(256) Mac=AEAD AES128-GCM-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AESGCM(128) Mac=AEAD AES128-CCM8 TLSv1.2 Kx=RSA Au=RSA Enc=AESCCM8(128) Mac=AEAD AES128-CCM TLSv1.2 Kx=RSA Au=RSA Enc=AESCCM(128) Mac=AEAD AES256-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA256 CAMELLIA256-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=Camellia(256) Mac=SHA256 AES128-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA256 CAMELLIA128-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=Camellia(128) Mac=SHA256 AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1 CAMELLIA256-SHA SSLv3 Kx=RSA Au=RSA Enc=Camellia(256) Mac=SHA1 AES128-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA1 CAMELLIA128-SHA SSLv3 Kx=RSA Au=RSA Enc=Camellia(128) Mac=SHA1 This has been discussed at 2017-12-04 (https://wiki.ipfire.org/devel/telco/2017-12-04) and for a similar patch written for OpenSSL 1.0.x. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/httpd/vhosts.d/ipfire-interface-ssl.conf | 4 ++-- lfs/openssl | 1 + src/patches/openssl-1.1.0g-weak-ciphers.patch | 11 +++++++++++ 3 files changed, 14 insertions(+), 2 deletions(-) create mode 100644 src/patches/openssl-1.1.0g-weak-ciphers.patch Difference in files: diff --git a/config/httpd/vhosts.d/ipfire-interface-ssl.conf b/config/httpd/vhosts.d/ipfire-interface-ssl.conf index b5052dda4..63e77021b 100644 --- a/config/httpd/vhosts.d/ipfire-interface-ssl.conf +++ b/config/httpd/vhosts.d/ipfire-interface-ssl.conf @@ -10,8 +10,8 @@ TransferLog /var/log/httpd/access_log SSLEngine on - SSLProtocol all -SSLv2 -SSLv3 - SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:CAMELLIA128-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA + SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 + SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256 SSLHonorCipherOrder on SSLCompression off SSLSessionTickets off diff --git a/lfs/openssl b/lfs/openssl index bd7098039..7a39f14de 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -120,6 +120,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.1.0-disable-ssl3.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.1.0g-weak-ciphers.patch # Apply our CFLAGS cd $(DIR_APP) && sed -i Configure \ diff --git a/src/patches/openssl-1.1.0g-weak-ciphers.patch b/src/patches/openssl-1.1.0g-weak-ciphers.patch new file mode 100644 index 000000000..66dad2bee --- /dev/null +++ b/src/patches/openssl-1.1.0g-weak-ciphers.patch @@ -0,0 +1,11 @@ +--- openssl-1.1.0g-orig/include/openssl/ssl.h 2017-11-02 15:29:05.000000000 +0100 ++++ openssl-1.1.0g/include/openssl/ssl.h 2018-02-27 18:23:43.522649728 +0100 +@@ -194,7 +194,7 @@ + * The following cipher list is used by default. It also is substituted when + * an application-defined cipher list string starts with 'DEFAULT'. + */ +-# define SSL_DEFAULT_CIPHER_LIST "ALL:!COMPLEMENTOFDEFAULT:!eNULL" ++# define SSL_DEFAULT_CIPHER_LIST "kEECDH+ECDSA:kEECDH:kEDH:HIGH:+SHA:+kRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!kECDH:!IDEA:!SEED:!RC4:!kDH:!DSS" + /* + * As of OpenSSL 1.0.0, ssl_create_cipher_list() in ssl/ssl_ciph.c always + * starts with a reasonable order, and all we have to do for DEFAULT is hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. e707599d2cd8af8a1464ce31ee89a5401d5df0e2
by git＠ipfire.org 28 Feb '18

28 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via e707599d2cd8af8a1464ce31ee89a5401d5df0e2 (commit) from ca4c354e085083dacf66071b23e507ea2ebb1b81 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit e707599d2cd8af8a1464ce31ee89a5401d5df0e2 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 28 10:48:29 2018 +0000 core120: Call openvpnctrl with full path Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/120/update.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) Difference in files: diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh index c420152d2..d2fb326a6 100644 --- a/config/rootfiles/core/120/update.sh +++ b/config/rootfiles/core/120/update.sh @@ -47,7 +47,7 @@ ldconfig # Changed and new OpenVPN-2.4 directives will wrote to server.conf and renew CRL while update an core update if [ -e /var/ipfire/ovpn/server.conf ]; then - openvpnctrl -k + /usr/local/bin/openvpnctrl -k # Update configuration directives sed -i -e 's/script-security 3 system/script-security 3/' \ @@ -59,7 +59,7 @@ if [ -e /var/ipfire/ovpn/server.conf ]; then -out /var/ipfire/ovpn/crls/cacrl.pem \ -config /var/ipfire/ovpn/openssl/ovpn.cnf - openvpnctrl -s + /usr/local/bin/openvpnctrl -s fi # Start services hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, core119, updated. 876dbda0c2555225d95fedca19b0aa0b91b59d18
by git＠ipfire.org 28 Feb '18

28 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core119 has been updated via 876dbda0c2555225d95fedca19b0aa0b91b59d18 (commit) from 7eb86ee39ec799e7a3ef614e96263e50f708f85d (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 876dbda0c2555225d95fedca19b0aa0b91b59d18 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 28 11:03:03 2018 +0000 Revert "IPsec: Try to restart always-on tunnels immediately" This reverts commit a261cb06c6cdd3ba14ad0163c8c9e714ae94fc5b. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: html/cgi-bin/vpnmain.cgi | 6 ------ 1 file changed, 6 deletions(-) Difference in files: diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi index 2a0351ea0..17873d62b 100644 --- a/html/cgi-bin/vpnmain.cgi +++ b/html/cgi-bin/vpnmain.cgi @@ -436,12 +436,6 @@ sub writeipsecfiles { if ($start_action eq 'route' && $inactivity_timeout > 0) { print CONF "\tinactivity=$inactivity_timeout\n"; } - - # Restart the connection immediately when it has gone down - # unexpectedly - if ($start_action eq 'start') { - print CONF "\tcloseaction=restart\n"; - } } # Fragmentation hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, core119, updated. 7eb86ee39ec799e7a3ef614e96263e50f708f85d
by git＠ipfire.org 26 Feb '18

26 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core119 has been updated via 7eb86ee39ec799e7a3ef614e96263e50f708f85d (commit) from f0869181e846cf235eca2d74eaf4c219740f3de8 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 7eb86ee39ec799e7a3ef614e96263e50f708f85d Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Feb 26 20:08:56 2018 +0100 mpd: bump package to remove link against tcpwrapper Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/mpd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Difference in files: diff --git a/lfs/mpd b/lfs/mpd index 2beb422fa..0e57a2846 100644 --- a/lfs/mpd +++ b/lfs/mpd @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/${THISAPP} TARGET = $(DIR_INFO)/$(THISAPP) PROG = mpd -PAK_VER = 17 +PAK_VER = 18 DEPS = "alsa faad2 ffmpeg flac lame libmad libshout libogg libid3tag libvorbis opus" hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. ca4c354e085083dacf66071b23e507ea2ebb1b81
by git＠ipfire.org 26 Feb '18

26 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via ca4c354e085083dacf66071b23e507ea2ebb1b81 (commit) via d192815e839c42566c669999900a0dd62824eb8e (commit) via 1c0cfaa5949e4303e8e4e2f041af86a812f3fe6c (commit) via f0e308ab2ff92858452d7c3ac3ad114b4ea862f4 (commit) via 61fcd32f152f36edec042dd8e35ae2ab3f2acc2f (commit) from 0eccedd1c8340e186a8329f66a235aea6c92b1af (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit ca4c354e085083dacf66071b23e507ea2ebb1b81 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Feb 26 16:28:16 2018 +0000 Bump release of all packages linked against OpenSSL Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit d192815e839c42566c669999900a0dd62824eb8e Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Feb 26 16:22:32 2018 +0000 core120: Ship everything that is linked against OpenSSL This will make sure that everything is using the new version of the library. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 1c0cfaa5949e4303e8e4e2f041af86a812f3fe6c Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Feb 26 15:37:49 2018 +0000 Disable Path MTU discovery This seems to be a failed concept and causes issues with transferring large packets through an IPsec tunnel connection. This configures the kernel to still respond to PMTU ICMP discovery messages, but will not try this on its own. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit f0e308ab2ff92858452d7c3ac3ad114b4ea862f4 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Feb 26 15:34:10 2018 +0000 core120: Fix typo in initscript name Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 61fcd32f152f36edec042dd8e35ae2ab3f2acc2f Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Feb 26 13:06:34 2018 +0000 Rootfile update Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/etc/sysctl.conf | 3 + config/rootfiles/common/armv5tel/gcc | 1 + config/rootfiles/common/armv5tel/python-m2crypto | 99 +++++++++++++++++++++- .../{oldcore/114 => core/120}/filelists/apache2 | 0 .../{oldcore/114 => core/120}/filelists/apr | 0 .../{oldcore/114 => core/120}/filelists/aprutil | 0 .../{oldcore/100 => core/120}/filelists/bind | 0 .../{oldcore/103 => core/120}/filelists/curl | 0 .../{oldcore/101 => core/120}/filelists/dma | 0 config/rootfiles/core/120/filelists/files | 5 +- .../{oldcore/111 => core/120}/filelists/libevent2 | 0 .../{oldcore/100 => core/120}/filelists/ntp | 0 .../{oldcore/104 => core/120}/filelists/snort | 0 .../{oldcore/106 => core/120}/filelists/strongswan | 0 .../{oldcore/106 => core/120}/filelists/unbound | 0 .../103 => core/120}/filelists/wpa_supplicant | 0 lfs/asterisk | 2 +- lfs/bacula | 2 +- lfs/clamav | 2 +- lfs/cyrus-imapd | 2 +- lfs/elinks | 2 +- lfs/fetchmail | 2 +- lfs/freeradius | 2 +- lfs/git | 2 +- lfs/haproxy | 2 +- lfs/hostapd | 2 +- lfs/icecast | 2 +- lfs/keepalived | 2 +- lfs/libvirt | 2 +- lfs/miniupnpd | 2 +- lfs/monit | 2 +- lfs/nagios-plugins | 2 +- lfs/nagios_nrpe | 3 +- lfs/ncat | 2 +- lfs/netsnmpd | 3 +- lfs/nfs | 2 +- lfs/nginx | 2 +- lfs/nmap | 2 +- lfs/nut | 2 +- lfs/postfix | 2 +- lfs/python3 | 2 +- lfs/spice | 2 +- lfs/squidclamav | 2 +- lfs/stunnel | 2 +- lfs/tcpdump | 2 +- lfs/tor | 2 +- lfs/transmission | 2 +- 47 files changed, 138 insertions(+), 34 deletions(-) copy config/rootfiles/{oldcore/114 => core/120}/filelists/apache2 (100%) copy config/rootfiles/{oldcore/114 => core/120}/filelists/apr (100%) copy config/rootfiles/{oldcore/114 => core/120}/filelists/aprutil (100%) copy config/rootfiles/{oldcore/100 => core/120}/filelists/bind (100%) copy config/rootfiles/{oldcore/103 => core/120}/filelists/curl (100%) copy config/rootfiles/{oldcore/101 => core/120}/filelists/dma (100%) copy config/rootfiles/{oldcore/111 => core/120}/filelists/libevent2 (100%) copy config/rootfiles/{oldcore/100 => core/120}/filelists/ntp (100%) copy config/rootfiles/{oldcore/104 => core/120}/filelists/snort (100%) copy config/rootfiles/{oldcore/106 => core/120}/filelists/strongswan (100%) copy config/rootfiles/{oldcore/106 => core/120}/filelists/unbound (100%) copy config/rootfiles/{oldcore/103 => core/120}/filelists/wpa_supplicant (100%) Difference in files: diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf index ad562404f..f3897c3c7 100644 --- a/config/etc/sysctl.conf +++ b/config/etc/sysctl.conf @@ -1,6 +1,9 @@ net.ipv4.ip_forward = 1 net.ipv4.ip_dynaddr = 1 +# Disable Path MTU Discovery +net.ipv4.ip_no_pmtu_disc = 1 + net.ipv4.icmp_echo_ignore_broadcasts = 1 net.ipv4.icmp_ignore_bogus_error_responses = 1 net.ipv4.icmp_ratelimit = 1000 diff --git a/config/rootfiles/common/armv5tel/gcc b/config/rootfiles/common/armv5tel/gcc index 87fb8b73a..2c53236bb 100644 --- a/config/rootfiles/common/armv5tel/gcc +++ b/config/rootfiles/common/armv5tel/gcc @@ -1353,6 +1353,7 @@ usr/lib/libubsan.so.0.0.0 #usr/share/info/gccint.info #usr/share/info/libgomp.info #usr/share/info/libitm.info +#usr/share/info/libquadmath.info #usr/share/man/man1/cpp.1 #usr/share/man/man1/g++.1 #usr/share/man/man1/gcc.1 diff --git a/config/rootfiles/common/armv5tel/python-m2crypto b/config/rootfiles/common/armv5tel/python-m2crypto index 6f51e3ddf..c5477cda3 100644 --- a/config/rootfiles/common/armv5tel/python-m2crypto +++ b/config/rootfiles/common/armv5tel/python-m2crypto @@ -1 +1,98 @@ -#usr/lib/python2.7/site-packages/M2Crypto-0.21.1-py2.7-linux-armv5tel.egg +#usr/lib/python2.7/site-packages/M2Crypto +#usr/lib/python2.7/site-packages/M2Crypto-0.27.0-py2.7.egg-info +#usr/lib/python2.7/site-packages/M2Crypto-0.27.0-py2.7.egg-info/PKG-INFO +#usr/lib/python2.7/site-packages/M2Crypto-0.27.0-py2.7.egg-info/SOURCES.txt +#usr/lib/python2.7/site-packages/M2Crypto-0.27.0-py2.7.egg-info/dependency_links.txt +#usr/lib/python2.7/site-packages/M2Crypto-0.27.0-py2.7.egg-info/requires.txt +#usr/lib/python2.7/site-packages/M2Crypto-0.27.0-py2.7.egg-info/top_level.txt +#usr/lib/python2.7/site-packages/M2Crypto/ASN1.py +#usr/lib/python2.7/site-packages/M2Crypto/ASN1.pyc +#usr/lib/python2.7/site-packages/M2Crypto/AuthCookie.py +#usr/lib/python2.7/site-packages/M2Crypto/AuthCookie.pyc +#usr/lib/python2.7/site-packages/M2Crypto/BIO.py +#usr/lib/python2.7/site-packages/M2Crypto/BIO.pyc +#usr/lib/python2.7/site-packages/M2Crypto/BN.py +#usr/lib/python2.7/site-packages/M2Crypto/BN.pyc +#usr/lib/python2.7/site-packages/M2Crypto/DH.py +#usr/lib/python2.7/site-packages/M2Crypto/DH.pyc +#usr/lib/python2.7/site-packages/M2Crypto/DSA.py +#usr/lib/python2.7/site-packages/M2Crypto/DSA.pyc +#usr/lib/python2.7/site-packages/M2Crypto/EC.py +#usr/lib/python2.7/site-packages/M2Crypto/EC.pyc +#usr/lib/python2.7/site-packages/M2Crypto/EVP.py +#usr/lib/python2.7/site-packages/M2Crypto/EVP.pyc +#usr/lib/python2.7/site-packages/M2Crypto/Engine.py +#usr/lib/python2.7/site-packages/M2Crypto/Engine.pyc +#usr/lib/python2.7/site-packages/M2Crypto/Err.py +#usr/lib/python2.7/site-packages/M2Crypto/Err.pyc +#usr/lib/python2.7/site-packages/M2Crypto/PGP +#usr/lib/python2.7/site-packages/M2Crypto/PGP/PublicKey.py +#usr/lib/python2.7/site-packages/M2Crypto/PGP/PublicKey.pyc +#usr/lib/python2.7/site-packages/M2Crypto/PGP/PublicKeyRing.py +#usr/lib/python2.7/site-packages/M2Crypto/PGP/PublicKeyRing.pyc +#usr/lib/python2.7/site-packages/M2Crypto/PGP/RSA.py +#usr/lib/python2.7/site-packages/M2Crypto/PGP/RSA.pyc +#usr/lib/python2.7/site-packages/M2Crypto/PGP/__init__.py +#usr/lib/python2.7/site-packages/M2Crypto/PGP/__init__.pyc +#usr/lib/python2.7/site-packages/M2Crypto/PGP/constants.py +#usr/lib/python2.7/site-packages/M2Crypto/PGP/constants.pyc +#usr/lib/python2.7/site-packages/M2Crypto/PGP/packet.py +#usr/lib/python2.7/site-packages/M2Crypto/PGP/packet.pyc +#usr/lib/python2.7/site-packages/M2Crypto/RC4.py +#usr/lib/python2.7/site-packages/M2Crypto/RC4.pyc +#usr/lib/python2.7/site-packages/M2Crypto/RSA.py +#usr/lib/python2.7/site-packages/M2Crypto/RSA.pyc +#usr/lib/python2.7/site-packages/M2Crypto/Rand.py +#usr/lib/python2.7/site-packages/M2Crypto/Rand.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SMIME.py +#usr/lib/python2.7/site-packages/M2Crypto/SMIME.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Checker.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Checker.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Cipher.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Cipher.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Connection.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Connection.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Context.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Context.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/SSLServer.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/SSLServer.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Session.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/Session.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/TwistedProtocolWrapper.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/TwistedProtocolWrapper.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/__init__.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/__init__.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/cb.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/cb.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/ssl_dispatcher.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/ssl_dispatcher.pyc +#usr/lib/python2.7/site-packages/M2Crypto/SSL/timeout.py +#usr/lib/python2.7/site-packages/M2Crypto/SSL/timeout.pyc +#usr/lib/python2.7/site-packages/M2Crypto/X509.py +#usr/lib/python2.7/site-packages/M2Crypto/X509.pyc +#usr/lib/python2.7/site-packages/M2Crypto/__init__.py +#usr/lib/python2.7/site-packages/M2Crypto/__init__.pyc +#usr/lib/python2.7/site-packages/M2Crypto/_m2crypto.so +#usr/lib/python2.7/site-packages/M2Crypto/callback.py +#usr/lib/python2.7/site-packages/M2Crypto/callback.pyc +#usr/lib/python2.7/site-packages/M2Crypto/ftpslib.py +#usr/lib/python2.7/site-packages/M2Crypto/ftpslib.pyc +#usr/lib/python2.7/site-packages/M2Crypto/httpslib.py +#usr/lib/python2.7/site-packages/M2Crypto/httpslib.pyc +#usr/lib/python2.7/site-packages/M2Crypto/m2.py +#usr/lib/python2.7/site-packages/M2Crypto/m2.pyc +#usr/lib/python2.7/site-packages/M2Crypto/m2crypto.py +#usr/lib/python2.7/site-packages/M2Crypto/m2crypto.pyc +#usr/lib/python2.7/site-packages/M2Crypto/m2urllib.py +#usr/lib/python2.7/site-packages/M2Crypto/m2urllib.pyc +#usr/lib/python2.7/site-packages/M2Crypto/m2urllib2.py +#usr/lib/python2.7/site-packages/M2Crypto/m2urllib2.pyc +#usr/lib/python2.7/site-packages/M2Crypto/m2xmlrpclib.py +#usr/lib/python2.7/site-packages/M2Crypto/m2xmlrpclib.pyc +#usr/lib/python2.7/site-packages/M2Crypto/six.py +#usr/lib/python2.7/site-packages/M2Crypto/six.pyc +#usr/lib/python2.7/site-packages/M2Crypto/threading.py +#usr/lib/python2.7/site-packages/M2Crypto/threading.pyc +#usr/lib/python2.7/site-packages/M2Crypto/util.py +#usr/lib/python2.7/site-packages/M2Crypto/util.pyc diff --git a/config/rootfiles/core/120/filelists/apache2 b/config/rootfiles/core/120/filelists/apache2 new file mode 120000 index 000000000..eef95efa7 --- /dev/null +++ b/config/rootfiles/core/120/filelists/apache2 @@ -0,0 +1 @@ +../../../common/apache2 \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/apr b/config/rootfiles/core/120/filelists/apr new file mode 120000 index 000000000..87dd1974f --- /dev/null +++ b/config/rootfiles/core/120/filelists/apr @@ -0,0 +1 @@ +../../../common/apr \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/aprutil b/config/rootfiles/core/120/filelists/aprutil new file mode 120000 index 000000000..999f9f84b --- /dev/null +++ b/config/rootfiles/core/120/filelists/aprutil @@ -0,0 +1 @@ +../../../common/aprutil \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/bind b/config/rootfiles/core/120/filelists/bind new file mode 120000 index 000000000..48a0ebaef --- /dev/null +++ b/config/rootfiles/core/120/filelists/bind @@ -0,0 +1 @@ +../../../common/bind \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/curl b/config/rootfiles/core/120/filelists/curl new file mode 120000 index 000000000..4b84bef53 --- /dev/null +++ b/config/rootfiles/core/120/filelists/curl @@ -0,0 +1 @@ +../../../common/curl \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/dma b/config/rootfiles/core/120/filelists/dma new file mode 120000 index 000000000..60f4682da --- /dev/null +++ b/config/rootfiles/core/120/filelists/dma @@ -0,0 +1 @@ +../../../common/dma \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/files b/config/rootfiles/core/120/filelists/files index 57475b167..180cf0b4d 100644 --- a/config/rootfiles/core/120/filelists/files +++ b/config/rootfiles/core/120/filelists/files @@ -1,7 +1,10 @@ etc/system-release etc/issue +etc/sysctl.conf etc/fcron.daily/openvpn-crl-updater -etc/rc.d/init.d/dhcpd +etc/rc.d/init.d/dhcp srv/web/ipfire/cgi-bin/ovpnmain.cgi +usr/lib/python2.7/lib-dynload/_hashlib.so +usr/lib/python2.7/lib-dynload/_ssl.so var/ipfire/langs var/ipfire/ovpn/openssl/ovpn.cnf diff --git a/config/rootfiles/core/120/filelists/libevent2 b/config/rootfiles/core/120/filelists/libevent2 new file mode 120000 index 000000000..42edc99c3 --- /dev/null +++ b/config/rootfiles/core/120/filelists/libevent2 @@ -0,0 +1 @@ +../../../common/libevent2 \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/ntp b/config/rootfiles/core/120/filelists/ntp new file mode 120000 index 000000000..7542d86cb --- /dev/null +++ b/config/rootfiles/core/120/filelists/ntp @@ -0,0 +1 @@ +../../../common/ntp \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/snort b/config/rootfiles/core/120/filelists/snort new file mode 120000 index 000000000..9406ce01c --- /dev/null +++ b/config/rootfiles/core/120/filelists/snort @@ -0,0 +1 @@ +../../../common/snort \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/strongswan b/config/rootfiles/core/120/filelists/strongswan new file mode 120000 index 000000000..90c727e26 --- /dev/null +++ b/config/rootfiles/core/120/filelists/strongswan @@ -0,0 +1 @@ +../../../common/strongswan \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/unbound b/config/rootfiles/core/120/filelists/unbound new file mode 120000 index 000000000..66adf0924 --- /dev/null +++ b/config/rootfiles/core/120/filelists/unbound @@ -0,0 +1 @@ +../../../common/unbound \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/wpa_supplicant b/config/rootfiles/core/120/filelists/wpa_supplicant new file mode 120000 index 000000000..1d04c03c0 --- /dev/null +++ b/config/rootfiles/core/120/filelists/wpa_supplicant @@ -0,0 +1 @@ +../../../common/wpa_supplicant \ No newline at end of file diff --git a/lfs/asterisk b/lfs/asterisk index 8b0da1648..a2a43f863 100755 --- a/lfs/asterisk +++ b/lfs/asterisk @@ -28,7 +28,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = asterisk -PAK_VER = 22 +PAK_VER = 23 DEPS = "jansson libsrtp opus" diff --git a/lfs/bacula b/lfs/bacula index 15597f303..552c108ac 100644 --- a/lfs/bacula +++ b/lfs/bacula @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = bacula -PAK_VER = 3 +PAK_VER = 4 DEPS = "" diff --git a/lfs/clamav b/lfs/clamav index 89254a188..a4e460ffc 100644 --- a/lfs/clamav +++ b/lfs/clamav @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = clamav -PAK_VER = 35 +PAK_VER = 36 DEPS = "" diff --git a/lfs/cyrus-imapd b/lfs/cyrus-imapd index 7dea649a3..2947e3c9a 100644 --- a/lfs/cyrus-imapd +++ b/lfs/cyrus-imapd @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = cyrus-imapd -PAK_VER = 6 +PAK_VER = 7 DEPS = "" diff --git a/lfs/elinks b/lfs/elinks index 8d3926967..7ab726e92 100644 --- a/lfs/elinks +++ b/lfs/elinks @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = elinks -PAK_VER = 6 +PAK_VER = 7 DEPS = "" diff --git a/lfs/fetchmail b/lfs/fetchmail index ab271b002..33a46b6d3 100644 --- a/lfs/fetchmail +++ b/lfs/fetchmail @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = fetchmail -PAK_VER = 7 +PAK_VER = 8 DEPS = "" diff --git a/lfs/freeradius b/lfs/freeradius index 90928e91d..faf8f4877 100644 --- a/lfs/freeradius +++ b/lfs/freeradius @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = freeradius -PAK_VER = 2 +PAK_VER = 3 DEPS = "samba" diff --git a/lfs/git b/lfs/git index 9ffd08950..fd76b1248 100644 --- a/lfs/git +++ b/lfs/git @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = git -PAK_VER = 14 +PAK_VER = 15 DEPS = "perl-Authen-SASL perl-MIME-Base64 perl-Net-SMTP-SSL" diff --git a/lfs/haproxy b/lfs/haproxy index 02e3b25f8..7fc639a41 100644 --- a/lfs/haproxy +++ b/lfs/haproxy @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = haproxy -PAK_VER = 3 +PAK_VER = 4 DEPS = "" diff --git a/lfs/hostapd b/lfs/hostapd index 3561c786e..5b2f001d5 100644 --- a/lfs/hostapd +++ b/lfs/hostapd @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = hostapd -PAK_VER = 40 +PAK_VER = 41 DEPS = "" diff --git a/lfs/icecast b/lfs/icecast index 91aa7c5c7..5250725b3 100644 --- a/lfs/icecast +++ b/lfs/icecast @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = icecast -PAK_VER = 2 +PAK_VER = 3 DEPS = "libshout lame sox libvorbis libogg" diff --git a/lfs/keepalived b/lfs/keepalived index 257ceb2d9..020b9d784 100644 --- a/lfs/keepalived +++ b/lfs/keepalived @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = keepalived -PAK_VER = 2 +PAK_VER = 3 DEPS = "" diff --git a/lfs/libvirt b/lfs/libvirt index 7eed40616..2d8eef061 100644 --- a/lfs/libvirt +++ b/lfs/libvirt @@ -33,7 +33,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) SUP_ARCH = i586 x86_64 PROG = libvirt -PAK_VER = 14 +PAK_VER = 15 DEPS = "libpciaccess libyajl ncat qemu" diff --git a/lfs/miniupnpd b/lfs/miniupnpd index 0e2c890ba..ee9d8efa9 100644 --- a/lfs/miniupnpd +++ b/lfs/miniupnpd @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = miniupnpd -PAK_VER = 2 +PAK_VER = 3 ############################################################################### # Top-level Rules diff --git a/lfs/monit b/lfs/monit index 77a093140..96fe6b1a6 100644 --- a/lfs/monit +++ b/lfs/monit @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = monit -PAK_VER = 9 +PAK_VER = 10 DEPS = "" diff --git a/lfs/nagios-plugins b/lfs/nagios-plugins index 27a716262..2f33a09f2 100644 --- a/lfs/nagios-plugins +++ b/lfs/nagios-plugins @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nagios-plugins -PAK_VER = 2 +PAK_VER = 3 DEPS = "" diff --git a/lfs/nagios_nrpe b/lfs/nagios_nrpe index 6d16661bd..369f9335d 100644 --- a/lfs/nagios_nrpe +++ b/lfs/nagios_nrpe @@ -31,9 +31,8 @@ DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) - PROG = nagios_nrpe -PAK_VER = 3 +PAK_VER = 4 DEPS = "nagios-plugins" diff --git a/lfs/ncat b/lfs/ncat index 92320e967..a51698872 100644 --- a/lfs/ncat +++ b/lfs/ncat @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/nmap-$(VER) TARGET = $(DIR_INFO)/$(THISAPP) PROG = ncat -PAK_VER = 2 +PAK_VER = 3 DEPS = "" diff --git a/lfs/netsnmpd b/lfs/netsnmpd index 6995ee683..117097e15 100644 --- a/lfs/netsnmpd +++ b/lfs/netsnmpd @@ -32,7 +32,8 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = netsnmpd -PAK_VER = 6 +PAK_VER = 7 + DEPS = "" ############################################################################### diff --git a/lfs/nfs b/lfs/nfs index 242b3caaf..b33c3885e 100644 --- a/lfs/nfs +++ b/lfs/nfs @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nfs -PAK_VER = 9 +PAK_VER = 10 DEPS = "rpcbind" diff --git a/lfs/nginx b/lfs/nginx index 14b5ca4b3..0fa6250f3 100644 --- a/lfs/nginx +++ b/lfs/nginx @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nginx -PAK_VER = 6 +PAK_VER = 7 ############################################################################### # Top-level Rules diff --git a/lfs/nmap b/lfs/nmap index 92ac90316..1daeb89b0 100644 --- a/lfs/nmap +++ b/lfs/nmap @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nmap -PAK_VER = 8 +PAK_VER = 9 DEPS = "" diff --git a/lfs/nut b/lfs/nut index 41aae4124..33a4bb1bc 100644 --- a/lfs/nut +++ b/lfs/nut @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nut -PAK_VER = 6 +PAK_VER = 7 DEPS = "" diff --git a/lfs/postfix b/lfs/postfix index bd8b75ccc..42e626c8f 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 13 +PAK_VER = 14 DEPS = "" diff --git a/lfs/python3 b/lfs/python3 index e753d96ab..debb428a5 100644 --- a/lfs/python3 +++ b/lfs/python3 @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = python3 -PAK_VER = 2 +PAK_VER = 3 DEPS = "" diff --git a/lfs/spice b/lfs/spice index 434496849..74706240f 100644 --- a/lfs/spice +++ b/lfs/spice @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = spice -PAK_VER = 3 +PAK_VER = 4 DEPS = "opus" diff --git a/lfs/squidclamav b/lfs/squidclamav index 4a7918ce0..efecba7de 100644 --- a/lfs/squidclamav +++ b/lfs/squidclamav @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = squidclamav -PAK_VER = 20 +PAK_VER = 21 DEPS = "clamav" diff --git a/lfs/stunnel b/lfs/stunnel index d78d8d035..342b0370c 100644 --- a/lfs/stunnel +++ b/lfs/stunnel @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = stunnel -PAK_VER = 3 +PAK_VER = 4 DEPS = "" diff --git a/lfs/tcpdump b/lfs/tcpdump index acf752ce2..7a055ddac 100644 --- a/lfs/tcpdump +++ b/lfs/tcpdump @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tcpdump -PAK_VER = 9 +PAK_VER = 10 DEPS = "" diff --git a/lfs/tor b/lfs/tor index 686129451..a63a5fb49 100644 --- a/lfs/tor +++ b/lfs/tor @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 26 +PAK_VER = 27 DEPS = "" diff --git a/lfs/transmission b/lfs/transmission index 10ac44daa..0377b4b56 100644 --- a/lfs/transmission +++ b/lfs/transmission @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = transmission -PAK_VER = 14 +PAK_VER = 15 DEPS = "" hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 0eccedd1c8340e186a8329f66a235aea6c92b1af
by git＠ipfire.org 26 Feb '18

26 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 0eccedd1c8340e186a8329f66a235aea6c92b1af (commit) from 39d11d265e4f1a41994d0adf85498f54c63ba7ab (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 0eccedd1c8340e186a8329f66a235aea6c92b1af Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Feb 26 11:12:20 2018 +0000 dhcp: Allow adding extra DHCP interfaces Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/120/filelists/files | 1 + src/initscripts/system/dhcp | 8 +++++--- 2 files changed, 6 insertions(+), 3 deletions(-) Difference in files: diff --git a/config/rootfiles/core/120/filelists/files b/config/rootfiles/core/120/filelists/files index 936945359..57475b167 100644 --- a/config/rootfiles/core/120/filelists/files +++ b/config/rootfiles/core/120/filelists/files @@ -1,6 +1,7 @@ etc/system-release etc/issue etc/fcron.daily/openvpn-crl-updater +etc/rc.d/init.d/dhcpd srv/web/ipfire/cgi-bin/ovpnmain.cgi var/ipfire/langs var/ipfire/ovpn/openssl/ovpn.cnf diff --git a/src/initscripts/system/dhcp b/src/initscripts/system/dhcp index 2ae86db31..d98229564 100644 --- a/src/initscripts/system/dhcp +++ b/src/initscripts/system/dhcp @@ -8,6 +8,8 @@ . /etc/sysconfig/rc . $rc_functions +[ -e "/etc/sysconfig/dhcpd" ] && . /etc/sysconfig/dhcpd + eval $(/usr/local/bin/readhash /var/ipfire/ethernet/settings) eval $(/usr/local/bin/readhash /var/ipfire/dhcp/settings) @@ -23,20 +25,20 @@ case "$1" in flush_chains if [ -n "${GREEN_DEV}" -a -e "/var/ipfire/dhcp/enable_green" ]; then - devices="${GREEN_DEV}" + LISTEN_INTERFACES+=" ${GREEN_DEV}" iptables -A DHCPGREENINPUT -i "${GREEN_DEV}" -j DHCPINPUT iptables -A DHCPGREENOUTPUT -o "${GREEN_DEV}" -j DHCPOUTPUT fi if [ -n "${BLUE_DEV}" -a -e "/var/ipfire/dhcp/enable_blue" ]; then - devices+=" ${BLUE_DEV}" + LISTEN_INTERFACES+=" ${BLUE_DEV}" iptables -A DHCPBLUEINPUT -i "${BLUE_DEV}" -j DHCPINPUT iptables -A DHCPBLUEOUTPUT -o "${BLUE_DEV}" -j DHCPOUTPUT fi boot_mesg "Starting DHCP Server..." - loadproc /usr/sbin/dhcpd -q ${devices} + loadproc /usr/sbin/dhcpd -q ${LISTEN_INTERFACES} # Start Unbound DHCP Lease Bridge unless RFC2136 is used if [ "${DNS_UPDATE_ENABLED}" != on ]; then hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 39d11d265e4f1a41994d0adf85498f54c63ba7ab
by git＠ipfire.org 26 Feb '18

26 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 39d11d265e4f1a41994d0adf85498f54c63ba7ab (commit) from 52f61e496df86f1a70fa9d468d64e756bdb66f4d (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 39d11d265e4f1a41994d0adf85498f54c63ba7ab Author: Erik Kapfer via Development <development(a)lists.ipfire.org> Date: Mon Feb 26 08:00:15 2018 +0100 OpenVPN: Ship missing OpenSSL configuration file for update Core 115 delivered a patch which prevents the '--ns-cert-type server is deprecated' message and introduced also '--remote-cert-tls server' --> https://patchwork.ipfire.org/patch/1441/ whereby the changed ovpn.cnf has not been delivered. Signed-off-by: Erik Kapfer <erik.kapfer(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/120/filelists/files | 1 + 1 file changed, 1 insertion(+) Difference in files: diff --git a/config/rootfiles/core/120/filelists/files b/config/rootfiles/core/120/filelists/files index 4baf08ebf..936945359 100644 --- a/config/rootfiles/core/120/filelists/files +++ b/config/rootfiles/core/120/filelists/files @@ -3,3 +3,4 @@ etc/issue etc/fcron.daily/openvpn-crl-updater srv/web/ipfire/cgi-bin/ovpnmain.cgi var/ipfire/langs +var/ipfire/ovpn/openssl/ovpn.cnf hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 52f61e496df86f1a70fa9d468d64e756bdb66f4d
by git＠ipfire.org 25 Feb '18

25 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 52f61e496df86f1a70fa9d468d64e756bdb66f4d (commit) from 87484f5c784e013229bc6d32430cdc8eb7b8a709 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 52f61e496df86f1a70fa9d468d64e756bdb66f4d Author: Erik Kapfer via Development <development(a)lists.ipfire.org> Date: Sun Feb 25 14:49:49 2018 +0100 OpenVPN: New AES-GCM cipher for N2N and RW AES-GCM 128, 196 and 256 bit has been added to Net-to-Net and Roadwarrior section. HMAC selection for N2N will be disabled if AES-GCM is used since GCM provides an own message authentication (GMAC). 'auth *' line in N2N.conf will be deleted appropriately if AES-GCM is used since '--tls-auth' is not available for N2N. HMAC selection menu for Roadwarriors is still available since '--tls-auth' is available for RWs which uses the configuered HMAC even AES-GCM has been applied. Signed-off-by: Erik Kapfer <erik.kapfer(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: html/cgi-bin/ovpnmain.cgi | 84 ++++++++++++++++++++++++++++++++++++++--------- 1 file changed, 69 insertions(+), 15 deletions(-) Difference in files: diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index c52e8bae9..ff3d05509 100644 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -970,12 +970,18 @@ unless(-d "${General::swroot}/ovpn/n2nconf/$cgiparams{'NAME'}"){mkdir "${General print SERVERCONF "dh ${General::swroot}/ovpn/ca/$cgiparams{'DH_NAME'}\n"; print SERVERCONF "# Cipher\n"; print SERVERCONF "cipher $cgiparams{'DCIPHER'}\n"; - if ($cgiparams{'DAUTH'} eq '') { - print SERVERCONF "auth SHA1\n"; + + # If GCM cipher is used, do not use --auth + if (($cgiparams{'DCIPHER'} eq 'AES-256-GCM') || + ($cgiparams{'DCIPHER'} eq 'AES-192-GCM') || + ($cgiparams{'DCIPHER'} eq 'AES-128-GCM')) { + print SERVERCONF unless "# HMAC algorithm\n"; + print SERVERCONF unless "auth $cgiparams{'DAUTH'}\n"; } else { - print SERVERCONF "# HMAC algorithm\n"; - print SERVERCONF "auth $cgiparams{'DAUTH'}\n"; + print SERVERCONF "# HMAC algorithm\n"; + print SERVERCONF "auth $cgiparams{'DAUTH'}\n"; } + if ($cgiparams{'COMPLZO'} eq 'on') { print SERVERCONF "# Enable Compression\n"; print SERVERCONF "comp-lzo\n"; @@ -1076,12 +1082,18 @@ unless(-d "${General::swroot}/ovpn/n2nconf/$cgiparams{'NAME'}"){mkdir "${General print CLIENTCONF "# Cipher\n"; print CLIENTCONF "cipher $cgiparams{'DCIPHER'}\n"; print CLIENTCONF "pkcs12 ${General::swroot}/ovpn/certs/$cgiparams{'NAME'}.p12\r\n"; - if ($cgiparams{'DAUTH'} eq '') { - print CLIENTCONF "auth SHA1\n"; + + # If GCM cipher is used, do not use --auth + if (($cgiparams{'DCIPHER'} eq 'AES-256-GCM') || + ($cgiparams{'DCIPHER'} eq 'AES-192-GCM') || + ($cgiparams{'DCIPHER'} eq 'AES-128-GCM')) { + print CLIENTCONF unless "# HMAC algorithm\n"; + print CLIENTCONF unless "auth $cgiparams{'DAUTH'}\n"; } else { - print CLIENTCONF "# HMAC algorithm\n"; - print CLIENTCONF "auth $cgiparams{'DAUTH'}\n"; + print CLIENTCONF "# HMAC algorithm\n"; + print CLIENTCONF "auth $cgiparams{'DAUTH'}\n"; } + if ($cgiparams{'COMPLZO'} eq 'on') { print CLIENTCONF "# Enable Compression\n"; print CLIENTCONF "comp-lzo\n"; @@ -2198,13 +2210,18 @@ if ($confighash{$cgiparams{'KEY'}}[3] eq 'net'){ print CLIENTCONF "pkcs12 ${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12\r\n"; $zip->addFile( "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12", "$confighash{$cgiparams{'KEY'}}[1].p12") or die "Can't add file $confighash{$cgiparams{'KEY'}}[1].p12\n"; } - if ($confighash{$cgiparams{'KEY'}}[39] eq '') { - print CLIENTCONF "# HMAC algorithm\n"; - print CLIENTCONF "auth SHA1\n"; + + # If GCM cipher is used, do not use --auth + if (($confighash{$cgiparams{'KEY'}}[40] eq 'AES-256-GCM') || + ($confighash{$cgiparams{'KEY'}}[40] eq 'AES-192-GCM') || + ($confighash{$cgiparams{'KEY'}}[40] eq 'AES-128-GCM')) { + print CLIENTCONF unless "# HMAC algorithm\n"; + print CLIENTCONF unless "auth $confighash{$cgiparams{'KEY'}}[39]\n"; } else { - print CLIENTCONF "# HMAC algorithm\n"; - print CLIENTCONF "auth $confighash{$cgiparams{'KEY'}}[39]\n"; + print CLIENTCONF "# HMAC algorithm\n"; + print CLIENTCONF "auth $confighash{$cgiparams{'KEY'}}[39]\n"; } + if ($confighash{$cgiparams{'KEY'}}[30] eq 'on') { print CLIENTCONF "# Enable Compression\n"; print CLIENTCONF "comp-lzo\n"; @@ -4544,6 +4561,9 @@ if ($cgiparams{'TYPE'} eq 'net') { } $checked{'PMTU_DISCOVERY'}{$cgiparams{'PMTU_DISCOVERY'}} = 'checked=\'checked\''; + $selected{'DCIPHER'}{'AES-256-GCM'} = ''; + $selected{'DCIPHER'}{'AES-192-GCM'} = ''; + $selected{'DCIPHER'}{'AES-128-GCM'} = ''; $selected{'DCIPHER'}{'CAMELLIA-256-CBC'} = ''; $selected{'DCIPHER'}{'CAMELLIA-192-CBC'} = ''; $selected{'DCIPHER'}{'CAMELLIA-128-CBC'} = ''; @@ -4629,6 +4649,15 @@ if ($cgiparams{'TYPE'} eq 'net') { } else { print "<td width='25%'><input type='text' name='NAME' value='$cgiparams{'NAME'}' maxlength='20' /></td>"; } + + # If GCM ciphers are in usage, HMAC menu is disabled + my $hmacdisabled; + if (($confighash{$cgiparams{'KEY'}}[40] eq 'AES-256-GCM') || + ($confighash{$cgiparams{'KEY'}}[40] eq 'AES-192-GCM') || + ($confighash{$cgiparams{'KEY'}}[40] eq 'AES-128-GCM')) { + $hmacdisabled = "disabled='disabled'"; + }; + print <<END; <td width='25%'> </td> <td width='25%'> </td></tr> @@ -4707,7 +4736,10 @@ if ($cgiparams{'TYPE'} eq 'net') { </tr> <tr><td class='boldbase'>$Lang::tr{'cipher'}</td> - <td><select name='DCIPHER'> + <td><select name='DCIPHER' id="n2ncipher" required> + <option value='AES-256-GCM' $selected{'DCIPHER'}{'AES-256-GCM'}>AES-GCM (256 $Lang::tr{'bit'})</option> + <option value='AES-192-GCM' $selected{'DCIPHER'}{'AES-192-GCM'}>AES-GCM (192 $Lang::tr{'bit'})</option> + <option value='AES-128-GCM' $selected{'DCIPHER'}{'AES-128-GCM'}>AES-GCM (128 $Lang::tr{'bit'})</option> <option value='CAMELLIA-256-CBC' $selected{'DCIPHER'}{'CAMELLIA-256-CBC'}>CAMELLIA-CBC (256 $Lang::tr{'bit'})</option> <option value='CAMELLIA-192-CBC' $selected{'DCIPHER'}{'CAMELLIA-192-CBC'}>CAMELLIA-CBC (192 $Lang::tr{'bit'})</option> <option value='CAMELLIA-128-CBC' $selected{'DCIPHER'}{'CAMELLIA-128-CBC'}>CAMELLIA-CBC (128 $Lang::tr{'bit'})</option> @@ -4724,7 +4756,7 @@ if ($cgiparams{'TYPE'} eq 'net') { </td> <td class='boldbase'>$Lang::tr{'ovpn ha'}:</td> - <td><select name='DAUTH'> + <td><select name='DAUTH' id="n2nhmac" $hmacdisabled> <option value='whirlpool' $selected{'DAUTH'}{'whirlpool'}>Whirlpool (512 $Lang::tr{'bit'})</option> <option value='SHA512' $selected{'DAUTH'}{'SHA512'}>SHA2 (512 $Lang::tr{'bit'})</option> <option value='SHA384' $selected{'DAUTH'}{'SHA384'}>SHA2 (384 $Lang::tr{'bit'})</option> @@ -4738,6 +4770,22 @@ if ($cgiparams{'TYPE'} eq 'net') { END ; } + +#### JAVA SCRIPT #### +# Validate N2N cipher. If GCM will be used, HMAC menu will be disabled onchange +print<<END; + <script> + var disable_options = false; + document.getElementById('n2ncipher').onchange = function () { + if((this.value == "AES-256-GCM"||this.value == "AES-192-GCM"||this.value == "AES-128-GCM")) { + document.getElementById('n2nhmac').setAttribute('disabled', true); + } else { + document.getElementById('n2nhmac').removeAttribute('disabled'); + } + } + </script> +END + #jumper print "<tr><td class='boldbase'>$Lang::tr{'remark title'}</td>"; print "<td colspan='3'><input type='text' name='REMARK' value='$cgiparams{'REMARK'}' size='55' maxlength='50' /></td></tr></table>"; @@ -5109,6 +5157,9 @@ END $selected{'DPROTOCOL'}{'tcp'} = ''; $selected{'DPROTOCOL'}{$cgiparams{'DPROTOCOL'}} = 'SELECTED'; + $selected{'DCIPHER'}{'AES-256-GCM'} = ''; + $selected{'DCIPHER'}{'AES-192-GCM'} = ''; + $selected{'DCIPHER'}{'AES-128-GCM'} = ''; $selected{'DCIPHER'}{'CAMELLIA-256-CBC'} = ''; $selected{'DCIPHER'}{'CAMELLIA-192-CBC'} = ''; $selected{'DCIPHER'}{'CAMELLIA-128-CBC'} = ''; @@ -5205,6 +5256,9 @@ END <td class='boldbase' nowrap='nowrap'>$Lang::tr{'cipher'}</td> <td><select name='DCIPHER'> + <option value='AES-256-GCM' $selected{'DCIPHER'}{'AES-256-GCM'}>AES-GCM (256 $Lang::tr{'bit'})</option> + <option value='AES-192-GCM' $selected{'DCIPHER'}{'AES-192-GCM'}>AES-GCM (192 $Lang::tr{'bit'})</option> + <option value='AES-128-GCM' $selected{'DCIPHER'}{'AES-128-GCM'}>AES-GCM (128 $Lang::tr{'bit'})</option> <option value='CAMELLIA-256-CBC' $selected{'DCIPHER'}{'CAMELLIA-256-CBC'}>CAMELLIA-CBC (256 $Lang::tr{'bit'})</option> <option value='CAMELLIA-192-CBC' $selected{'DCIPHER'}{'CAMELLIA-192-CBC'}>CAMELLIA-CBC (192 $Lang::tr{'bit'})</option> <option value='CAMELLIA-128-CBC' $selected{'DCIPHER'}{'CAMELLIA-128-CBC'}>CAMELLIA-CBC (128 $Lang::tr{'bit'})</option> hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, core119, created. f0869181e846cf235eca2d74eaf4c219740f3de8
by git＠ipfire.org 24 Feb '18

24 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core119 has been created at f0869181e846cf235eca2d74eaf4c219740f3de8 (commit) - Log ----------------------------------------------------------------- commit f0869181e846cf235eca2d74eaf4c219740f3de8 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 24 14:31:54 2018 +0100 core119: set pakfire version to 119 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 4038a839612438a43e3771a1f534218890a64dc4 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 24 14:30:19 2018 +0100 core119: restart init after unpack new glibc this is needed to prevent problems at unmout filesystems at reboot. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit c560b903a9ef9efb7d93a503da4667adbec94ccc Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Feb 23 20:43:41 2018 +0000 core119: Ship updated libgcc_s.so.1 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 2edff5e9700908a3c91a8f0a66862f420faefebd Merge: 6af8fa9e0 83d6101b9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 21 12:06:21 2018 +0000 Merge remote-tracking branch 'origin/next' ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. f0869181e846cf235eca2d74eaf4c219740f3de8
by git＠ipfire.org 24 Feb '18

24 Feb '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via f0869181e846cf235eca2d74eaf4c219740f3de8 (commit) via 4038a839612438a43e3771a1f534218890a64dc4 (commit) from c560b903a9ef9efb7d93a503da4667adbec94ccc (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit f0869181e846cf235eca2d74eaf4c219740f3de8 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 24 14:31:54 2018 +0100 core119: set pakfire version to 119 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 4038a839612438a43e3771a1f534218890a64dc4 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 24 14:30:19 2018 +0100 core119: restart init after unpack new glibc this is needed to prevent problems at unmout filesystems at reboot. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/119/update.sh | 3 +++ make.sh | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) Difference in files: diff --git a/config/rootfiles/core/119/update.sh b/config/rootfiles/core/119/update.sh index ed23e1f58..8ada47455 100644 --- a/config/rootfiles/core/119/update.sh +++ b/config/rootfiles/core/119/update.sh @@ -54,6 +54,9 @@ extract_files # update linker config ldconfig +# restart init +telinit u + # Update Language cache /usr/local/bin/update-lang-cache diff --git a/make.sh b/make.sh index b85910ad4..739c87bfb 100755 --- a/make.sh +++ b/make.sh @@ -26,7 +26,7 @@ NAME="IPFire" # Software name SNAME="ipfire" # Short name VERSION="2.19" # Version number CORE="119" # Core Level (Filename) -PAKFIRE_CORE="118" # Core Level (PAKFIRE) +PAKFIRE_CORE="119" # Core Level (PAKFIRE) GIT_BRANCH=`git rev-parse --abbrev-ref HEAD` # Git Branch SLOGAN="www.ipfire.org" # Software slogan CONFIG_ROOT=/var/ipfire # Configuration rootdir hooks/post-receive -- IPFire 2.x development tree

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM February 2018