This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, next has been updated via d08452c5055cccc9cb5c2a0dedf661cf50d28679 (commit) via 65ef52a33564f7fd41825aa01e0417c234690eab (commit) via f60ae20cc86b5c1667432f29add09e65bc4048dd (commit) via 5cebcd805a5eb9d4ce930a6a9878c40bdc9b76d9 (commit) via 1c217406f2dfd7bba3e21c99df328d9b71407d1b (commit) via 0163c62dee8e53612e661498dbe6fca7dec74b10 (commit) via 85c2e400ff92ec8e7069284c1d0f6f52c39a40da (commit) via e23b3b08a889dbd3e7fa6a31b4c481f30cc65dff (commit) from 7b97337afb4576d4bacbe854e8822e97b4cd1a40 (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit d08452c5055cccc9cb5c2a0dedf661cf50d28679 Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Nov 11 12:08:57 2020 +0000
core153: Ship unbound initscript
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 65ef52a33564f7fd41825aa01e0417c234690eab Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Nov 7 12:59:08 2020 +0000
DNS: Make YouTube configurable for Safe Search
When safe search is enabled, it is being enabled on YouTube, too.
This creates problems in some scenarios like schools where politics is being tought as well as other subjects that might be censored by YouTube (i.e. election TV spots).
Therefore it is now possible to exclude YouTube from Safe Search but keep it enabled for the search engines.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f60ae20cc86b5c1667432f29add09e65bc4048dd Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Nov 11 11:53:34 2020 +0000
core153: Update language cache
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 5cebcd805a5eb9d4ce930a6a9878c40bdc9b76d9 Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Nov 11 11:52:13 2020 +0000
core153: Ship Intel mircocode and ask for reboot
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 1c217406f2dfd7bba3e21c99df328d9b71407d1b Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Nov 11 11:21:05 2020 +0100
intel-microcode: update to 20201110
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 0163c62dee8e53612e661498dbe6fca7dec74b10 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Nov 11 09:11:55 2020 +0100
kernel: aarch64: enable ahci
this is needed to boot on ESXi on arm.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 85c2e400ff92ec8e7069284c1d0f6f52c39a40da Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Nov 10 11:17:46 2020 +0000
git: Bump package version
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit e23b3b08a889dbd3e7fa6a31b4c481f30cc65dff Author: ummeegge erik.kapfer@ipfire.org Date: Tue Nov 10 09:28:56 2020 +0000
git: Add missing Error.pm and LoadCPAN submodules
Fixes #12511
Signed-off-by: ummeegge erik.kapfer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
-----------------------------------------------------------------------
Summary of changes: config/kernel/kernel.config.aarch64-ipfire | 2 +- config/rootfiles/common/aarch64/linux | 2 +- config/rootfiles/common/i586/intel-microcode | 7 +++ config/rootfiles/common/x86_64/intel-microcode | 7 +++ config/rootfiles/core/153/filelists/files | 1 + .../153}/filelists/i586/intel-microcode | 0 .../153}/filelists/x86_64/intel-microcode | 0 config/rootfiles/core/153/update.sh | 10 +++- config/rootfiles/packages/git | 6 +- doc/language_issues.en | 1 + doc/language_issues.es | 1 + doc/language_issues.fr | 1 + doc/language_issues.it | 1 + doc/language_issues.nl | 1 + doc/language_issues.pl | 1 + doc/language_issues.ru | 1 + doc/language_issues.tr | 1 + doc/language_missings | 7 +++ html/cgi-bin/dns.cgi | 19 ++++++ langs/de/cgi-bin/de.pl | 1 + langs/en/cgi-bin/en.pl | 1 + lfs/git | 2 +- lfs/intel-microcode | 4 +- src/initscripts/system/unbound | 69 +++++++++++----------- 24 files changed, 101 insertions(+), 45 deletions(-) copy config/rootfiles/{oldcore/121 => core/153}/filelists/i586/intel-microcode (100%) copy config/rootfiles/{oldcore/121 => core/153}/filelists/x86_64/intel-microcode (100%)
Difference in files: diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire index 2d4934a09..bc389470b 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -1819,7 +1819,7 @@ CONFIG_SATA_PMP=y # # Controllers with non-SFF native interface # -# CONFIG_SATA_AHCI is not set +CONFIG_SATA_AHCI=y CONFIG_SATA_AHCI_PLATFORM=m CONFIG_AHCI_CEVA=m CONFIG_AHCI_MVEBU=m diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/aarch64/linux index 6f76519d0..0961daffe 100644 --- a/config/rootfiles/common/aarch64/linux +++ b/config/rootfiles/common/aarch64/linux @@ -9617,6 +9617,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/s2io.h #lib/modules/KVER-ipfire/build/include/config/sata #lib/modules/KVER-ipfire/build/include/config/sata/ahci +#lib/modules/KVER-ipfire/build/include/config/sata/ahci.h #lib/modules/KVER-ipfire/build/include/config/sata/ahci/platform.h #lib/modules/KVER-ipfire/build/include/config/sata/dwc.h #lib/modules/KVER-ipfire/build/include/config/sata/mv.h @@ -17306,7 +17307,6 @@ lib/modules/KVER-ipfire/kernel #lib/modules/KVER-ipfire/kernel/drivers/ata/ahci_platform.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/ahci_qoriq.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/ahci_sunxi.ko.xz -#lib/modules/KVER-ipfire/kernel/drivers/ata/libahci.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/libahci_platform.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/sata_dwc_460ex.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/sata_mv.ko.xz diff --git a/config/rootfiles/common/i586/intel-microcode b/config/rootfiles/common/i586/intel-microcode index 9b3c50897..3185cd01a 100644 --- a/config/rootfiles/common/i586/intel-microcode +++ b/config/rootfiles/common/i586/intel-microcode @@ -69,6 +69,7 @@ lib/firmware/intel-ucode/06-55-03 lib/firmware/intel-ucode/06-55-04 lib/firmware/intel-ucode/06-55-06 lib/firmware/intel-ucode/06-55-07 +lib/firmware/intel-ucode/06-55-0b lib/firmware/intel-ucode/06-56-02 lib/firmware/intel-ucode/06-56-03 lib/firmware/intel-ucode/06-56-04 @@ -82,6 +83,8 @@ lib/firmware/intel-ucode/06-66-03 lib/firmware/intel-ucode/06-7a-01 lib/firmware/intel-ucode/06-7a-08 lib/firmware/intel-ucode/06-7e-05 +lib/firmware/intel-ucode/06-8a-01 +lib/firmware/intel-ucode/06-8c-01 lib/firmware/intel-ucode/06-8e-09 lib/firmware/intel-ucode/06-8e-0a lib/firmware/intel-ucode/06-8e-0b @@ -91,7 +94,11 @@ lib/firmware/intel-ucode/06-9e-0a lib/firmware/intel-ucode/06-9e-0b lib/firmware/intel-ucode/06-9e-0c lib/firmware/intel-ucode/06-9e-0d +lib/firmware/intel-ucode/06-a5-02 +lib/firmware/intel-ucode/06-a5-03 +lib/firmware/intel-ucode/06-a5-05 lib/firmware/intel-ucode/06-a6-00 +lib/firmware/intel-ucode/06-a6-01 lib/firmware/intel-ucode/0f-00-07 lib/firmware/intel-ucode/0f-00-0a lib/firmware/intel-ucode/0f-01-02 diff --git a/config/rootfiles/common/x86_64/intel-microcode b/config/rootfiles/common/x86_64/intel-microcode index 9b3c50897..3185cd01a 100644 --- a/config/rootfiles/common/x86_64/intel-microcode +++ b/config/rootfiles/common/x86_64/intel-microcode @@ -69,6 +69,7 @@ lib/firmware/intel-ucode/06-55-03 lib/firmware/intel-ucode/06-55-04 lib/firmware/intel-ucode/06-55-06 lib/firmware/intel-ucode/06-55-07 +lib/firmware/intel-ucode/06-55-0b lib/firmware/intel-ucode/06-56-02 lib/firmware/intel-ucode/06-56-03 lib/firmware/intel-ucode/06-56-04 @@ -82,6 +83,8 @@ lib/firmware/intel-ucode/06-66-03 lib/firmware/intel-ucode/06-7a-01 lib/firmware/intel-ucode/06-7a-08 lib/firmware/intel-ucode/06-7e-05 +lib/firmware/intel-ucode/06-8a-01 +lib/firmware/intel-ucode/06-8c-01 lib/firmware/intel-ucode/06-8e-09 lib/firmware/intel-ucode/06-8e-0a lib/firmware/intel-ucode/06-8e-0b @@ -91,7 +94,11 @@ lib/firmware/intel-ucode/06-9e-0a lib/firmware/intel-ucode/06-9e-0b lib/firmware/intel-ucode/06-9e-0c lib/firmware/intel-ucode/06-9e-0d +lib/firmware/intel-ucode/06-a5-02 +lib/firmware/intel-ucode/06-a5-03 +lib/firmware/intel-ucode/06-a5-05 lib/firmware/intel-ucode/06-a6-00 +lib/firmware/intel-ucode/06-a6-01 lib/firmware/intel-ucode/0f-00-07 lib/firmware/intel-ucode/0f-00-0a lib/firmware/intel-ucode/0f-01-02 diff --git a/config/rootfiles/core/153/filelists/files b/config/rootfiles/core/153/filelists/files index 04605c232..9fe5a0adf 100644 --- a/config/rootfiles/core/153/filelists/files +++ b/config/rootfiles/core/153/filelists/files @@ -1,6 +1,7 @@ etc/issue etc/ntp.conf etc/os-release +etc/rc.d/init.d/unbound etc/system-release etc/sysctl.conf srv/web/ipfire/cgi-bin/connections.cgi diff --git a/config/rootfiles/core/153/filelists/i586/intel-microcode b/config/rootfiles/core/153/filelists/i586/intel-microcode new file mode 120000 index 000000000..f03e84778 --- /dev/null +++ b/config/rootfiles/core/153/filelists/i586/intel-microcode @@ -0,0 +1 @@ +../../../../common/i586/intel-microcode \ No newline at end of file diff --git a/config/rootfiles/core/153/filelists/x86_64/intel-microcode b/config/rootfiles/core/153/filelists/x86_64/intel-microcode new file mode 120000 index 000000000..d5ac074e2 --- /dev/null +++ b/config/rootfiles/core/153/filelists/x86_64/intel-microcode @@ -0,0 +1 @@ +../../../../common/x86_64/intel-microcode \ No newline at end of file diff --git a/config/rootfiles/core/153/update.sh b/config/rootfiles/core/153/update.sh index a6ddc0019..6868698c8 100644 --- a/config/rootfiles/core/153/update.sh +++ b/config/rootfiles/core/153/update.sh @@ -45,7 +45,7 @@ ldconfig chown -vR root:root /etc/ntp
# Update Language cache -#/usr/local/bin/update-lang-cache +/usr/local/bin/update-lang-cache
# Filesytem cleanup /usr/local/bin/filesystem-cleanup @@ -57,7 +57,7 @@ chown -vR root:root /etc/ntp sysctl -p
# This update needs a reboot... -#touch /var/run/need_reboot +touch /var/run/need_reboot
# Finish /etc/init.d/fireinfo start @@ -70,5 +70,11 @@ fi
sync
+# Reload microcode +modprobe microcode +if [ -w "/sys/devices/system/cpu/microcode/reload" ]; then + echo 1 > /sys/devices/system/cpu/microcode/reload +fi + # Don't report the exitcode last command exit 0 diff --git a/config/rootfiles/packages/git b/config/rootfiles/packages/git index df159acb4..c2023a326 100644 --- a/config/rootfiles/packages/git +++ b/config/rootfiles/packages/git @@ -333,9 +333,9 @@ usr/share/perl5/FromCPAN/Error.pm usr/share/perl5/Git.pm usr/share/perl5/Git/I18N.pm usr/share/perl5/Git/IndexInfo.pm -#usr/share/perl5/Git/LoadCPAN -#usr/share/perl5/Git/LoadCPAN.pm -#usr/share/perl5/Git/LoadCPAN/Error.pm +usr/share/perl5/Git/LoadCPAN +usr/share/perl5/Git/LoadCPAN.pm +usr/share/perl5/Git/LoadCPAN/Error.pm #usr/share/perl5/Git/LoadCPAN/Mail #usr/share/perl5/Git/LoadCPAN/Mail/Address.pm #usr/share/perl5/Git/Packet.pm diff --git a/doc/language_issues.en b/doc/language_issues.en index 0592f938b..4cff0c6cb 100644 --- a/doc/language_issues.en +++ b/doc/language_issues.en @@ -600,6 +600,7 @@ WARNING: untranslated string: dns check failed = DNS check failed WARNING: untranslated string: dns check servers = Check DNS Servers WARNING: untranslated string: dns configuration = DNS Configuration WARNING: untranslated string: dns enable safe-search = Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube = Include YouTube in Safe Search WARNING: untranslated string: dns forward disable dnssec = Disable DNSSEC (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice = (DNSSEC disabled) WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS server diff --git a/doc/language_issues.es b/doc/language_issues.es index fd9c61b32..8d6041ce5 100644 --- a/doc/language_issues.es +++ b/doc/language_issues.es @@ -896,6 +896,7 @@ WARNING: untranslated string: dnat address = Firewall Interface WARNING: untranslated string: dns check servers = Check DNS Servers WARNING: untranslated string: dns configuration = DNS Configuration WARNING: untranslated string: dns enable safe-search = Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube = Include YouTube in Safe Search WARNING: untranslated string: dns forward disable dnssec = Disable DNSSEC (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice = (DNSSEC disabled) WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS server diff --git a/doc/language_issues.fr b/doc/language_issues.fr index c84aab2b1..f4ed28c7d 100644 --- a/doc/language_issues.fr +++ b/doc/language_issues.fr @@ -877,6 +877,7 @@ WARNING: translation string unused: zoneconf val ppp assignment error WARNING: translation string unused: zoneconf val vlan amount assignment error WARNING: translation string unused: zoneconf val vlan tag assignment error WARNING: translation string unused: zoneconf val zoneslave amount error +WARNING: untranslated string: dns enable safe-search youtube = Include YouTube in Safe Search WARNING: untranslated string: fwhost cust locationgrp = unknown string WARNING: untranslated string: fwhost err hostip = unknown string WARNING: untranslated string: guardian block a host = unknown string diff --git a/doc/language_issues.it b/doc/language_issues.it index 505e73373..08b07080e 100644 --- a/doc/language_issues.it +++ b/doc/language_issues.it @@ -920,6 +920,7 @@ WARNING: untranslated string: dl client arch insecure = Download insecure Client WARNING: untranslated string: dns check servers = Check DNS Servers WARNING: untranslated string: dns configuration = DNS Configuration WARNING: untranslated string: dns enable safe-search = Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube = Include YouTube in Safe Search WARNING: untranslated string: dns forward disable dnssec = Disable DNSSEC (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice = (DNSSEC disabled) WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS server diff --git a/doc/language_issues.nl b/doc/language_issues.nl index 0f73afc86..bde5daf3c 100644 --- a/doc/language_issues.nl +++ b/doc/language_issues.nl @@ -921,6 +921,7 @@ WARNING: untranslated string: dl client arch insecure = Download insecure Client WARNING: untranslated string: dns check servers = Check DNS Servers WARNING: untranslated string: dns configuration = DNS Configuration WARNING: untranslated string: dns enable safe-search = Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube = Include YouTube in Safe Search WARNING: untranslated string: dns forward disable dnssec = Disable DNSSEC (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice = (DNSSEC disabled) WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS server diff --git a/doc/language_issues.pl b/doc/language_issues.pl index fd9c61b32..8d6041ce5 100644 --- a/doc/language_issues.pl +++ b/doc/language_issues.pl @@ -896,6 +896,7 @@ WARNING: untranslated string: dnat address = Firewall Interface WARNING: untranslated string: dns check servers = Check DNS Servers WARNING: untranslated string: dns configuration = DNS Configuration WARNING: untranslated string: dns enable safe-search = Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube = Include YouTube in Safe Search WARNING: untranslated string: dns forward disable dnssec = Disable DNSSEC (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice = (DNSSEC disabled) WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS server diff --git a/doc/language_issues.ru b/doc/language_issues.ru index bf1d976e9..6235f33fd 100644 --- a/doc/language_issues.ru +++ b/doc/language_issues.ru @@ -899,6 +899,7 @@ WARNING: untranslated string: dnat address = Firewall Interface WARNING: untranslated string: dns check servers = Check DNS Servers WARNING: untranslated string: dns configuration = DNS Configuration WARNING: untranslated string: dns enable safe-search = Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube = Include YouTube in Safe Search WARNING: untranslated string: dns forward disable dnssec = Disable DNSSEC (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice = (DNSSEC disabled) WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS server diff --git a/doc/language_issues.tr b/doc/language_issues.tr index b2c24de57..b61f3740a 100644 --- a/doc/language_issues.tr +++ b/doc/language_issues.tr @@ -897,6 +897,7 @@ WARNING: untranslated string: disconnected = Disconnected WARNING: untranslated string: dns check servers = Check DNS Servers WARNING: untranslated string: dns configuration = DNS Configuration WARNING: untranslated string: dns enable safe-search = Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube = Include YouTube in Safe Search WARNING: untranslated string: dns forward disable dnssec = Disable DNSSEC (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice = (DNSSEC disabled) WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS server diff --git a/doc/language_missings b/doc/language_missings index d79afff83..638a7cc42 100644 --- a/doc/language_missings +++ b/doc/language_missings @@ -239,6 +239,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dnsforward < dnsforward add a new entry < dnsforward configuration @@ -950,6 +951,7 @@ < ansi t1.483 < bewan adsl pci st < bewan adsl usb +< dns enable safe-search youtube < g.dtm < g.lite < upload fcdsl.o @@ -1052,6 +1054,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dns forward disable dnssec < dnsforward dnssec disabled < dnsforward forward_servers @@ -1431,6 +1434,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dns forward disable dnssec < dnsforward dnssec disabled < dnsforward forward_servers @@ -1922,6 +1926,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dnsforward < dnsforward add a new entry < dnsforward configuration @@ -2790,6 +2795,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dnsforward < dnsforward add a new entry < dnsforward configuration @@ -3513,6 +3519,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dns forward disable dnssec < dnsforward dnssec disabled < dnsforward forward_servers diff --git a/html/cgi-bin/dns.cgi b/html/cgi-bin/dns.cgi index 762e77ff1..5c3ca875d 100755 --- a/html/cgi-bin/dns.cgi +++ b/html/cgi-bin/dns.cgi @@ -87,6 +87,10 @@ if ($cgiparams{'GENERAL'} eq $Lang::tr{'save'}) { $cgiparams{'ENABLE_SAFE_SEARCH'} = "off"; }
+ if ($cgiparams{'ENABLE_SAFE_SEARCH_YOUTUBE'} ne "on") { + $cgiparams{'ENABLE_SAFE_SEARCH_YOUTUBE'} = "off"; + } + # Check if using ISP nameservers and TLS is enabled at the same time. if (($cgiparams{'USE_ISP_NAMESERVERS'} eq "on") && ($cgiparams{'PROTO'} eq "TLS")) { $errormessage = $Lang::tr{'dns isp nameservers and tls not allowed'} @@ -259,6 +263,7 @@ if (($cgiparams{'SERVERS'} eq $Lang::tr{'save'}) || ($cgiparams{'SERVERS'} eq $L
# Hash to store the generic DNS settings. my %settings = (); +$settings{"ENABLE_SAFE_SEARCH_YOUTUBE"} = "on";
# Read-in general DNS settings. &General::readhash("$settings_file", %settings); @@ -310,6 +315,10 @@ $checked{'ENABLE_SAFE_SEARCH'}{'off'} = ''; $checked{'ENABLE_SAFE_SEARCH'}{'on'} = ''; $checked{'ENABLE_SAFE_SEARCH'}{$settings{'ENABLE_SAFE_SEARCH'}} = "checked='checked'";
+$checked{'ENABLE_SAFE_SEARCH_YOUTUBE'}{'off'} = ''; +$checked{'ENABLE_SAFE_SEARCH_YOUTUBE'}{'on'} = ''; +$checked{'ENABLE_SAFE_SEARCH_YOUTUBE'}{$settings{'ENABLE_SAFE_SEARCH_YOUTUBE'}} = "checked='checked'"; + $selected{'PROTO'}{'UDP'} = ''; $selected{'PROTO'}{'TLS'} = ''; $selected{'PROTO'}{'TCP'} = ''; @@ -381,6 +390,16 @@ sub show_general_dns_configuration () { </td> </tr>
+ <tr> + <td width="33%"> + » $Lang::tr{'dns enable safe-search youtube'} + </td> + + <td> + <input type="checkbox" name="ENABLE_SAFE_SEARCH_YOUTUBE" $checked{'ENABLE_SAFE_SEARCH_YOUTUBE'}{'on'}> + </td> + </tr> + <tr> <td colspan="2"> <br> diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index d4dad7652..4a2a9e2e0 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -828,6 +828,7 @@ 'dns configuration' => 'DNS-Konfiguration', 'dns desc' => 'Wenn auf Schnittstelle red0 die IP-Adressinformationen über DHCP vom Provider kommen, werden automatisch die DNS-Server-Adressen des Providers gesetzt. Hier können Sie nun diese mit den eigenen DNS-Server-IP-Adressen überschreiben.', 'dns enable safe-search' => 'Safe Search via DNS aktivieren', +'dns enable safe-search youtube' => 'YouTube in Safe Search einbeziehen', 'dns error 0' => 'Die IP Adresse vom <strong>primären</strong> DNS Server ist nicht gültig, bitte überprüfen Sie Ihre Eingabe!<br />Die eingegebene <strong>sekundären</strong> DNS Server Adresse ist jedoch gültig.<br />', 'dns error 01' => 'Die eingegebene IP Adresse des <strong>primären</strong> wie auch des <strong>sekundären</strong> DNS-Servers sind nicht gültig, bitte überprüfen Sie Ihre Eingaben!', 'dns error 1' => 'Die IP Adresse vom <strong>sekundären</strong> DNS Server ist nicht gültig, bitte überprüfen Sie Ihre Eingabe!<br />Die eingegebene <strong>primäre</strong> DNS Server Adresse ist jedoch gültig.', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index 19a5eb02f..1151da08d 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -851,6 +851,7 @@ 'dns could not add server' => 'Could not add server - Reason:', 'dns desc' => 'If the red0 interface gets the IP address information via DHCP from the provider, the DNS server addresses will be set automatically. Now here you are able to change these DNS server IP addresses with your own ones.', 'dns enable safe-search' => 'Enable Safe Search', +'dns enable safe-search youtube' => 'Include YouTube in Safe Search', 'dns error 0' => 'The IP address of the <strong>primary</strong> DNS server is not valid, please check your entries!<br />The entered <strong>secondary</strong> DNS server address is valid.', 'dns error 01' => 'The entered IP address of the <strong>primary</strong> and <strong>secondary</strong> DNS server are not valid, please check your entries!', 'dns error 1' => 'The IP address of the <strong>secondary</strong> DNS server is not valid, please check your entries!<br />The entered <strong>primary</strong> DNS server address is valid.', diff --git a/lfs/git b/lfs/git index 2928d59e6..125690562 100644 --- a/lfs/git +++ b/lfs/git @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = git -PAK_VER = 17 +PAK_VER = 18
DEPS = perl-Authen-SASL perl-MIME-Base64 perl-Net-SMTP-SSL
diff --git a/lfs/intel-microcode b/lfs/intel-microcode index 025a789a5..c94bd6fa7 100644 --- a/lfs/intel-microcode +++ b/lfs/intel-microcode @@ -24,7 +24,7 @@
include Config
-VER = 20200616 +VER = 20201110
THISAPP = Intel-Linux-Processor-Microcode-Data-Files-microcode-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = b5e2f0cc9db2ed3d2760a5a859a0a387 +$(DL_FILE)_MD5 = 132d927e9fc1ba01d8464ab3560e3ea6
install : $(TARGET)
diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound index acbf6f5b5..5c5d2e3f4 100644 --- a/src/initscripts/system/unbound +++ b/src/initscripts/system/unbound @@ -502,45 +502,44 @@ update_safe_search() { unbound-control local_zone_remove "${domain}" done >/dev/null
- # Nothing to do if safe search is not enabled - if [ "${ENABLE_SAFE_SEARCH}" != "on" ]; then - return 0 - fi - - # Bing - unbound-control bing.com transparent >/dev/null - for address in $(resolve "strict.bing.com"); do - unbound-control local_data "www.bing.com ${LOCAL_TTL} IN A ${address}" - done >/dev/null - - # DuckDuckGo - unbound-control local_zone duckduckgo.com typetransparent >/dev/null - for address in $(resolve "safe.duckduckgo.com"); do - unbound-control local_data "duckduckgo.com ${LOCAL_TTL} IN A ${address}" - done >/dev/null - - # Google - local addresses="$(resolve "forcesafesearch.google.com")" - for domain in ${google_tlds[@]}; do - unbound-control local_zone "${domain}" transparent >/dev/null - for address in ${addresses}; do - unbound-control local_data "www.${domain} ${LOCAL_TTL} IN A ${address}" + if [ "${ENABLE_SAFE_SEARCH}" = "on" ]; then + # Bing + unbound-control bing.com transparent >/dev/null + for address in $(resolve "strict.bing.com"); do + unbound-control local_data "www.bing.com ${LOCAL_TTL} IN A ${address}" done >/dev/null - done
- # Yandex - for domain in yandex.com yandex.ru; do - unbound-control local_zone "${domain}" typetransparent >/dev/null - for address in $(resolve "familysearch.${domain}"); do - unbound-control local_data "${domain} ${LOCAL_TTL} IN A ${address}" + # DuckDuckGo + unbound-control local_zone duckduckgo.com typetransparent >/dev/null + for address in $(resolve "safe.duckduckgo.com"); do + unbound-control local_data "duckduckgo.com ${LOCAL_TTL} IN A ${address}" done >/dev/null - done
- # YouTube - unbound-control local_zone youtube.com transparent >/dev/null - for address in $(resolve "restrictmoderate.youtube.com"); do - unbound-control local_data "www.youtube.com ${LOCAL_TTL} IN A ${address}" - done >/dev/null + # Google + local addresses="$(resolve "forcesafesearch.google.com")" + for domain in ${google_tlds[@]}; do + unbound-control local_zone "${domain}" transparent >/dev/null + for address in ${addresses}; do + unbound-control local_data "www.${domain} ${LOCAL_TTL} IN A ${address}" + done >/dev/null + done + + # Yandex + for domain in yandex.com yandex.ru; do + unbound-control local_zone "${domain}" typetransparent >/dev/null + for address in $(resolve "familysearch.${domain}"); do + unbound-control local_data "${domain} ${LOCAL_TTL} IN A ${address}" + done >/dev/null + done + + # YouTube + if [ "${ENABLE_SAFE_SEARCH_YOUTUBE}" = "on" ]; then + unbound-control local_zone youtube.com transparent >/dev/null + for address in $(resolve "restrictmoderate.youtube.com"); do + unbound-control local_data "www.youtube.com ${LOCAL_TTL} IN A ${address}" + done >/dev/null + fi + fi
return 0 }
hooks/post-receive -- IPFire 2.x development tree