From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer <git@ipfire.org> To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. d08452c5055cccc9cb5c2a0dedf661cf50d28679 Date: Wed, 11 Nov 2020 12:09:22 +0000 Message-ID: <4CWNnZ4tCjz2xl6@people01.haj.ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5631991600402349981==" List-Id: <ipfire-scm.lists.ipfire.org> --===============5631991600402349981== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via d08452c5055cccc9cb5c2a0dedf661cf50d28679 (commit) via 65ef52a33564f7fd41825aa01e0417c234690eab (commit) via f60ae20cc86b5c1667432f29add09e65bc4048dd (commit) via 5cebcd805a5eb9d4ce930a6a9878c40bdc9b76d9 (commit) via 1c217406f2dfd7bba3e21c99df328d9b71407d1b (commit) via 0163c62dee8e53612e661498dbe6fca7dec74b10 (commit) via 85c2e400ff92ec8e7069284c1d0f6f52c39a40da (commit) via e23b3b08a889dbd3e7fa6a31b4c481f30cc65dff (commit) from 7b97337afb4576d4bacbe854e8822e97b4cd1a40 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit d08452c5055cccc9cb5c2a0dedf661cf50d28679 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Nov 11 12:08:57 2020 +0000 core153: Ship unbound initscript =20 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 65ef52a33564f7fd41825aa01e0417c234690eab Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Sat Nov 7 12:59:08 2020 +0000 DNS: Make YouTube configurable for Safe Search =20 When safe search is enabled, it is being enabled on YouTube, too. =20 This creates problems in some scenarios like schools where politics is being tought as well as other subjects that might be censored by YouTube (i.e. election TV spots). =20 Therefore it is now possible to exclude YouTube from Safe Search but keep it enabled for the search engines. =20 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit f60ae20cc86b5c1667432f29add09e65bc4048dd Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Nov 11 11:53:34 2020 +0000 core153: Update language cache =20 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 5cebcd805a5eb9d4ce930a6a9878c40bdc9b76d9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Nov 11 11:52:13 2020 +0000 core153: Ship Intel mircocode and ask for reboot =20 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 1c217406f2dfd7bba3e21c99df328d9b71407d1b Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Nov 11 11:21:05 2020 +0100 intel-microcode: update to 20201110 =20 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 0163c62dee8e53612e661498dbe6fca7dec74b10 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Nov 11 09:11:55 2020 +0100 kernel: aarch64: enable ahci =20 this is needed to boot on ESXi on arm. =20 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 85c2e400ff92ec8e7069284c1d0f6f52c39a40da Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Nov 10 11:17:46 2020 +0000 git: Bump package version =20 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit e23b3b08a889dbd3e7fa6a31b4c481f30cc65dff Author: ummeegge <erik.kapfer(a)ipfire.org> Date: Tue Nov 10 09:28:56 2020 +0000 git: Add missing Error.pm and LoadCPAN submodules =20 Fixes #12511 =20 Signed-off-by: ummeegge <erik.kapfer(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/kernel/kernel.config.aarch64-ipfire | 2 +- config/rootfiles/common/aarch64/linux | 2 +- config/rootfiles/common/i586/intel-microcode | 7 +++ config/rootfiles/common/x86_64/intel-microcode | 7 +++ config/rootfiles/core/153/filelists/files | 1 + .../153}/filelists/i586/intel-microcode | 0 .../153}/filelists/x86_64/intel-microcode | 0 config/rootfiles/core/153/update.sh | 10 +++- config/rootfiles/packages/git | 6 +- doc/language_issues.en | 1 + doc/language_issues.es | 1 + doc/language_issues.fr | 1 + doc/language_issues.it | 1 + doc/language_issues.nl | 1 + doc/language_issues.pl | 1 + doc/language_issues.ru | 1 + doc/language_issues.tr | 1 + doc/language_missings | 7 +++ html/cgi-bin/dns.cgi | 19 ++++++ langs/de/cgi-bin/de.pl | 1 + langs/en/cgi-bin/en.pl | 1 + lfs/git | 2 +- lfs/intel-microcode | 4 +- src/initscripts/system/unbound | 69 +++++++++++---------= -- 24 files changed, 101 insertions(+), 45 deletions(-) copy config/rootfiles/{oldcore/121 =3D> core/153}/filelists/i586/intel-micro= code (100%) copy config/rootfiles/{oldcore/121 =3D> core/153}/filelists/x86_64/intel-mic= rocode (100%) Difference in files: diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kerne= l.config.aarch64-ipfire index 2d4934a09..bc389470b 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -1819,7 +1819,7 @@ CONFIG_SATA_PMP=3Dy # # Controllers with non-SFF native interface # -# CONFIG_SATA_AHCI is not set +CONFIG_SATA_AHCI=3Dy CONFIG_SATA_AHCI_PLATFORM=3Dm CONFIG_AHCI_CEVA=3Dm CONFIG_AHCI_MVEBU=3Dm diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/= aarch64/linux index 6f76519d0..0961daffe 100644 --- a/config/rootfiles/common/aarch64/linux +++ b/config/rootfiles/common/aarch64/linux @@ -9617,6 +9617,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/s2io.h #lib/modules/KVER-ipfire/build/include/config/sata #lib/modules/KVER-ipfire/build/include/config/sata/ahci +#lib/modules/KVER-ipfire/build/include/config/sata/ahci.h #lib/modules/KVER-ipfire/build/include/config/sata/ahci/platform.h #lib/modules/KVER-ipfire/build/include/config/sata/dwc.h #lib/modules/KVER-ipfire/build/include/config/sata/mv.h @@ -17306,7 +17307,6 @@ lib/modules/KVER-ipfire/kernel #lib/modules/KVER-ipfire/kernel/drivers/ata/ahci_platform.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/ahci_qoriq.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/ahci_sunxi.ko.xz -#lib/modules/KVER-ipfire/kernel/drivers/ata/libahci.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/libahci_platform.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/sata_dwc_460ex.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/ata/sata_mv.ko.xz diff --git a/config/rootfiles/common/i586/intel-microcode b/config/rootfiles/= common/i586/intel-microcode index 9b3c50897..3185cd01a 100644 --- a/config/rootfiles/common/i586/intel-microcode +++ b/config/rootfiles/common/i586/intel-microcode @@ -69,6 +69,7 @@ lib/firmware/intel-ucode/06-55-03 lib/firmware/intel-ucode/06-55-04 lib/firmware/intel-ucode/06-55-06 lib/firmware/intel-ucode/06-55-07 +lib/firmware/intel-ucode/06-55-0b lib/firmware/intel-ucode/06-56-02 lib/firmware/intel-ucode/06-56-03 lib/firmware/intel-ucode/06-56-04 @@ -82,6 +83,8 @@ lib/firmware/intel-ucode/06-66-03 lib/firmware/intel-ucode/06-7a-01 lib/firmware/intel-ucode/06-7a-08 lib/firmware/intel-ucode/06-7e-05 +lib/firmware/intel-ucode/06-8a-01 +lib/firmware/intel-ucode/06-8c-01 lib/firmware/intel-ucode/06-8e-09 lib/firmware/intel-ucode/06-8e-0a lib/firmware/intel-ucode/06-8e-0b @@ -91,7 +94,11 @@ lib/firmware/intel-ucode/06-9e-0a lib/firmware/intel-ucode/06-9e-0b lib/firmware/intel-ucode/06-9e-0c lib/firmware/intel-ucode/06-9e-0d +lib/firmware/intel-ucode/06-a5-02 +lib/firmware/intel-ucode/06-a5-03 +lib/firmware/intel-ucode/06-a5-05 lib/firmware/intel-ucode/06-a6-00 +lib/firmware/intel-ucode/06-a6-01 lib/firmware/intel-ucode/0f-00-07 lib/firmware/intel-ucode/0f-00-0a lib/firmware/intel-ucode/0f-01-02 diff --git a/config/rootfiles/common/x86_64/intel-microcode b/config/rootfile= s/common/x86_64/intel-microcode index 9b3c50897..3185cd01a 100644 --- a/config/rootfiles/common/x86_64/intel-microcode +++ b/config/rootfiles/common/x86_64/intel-microcode @@ -69,6 +69,7 @@ lib/firmware/intel-ucode/06-55-03 lib/firmware/intel-ucode/06-55-04 lib/firmware/intel-ucode/06-55-06 lib/firmware/intel-ucode/06-55-07 +lib/firmware/intel-ucode/06-55-0b lib/firmware/intel-ucode/06-56-02 lib/firmware/intel-ucode/06-56-03 lib/firmware/intel-ucode/06-56-04 @@ -82,6 +83,8 @@ lib/firmware/intel-ucode/06-66-03 lib/firmware/intel-ucode/06-7a-01 lib/firmware/intel-ucode/06-7a-08 lib/firmware/intel-ucode/06-7e-05 +lib/firmware/intel-ucode/06-8a-01 +lib/firmware/intel-ucode/06-8c-01 lib/firmware/intel-ucode/06-8e-09 lib/firmware/intel-ucode/06-8e-0a lib/firmware/intel-ucode/06-8e-0b @@ -91,7 +94,11 @@ lib/firmware/intel-ucode/06-9e-0a lib/firmware/intel-ucode/06-9e-0b lib/firmware/intel-ucode/06-9e-0c lib/firmware/intel-ucode/06-9e-0d +lib/firmware/intel-ucode/06-a5-02 +lib/firmware/intel-ucode/06-a5-03 +lib/firmware/intel-ucode/06-a5-05 lib/firmware/intel-ucode/06-a6-00 +lib/firmware/intel-ucode/06-a6-01 lib/firmware/intel-ucode/0f-00-07 lib/firmware/intel-ucode/0f-00-0a lib/firmware/intel-ucode/0f-01-02 diff --git a/config/rootfiles/core/153/filelists/files b/config/rootfiles/cor= e/153/filelists/files index 04605c232..9fe5a0adf 100644 --- a/config/rootfiles/core/153/filelists/files +++ b/config/rootfiles/core/153/filelists/files @@ -1,6 +1,7 @@ etc/issue etc/ntp.conf etc/os-release +etc/rc.d/init.d/unbound etc/system-release etc/sysctl.conf srv/web/ipfire/cgi-bin/connections.cgi diff --git a/config/rootfiles/core/153/filelists/i586/intel-microcode b/confi= g/rootfiles/core/153/filelists/i586/intel-microcode new file mode 120000 index 000000000..f03e84778 --- /dev/null +++ b/config/rootfiles/core/153/filelists/i586/intel-microcode @@ -0,0 +1 @@ +../../../../common/i586/intel-microcode \ No newline at end of file diff --git a/config/rootfiles/core/153/filelists/x86_64/intel-microcode b/con= fig/rootfiles/core/153/filelists/x86_64/intel-microcode new file mode 120000 index 000000000..d5ac074e2 --- /dev/null +++ b/config/rootfiles/core/153/filelists/x86_64/intel-microcode @@ -0,0 +1 @@ +../../../../common/x86_64/intel-microcode \ No newline at end of file diff --git a/config/rootfiles/core/153/update.sh b/config/rootfiles/core/153/= update.sh index a6ddc0019..6868698c8 100644 --- a/config/rootfiles/core/153/update.sh +++ b/config/rootfiles/core/153/update.sh @@ -45,7 +45,7 @@ ldconfig chown -vR root:root /etc/ntp =20 # Update Language cache -#/usr/local/bin/update-lang-cache +/usr/local/bin/update-lang-cache =20 # Filesytem cleanup /usr/local/bin/filesystem-cleanup @@ -57,7 +57,7 @@ chown -vR root:root /etc/ntp sysctl -p =20 # This update needs a reboot... -#touch /var/run/need_reboot +touch /var/run/need_reboot =20 # Finish /etc/init.d/fireinfo start @@ -70,5 +70,11 @@ fi =20 sync =20 +# Reload microcode +modprobe microcode +if [ -w "/sys/devices/system/cpu/microcode/reload" ]; then + echo 1 > /sys/devices/system/cpu/microcode/reload +fi + # Don't report the exitcode last command exit 0 diff --git a/config/rootfiles/packages/git b/config/rootfiles/packages/git index df159acb4..c2023a326 100644 --- a/config/rootfiles/packages/git +++ b/config/rootfiles/packages/git @@ -333,9 +333,9 @@ usr/share/perl5/FromCPAN/Error.pm usr/share/perl5/Git.pm usr/share/perl5/Git/I18N.pm usr/share/perl5/Git/IndexInfo.pm -#usr/share/perl5/Git/LoadCPAN -#usr/share/perl5/Git/LoadCPAN.pm -#usr/share/perl5/Git/LoadCPAN/Error.pm +usr/share/perl5/Git/LoadCPAN +usr/share/perl5/Git/LoadCPAN.pm +usr/share/perl5/Git/LoadCPAN/Error.pm #usr/share/perl5/Git/LoadCPAN/Mail #usr/share/perl5/Git/LoadCPAN/Mail/Address.pm #usr/share/perl5/Git/Packet.pm diff --git a/doc/language_issues.en b/doc/language_issues.en index 0592f938b..4cff0c6cb 100644 --- a/doc/language_issues.en +++ b/doc/language_issues.en @@ -600,6 +600,7 @@ WARNING: untranslated string: dns check failed =3D DNS ch= eck failed WARNING: untranslated string: dns check servers =3D Check DNS Servers WARNING: untranslated string: dns configuration =3D DNS Configuration WARNING: untranslated string: dns enable safe-search =3D Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube =3D Include You= Tube in Safe Search WARNING: untranslated string: dns forward disable dnssec =3D Disable DNSSEC = (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice =3D (DNS= SEC disabled) WARNING: untranslated string: dns isp assigned nameserver =3D ISP-assigned D= NS server diff --git a/doc/language_issues.es b/doc/language_issues.es index fd9c61b32..8d6041ce5 100644 --- a/doc/language_issues.es +++ b/doc/language_issues.es @@ -896,6 +896,7 @@ WARNING: untranslated string: dnat address =3D Firewall I= nterface WARNING: untranslated string: dns check servers =3D Check DNS Servers WARNING: untranslated string: dns configuration =3D DNS Configuration WARNING: untranslated string: dns enable safe-search =3D Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube =3D Include You= Tube in Safe Search WARNING: untranslated string: dns forward disable dnssec =3D Disable DNSSEC = (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice =3D (DNS= SEC disabled) WARNING: untranslated string: dns isp assigned nameserver =3D ISP-assigned D= NS server diff --git a/doc/language_issues.fr b/doc/language_issues.fr index c84aab2b1..f4ed28c7d 100644 --- a/doc/language_issues.fr +++ b/doc/language_issues.fr @@ -877,6 +877,7 @@ WARNING: translation string unused: zoneconf val ppp assi= gnment error WARNING: translation string unused: zoneconf val vlan amount assignment error WARNING: translation string unused: zoneconf val vlan tag assignment error WARNING: translation string unused: zoneconf val zoneslave amount error +WARNING: untranslated string: dns enable safe-search youtube =3D Include You= Tube in Safe Search WARNING: untranslated string: fwhost cust locationgrp =3D unknown string WARNING: untranslated string: fwhost err hostip =3D unknown string WARNING: untranslated string: guardian block a host =3D unknown string diff --git a/doc/language_issues.it b/doc/language_issues.it index 505e73373..08b07080e 100644 --- a/doc/language_issues.it +++ b/doc/language_issues.it @@ -920,6 +920,7 @@ WARNING: untranslated string: dl client arch insecure =3D= Download insecure Client WARNING: untranslated string: dns check servers =3D Check DNS Servers WARNING: untranslated string: dns configuration =3D DNS Configuration WARNING: untranslated string: dns enable safe-search =3D Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube =3D Include You= Tube in Safe Search WARNING: untranslated string: dns forward disable dnssec =3D Disable DNSSEC = (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice =3D (DNS= SEC disabled) WARNING: untranslated string: dns isp assigned nameserver =3D ISP-assigned D= NS server diff --git a/doc/language_issues.nl b/doc/language_issues.nl index 0f73afc86..bde5daf3c 100644 --- a/doc/language_issues.nl +++ b/doc/language_issues.nl @@ -921,6 +921,7 @@ WARNING: untranslated string: dl client arch insecure =3D= Download insecure Client WARNING: untranslated string: dns check servers =3D Check DNS Servers WARNING: untranslated string: dns configuration =3D DNS Configuration WARNING: untranslated string: dns enable safe-search =3D Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube =3D Include You= Tube in Safe Search WARNING: untranslated string: dns forward disable dnssec =3D Disable DNSSEC = (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice =3D (DNS= SEC disabled) WARNING: untranslated string: dns isp assigned nameserver =3D ISP-assigned D= NS server diff --git a/doc/language_issues.pl b/doc/language_issues.pl index fd9c61b32..8d6041ce5 100644 --- a/doc/language_issues.pl +++ b/doc/language_issues.pl @@ -896,6 +896,7 @@ WARNING: untranslated string: dnat address =3D Firewall I= nterface WARNING: untranslated string: dns check servers =3D Check DNS Servers WARNING: untranslated string: dns configuration =3D DNS Configuration WARNING: untranslated string: dns enable safe-search =3D Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube =3D Include You= Tube in Safe Search WARNING: untranslated string: dns forward disable dnssec =3D Disable DNSSEC = (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice =3D (DNS= SEC disabled) WARNING: untranslated string: dns isp assigned nameserver =3D ISP-assigned D= NS server diff --git a/doc/language_issues.ru b/doc/language_issues.ru index bf1d976e9..6235f33fd 100644 --- a/doc/language_issues.ru +++ b/doc/language_issues.ru @@ -899,6 +899,7 @@ WARNING: untranslated string: dnat address =3D Firewall I= nterface WARNING: untranslated string: dns check servers =3D Check DNS Servers WARNING: untranslated string: dns configuration =3D DNS Configuration WARNING: untranslated string: dns enable safe-search =3D Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube =3D Include You= Tube in Safe Search WARNING: untranslated string: dns forward disable dnssec =3D Disable DNSSEC = (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice =3D (DNS= SEC disabled) WARNING: untranslated string: dns isp assigned nameserver =3D ISP-assigned D= NS server diff --git a/doc/language_issues.tr b/doc/language_issues.tr index b2c24de57..b61f3740a 100644 --- a/doc/language_issues.tr +++ b/doc/language_issues.tr @@ -897,6 +897,7 @@ WARNING: untranslated string: disconnected =3D Disconnect= ed WARNING: untranslated string: dns check servers =3D Check DNS Servers WARNING: untranslated string: dns configuration =3D DNS Configuration WARNING: untranslated string: dns enable safe-search =3D Enable Safe Search +WARNING: untranslated string: dns enable safe-search youtube =3D Include You= Tube in Safe Search WARNING: untranslated string: dns forward disable dnssec =3D Disable DNSSEC = (dangerous) WARNING: untranslated string: dns forwarding dnssec disabled notice =3D (DNS= SEC disabled) WARNING: untranslated string: dns isp assigned nameserver =3D ISP-assigned D= NS server diff --git a/doc/language_missings b/doc/language_missings index d79afff83..638a7cc42 100644 --- a/doc/language_missings +++ b/doc/language_missings @@ -239,6 +239,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dnsforward < dnsforward add a new entry < dnsforward configuration @@ -950,6 +951,7 @@ < ansi t1.483 < bewan adsl pci st < bewan adsl usb +< dns enable safe-search youtube < g.dtm < g.lite < upload fcdsl.o @@ -1052,6 +1054,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dns forward disable dnssec < dnsforward dnssec disabled < dnsforward forward_servers @@ -1431,6 +1434,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dns forward disable dnssec < dnsforward dnssec disabled < dnsforward forward_servers @@ -1922,6 +1926,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dnsforward < dnsforward add a new entry < dnsforward configuration @@ -2790,6 +2795,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dnsforward < dnsforward add a new entry < dnsforward configuration @@ -3513,6 +3519,7 @@ < dns configuration < dns could not add server < dns enable safe-search +< dns enable safe-search youtube < dns forward disable dnssec < dnsforward dnssec disabled < dnsforward forward_servers diff --git a/html/cgi-bin/dns.cgi b/html/cgi-bin/dns.cgi index 762e77ff1..5c3ca875d 100755 --- a/html/cgi-bin/dns.cgi +++ b/html/cgi-bin/dns.cgi @@ -87,6 +87,10 @@ if ($cgiparams{'GENERAL'} eq $Lang::tr{'save'}) { $cgiparams{'ENABLE_SAFE_SEARCH'} =3D "off"; } =20 + if ($cgiparams{'ENABLE_SAFE_SEARCH_YOUTUBE'} ne "on") { + $cgiparams{'ENABLE_SAFE_SEARCH_YOUTUBE'} =3D "off"; + } + # Check if using ISP nameservers and TLS is enabled at the same time. if (($cgiparams{'USE_ISP_NAMESERVERS'} eq "on") && ($cgiparams{'PROTO'} eq = "TLS")) { $errormessage =3D $Lang::tr{'dns isp nameservers and tls not allowed'} @@ -259,6 +263,7 @@ if (($cgiparams{'SERVERS'} eq $Lang::tr{'save'}) || ($cgi= params{'SERVERS'} eq $L =20 # Hash to store the generic DNS settings. my %settings =3D (); +$settings{"ENABLE_SAFE_SEARCH_YOUTUBE"} =3D "on"; =20 # Read-in general DNS settings. &General::readhash("$settings_file", \%settings); @@ -310,6 +315,10 @@ $checked{'ENABLE_SAFE_SEARCH'}{'off'} =3D ''; $checked{'ENABLE_SAFE_SEARCH'}{'on'} =3D ''; $checked{'ENABLE_SAFE_SEARCH'}{$settings{'ENABLE_SAFE_SEARCH'}} =3D "checked= =3D'checked'"; =20 +$checked{'ENABLE_SAFE_SEARCH_YOUTUBE'}{'off'} =3D ''; +$checked{'ENABLE_SAFE_SEARCH_YOUTUBE'}{'on'} =3D ''; +$checked{'ENABLE_SAFE_SEARCH_YOUTUBE'}{$settings{'ENABLE_SAFE_SEARCH_YOUTUBE= '}} =3D "checked=3D'checked'"; + $selected{'PROTO'}{'UDP'} =3D ''; $selected{'PROTO'}{'TLS'} =3D ''; $selected{'PROTO'}{'TCP'} =3D ''; @@ -381,6 +390,16 @@ sub show_general_dns_configuration () { </td> </tr> =20 + <tr> + <td width=3D"33%"> + » $Lang::tr{'dns enable safe-search youtube'} + </td> + + <td> + <input type=3D"checkbox" name=3D"ENABLE_SAFE_SEARCH_YOUTUBE" $checked{'= ENABLE_SAFE_SEARCH_YOUTUBE'}{'on'}> + </td> + </tr> + <tr> <td colspan=3D"2"> <br> diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index d4dad7652..4a2a9e2e0 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -828,6 +828,7 @@ 'dns configuration' =3D> 'DNS-Konfiguration', 'dns desc' =3D> 'Wenn auf Schnittstelle red0 die IP-Adressinformationen =C3= =BCber DHCP vom Provider kommen, werden automatisch die DNS-Server-Adressen d= es Providers gesetzt. Hier k=C3=B6nnen Sie nun diese mit den eigenen DNS-Serv= er-IP-Adressen =C3=BCberschreiben.', 'dns enable safe-search' =3D> 'Safe Search via DNS aktivieren', +'dns enable safe-search youtube' =3D> 'YouTube in Safe Search einbeziehen', 'dns error 0' =3D> 'Die IP Adresse vom <strong>prim=C3=A4ren</strong> DNS Se= rver ist nicht g=C3=BCltig, bitte =C3=BCberpr=C3=BCfen Sie Ihre Eingabe!<br /= >Die eingegebene <strong>sekund=C3=A4ren</strong> DNS Server Adresse ist jedo= ch g=C3=BCltig.<br />', 'dns error 01' =3D> 'Die eingegebene IP Adresse des <strong>prim=C3=A4ren</s= trong> wie auch des <strong>sekund=C3=A4ren</strong> DNS-Servers sind nicht g= =C3=BCltig, bitte =C3=BCberpr=C3=BCfen Sie Ihre Eingaben!', 'dns error 1' =3D> 'Die IP Adresse vom <strong>sekund=C3=A4ren</strong> DNS = Server ist nicht g=C3=BCltig, bitte =C3=BCberpr=C3=BCfen Sie Ihre Eingabe!<br= />Die eingegebene <strong>prim=C3=A4re</strong> DNS Server Adresse ist jedoc= h g=C3=BCltig.', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index 19a5eb02f..1151da08d 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -851,6 +851,7 @@ 'dns could not add server' =3D> 'Could not add server - Reason:', 'dns desc' =3D> 'If the red0 interface gets the IP address information via D= HCP from the provider, the DNS server addresses will be set automatically. No= w here you are able to change these DNS server IP addresses with your own one= s.', 'dns enable safe-search' =3D> 'Enable Safe Search', +'dns enable safe-search youtube' =3D> 'Include YouTube in Safe Search', 'dns error 0' =3D> 'The IP address of the <strong>primary</strong> DNS serve= r is not valid, please check your entries!<br />The entered <strong>secondary= </strong> DNS server address is valid.', 'dns error 01' =3D> 'The entered IP address of the <strong>primary</strong> = and <strong>secondary</strong> DNS server are not valid, please check your en= tries!', 'dns error 1' =3D> 'The IP address of the <strong>secondary</strong> DNS ser= ver is not valid, please check your entries!<br />The entered <strong>primary= </strong> DNS server address is valid.', diff --git a/lfs/git b/lfs/git index 2928d59e6..125690562 100644 --- a/lfs/git +++ b/lfs/git @@ -32,7 +32,7 @@ DL_FROM =3D $(URL_IPFIRE) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) PROG =3D git -PAK_VER =3D 17 +PAK_VER =3D 18 =20 DEPS =3D perl-Authen-SASL perl-MIME-Base64 perl-Net-SMTP-SSL =20 diff --git a/lfs/intel-microcode b/lfs/intel-microcode index 025a789a5..c94bd6fa7 100644 --- a/lfs/intel-microcode +++ b/lfs/intel-microcode @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 20200616 +VER =3D 20201110 =20 THISAPP =3D Intel-Linux-Processor-Microcode-Data-Files-microcode-$(VER) DL_FILE =3D $(THISAPP).tar.gz @@ -41,7 +41,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D b5e2f0cc9db2ed3d2760a5a859a0a387 +$(DL_FILE)_MD5 =3D 132d927e9fc1ba01d8464ab3560e3ea6 =20 install : $(TARGET) =20 diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound index acbf6f5b5..5c5d2e3f4 100644 --- a/src/initscripts/system/unbound +++ b/src/initscripts/system/unbound @@ -502,45 +502,44 @@ update_safe_search() { unbound-control local_zone_remove "${domain}" done >/dev/null =20 - # Nothing to do if safe search is not enabled - if [ "${ENABLE_SAFE_SEARCH}" !=3D "on" ]; then - return 0 - fi - - # Bing - unbound-control bing.com transparent >/dev/null - for address in $(resolve "strict.bing.com"); do - unbound-control local_data "www.bing.com ${LOCAL_TTL} IN A ${address}" - done >/dev/null - - # DuckDuckGo - unbound-control local_zone duckduckgo.com typetransparent >/dev/null - for address in $(resolve "safe.duckduckgo.com"); do - unbound-control local_data "duckduckgo.com ${LOCAL_TTL} IN A ${address}" - done >/dev/null - - # Google - local addresses=3D"$(resolve "forcesafesearch.google.com")" - for domain in ${google_tlds[@]}; do - unbound-control local_zone "${domain}" transparent >/dev/null - for address in ${addresses}; do - unbound-control local_data "www.${domain} ${LOCAL_TTL} IN A ${address}" + if [ "${ENABLE_SAFE_SEARCH}" =3D "on" ]; then + # Bing + unbound-control bing.com transparent >/dev/null + for address in $(resolve "strict.bing.com"); do + unbound-control local_data "www.bing.com ${LOCAL_TTL} IN A ${address}" done >/dev/null - done =20 - # Yandex - for domain in yandex.com yandex.ru; do - unbound-control local_zone "${domain}" typetransparent >/dev/null - for address in $(resolve "familysearch.${domain}"); do - unbound-control local_data "${domain} ${LOCAL_TTL} IN A ${address}" + # DuckDuckGo + unbound-control local_zone duckduckgo.com typetransparent >/dev/null + for address in $(resolve "safe.duckduckgo.com"); do + unbound-control local_data "duckduckgo.com ${LOCAL_TTL} IN A ${address}" done >/dev/null - done =20 - # YouTube - unbound-control local_zone youtube.com transparent >/dev/null - for address in $(resolve "restrictmoderate.youtube.com"); do - unbound-control local_data "www.youtube.com ${LOCAL_TTL} IN A ${address}" - done >/dev/null + # Google + local addresses=3D"$(resolve "forcesafesearch.google.com")" + for domain in ${google_tlds[@]}; do + unbound-control local_zone "${domain}" transparent >/dev/null + for address in ${addresses}; do + unbound-control local_data "www.${domain} ${LOCAL_TTL} IN A ${address}" + done >/dev/null + done + + # Yandex + for domain in yandex.com yandex.ru; do + unbound-control local_zone "${domain}" typetransparent >/dev/null + for address in $(resolve "familysearch.${domain}"); do + unbound-control local_data "${domain} ${LOCAL_TTL} IN A ${address}" + done >/dev/null + done + + # YouTube + if [ "${ENABLE_SAFE_SEARCH_YOUTUBE}" =3D "on" ]; then + unbound-control local_zone youtube.com transparent >/dev/null + for address in $(resolve "restrictmoderate.youtube.com"); do + unbound-control local_data "www.youtube.com ${LOCAL_TTL} IN A ${address}" + done >/dev/null + fi + fi =20 return 0 } hooks/post-receive -- IPFire 2.x development tree --===============5631991600402349981==--