* black- and whitelist now supporting domain names as well - the
corresponding IPs (IPv4 & IPv6) will be resolved in a detached
background process and added to the IPsets
Signed-off-by: Dirk Brenken <dev@brenken.org>
Fixes error when building fontconfig:
checking for FREETYPE... no
configure: error: Package requirements (freetype2 >= 21.0.15) were not met:
Package dependency requirement 'freetype2 >= 21.0.15' could not be satisfied.
Package 'freetype2' has version '6.17.4', required version is '>= 21.0.15'
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Major change are:
ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Major change are:
Fix an issue that directories appear as files when using windows
backup.
Fix xfstests generic/241 failure on life test.
Update ksmbd shutdown and debug print on/off using ksmbd.control in
cifsd.rst.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Major changes are:
Fix kernel oops from fuse+ntfs driver.
Fix the issue of change the directory to the file using Nautilus
client.
Fix ksmbd build break with the latest linux-5.12-rc1.
Fix potential memleak and use after free.
Fix use after free from KASAN(racy issue)
Signed-off-by: Rosen Penev <rosenp@gmail.com>
While searching for the boost_system library in boost.m4, configure
tries to find boost_system-mt before boost_system. The presence of
boost_system-mt in the staging dir depends on
CONFIG_boost-use-name-tags. If it is not defined (default), and there
is a boost_system-mt library in the host system, it will be used, and
the build will fail.
This adds a patch to remove the host paths from the search loop,
preserving the rest of the detection logic.
Alternatively, boost_cv_lib_context_LIBS could be used to avoid library
detection code entirely, but then the mt- variant would never be used.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
The current default of hourly is too fast. Some services such as
DuckDuckGo return IPs from a pool based on the user's location instead
of a fixed IP address. This change prevents unnecessary writes to the
flash memory by only updating once per week.
Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
* add adguard_tracking source (list with cname trackers)
* optimize/sort output of active sources in status
* optimize log output in EMails
Signed-off-by: Dirk Brenken <dev@brenken.org>
This updates auc to use the new API of the sysupgrade image server.
Package version updates now need to be evaluated locally.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
be065c4b sepolicy: Do not try to load policy on import
8f0f0a28 selinux(8,5): Describe fcontext regular expressions
e12f71e8 python/sepolgen: allow any policy statement in if(n)def
b15dff0f python/semanage: Sort imports in alphabetical order
92e01969 python/semanage: empty stdout before exiting on BrokenPipeError
fadcc839 python/sepolicy: allow to override manpage date
2a60de8e sepolgen: sort extended rules like normal ones
9e239e55 sepolgen: print extended permissions in hexadecimal
ccd973f7 python/audit2allow: add #include <limits.h> to sepolgen-ifgen-attr-helper.c
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
Bugfixes:
- Remove LD_LIBRARY_PATH and SSL_CERT_FILE environment variables when
shelling out to the ssh client.
Signed-off-by: Javier Marcet <javier@marcet.info>
Dirk Brenken
Rosen Penev
Hannu Nyman
Bernd Kuhls
Christian Lachner
Gerard Ryan
W. Michael Petullo
Jan Pavlinec
Paul Spooren
David Bauer
Eneas U de Queiroz
Gregory L. Dietsche
Michael Heimpold
Daniel Golle
Dominick Grift
Javier Marcet
Olivier Poitrey
Florian Eckert