6451 Commits

Author SHA1 Message Date
Franco Fichtner
46fc7fe3aa rc: makefs -> mkimg migration seems to fix this, yay! 2016-12-02 10:23:58 +01:00
Tikimotel
28b058c895 Update system_advanced_misc.php (#1288)
This adds the "normal" power state to the powerd - system_advanced_misc options.
If the powerd utillity can not determine the system power options (ac or battery) it will use the "normal" setting rendering the "ac" and "battery" settings useless for these systems.
2016-12-02 19:48:26 +01:00
Franco Fichtner
9a15a68f2f rc: allow growfs on new nano images
This is a bit tricky, because there is a bug where UFS labels
disappear.  For now, clobber /etc/fstab to make sure the next
boot goes as planned.
2016-12-02 08:58:06 +01:00
Ad Schellevis
7100fedbbb (util.inc) php7 fix ip_in_subnet() 2016-12-02 17:03:39 +01:00
Ad Schellevis
8067e9bdd1 legacy_interfaces_details() switch to exec() 2016-12-02 12:08:36 +01:00
Ad Schellevis
d3a696048c (interfaces.lib.inc) merge _legacy_getall_interface_addresses() and legacy_interfaces_details() for more consistent ifconfig parsing 2016-12-02 11:47:33 +01:00
Franco Fichtner
393fadcec0 system: stray unicode whitespace (damn you, apple!) 2016-12-02 08:31:41 +01:00
Franco Fichtner
3d802a0a78 system: missed two GUI strings for previous 2016-12-02 08:28:59 +01:00
Franco Fichtner
e413994c4a system: finally split up use_mfs_tmpvar for good
This is an inplace config migration.  The mount still behaves
the same way and a config save from the page migrates the
options.  We're not in a rush here, but the reason is that
we should have clean options and the new 17.1 images for nano
will depend on the new style.
2016-12-02 08:18:23 +01:00
Franco Fichtner
d88999b025 firmware: fix typos in previous 2016-12-01 15:56:18 +01:00
Franco Fichtner
83969040ed firmware: don't track UUID in a crash report submission anymore 2016-12-01 15:33:48 +01:00
Franco Fichtner
672ac99db4 firmware: fix previous 2016-11-30 21:36:47 +01:00
Franco Fichtner
e4cd7f5904 system: proxy user is needed after all, hidden...
... behind a chain of proxy->squid modification, not by
pkg, but by setup.sh.  Not easy to find.
2016-11-30 20:11:54 +01:00
Ad Schellevis
18c49439b8 (firewall) some missing alias options, spotted by @jschellevis 2016-11-30 18:33:21 +01:00
Franco Fichtner
107e782561 firmware: let us do 9999 updates until this breaks
Or: only display 12 changelogs, let user expand if desired

Requested by: @jschellevis
2016-11-30 18:15:22 +01:00
Franco Fichtner
31e26e2349 firmware: auto-rerun on package manager update 2016-11-30 17:40:04 +01:00
Franco Fichtner
4c68e8c246 firmware: two problems
o Licenses are only readable from installed files, back out of plugins
o Audit did overwrite the "done" message for plugin ops et al
2016-11-30 17:02:34 +01:00
Franco Fichtner
85e4bef09a system: protect all JS with html_safe(); closes #1285 2016-11-30 16:02:11 +01:00
Valentin Deville
235049b9ce Fix bug in some languages with quotes 2016-11-30 16:02:11 +01:00
Franco Fichtner
baa813eb95 plugins: protect calls to functions as done elsewhere 2016-11-30 15:32:08 +01:00
Franco Fichtner
0a972db96d firmware: fix style in audit print 2016-11-30 08:24:33 +01:00
Franco Fichtner
09ed08e899 web proxy: default to enabled for new remote lists 2016-11-30 08:17:07 +01:00
Franco Fichtner
53ee7f5734 rc: pkg-static spams about major upgrade warning...
... but we already know that because we are performing one.
2016-11-30 07:32:14 +01:00
Franco Fichtner
19dfa96cc2 intrusion detection: rotate eve-log every (almost) 500 MB
Should probably remove the weekly/daily rotation in favour of a
setting of the value in KB on the GUI instead...
2016-11-30 07:27:19 +01:00
Franco Fichtner
3983919a02 interfaces: slurp wlan devices into available devs
This is required for FreeBSD 11.0.
2016-11-29 18:45:07 +00:00
Franco Fichtner
ae4e38bcb3 ldap: auth containers are not appended to base dn
Still need to fix the help text in the server settings.
2016-11-29 18:36:09 +01:00
Franco Fichtner
d870e03d95 radvd: match running metric with how its handled underneath
We checked for IPs, but the code runs the service in all cases.
2016-11-29 18:35:20 +01:00
Franco Fichtner
88aab655a4 rc: further boot rework 2016-11-29 08:06:07 +01:00
Franco Fichtner
b234d36f9e ldap: further tweaks according to user feedback
Puts LDAP back in into its supposed working state.
2016-11-29 07:47:23 +01:00
Fabian Franz
340da9725c translation fix in services_ntpd_pps.php 2016-11-28 19:06:11 +01:00
Franco Fichtner
b8a33bc8a4 pkg: fix plist 2016-11-28 19:02:46 +01:00
Franco Fichtner
bd2d28c622 auth: tweak previous, hide implementation details; closes #1282 2016-11-28 19:02:23 +01:00
pioorg
2a025de404 Improved password hashes.
Replaced crypt($password, '$6$') with password_hash and password_verify in order to produce salted hashes from passwords.
2016-11-28 18:17:15 +01:00
Franco Fichtner
d4fe7fbc71 rc: more $verbose conversion 2016-11-28 15:53:49 +01:00
Ad Schellevis
6162649447 (mvc) routing, switch to new routing, deduplicates code.... 2016-11-28 15:17:13 +01:00
Ad Schellevis
a81aab8956 (mvc) add separate class for ui/api routing, adds functionality to map thirth party controllers on the same module level as OPNsense components 2016-11-28 15:11:28 +01:00
Franco Fichtner
7c65a076d6 rc: remove cruft, it's gone out of style
See: https://github.com/pfsense/pfsense/commit/e93db4a1f8e
2016-11-28 14:04:26 +01:00
Franco Fichtner
68739fbbb7 system: q.e.d. previous 2016-11-28 09:45:35 +01:00
Franco Fichtner
8b6d43f5f3 system: console setup is rocket science... 2016-11-28 09:43:55 +01:00
Franco Fichtner
e21aa229e4 system: move VGA to top so it defaults to the default 2016-11-28 09:39:50 +01:00
Franco Fichtner
fbfb00191b system: refactor previous for single kldload spot 2016-11-28 09:34:47 +01:00
Franco Fichtner
af8e12f550 system: another logic fail :) 2016-11-28 09:30:27 +01:00
Franco Fichtner
6b0b2569cd system: make sure vital kernel modules are loaded and refactor
This partially reverts commit 8ecaf5f9102e329f6163ddc16f84647040d53485.
2016-11-28 09:21:17 +01:00
Franco Fichtner
7e4c3cf76e system: logic error on previous 2016-11-28 07:12:26 +01:00
Franco Fichtner
d28b79a90d system: improve writing etc/ttys even more to disable virtual 2016-11-28 07:08:20 +01:00
Ad Schellevis
1b442b8e48 (proxy, remote acl's) add option to disable cert validation, closes https://github.com/opnsense/core/issues/1271 2016-11-27 15:11:10 +01:00
Franco Fichtner
9bc6342fa5 system: disable tty completely 2016-11-26 13:39:21 +01:00
Franco Fichtner
6b19b43646 system: typo in previous 2016-11-26 13:33:25 +01:00
Franco Fichtner
a7fbf99b62 system: disable all boot loader output for nullconsole usage 2016-11-26 13:31:53 +01:00
Franco Fichtner
85e6220415 system: deprecate 'enableserial' and refactor a bit
We don't need the flag anymore, it must be set through primary or
secondary console explicitly.
2016-11-26 13:09:32 +01:00