Ad Schellevis
cfb84fe8e9
Add audit log target and move related syslog messages ( https://github.com/opnsense/core/issues/4925 )
...
o add new "audit" log target
o move user auth log entries into the new scope
o send config changes to audit log including message if provided
o add messages in user and group administration
2021-04-19 18:04:35 +02:00
Franco Fichtner
253a888c26
installer: remove fluff
2021-04-19 14:19:04 +02:00
Greelan
19af1dc369
webgui: clarify help text for firewall rules traffic direction ( #4848 )
2021-04-19 13:51:22 +02:00
Ad Schellevis
65637ce15a
phalcon 4, missed another Syslog for https://github.com/opnsense/core/issues/4012
2021-04-18 17:10:23 +02:00
Ad Schellevis
001325988c
missed some small spots in https://github.com/opnsense/core/issues/4012
...
o one syslog unwrapped
o testsuite return class path missing
2021-04-18 17:04:34 +02:00
Franco Fichtner
e70427d9de
system: leave an audit comment
2021-04-15 12:24:37 +02:00
Franco Fichtner
8bf56bf837
src: PHP error in Phalcon port
...
Fatal error: Declaration of OPNsense\Base\ViewTranslator::query($translateKey, array $placeholders = Array): string must be compatible with Phalcon\Translate\Adapter\Gettext::query($index, $placeholders = NULL) in /usr/core/src/opnsense/mvc/app/library/OPNsense/Base/ViewTranslator.php on line 45
2021-04-15 11:46:16 +02:00
Franco Fichtner
3a98ebb22f
Phalcon 4 migration ( #4921 )
...
phalcon 4 migration #4012
o replace Phalcon\Session\Adapter\Files with new Phalcon\Session\Adapter\Stream adapter
o replace router->setUriSource() with handle() parameter
o combining sessions between phalcon and legacy php seems to be a bit problematic, first issue seems to be the legacy csrf check. refactor to use phalcon's method and legacy session
o Fix Phalcon Syslog usage in ControllerRoot (wrap in Logger class)
o session seems to miss standard prefix.
o also Gettext seems to like being wrapped...
o Gettext inheritance
o another handle()
o Volt: handle registerEngines / VoltEngine changes
o volt templates - missing session reference, bootstrap in ControllerBase
o router getRewriteUri() deprecated
o another handle() in index.php
o Phalcon\Dispatcher::EXCEPTION_* moved to Phalcon\Dispatcher\Exception::EXCEPTION_*
o changes in filter handling.
o fix plist
o Syslog usage changes
o refactor Validation changes
o FILTER_ALNUM - replaced FILTER_ALPHANUM
2021-04-15 11:36:57 +02:00
Franco Fichtner
cefe1069e4
installer: ok, one more ;)
2021-04-14 20:15:55 +02:00
Ad Schellevis
8d245d6d13
ipsec: fix php warning:
...
PHP Warning: min(): Array must contain at least one element in /usr/local/etc/inc/plugins.inc.d/ipsec.inc on line 534
2021-04-14 13:19:59 +02:00
Franco Fichtner
161523247e
installer: avoid padding to make this look fresh
2021-04-14 08:55:02 +02:00
Franco Fichtner
f9dd232a39
installer: remove old workaround
2021-04-13 15:01:30 +02:00
Franco Fichtner
55e4e45dac
installer: no longer requires this
2021-04-13 14:06:18 +02:00
Franco Fichtner
3f3ebd9687
system: also pick up root user
2021-04-13 14:03:36 +02:00
Franco Fichtner
e8832a22fa
rc: another zfs requirement for arm64
2021-04-13 13:34:36 +02:00
Franco Fichtner
95bfea65d0
rc: attempt to create /tmp if it does not exist
2021-04-13 12:07:06 +02:00
Franco Fichtner
a08b8ec72b
installer: switch installer package
2021-04-13 09:35:28 +02:00
Franco Fichtner
10ea353bb5
filter: nop bweteen prints
2021-04-12 14:25:13 +02:00
Franco Fichtner
4fcc752721
system: CORE_SERIES is more accurate than CORE_ABI
2021-04-12 08:44:45 +02:00
kulikov-a
f6c0fa88d1
download_blacklists.py: match whole entry ( #4915 )
...
-match the entire string to prevent url entries
-add to skip stat if not match
2021-04-11 20:15:39 +02:00
kulikov-a
a76068beec
fw_log.volt: deffer url parsing ( #4913 )
2021-04-11 11:09:53 +02:00
Franco Fichtner
0f3fcd2b05
firmware: simplify for previous #4906
2021-04-09 14:28:05 +02:00
Franco Fichtner
35217ba0d1
firmware: if upstream package is missing complain; closes #4906
...
This points to a configuration error that should be resolved one
way or another.
2021-04-09 14:18:26 +02:00
Franco Fichtner
7d7aaa633d
firmware: separate error for "forbidden" #4906
2021-04-09 14:06:27 +02:00
Franco Fichtner
61ca8a7b68
pkg: add series and nickname to metadata
2021-04-09 08:56:46 +02:00
Franco Fichtner
26c8fbb267
pkg: fix plist
2021-04-08 17:16:46 +02:00
Ad Schellevis
361e336d3e
Merge branch 'kulikov-a-lvtemplates'
2021-04-08 17:14:38 +02:00
Ad Schellevis
a785f71755
Firewall / Log Files / Live - refactor https://github.com/opnsense/core/pull/4902 a bit
2021-04-08 17:13:55 +02:00
Franco Fichtner
6658b92911
system: sort system_sysctl_get() output; closes #4907
2021-04-08 16:43:12 +02:00
Franco Fichtner
26c9ca7d08
rc: reverse list on stop action
...
Suggested by: David Mora
PR: https://github.com/opnsense/core/pull/4891
2021-04-08 16:43:12 +02:00
Franco Fichtner
bdb32652fb
firmwre: make this clearer
...
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well. Need to think about it.
2021-04-08 16:43:12 +02:00
Franco Fichtner
aa56b3e45a
system: reorder settings to let tunables override all
2021-04-08 16:43:12 +02:00
Ad Schellevis
f538c08065
unbound / blacklists: cleanse domain input. change regex in https://github.com/opnsense/core/issues/4898 per suggestion @kulikov-a
2021-04-08 16:43:12 +02:00
Franco Fichtner
d3063a2017
openvpn: remove OpenSSL engine support #4896
2021-04-08 16:43:12 +02:00
Franco Fichtner
cf8d1d045f
system: sort system_sysctl_get() output; closes #4907
2021-04-08 12:24:01 +02:00
Franco Fichtner
7316071974
rc: reverse list on stop action
...
Suggested by: David Mora
PR: https://github.com/opnsense/core/pull/4891
2021-04-07 14:50:04 +02:00
Franco Fichtner
2fe4de6819
firmwre: make this clearer
...
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well. Need to think about it.
2021-04-07 12:07:32 +02:00
Franco Fichtner
c0a1fd321d
system: reorder settings to let tunables override all
2021-04-07 12:06:34 +02:00
Ad Schellevis
565688cb4a
unbound / blacklists: cleanse domain input. change regex in https://github.com/opnsense/core/issues/4898 per suggestion @kulikov-a
2021-04-06 11:22:08 +02:00
kulikov-a
90a4199e28
dialogTemplate.xml: dialog form
2021-04-06 12:03:18 +03:00
Franco Fichtner
d17e70b39b
openvpn: remove OpenSSL engine support #4896
2021-04-06 10:02:52 +02:00
kulikov-a
8e8f87a15d
live view templates model
2021-04-06 11:00:21 +03:00
kulikov-a
903ba88fc7
live view templates model
2021-04-06 10:59:21 +03:00
kulikov-a
614c9fda8f
live view templates gui controller
2021-04-06 10:57:58 +03:00
kulikov-a
de4f483f7f
LvtemplatesController.php: live view templates
2021-04-06 10:56:28 +03:00
kulikov-a
7d66c4bf9b
fw_log.volt: add filter templates
2021-04-06 10:42:05 +03:00
Franco Fichtner
6c96038ced
system: remove /dev/crypto GUI support #4896
2021-04-06 07:08:58 +02:00
Ad Schellevis
31a0c40e3f
unbound / blacklists: cleanse domain input. closes https://github.com/opnsense/core/issues/4898
...
o while here, add missing import as well
2021-04-02 19:23:10 +02:00
Maurice Walker
0b9a778069
NPTv6 configuration clean-up ( #4894 )
...
* NPTv6 rule edit clean-up
Internal and external prefix length must be the same. Remove dstmask input and use srcmsk for source and destination.
"Invert" doesn't work for NPTv6. Remove.
Rephrase text to avoid confusion and match terminology used in firewall_nat_npt.php (Internal / External vs. Source / Destination).
* NPTv6 rule overview style fix
Uppercase for consistency.
2021-04-04 14:00:21 +02:00
Franco Fichtner
af587e812a
make: also whitespace issue
2021-04-01 14:27:17 +02:00