12842 Commits

Author SHA1 Message Date
Ad Schellevis
cfb84fe8e9 Add audit log target and move related syslog messages (https://github.com/opnsense/core/issues/4925)
o add new "audit" log target
o move user auth log entries into the new scope
o send config changes to audit log including message if provided
o add messages in user and group administration
2021-04-19 18:04:35 +02:00
Franco Fichtner
253a888c26 installer: remove fluff 2021-04-19 14:19:04 +02:00
Greelan
19af1dc369
webgui: clarify help text for firewall rules traffic direction (#4848) 2021-04-19 13:51:22 +02:00
Ad Schellevis
65637ce15a phalcon 4, missed another Syslog for https://github.com/opnsense/core/issues/4012 2021-04-18 17:10:23 +02:00
Ad Schellevis
001325988c missed some small spots in https://github.com/opnsense/core/issues/4012
o one syslog unwrapped
o testsuite return class path missing
2021-04-18 17:04:34 +02:00
Franco Fichtner
e70427d9de system: leave an audit comment 2021-04-15 12:24:37 +02:00
Franco Fichtner
8bf56bf837 src: PHP error in Phalcon port
Fatal error: Declaration of OPNsense\Base\ViewTranslator::query($translateKey, array $placeholders = Array): string must be compatible with Phalcon\Translate\Adapter\Gettext::query($index, $placeholders = NULL) in /usr/core/src/opnsense/mvc/app/library/OPNsense/Base/ViewTranslator.php on line 45
2021-04-15 11:46:16 +02:00
Franco Fichtner
3a98ebb22f
Phalcon 4 migration (#4921)
phalcon 4 migration  #4012

o replace Phalcon\Session\Adapter\Files with new Phalcon\Session\Adapter\Stream adapter
o replace router->setUriSource() with handle() parameter
o combining sessions between phalcon and legacy php seems to be a bit problematic, first issue seems to be the legacy csrf check. refactor to use phalcon's method and legacy session
o Fix Phalcon Syslog usage in ControllerRoot (wrap in Logger class)
o session seems to miss standard prefix.
o also Gettext seems to like being wrapped...
o Gettext inheritance
o another handle()
o Volt: handle registerEngines / VoltEngine changes
o volt templates - missing session reference, bootstrap in ControllerBase
o router getRewriteUri() deprecated
o another handle() in index.php
o  Phalcon\Dispatcher::EXCEPTION_* moved to  Phalcon\Dispatcher\Exception::EXCEPTION_*
o changes in filter handling.
o fix plist
o Syslog usage changes
o refactor Validation changes
o FILTER_ALNUM - replaced FILTER_ALPHANUM
2021-04-15 11:36:57 +02:00
Franco Fichtner
cefe1069e4 installer: ok, one more ;) 2021-04-14 20:15:55 +02:00
Ad Schellevis
8d245d6d13 ipsec: fix php warning:
PHP Warning:  min(): Array must contain at least one element in /usr/local/etc/inc/plugins.inc.d/ipsec.inc on line 534
2021-04-14 13:19:59 +02:00
Franco Fichtner
161523247e installer: avoid padding to make this look fresh 2021-04-14 08:55:02 +02:00
Franco Fichtner
f9dd232a39 installer: remove old workaround 2021-04-13 15:01:30 +02:00
Franco Fichtner
55e4e45dac installer: no longer requires this 2021-04-13 14:06:18 +02:00
Franco Fichtner
3f3ebd9687 system: also pick up root user 2021-04-13 14:03:36 +02:00
Franco Fichtner
e8832a22fa rc: another zfs requirement for arm64 2021-04-13 13:34:36 +02:00
Franco Fichtner
95bfea65d0 rc: attempt to create /tmp if it does not exist 2021-04-13 12:07:06 +02:00
Franco Fichtner
a08b8ec72b installer: switch installer package 2021-04-13 09:35:28 +02:00
Franco Fichtner
10ea353bb5 filter: nop bweteen prints 2021-04-12 14:25:13 +02:00
Franco Fichtner
4fcc752721 system: CORE_SERIES is more accurate than CORE_ABI 2021-04-12 08:44:45 +02:00
kulikov-a
f6c0fa88d1
download_blacklists.py: match whole entry (#4915)
-match the entire string to prevent url entries
-add to skip stat if not match
2021-04-11 20:15:39 +02:00
kulikov-a
a76068beec
fw_log.volt: deffer url parsing (#4913) 2021-04-11 11:09:53 +02:00
Franco Fichtner
0f3fcd2b05 firmware: simplify for previous #4906 2021-04-09 14:28:05 +02:00
Franco Fichtner
35217ba0d1 firmware: if upstream package is missing complain; closes #4906
This points to a configuration error that should be resolved one
way or another.
2021-04-09 14:18:26 +02:00
Franco Fichtner
7d7aaa633d firmware: separate error for "forbidden" #4906 2021-04-09 14:06:27 +02:00
Franco Fichtner
61ca8a7b68 pkg: add series and nickname to metadata 2021-04-09 08:56:46 +02:00
Franco Fichtner
26c8fbb267 pkg: fix plist 2021-04-08 17:16:46 +02:00
Ad Schellevis
361e336d3e Merge branch 'kulikov-a-lvtemplates' 2021-04-08 17:14:38 +02:00
Ad Schellevis
a785f71755 Firewall / Log Files / Live - refactor https://github.com/opnsense/core/pull/4902 a bit 2021-04-08 17:13:55 +02:00
Franco Fichtner
6658b92911 system: sort system_sysctl_get() output; closes #4907 2021-04-08 16:43:12 +02:00
Franco Fichtner
26c9ca7d08 rc: reverse list on stop action
Suggested by:	David Mora
PR:		https://github.com/opnsense/core/pull/4891
2021-04-08 16:43:12 +02:00
Franco Fichtner
bdb32652fb firmwre: make this clearer
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well.  Need to think about it.
2021-04-08 16:43:12 +02:00
Franco Fichtner
aa56b3e45a system: reorder settings to let tunables override all 2021-04-08 16:43:12 +02:00
Ad Schellevis
f538c08065 unbound / blacklists: cleanse domain input. change regex in https://github.com/opnsense/core/issues/4898 per suggestion @kulikov-a 2021-04-08 16:43:12 +02:00
Franco Fichtner
d3063a2017 openvpn: remove OpenSSL engine support #4896 2021-04-08 16:43:12 +02:00
Franco Fichtner
cf8d1d045f system: sort system_sysctl_get() output; closes #4907 2021-04-08 12:24:01 +02:00
Franco Fichtner
7316071974 rc: reverse list on stop action
Suggested by:	David Mora
PR:		https://github.com/opnsense/core/pull/4891
2021-04-07 14:50:04 +02:00
Franco Fichtner
2fe4de6819 firmwre: make this clearer
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well.  Need to think about it.
2021-04-07 12:07:32 +02:00
Franco Fichtner
c0a1fd321d system: reorder settings to let tunables override all 2021-04-07 12:06:34 +02:00
Ad Schellevis
565688cb4a unbound / blacklists: cleanse domain input. change regex in https://github.com/opnsense/core/issues/4898 per suggestion @kulikov-a 2021-04-06 11:22:08 +02:00
kulikov-a
90a4199e28
dialogTemplate.xml: dialog form 2021-04-06 12:03:18 +03:00
Franco Fichtner
d17e70b39b openvpn: remove OpenSSL engine support #4896 2021-04-06 10:02:52 +02:00
kulikov-a
8e8f87a15d
live view templates model 2021-04-06 11:00:21 +03:00
kulikov-a
903ba88fc7
live view templates model 2021-04-06 10:59:21 +03:00
kulikov-a
614c9fda8f
live view templates gui controller 2021-04-06 10:57:58 +03:00
kulikov-a
de4f483f7f
LvtemplatesController.php: live view templates 2021-04-06 10:56:28 +03:00
kulikov-a
7d66c4bf9b
fw_log.volt: add filter templates 2021-04-06 10:42:05 +03:00
Franco Fichtner
6c96038ced system: remove /dev/crypto GUI support #4896 2021-04-06 07:08:58 +02:00
Ad Schellevis
31a0c40e3f unbound / blacklists: cleanse domain input. closes https://github.com/opnsense/core/issues/4898
o while here, add missing import as well
2021-04-02 19:23:10 +02:00
Maurice Walker
0b9a778069
NPTv6 configuration clean-up (#4894)
* NPTv6 rule edit clean-up
Internal and external prefix length must be the same. Remove dstmask input and use srcmsk for source and destination.
"Invert" doesn't work for NPTv6. Remove.
Rephrase text to avoid confusion and match terminology used in firewall_nat_npt.php (Internal / External vs. Source / Destination).
* NPTv6 rule overview style fix
Uppercase for consistency.
2021-04-04 14:00:21 +02:00
Franco Fichtner
af587e812a make: also whitespace issue 2021-04-01 14:27:17 +02:00