8907 Commits

Author SHA1 Message Date
Franco Fichtner
df5dddaf87 pkg: fix plist 2018-06-04 20:50:25 +00:00
Franco Fichtner
07ef03335a ipsec: style update #2440 2018-06-04 20:49:48 +00:00
Ad Schellevis
a14378c553 css add flags for https://github.com/opnsense/core/issues/1858 2018-06-04 22:19:38 +02:00
Ad Schellevis
a6a4a03724 IDS, typo in stylesheet 2018-06-04 21:40:19 +02:00
Franco Fichtner
c5ed71ad26 interfaces: style for #2440 2018-06-04 12:18:04 +00:00
Franco Fichtner
d621a6882d www: diag pages style #2440 2018-06-04 11:34:13 +00:00
Franco Fichtner
f33f527cf1 system: rework style in remaining pages #2440 2018-06-04 11:20:59 +00:00
Franco Fichtner
e9850d0860 system: configuration section style cleanup #2440 2018-06-03 19:12:04 +00:00
Franco Fichtner
fef90667ca system: authentication page consolidation for #2440 2018-06-03 19:04:36 +00:00
Franco Fichtner
cd7ebecdd3 system: restyle users and groups 2018-06-03 16:43:06 +00:00
Ad Schellevis
b36461e52c Firewall/Util, add isDomain() method using the same logic as in the legacy code base, needed for https://github.com/opnsense/core/issues/1858
We probably could also use filter_var here, but while shifting to new code it's probably better to align the logic to avoid searching for inconsistencies after migration.
2018-06-03 18:32:08 +02:00
Franco Fichtner
333b505094 system: admin priv colouring adjustments
Use "page-all" for showing admin capabilities as user / group
icon in red.  This allows to spot non-root users with full admin
capabilities and also which groups yield this power.  The scope
should only be used for read-only access / deletetion prevention.
2018-06-03 16:14:09 +00:00
Ad Schellevis
b44b48cc2d firewall/alias, wrong item referenced for outbound rules, closes https://github.com/opnsense/core/issues/1711 2018-06-03 18:08:12 +02:00
Franco Fichtner
35f8d6e4ca system: rework slightly, do not use SSH keys on "locked" users 2018-06-03 17:46:35 +02:00
Franco Fichtner
0c287f3ba8 system: regenerate DH parameters 2018-06-03 10:22:56 +02:00
Franco Fichtner
ded0fee3f4 system: mention need to unlock a locked root account
When all actions are privilege-separated we can probably strip
this part again.
2018-06-02 16:58:44 +02:00
Franco Fichtner
e741b9e450 system: unify selectpicker width 2018-06-02 12:38:10 +00:00
Franco Fichtner
0124f1024e system: weekly/monthly settings for DH parameters #2431
Also allow custom schedule.  Not sure if we should have a manual run
or delete.  Best way would be to use a file creation time magic between
our sample and maybe user file.
2018-06-02 12:18:27 +00:00
Franco Fichtner
2092954409 pkg: fix plist 2018-06-02 12:09:28 +00:00
Franco Fichtner
0181d1ddd9 system: userid 0 has trouble with %s, loosely refs #2246 2018-06-02 11:24:57 +00:00
Franco Fichtner
118bedc5df system: disable root, but do not lock it; closes #2246
Set password to unreachable "*" instead.  Our auth framework
already checks for disabled elsewhere.

While here inline two functions that are not used anywhere else.
2018-06-02 11:24:58 +00:00
Ad Schellevis
01409ac623 work in progress for https://github.com/opnsense/core/issues/1858 add AliasContentField type which should eventually combine the different validations for the supported alias types. 2018-06-01 22:14:59 +02:00
Ad Schellevis
a72ea4616d Firewall/Util, missing static in isPort() 2018-06-01 22:05:51 +02:00
Franco Fichtner
ac1e8f17af system: move autocron item to plugin spots, loosely #2431 2018-06-01 17:06:01 +00:00
Franco Fichtner
115f30e8ef system: second part of #2431 2018-06-01 15:22:27 +00:00
Franco Fichtner
d840e9acad system: samplify dh-parameter files #2431 2018-06-01 16:58:34 +02:00
Ad Schellevis
2f247f2f85 pull https://github.com/jeromeetienne/jquery-qrcode/pull/43/files for jquery.qrcode.js 2018-05-31 08:31:29 +02:00
Franco Fichtner
aea5021912 system: style in gateway code 2018-05-30 07:32:39 +02:00
Ad Schellevis
0b6a41dc38 fix typo 2018-05-29 19:19:56 +02:00
Franco Fichtner
ef426e436e system: use uppercase gateway names for compat #2419 2018-05-29 17:03:45 +00:00
Ad Schellevis
230ac3fb4e rework previous, expand <a> to text 2018-05-29 14:42:03 +02:00
Ad Schellevis
d71abdf70b mvc, fix "clear all" for selectpicker types and moving it back to all multi selects 2018-05-29 14:13:31 +02:00
Ad Schellevis
90624a0810 replace some more tokenizers with selectpickers 2018-05-29 14:03:21 +02:00
Ad Schellevis
2282c3f24a MVC, add support for custom separators in select items in both the form fetch code and our standard templates, when specified in the form a data tag separator wil be added, which is used to render the results in getFormData().
In some cases it can be practical if something else then a comma can be used to split fields.

slightly related to https://github.com/opnsense/core/issues/1858.
2018-05-29 11:47:38 +02:00
Franco Fichtner
635640ce4d rc: zfs tools are terrible for scripting 2018-05-28 09:10:20 +02:00
Franco Fichtner
3e94dd72e9 rc: zfs, zpool, confusion 2018-05-28 08:54:17 +02:00
Franco Fichtner
52d55ff5a3 rc: small tweaks 2018-05-28 08:40:57 +02:00
Franco Fichtner
426acedf52 rc: small tweak for clarity 2018-05-28 07:51:15 +02:00
Franco Fichtner
d893558687 rc: ZFS importer bits
For now only trigger on an explicit "zpool" input, because
otherwise we have to load ZFS earlier to probe for a particular
pool.  There is no nice way to list all pools available for
input, at least not in a single, script friendly line per pool.

PR: https://github.com/opnsense/bsdinstaller/issues/12
2018-05-28 07:47:22 +02:00
Franco Fichtner
8b73ce3072 system: HSTS option tweaks 2018-05-28 05:12:31 +00:00
Ad Schellevis
4e0ce9b193 webgui, opt-in for htst, for https://github.com/opnsense/core/issues/1722 2018-05-27 20:01:40 +02:00
Franco Fichtner
64c4a1fa19 openvpn: fix for fix #2422 2018-05-27 11:08:05 +00:00
Franco Fichtner
d210cbfb20 openvpn: improve validation #2422
Since we now have TCP, UDP, TCP4, UDP4, TCP6 and UDP6 validation
is a bit more complicated than it used to.  The former assumptions
about TCP and UDP were wrong anyway, in OpenVPN this means IPv4
and IPv6, not just IPv4.
2018-05-27 12:54:40 +02:00
Franco Fichtner
7d14f2d8ee rc: opnsense-recover is now known as opnsense-shell #1966
Merge the purpose of these scripts now that we can execute other
commands using the shell menu trampoline.
2018-05-27 12:14:04 +02:00
Ad Schellevis
26ee607a31 Traffic shaper, add enabled flag to rules, closes https://github.com/opnsense/core/issues/2426 2018-05-27 11:43:46 +02:00
Robin Schneider
3c73da4d46 Help debugging of Traffic Shaping by generating ipfw comments in rules (#2425)
`ipfw show`:

```
60004  50573  69792852 queue 10000 ip from not 192.168.23.0/24 to any xmit lagg0_vlan2342 recv em0 // wan -> lan: down,75 weight
60005  29657   3088201 queue 10003 ip from any to not 192.168.23.0/24 recv lagg0_vlan2342 xmit em0 // lan -> wan: up,75 weight
```
2018-05-27 11:12:46 +02:00
Franco Fichtner
ac50d3e203 rc: modify the shell even more 2018-05-26 22:28:09 +02:00
Franco Fichtner
15ec336b0f rc: parse '-c', it's passed to the shell by sudo
The funny thing is su -m foobar -c "sh -c '$cmd'" could be as
short as su -m foobar -s /bin/sh -c "$cmd" but why bother selecting
a shell when you need to rely on a proper root shell to be set?
2018-05-26 08:51:05 +00:00
Ad Schellevis
435859a418 missed a small spot for https://github.com/opnsense/core/issues/2348 , it doesn't make sense to remove a non existing file 2018-05-25 17:20:33 +02:00
Ad Schellevis
9d35f17198 openvpn, client specific overrides on --client-connect, it seems that OpenVPN passes the filename for the csc on client-connect in stead of using the default location, should fix https://github.com/opnsense/core/issues/2348 2018-05-25 17:17:16 +02:00