mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
36,295 Commits 27 Branches 53 Tags 494 MiB
0604f68855
Commit Graph

36295 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jim-p
0604f68855 Strengthen path privilege check. Fixes #9513 
* Removes/resolves any relative paths in the submitted URL
* Validates that the file exists
* Trims the path component off after in a nicer way
 2019-05-10 15:28:27 -04:00
jim-p
bc319bc01a Make widget privilege matching more specific. Fixes #9512 2019-05-09 16:39:46 -04:00
jim-p
f75b0eb8e7 Add warning for OpenVPN client, server, and override privileges. 
Since these can use OpenVPN advanced directives to call external
scripts, they can be used to run commands that the user may not
otherwise have access to run.

Issue #9510
 2019-05-09 16:22:21 -04:00
jim-p
ce77c104ee Encode download parameter before use. Fixes #9508 2019-05-09 15:17:35 -04:00
jim-p
5789a02eab Encode descr in the WOL widget. Fixes #9507 2019-05-08 16:44:26 -04:00
jim-p
1af9400d59 Encode output in status_filter_reload.php. Fixes #9499 2019-05-03 15:24:43 -04:00
jim-p
42d32909a1 Init array before use 2019-05-03 09:29:29 -04:00
Renato Botelho
3033533635 Fix #9451: Enable build of zabbix 4.2 2019-04-26 15:17:54 -03:00
Renato Botelho
1b5941ebe0 Remove zabbix 3.2 and 3.4 options 2019-04-26 14:43:52 -03:00
Renato Botelho
92e209a43f Merge pull request #4065 from dbaio/zabbix42 2019-04-26 14:42:21 -03:00
Danilo G. Baio (dbaio)
169754517a Add Zabbix 4.2 config options 2019-04-26 10:31:41 -03:00
Renato Botelho
40a8898b78 Stop building zabbix 3.2 and 3.4 since they will be deprecated from FreeBSD ports tree in few days 2019-04-22 15:49:38 -03:00
jim-p
80e5091856 Update status.php to use ping-auth for pubkey 2019-04-18 16:17:44 -04:00
jim-p
a0930ca608 Fix another typo 2019-04-15 11:12:40 -04:00
jim-p
2309b26a2b status.php updates 
* Ensure firewall info is generated when run from the CLI
* For SG-1100, also include its public key
 2019-04-15 10:59:39 -04:00
jim-p
929cc874f6 Fix typo 2019-04-15 08:05:25 -04:00
Luiz Souza
b094594108 Fix a typo. 
Reported by:	jimt
 2019-04-15 10:53:14 -03:00
jim-p
4b70a2006e Rewrite unbound remotecontrol.conf when it is empty. Fixes #9470 2019-04-11 08:57:11 -04:00
Renato Botelho
503df8f68f Enable Telegraf build on ARMv7 2019-04-11 09:00:31 -03:00
jim-p
78645511ef Revert "Change ovpn_auth_verify_async to php-cgi. Fixes #9460" 
check_reload_status 0.0.10 fixes the original issue, this can go back
the way it was.

This reverts commit ce76f29985.
 2019-04-09 08:15:10 -04:00
jim-p
ce76f29985 Change ovpn_auth_verify_async to php-cgi. Fixes #9460 2019-04-06 00:01:45 -04:00
jim-p
8800ee6f90 Add parens around NAT reflection rule interface. Fixes #9446 2019-04-01 08:29:44 -04:00
Renato Botelho
1f606f11bd Point 2.4.x snaps repo to armv6 2019-03-26 15:35:21 -03:00
Renato Botelho
dc65689aa3 Do now show scheduler icon when scheduler tag is empty 
Spotted by: Oliveira MaisSecurity <oliveira@maissecurity.com.br>
 2019-03-25 10:55:18 -03:00
jim-p
6765f83ae7 Use new/stronger openssl options for crypt_data(). Fixes #9421 
Retry with legacy options if new options fail, so we can still
read old style data from previous encryption runs (e.g. old encrypted
backups, ACB entries, etc)

Better error handling and suppression to prevent issues like #9421.
 2019-03-22 11:21:28 -04:00
jim-p
0939f37f1b Update openssl syntax for crypt_data(). Fixes #9420 2019-03-22 09:25:14 -04:00
jim-p
996a1ad90e LDAP TLS option update. Implements #9417 2019-03-21 15:17:46 -04:00
Luiz Souza
7671193ba9 Use the same regex used in parse_firewall_log_line(). 
No functional changes.
 2019-03-21 11:44:21 -03:00
jim-p
af85efec3a Fix empty log files in the GUI. Fixes #9415 
Two ways they were empty that I found:
* filterlog log entries now have a pid after the process
* CARP/VRRP entries did not set a source and so were not logged

While here, add CARP details to proto field of GUI log view.
 2019-03-20 16:19:57 -04:00
jim-p
f30da999bc Fix CA/Cert search description. Issue #9412 2019-03-19 13:50:34 -04:00
jim-p
dd4fb72cfa Fix bonus closing tag. Issue #9412 2019-03-19 09:25:08 -04:00
jim-p
1497305875 Add sorting and search to CA/Certs. Implements #9412 2019-03-18 16:53:46 -04:00
jim-p
0d82f93b68 Correct OSCP Must-Staple cert check for OpenSSL 1.1.1. Fixes #9408 2019-03-18 12:47:05 -04:00
jim-p
b39d615394 Create /var/crash after creating /var RAM disk. Fixes #9409 2019-03-18 12:44:47 -04:00
Renato Botelho
b7be92c598 Make it possible to fix armv6 -> armv7 config files 2019-03-15 13:15:52 -03:00
jim-p
d36cf2c944 Test modules path before scanning. Fixes #9400 2019-03-15 11:15:38 -04:00
jim-p
7db5a396d3 Enable LDAP for sudo and build nss_ldap. Fixes #9399 2019-03-14 16:33:20 -04:00
Renato Botelho
e078d316d4 Update obsoleted files from FreeBSD 11 -> 12 2019-03-13 16:44:21 -03:00
Renato Botelho
b05d99e2d4 Add missing obsoleted files 2019-03-13 16:34:05 -03:00
jim-p
586c623a94 Deprecate the built-in relayd Load Balancer. Closes #9386 
It is not available on FreeBSD 12 with OpenSSL 1.1.x.

Users can migrate to the HAProxy package.
 2019-03-13 14:13:37 -04:00
Luiz Souza
749dfdb73a Fix the spamming of warnings about ttyv0 not being available on ARM64 devices. 
While here, use a more meaningful name for the function.
 2019-03-13 12:48:47 -03:00
Luiz Souza
91677c0941 Generate hints for the kernel loader. 2019-03-13 12:37:03 -03:00
jim-p
9146639e72 Initialized entries variable before use. Fixes #9359 2019-03-12 16:20:23 -04:00
jim-p
555a9ab5c0 Use only sshguard table for blocking ssh/gui attacks. Issue #9223 2019-03-12 15:46:28 -04:00
jim-p
7a68df5efc Remove unnecessary expiretable cron jobs for ssh/gui lockout. Issue #9223 2019-03-12 15:46:10 -04:00
jim-p
397d9fff6d Remove unnecessary expiretable cron jobs for ssh/gui lockout. Issue #9223 2019-03-12 14:41:55 -04:00
jim-p
4015b03d4b Fix output buffering when downloading config backups. Fixes #9390 2019-03-10 19:43:48 -04:00
Renato Botelho
632f0dbf21 Revert "Remove definitions of conf_mount_r[ow]" 
Leave functions declaration for now to prevent errors during upgrade.

This reverts commit da3ef5a3b3.
 2019-03-06 16:14:17 -03:00
jim-p
1d92575e36 Update SMART status page with more detail/commands. Implements #9367 2019-03-05 17:00:11 -05:00
jim-p
144863e30e Fix more illegal offset errors. Issue #9366 2019-03-05 15:47:16 -05:00