BSD Commit Log Search

system: add webgui PAM config to test with opnsense-login

system: prevent installer user from loggin in

This works in testing, but opnsense-login doesn't agree
at first glance.  Need to see why.

bootgrid: only schedule dimension changes after data processing, window resizing and table visibility changes

The height recalculation scheduled on renderComplete was too aggressive,
since Tabulator emits that event while virtual rows are rendered during scrolling.
Also prevent setHeight() from running mid-scroll at all times.

This commit fixes the visual glitch of resetting scroll positions introduced
by https://github.com/opnsense/core/commit/050f3c8277

(cherry picked from commit 6e3cda346c858d0b070b77439bdd322d6a0db7c1)

system: prevent installer user from loggin in

This works in testing, but opnsense-login doesn't agree
at first glance.  Need to see why.

system: not sure if the lock is even necessary

system: bring installer remove code closer together actually

livemode script is unconditional before login prompt so we can
do the proper cleanup at the last possible point in time.

system: switch password hashing from bcrypt to argon2id

A bit unfortunate both spots exist, but maybe that can change later on.

system: fix and reindent previous

system: make the installer user a real user

This allows the installer to use authenticated integration
and SSH keys as a root overlay.

bootgrid: only schedule dimension changes after data processing, window resizing and table visibility changes

The height recalculation scheduled on renderComplete was too aggressive,
since Tabulator emits that event while virtual rows are rendered during scrolling.
Also prevent setHeight() from running mid-scroll at all times.

This commit fixes the visual glitch of resetting scroll positions introduced
by https://github.com/opnsense/core/commit/050f3c8277

firewall: add private network exclusions to default IPv6 bogons (#10125)

Allows ULA and link-local access on new systems where
the bogons haven't been updated yet.

(cherry picked from commit 14ce4ca943630136194aaf8bd4e28bd562f91cff)

firewall: add private network exclusions to default IPv6 bogons (#10125)

Allows ULA and link-local access on new systems where
the bogons haven't been updated yet.

Auth/TOTP - stricten compare operator in authTOTP()

(cherry picked from commit 02932241d0e1284e4d220861f93f98356add28df)

interfaces: remove stray loopback queue introduced in 1f34fdeb68e2

The original idea was to have a separate loopback queue but that
does not seem necessary.  Remove the assignment again, because
otherwise the queue would be implicity late and not early as before.

interfaces: fix API ACL patters for GIF/GRE; closes #10871

(cherry picked from commit ee367f5a73a7d1d541f094647a350badafbb613e)

interfaces: remove cua matching from PPP device pattern

cua is a parent dev node and it has nothing to do with the
PPP device itself.  We do not need to match it here.

interfaces: refactor device matching around interface_parent_devices()

While here, remove $as_interface as there is no caller left.

interfaces: fix API ACL patters for GIF/GRE; closes #10871

Auth/TOTP - stricten compare operator in authTOTP()

interfaces: make sure to set default IPv6 on lo0 as well #10866

interfaces: add interfaces_vlan_match() to avoid future mistakes

interfaces: minor flow tweak on intefaces_ppps_hardware()

Revert "firewall: fix loopback address in private defintions; closes #10694"

This reverts commit 9bac2b8a75f3f218e252a1ca2092c2566291790f.

Since we want to get rid of treating loopback as private and push it to
bogons and this was already broken do not try to repair it.

firewall: remove handling looback addresses as "private"

Loopbacks are not "private" in the traditional sense and will be handled
by bogons in the near future to more closely align with the upstream bogon
source.

bootgrid: ensure a minimum amount of rows to render

This is a continuation of https://github.com/opnsense/core/pull/10408

(cherry picked from commit 87cb2d055dd0cb7e07ab30e8656c020a82803a91)

 interfaces: a few config_read_array() replacements

(cherry picked from commit e83d8e89ee43c0bc9d7c38e118746fc16ec78cd2)

openvpn: remove legacy carp hook

(cherry picked from commit e65b15173d1bb38d19e43644f80214451bb55c12)
(cherry picked from commit a41cc16182e7d7c363e6c04f0972968636f4d927)

Interfaces: split media and mediaopt with tabs instead of spaces as spaces may exist in the actual output.

(cherry picked from commit d740eecdbfe0e39beccd771e704f28f9493e84f1)

Interfaces: Wireless: Devices - Migrate to MVC code

PR: https://github.com/opnsense/core/issues/10751

(cherry picked from commit 11012eb422fe79cce8330047d41af9a30226dbbc)
(cherry picked from commit c73d57e951df985b97a74584be7e39ce9d0b4f2d)
(cherry picked from commit be882cccd6402a777abf1a90f46700811243b878)
(cherry picked from commit 6d98acdf17b8a0084f232d9d22416452ab2549c1)
(cherry picked from commit f1fc5b52b8667ace862b00bfd1936f47a0c903e9)
(cherry picked from commit 2316c28614fcbc3f773ef421610478890d68d345)
(cherry picked from commit ec11fdfb1a26b13c0680500ad146e9e4d1ca425c)
(cherry picked from commit 84b73b7f5849934ca12d1617a9ba1f3c89921866)
(cherry picked from commit 6a9a65e4487116bc5f7e8b331167bedc1874ed3e)
(cherry picked from commit 7c8391fa63c9b2d3e08df91c8cfee4455514436b)
(cherry picked from commit dedee819025ca63555be32e879996a8f1370aa01)
(cherry picked from commit 7fb3708e9e884e5cbb3dfaa1115957beb20063d4)
(cherry picked from commit 593004be7e1db7ce52145f5c2215c995175ae181)
(cherry picked from commit 7cd941d20c621ec5e3e561e5f24f8ab76f8bf3fe)
(cherry picked from commit aad415fa33580189090f925c62cd306af5bb7579)

    [2 lines not shown]

interfaces: style