151 Commits (e155cea91fcd83b39287c3309ff8fc9a522c1653)

Author	SHA1	Message	Date
Sipwise Jenkins Builder	a903f0c968	Release new version 12.2.0.0+0~mr12.2.0.0	3 years ago
Sipwise Jenkins Builder	96f6961060	Release new version 12.1.0.0+0~mr12.1.0.0	3 years ago
Guillem Jover	cc5a0937c9	MT#58356 Update packaging for bookworm ... - Add Rules-Requires-Root field. - Switch to Standards-Version 4.6.2. - Update copyright years. Change-Id: I2aeb804a0268218cd307a61d7e9ba697b930156d	3 years ago
Sipwise Jenkins Builder	52ec3078b4	Release new version 12.0.1.0+0~mr12.0.1.0	3 years ago
Sipwise Jenkins Builder	dbc0d974c8	Release new version 11.5.0.0+0~mr11.5.0.0	3 years ago
Sipwise Jenkins Builder	274133b957	Release new version 11.4.0.0+0~mr11.4.0.0	3 years ago
Sipwise Jenkins Builder	45c3e1a806	Release new version 11.3.0.0+0~mr11.3.0.0	4 years ago
Sipwise Jenkins Builder	4cf86cdb52	Release new version 11.2.0.0+0~mr11.2.0.0	4 years ago
Sipwise Jenkins Builder	5326c63dd7	Release new version 11.1.0.0+0~mr11.1.0.0	4 years ago
Sipwise Jenkins Builder	ee38fbf611	Release new version 11.0.0.0+0~mr11.0.0.0	4 years ago
Sipwise Jenkins Builder	076bfd6140	Release new version 10.5.0.0+0~mr10.5.0.0	4 years ago
Sipwise Jenkins Builder	2bf839bbcc	Release new version 10.4.0.0+0~mr10.4.0.0	5 years ago
Mykola Malkov	5896ce4670	TT#154255 Remove redis dependency from unit file ... We are migrating from redis to keydb so for now we need to support both so we should not depend on specific key-value storage in unit file but should use database.key_value.flavor value in override file. But we can't redefine dependencies in override file just add additional ones. So remove it from unit file. Change-Id: I16e94e938bd9f1da14e1068bc6b94485b08a4ca5	5 years ago
Sipwise Jenkins Builder	f31b937539	Release new version 10.3.0.0+0~mr10.3.0.0	5 years ago
Guillem Jover	22d33bc9db	TT#124273 Update packaging for bullseye ... - Switch to debhelper compat level 13. - Switch to Standards-Version 4.5.1. - Update copyright years. Change-Id: I9938e387bd86a1b80fcd23c20b95732537e42ba8	5 years ago
Sipwise Jenkins Builder	7079f957a8	Release new version 10.2.0.0+0~mr10.2.0.0	5 years ago
Sipwise Jenkins Builder	8681a491a7	Release new version 10.1.0.0+0~mr10.1.0.0	5 years ago
Sipwise Jenkins Builder	3edd5aa819	Release new version 10.0.0.0+0~mr10.0.0.0	5 years ago
Sipwise Jenkins Builder	807f53ac51	Release new version 9.5.0.0+0~mr9.5.0.0	5 years ago
Sipwise Jenkins Builder	95ab768304	Release new version 9.4.0.0+0~mr9.4.0.0	6 years ago
Michael Prokop	0cbeddf0a2	TT#110904 TT#76552 Fix systemd hardening for rand() access ... We need readonly access to /dev/urandom, otherwise the rand() calls might fail, as seen in kamailio-config-tests. Change-Id: Id132191994ae5fe74ec3ebb7d34a4a5d50769dbc Thanks: Victor Seva for reporting	6 years ago
Michael Prokop	fa565ef32c	TT#110904 TT#76552 Fix systemd hardening for carrier environments ... In carrier environments we have foreign DB hosts configured in /etc/ngcp-mediator/ngcp-mediator.conf, therefore we can't easily apply IP address filtering. JFTR, new and current systemd hardening state for ngcp-mediator: | $ sudo COLUMNS=142 systemd-analyze security ngcp-mediator | grep -v '✓' | NAME DESCRIPTION EXPOSURE | ✗ PrivateNetwork= Service has access to the host's … 0.5 | ✗ User=/DynamicUser= Service runs as root user 0.4 | ✗ RestrictAddressFamilies=~AF_(INET… Service may allocate Internet soc… 0.3 | ✗ RestrictAddressFamilies=~… Service may allocate exotic socke… 0.3 | ✗ DeviceAllow= Service has a device ACL with som… 0.1 | ✗ IPAddressDeny= Service does not define an IP add… 0.2 | ✗ RestrictAddressFamilies=~AF_PACKET Service may allocate packet socke… 0.2 | ✗ SystemCallFilter=~@privileged System call whitelist defined for… 0.2 | ✗ RestrictAddressFamilies=~AF_NETLI… Service may allocate netlink sock… 0.1 | ✗ RootDirectory=/RootImage= Service runs within the host's ro… 0.1 | SupplementaryGroups= Service runs as root, option does… | RemoveIPC= Service runs as root, option does… | ✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1 | | → Overall exposure level for ngcp-mediator.service: 2.1 OK 🙂 Change-Id: I0e7c474eddd5d4d4c77b9bda157448294ed0a5c4	6 years ago
Michael Prokop	29cf8436b8	TT#76552 Harden ngcp-mediator service ... ngcp-mediator service state BEFORE this change: | $ systemd-analyze security ngcp-mediator | tail -1 | → Overall exposure level for ngcp-mediator.service: 9.5 UNSAFE 😨 ngcp-mediator service state AFTER this change: | $ sudo COLUMNS=142 systemd-analyze security ngcp-mediator | grep -v '✓' | NAME DESCRIPTION EXPOSURE | ✗ PrivateNetwork= Service has access to the host's network 0.5 | ✗ User=/DynamicUser= Service runs as root user 0.4 | ✗ RestrictAddressFamilies=~AF_(INET|INET6) Service may allocate Internet sockets 0.3 | ✗ RestrictAddressFamilies=~… Service may allocate exotic sockets 0.3 | ✗ DeviceAllow= Service has a device ACL with some special devices 0.1 | ✗ IPAddressDeny= Service defines IP address whitelits with only localhost entries 0.1 | ✗ RestrictAddressFamilies=~AF_PACKET Service may allocate packet sockets 0.2 | ✗ SystemCallFilter=~@privileged System call whitelist defined for service, and @privileged is included 0.2 | ✗ RestrictAddressFamilies=~AF_NETLINK Service may allocate netlink sockets 0.1 | ✗ RootDirectory=/RootImage= Service runs within the host's root directory 0.1 | SupplementaryGroups= Service runs as root, option does not matter | RemoveIPC= Service runs as root, option does not apply | ✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1 | | → Overall exposure level for ngcp-mediator.service: 2.0 OK 🙂 Change-Id: If33c303b9df465393f15c0b685d1aab54a465df6	6 years ago
Sipwise Jenkins Builder	6adedfa95f	Release new version 9.3.0.0+0~mr9.3.0.0	6 years ago
Sipwise Jenkins Builder	3ecc47f72e	Release new version 9.2.0.0+0~mr9.2.0.0	6 years ago
Sipwise Jenkins Builder	6e025352f5	Release new version 9.1.0.0+0~mr9.1.0.0	6 years ago
Sipwise Jenkins Builder	de07b98dfe	Release new version 9.0.0.0+0~mr9.0.0.0	6 years ago
Sipwise Jenkins Builder	a29d4ac6fa	Release new version 8.6.0.0+0~mr8.6.0.0	6 years ago
Sipwise Jenkins Builder	358ce4fea6	Release new version 8.5.0.0+0~mr8.5.0.0	6 years ago
Sipwise Jenkins Builder	65cf58705c	Release new version 8.4.0.0+0~mr8.4.0.0	6 years ago
Sipwise Jenkins Builder	1fda50b57c	Release new version 8.3.0.0+0~mr8.3.0.0	7 years ago
Sipwise Jenkins Builder	7fffed14db	Release new version 8.2.0.0+0~mr8.2.0.0	7 years ago
Sipwise Jenkins Builder	7904253051	Release new version 8.1.0.0+0~mr8.1.0.0	7 years ago
Sipwise Jenkins Builder	c854814e9c	Release new version 8.0.0.0+0~mr8.0.0.0	7 years ago
Guillem Jover	6dd2cbb121	TT#61954 Set debhelper compat level in Build-Depends instead of debian/compat ... Change-Id: I3eb126cad7dad217d1b6d37d1cbf5d25b6af8418	7 years ago
Guillem Jover	a1e9a99e83	TT#61954 Update copyright years ... Change-Id: I13e83a56a7a6962296ceeb40fb79a20e3bac29aa	7 years ago
Sipwise Jenkins Builder	5319efc17f	Release new version 7.5.0.0+0~mr7.5.0.0	7 years ago
Sipwise Jenkins Builder	55fa4f3743	Release new version 7.4.0.0+0~mr7.4.0.0	7 years ago
Michael Prokop	ba5da32f2a	TT#55204 Support building against mariadb 10.3.13 ... Instead of hardcoding -I/usr/include/mysql for CFLAGS and -lmysqlclient for LDFLAGS, let's use mariadb_config if available (e.g. on Debian/buster), try mysql_config otherwise (e.g. on Debian/stretch) or if neither of them is available, fallback to -I/usr/include/mysql + -lmysqlclient. No longer include `m_string.h`, it was moved towards /usr/include/mariadb/server/m_string.h and is no longer compatible when used as such: | /usr/include/mariadb/server/m_string.h:89:23: error: unknown type name 'uchar'; did you mean 'char'? | extern void bmove_upp(uchar *dst,const uchar *src,size_t len); Also no longer use libmysqlclient15-dev as alternative Build-Depend, it's not available in neither stretch nor buster. While at it drop include for my_global.h, since it shouldn't be included anymore (and it doesn't seem to be relevant for us, compiling fine as-is on Debian/stretch and Debian/buster): | /usr/include/mariadb/my_global.h:3:2: warning: #warning This file should not be included by clients, include only <mysql.h> [-Wcpp] Change-Id: I74a75ea24f72880adb8117ae5808095f03bc0edb	8 years ago
Sipwise Jenkins Builder	3c9053bb2a	Release new version 7.3.0.0+0~mr7.3.0.0	8 years ago
Guillem Jover	d7c6a436f3	TT#49150 Namespace binary name with ngcp- ... Change-Id: I317987620a78f3f7f144c17411c96db7c18e252c	8 years ago
Sipwise Jenkins Builder	55e32ef6a6	Release new version 7.2.0.0+0~mr7.2.0.0	8 years ago
Sipwise Jenkins Builder	5eea805f6c	Release new version 7.1.0.0+0~mr7.1.0.0	8 years ago
Sipwise Jenkins Builder	1b7473949d	Release new version 7.0.0.0+0~mr7.0.0.0	8 years ago
Guillem Jover	4818ac6389	TT#42910 Add systemd notify support ... Change-Id: I06782e6415027eb3fa720e34bdba25ec1d44efd2	8 years ago
Sipwise Jenkins Builder	3e80aca320	Release new version 6.5.0.0+0~mr6.5.0.0	8 years ago
Sipwise Jenkins Builder	817adc052e	Release new version 6.4.0.0+0~mr6.4.0.0	8 years ago
Guillem Jover	979da5e7e7	TT#26264 Remove obsolete rc.d symlinks ... We removed the init script, let's cleanup fully. Change-Id: I2db4d3fb1e9ffb455a59d25815aa456f0cde3449	8 years ago
Alexander Lutay	0e71eb8e30	TT#35502 Replace Requires=mysql.service with Wants=mariadb.service for ngcp-mediator.service ... Is service B "Requires" service A to be started before B and B does NOT require B restart on A restart, B should use "Wants=A". Also using real service name mariadb.service instead of alias one. The same for redis-server.service. Also migrate from alias mysql.service to mariadb.service. Change-Id: I94276a8647053646abd545e4d5b768b284b8a652	8 years ago
Guillem Jover	c3040939cc	TT#26264 Remove obsolete init script ... Replace old default file to a proper config file. Namespace all package specific debhelper files. Change-Id: I85b92f99b00298f214f2305447d181c5f5432d86	8 years ago