commit c63ca5232f9693b85fdf2ce511560a5563658f14 Author: Arne Fitzenreiter Date: Mon Apr 29 12:40:37 2024 +0200 mympd: update to 14.1.2 This is a small bugfix release. Changelog: Fix: Output enabled state is bool type Fix: Add missing sort parameters to home icon for search Fix: Set default stream port if stream uri is defined Signed-off-by: Arne Fitzenreiter commit 464b2117ead41a2c5f5771665f828e74e3e40f82 Author: Peter Müller Date: Mon Apr 22 16:44:00 2024 +0000 suricata.yaml: Fix Landlock path settings Suricata will complain if it cannot read its own configuration file, hence read-only access to /etc/suricata must be allowed. Since the list applies to directories, rather than files, restricting read access to only /usr/share/misc/magic.mgc is not possible; reading /usr/share/misc must be allowed instead. Fixes: #13645 Tested-by: Peter Müller Signed-off-by: Peter Müller Signed-off-by: Arne Fitzenreiter commit 3358151c85c9c5cecf091da3e612cb0632f9b8c8 Author: Peter Müller Date: Mon Apr 22 16:43:00 2024 +0000 Revert "suricata: Disable Landlock support" This reverts commit b7da97fd59f010ea8fa7bca845d18e52ca89bc5a. Signed-off-by: Arne Fitzenreiter commit 5fea15ef764377bfe658e4a50e34eceb30f236dc Author: Peter Müller Date: Mon Apr 22 16:43:00 2024 +0000 linux: Properly load Landlock module Fixes: #13645 Tested-by: Peter Müller Signed-off-by: Peter Müller Signed-off-by: Arne Fitzenreiter commit eebce7d9a38e4e62754e1a7fdbd8b8e8c526d12d Author: Arne Fitzenreiter Date: Sun Apr 28 21:04:28 2024 +0000 kmod: update rootfile Signed-off-by: Arne Fitzenreiter commit 1ce62197033d039715a92fba558a06a1e3f6c63b Author: Arne Fitzenreiter Date: Sun Apr 28 21:04:02 2024 +0000 lynis: update rootfile Signed-off-by: Arne Fitzenreiter commit 4f87fc49009d0ce76611d0dc5e0f1e2381bebbcc Author: Arne Fitzenreiter Date: Sun Apr 28 13:14:32 2024 +0000 core186: ship apache initskript Signed-off-by: Arne Fitzenreiter commit 1724e5ac0ac4a139e9f7d574129f53a027197676 Author: Michael Tremer Date: Fri Apr 26 15:28:38 2024 +0000 initscripts: Correctly wait for Apache2 to terminate This is achieved by telling killproc which PIDs to wait for. Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 21aee1688a84316d8d31123d6ddd05563360b33f Author: Arne Fitzenreiter Date: Sun Apr 28 13:12:04 2024 +0000 core186: ship unbound-dhcp-leses-bridge Signed-off-by: Arne Fitzenreiter commit 4bf50efa84559278b06c158105247d51c3c0212f Author: Michael Tremer Date: Fri Apr 26 15:09:19 2024 +0000 unbound-dhcp-leases-bridge: Make comparison work if old file does not exist This patch catches any errors if the file did not previously exist and therefore skips the comparison. Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 749bf8590204f949facaf21386a17e211dbd5d6d Author: Michael Tremer Date: Fri Apr 26 15:09:18 2024 +0000 unbound-dhcp-leases-bridge: Only reload if leases have actually changed This patches changes that leases will always be written in alphanumerical order so that we can later compare the newly generated file with the previous version. If it has not changed, we skip reload Unbound. Suggested-by: Nick Howitt Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit c3cabfa09cac245f0a950d31d0f4283741017bd5 Author: Michael Tremer Date: Fri Apr 26 15:09:17 2024 +0000 unbound-dhcp-leases-bridge: Implement atomic file replacement This change no longer renames the file, but removes the old link and creates a new link for the temporary file. That helps us to jump out of the code at any point without worrying about cleaning up the temporary file. Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit e94f3294c3fe8ffdec04bafab5ed477dfff2be49 Author: Arne Fitzenreiter Date: Sun Apr 28 13:07:50 2024 +0000 core186: ship tzdata Signed-off-by: Arne Fitzenreiter commit 020ef02a55be098f236c884e9dbf7732d0d808af Author: Adolf Belka Date: Thu Apr 25 22:43:02 2024 +0200 tzdata: Update to version 2024a - Update from version 2023d to 2024a - Update of rootfile not required - Changelog 2024a Briefly: Kazakhstan unifies on UTC+5 beginning 2024-03-01. Palestine springs forward a week later after Ramadan. zic no longer pretends to support indefinite-past DST. localtime no longer mishandles Ciudad Juárez in 2422. Changes to future timestamps Kazakhstan unifies on UTC+5. This affects Asia/Almaty and Asia/Qostanay which together represent the eastern portion of the country that will transition from UTC+6 on 2024-03-01 at 00:00 to join the western portion. (Thanks to Zhanbolat Raimbekov.) Palestine springs forward a week later than previously predicted in 2024 and 2025. (Thanks to Heba Hamad.) Change spring-forward predictions to the second Saturday after Ramadan, not the first; this also affects other predictions starting in 2039. Changes to past timestamps Asia/Ho_Chi_Minh's 1955-07-01 transition occurred at 01:00 not 00:00. (Thanks to Đoàn Trần Công Danh.) From 1947 through 1949, Toronto's transitions occurred at 02:00 not 00:00. (Thanks to Chris Walton.) In 1911 Miquelon adopted standard time on June 15, not May 15. Changes to code The FROM and TO columns of Rule lines can no longer be "minimum" or an abbreviation of "minimum", because TZif files do not support DST rules that extend into the indefinite past - although these rules were supported when TZif files had only 32-bit data, this stopped working when 64-bit TZif files were introduced in 1995. This should not be a problem for realistic data, since DST was first used in the 20th century. As a transition aid, FROM columns like "minimum" are now diagnosed and then treated as if they were the year 1900; this should suffice for TZif files on old systems with only 32-bit time_t, and it is more compatible with bugs in 2023c-and-earlier localtime.c. (Problem reported by Yoshito Umaoka.) localtime and related functions no longer mishandle some timestamps that occur about 400 years after a switch to a time zone with a DST schedule. In 2023d data this problem was visible for some timestamps in November 2422, November 2822, etc. in America/Ciudad_Juarez. (Problem reported by Gilmore Davidson.) strftime %s now uses tm_gmtoff if available. (Problem and draft patch reported by Dag-Erling Smørgrav.) Changes to build procedure The leap-seconds.list file is now copied from the IERS instead of from its downstream counterpart at NIST, as the IERS version is now in the public domain too and tends to be more up-to-date. (Thanks to Martin Burnicki for liaisoning with the IERS.) Changes to documentation The strftime man page documents which struct tm members affect which conversion specs, and that tzset is called. (Problems reported by Robert Elz and Steve Summit.) Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit e1ea58c9281f8e516506e12257103163eb14e537 Author: Arne Fitzenreiter Date: Sun Apr 28 13:05:17 2024 +0000 core186: ship sqlite Signed-off-by: Arne Fitzenreiter commit 0914995edc9584f1aa739606536a06fd52398ddd Author: Adolf Belka Date: Thu Apr 25 22:43:01 2024 +0200 sqlite: Update to version 3450300 - Update from version 3450200 to 3450300 - Update of rootfile not required - Changelog 3450300 Fix a long-standing bug (going back to version 3.24.0) that might (rarely) cause the "old.*" values of an UPDATE trigger to be incorrect if that trigger fires in response to an UPSERT. Forum post 284955a3cd454a15. Fix a bug in sum() that could cause it to return NULL when it should return Infinity. Forum post 23b8688ef4. Other trifling corrections and compiler warning fixes that have come up since the previous patch release. See the timeline for details. Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 101b977d847c82d9a01d9905023fbe4662fd9fab Author: Arne Fitzenreiter Date: Sun Apr 28 13:01:49 2024 +0000 core186: ship suricata and libhtp Signed-off-by: Arne Fitzenreiter commit 2d088b20c2e424e14524772f9e3620ebbc328ad1 Author: Michael Tremer Date: Wed Apr 24 08:49:01 2024 +0000 suricata: Update to 7.0.5 This update contains fixes for the following issues: * CVE-2024-32664 CRITICAL * CVE-2024-32867 MODERATE https://forum.suricata.io/t/suricata-7-0-5-and-6-0-19-released/4617 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit d1731f4f694df8850bbac9eff75cc20e21250d4a Author: Michael Tremer Date: Wed Apr 24 08:49:00 2024 +0000 libhtp: Update to 0.5.48 https://github.com/OISF/libhtp/releases/tag/0.5.48 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit b4a822d9b40f0d77a469a02fd8eb21f0535829cf Author: Arne Fitzenreiter Date: Sun Apr 28 12:58:05 2024 +0000 core186: ship kmod Signed-off-by: Arne Fitzenreiter commit 581e1c7a67cd35930c01deca791a06a89c4df3d8 Author: Peter Müller Date: Mon Apr 22 16:48:00 2024 +0000 kmod: Update to 32 Changelog according to the tarball's NEWS file: - Improvements - Use any hash algo known by kernel/openssl instead of keep needing to update the mapping - Teach kmod to load modprobe.d/depmod.d configuration from ${prefix}/lib and allow it to be overriden during build with --with-distconfdir=DIR - Make kernel modules directory configurable. This allows distro to make kmod use only files from /usr regardless of having a compat symlink in place. - Install kmod.pc containing the features selected at build time. - Install all tools and symlinks by default. Previously kmod relied on distro packaging to set up the symlinks in place like modprobe, depmod, lsmod, etc. Now those symlinks are created by kmod itself and they are always placed in $bindir. - Bug Fixes - Fix warnings due to -Walloc-size - Others - Drop python bindings. Those were not update in ages and not compatible with latest python releases. - Cleanup test infra, dropping what was not used anymore - Drop experimental tools `kmod insert` / `kmod remove`. Building those was protected by a configure option never set by distros. They also didn't gain enough traction to replace the older interfaces via modprobe/insmod/rmmod. Signed-off-by: Peter Müller Reviewed-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit 7152f170a2c03719f0217901fb062159810a2ce9 Author: Arne Fitzenreiter Date: Sun Apr 28 12:55:54 2024 +0000 core186: ship strongswan Signed-off-by: Arne Fitzenreiter commit 692589d73abee73e2f3b249bfc6e8013514fe699 Author: Peter Müller Date: Mon Apr 22 16:03:00 2024 +0000 strongSwan: Update to 5.9.14 Please see https://github.com/strongswan/strongswan/releases/tag/5.9.14 for the changelog of this version. Signed-off-by: Peter Müller Reviewed-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 6bd19004ee220f0c25875a83dad993898d9576dc Author: Peter Müller Date: Mon Apr 22 16:01:00 2024 +0000 Lynis: Update to 3.1.1 Please see https://cisofy.com/changelog/lynis/#311 for the changelogs since version 3.0.9. Signed-off-by: Peter Müller Reviewed-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit f51e75beb675a9594e044a012b016cae18ddd7da Author: Peter Müller Date: Mon Apr 22 15:58:00 2024 +0000 Tor: Update to 0.4.8.11 Full changelog according to https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.11/ChangeLog: Changes in version 0.4.8.11 - 2024-04-10 This is a minor release mostly to upgrade the fallbackdir list. Worth noting also that directory authority running this version will now automatically reject relays running the end of life 0.4.7.x version. o Minor feature (authority): - Reject 0.4.7.x series at the authority level. Closes ticket 40896. o Minor feature (dirauth, tor26): - New IP address and keys. o Minor feature (directory authority): - Allow BandwidthFiles "node_id" KeyValue without the dollar sign at the start of the hexdigit, in order to easier database queries combining Tor documents in which the relays fingerprint does not include it. Fixes bug 40891; bugfix on 0.4.7 (all supported versions of Tor). o Minor features (fallbackdir): - Regenerate fallback directories generated on April 10, 2024. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2024/04/10. o Minor bugfixes (directory authorities): - Add a warning when publishing a vote or signatures to another directory authority fails. Fixes bug 40910; bugfix on 0.2.0.3-alpha. Signed-off-by: Peter Müller Reviewed-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 370517154330e13c388f358aff34b7588d890ee8 Author: Arne Fitzenreiter Date: Sun Apr 28 12:46:30 2024 +0000 core186: ship squid Signed-off-by: Arne Fitzenreiter commit 62f1e54adcf1aa53bceac7e718cbe8cce47bb798 Author: Matthias Fischer Date: Wed Apr 10 18:16:52 2024 +0200 squid: Update to 6.9 For details see: https://github.com/squid-cache/squid/commits/v6 Signed-off-by: Matthias Fischer Signed-off-by: Arne Fitzenreiter commit 28e8d436fc14cc2a0bcc16251756951178b8f6f0 Author: Peter Müller Date: Sun Apr 21 21:10:52 2024 +0000 Remove orphaned Apache patch See: https://lists.ipfire.org/hyperkitty/list/development@lists.ipfire.org/message/BENPLQ43YKYOWIKIEXHDVEQWNE3SBKEH/ Signed-off-by: Peter Müller commit e212c7293d717aa70c9b03ad0b282dd76e6d68e6 Author: Peter Müller Date: Sun Apr 21 21:10:29 2024 +0000 Core Update 186: Ship and restart Apache Signed-off-by: Peter Müller commit 9fbb9c39fb13dbfbe90c3038fcb5abbe771ad91f Author: Matthias Fischer Date: Sun Apr 21 14:55:25 2024 +0200 apache: Update to 2.4.59 For details see: https://dlcdn.apache.org/httpd/CHANGES_2.4.59 Fixes CVE-2024-27316 / CVE-2024-24795 / CVE-2023-38709 Previously applied patch (apache-2.4.58_mod_xml2enc_remove_dependency_on_xmlstring_header.patch) has been removed - is now included. Signed-off-by: Matthias Fischer Reviewed-by: Peter Müller commit 9ce9514bad8109a9ffa0f4206a7668757221287c Author: Peter Müller Date: Sun Apr 21 20:09:40 2024 +0000 libloc: Adjust changed URL format Signed-off-by: Peter Müller commit 658e1675f7da0d7d02216a083f71e34d4eeabd5e Author: Peter Müller Date: Sun Apr 21 20:06:52 2024 +0000 langs: Update Spamhaus DROP URL Signed-off-by: Peter Müller commit 3cc7b53a8774f750dc0bdeb66715ec013586c0ae Author: Peter Müller Date: Sun Apr 21 20:04:51 2024 +0000 libloc: Update location database shipped with new installations Signed-off-by: Peter Müller commit ba5da82e9be39e2236a709c9d61f48b217c5dd35 Author: Arne Fitzenreiter Date: Fri Apr 19 19:55:13 2024 +0000 core186: ship ipblocklist sources Signed-off-by: Arne Fitzenreiter commit 4fdaa9577b45487dd13df467d09817beafc1e1f1 Author: Adolf Belka Date: Fri Apr 19 15:39:41 2024 +0200 backup.pl: removes any references to ALIENVAULT & SPAMHAUSEDROP from restores - This patch ensures that if a restore is carried out from an earlier version that includes ALIENVAULT and/or SPAMHAUS_EDROP that the references will be removed. - This is the same code as was put into the update.sh file with the previous patch of this set. Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit 6408ff8d6a952cd88927a7ba6a7aece6cdfb04c0 Author: Adolf Belka Date: Fri Apr 19 15:39:40 2024 +0200 update.sh: Remove existing entries for ALIENVAULT & SPAMHAUS_EDROP - This removes any time entries in the modified file for either ALIENVAULT or SPAMHAUS_EDROP. - This also removes any blocklists for either of these sources from the /var/lib/ipblocklist directory. - This patch will ensure that any reference to either of these sources is removed from the ipblocklist files. Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit 78e2c1dce515487d7db912970a1e12202990662d Author: Adolf Belka Date: Fri Apr 19 15:39:39 2024 +0200 sources: Removal of ALIENVAULT and SPAMHAUS_EDROP from ipblocklist sources - ALIENVAULT has not been updated since at least Nov 2022 but probably earlier. There is no date for the file to be downloaded but a forum user has log messages from Nov 2022 that indicate the file had not changed as therefore no download occurred. - AT&T aquired AlienVault in August 2018. Somewhere between 2018 and 2022 the list stopped getting updated. AlienVault references on the AT&T website are now for a different product. - Discussed in IPFire conf call of April 2024 and agreed to remove the ALIENVAULT blocklist. - On Apr 10th the Spamhaus eDROP list was merged with the Spamhaus DROP list. The eDROP list is still available but is now empty. Trying to select the SPAMHAUS_EDROP list gives an error message that the blocklist was found to be empty. - This patch removes both the ALIENVAULT and the SPAMHAUS_EDROP lists from the ipblocklist sources file. Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit fc2b1edc73a536a231a9e89e795ba55e42b902c8 Author: Arne Fitzenreiter Date: Fri Apr 19 18:53:27 2024 +0000 core185: ship fixes for bug12763 Signed-off-by: Arne Fitzenreiter commit 238a47874fe044ae90129bde10b267063c4305f5 Author: Adolf Belka Date: Thu Apr 11 17:01:08 2024 +0200 oci-setup: Fixes bug12763 - This ensures that all ip route and ip rule commands are redirected to null if the output is not used to feed into a variable. - This will prevent any error messages related to empty iproute tables being displayed during boot if an empty table is accessed. Fixes: Bug#12763 Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit 2841a675482879a5eb6bfeaabb268066af762e9d Author: Adolf Belka Date: Thu Apr 11 17:01:07 2024 +0200 gcp-setup: Fixes bug12763 - This ensures that all ip route and ip rule commands are redirected to null if the output is not used to feed into a variable. - This will prevent any error messages related to empty iproute tables being displayed during boot if an empty table is accessed. Fixes: Bug#12763 Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit 3162b6ccfa2fb22513c7d23d29f0509343f46828 Author: Adolf Belka Date: Thu Apr 11 17:01:06 2024 +0200 exoscale-setup: Fixes bug12763 - This ensures that all ip route and ip rule commands are redirected to null if the output is not used to feed into a variable. - This will prevent any error messages related to empty iproute tables being displayed during boot if an empty table is accessed. Fixes: Bug#12763 Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit 1db5f96c5ebbb2074c9c0a3edf29866c4769da11 Author: Adolf Belka Date: Thu Apr 11 17:01:05 2024 +0200 azure-setup: Fixes bug12763 - This ensures that all ip route and ip rule commands are redirected to null if the output is not used to feed into a variable. - This will prevent any error messages related to empty iproute tables being displayed during boot if an empty table is accessed. Fixes: Bug#12763 Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit eb0de6531c441663477cf7e139f1bd5321630eef Author: Adolf Belka Date: Thu Apr 11 17:01:04 2024 +0200 aws-setup: Fixes bug12763 - This ensures that all ip route and ip rule commands are redirected to null if the output is not used to feed into a variable. - This will prevent any error messages related to empty iproute tables being displayed during boot if an empty table is accessed. Fixes: Bug#12763 Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit 4f455c488ee8542bea4ccbe439351b3e9973c6e4 Author: Adolf Belka Date: Thu Apr 11 17:01:03 2024 +0200 ip-up: Fixes bug12763 - This ensures that all ip route and ip rule commands are redirected to null if the output is not used to feed into a variable. - This will prevent any error messages related to empty iproute tables being displayed during boot if an empty table is accessed. Fixes: Bug#12763 Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit 9c28cd59c1b4f535382e5e4e7952d921af8cc03b Author: Adolf Belka Date: Thu Apr 11 17:01:02 2024 +0200 red: Fixes bug12763 - This ensures that all ip route and ip rule commands are redirected to null if the output is not used to feed into a variable. - This will prevent any error messages related to empty iproute tables being displayed during boot if an empty table is accessed. Fixes: Bug#12763 Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit e33ee46e621eb6967c954a9d3b4683880e372579 Author: Adolf Belka Date: Thu Apr 11 17:01:01 2024 +0200 static-routes: Fixes bug12763 - This ensures that all ip route and ip rule commands are redirected to null if the output is not used to feed into a variable. - This will prevent any error messages related to empty iproute tables being displayed during boot. - Tested on my vm system and confirmed that the fix in ipsec-interfaces stops the "FIB table does not exist" and "RTNETLINK answers: no such file or directory" messages during boot. Fixes: Bug#12763 Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit 87a97a431915849cf6d19e1b7137b4fb0b6dd91d Author: Adolf Belka Date: Thu Apr 11 17:01:00 2024 +0200 ipsec-interfaces: Fixes bug12763 - Some of the ip route commands are not redirected to null. This causes the "FIB table does not exist" message from bug12763 - This patch makes all ip route commands get redirected to null, preventing the error message from being seen at boot. - One of the ip rule commands is not redirected to null. This causes the "RTNETLINK answers: no such file or directory" message. - This patch makes all ip rule commands get redirected to null, preventing the error message from being seen at boot. - Additional patches in this set ensure that all ip route and ip rule commands in all IPFire code is redirected to null unless the output of the ip route or ip rule command is used in a variable for use elsewhere in the code. - Tested on my vm system and confirmed that the fix in ipsec-interfaces stops the "FIB table does not exist" and "RTNETLINK answers: no such file or directory" messages during boot. Fixes: Bug#12763 Tested-by: Adolf Belka Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter commit dbda89e0fce3514f6d1d1f3d2499d7d26227f34b Author: Arne Fitzenreiter Date: Fri Apr 19 06:17:04 2024 +0000 core186: remove incinga and sslh if installed Signed-off-by: Arne Fitzenreiter commit ea7dd6822c54db2fc6a70b6de1d05d8e25cb8099 Author: Adolf Belka Date: Wed Apr 10 13:39:39 2024 +0200 icinga: Removal of icinga addon - As discussed in the Dev conf call on 2024-Jan-08 - The 1.x version of Icinga has been EOL since 2018 - The 2.x version would require a complete new configuration approach as the settings and options are completely different to 1.x and so would be a start from scratch. - removal of icinga from make.sh file - removal of lfs file - removal of rootfile - removal of configuration file - removal of backup includes file Signed-off-by: Adolf Belka Acked-by: Peter Müller Signed-off-by: Arne Fitzenreiter commit e792c3b9457e1c2f8a0aac384c55c1e823ff5f85 Author: Adolf Belka Date: Tue Apr 9 16:07:09 2024 +0200 initscripts: Removal of references to sslh - sslh is listed in the initscripts lfs and rootfiles. - Removal of these references with the bremoval of sslh Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter