Commit Graph

1545 Commits (b70be294034b21a12fe7486a9c347434f65549e4)

Author SHA1 Message Date
Florent Daigniere 77d770a2d2 doh
Florent Daigniere 4c3c628ca4 dedup
Florent Daigniere f1e5044dbe Add to the list, sort it
Florent Daigniere 02f2679dc4 name collision
Florent Daigniere b08d940d09 See https://github.com/decalage2/oletools/issues/659
Florent Daigniere a8061f3ed3 doh
Florent Daigniere 612db96209 Block executable file extensions (closes )
Florent Daigniere 709023ab5a dimitri said "block it"
So let's block any macro with AUTOEXEC
Florent Daigniere 3bdc57adbc Forgot this
Florent Daigniere e43effab63 Glad there is a test
Florent Daigniere d793c5eed8 Dup symbol
Florent Daigniere e03d91a1ec Merge remote-tracking branch 'upstream/master' into oletools
Florent Daigniere 7e1ab7978e Block VBA Stomping too
Florent Daigniere 4881e0db2a ghost is right, it should be pinned here too
Florent Daigniere adacf579fc Rollback to mysql-connector-python==8.0.29
See 
Florent Daigniere 3e45a791cf Implement oletools to filter out bad macros
bors[bot] 9c6e9b05db
Merge
2543: Fix : make public announcements work r=nextgens a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Ensure public announcements bypass filters.

They can still time-out... but this is already a big improvement that we should be able to backport.

### Related issue(s)
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere f994c8687e doh
Florent Daigniere 44c47586ea Fix potential permission problems
Florent Daigniere d3d7916b58 Merge remote-tracking branch 'upstream/master' into upgrade-alpine
Florent Daigniere 45b01db9de Fix the language switcher
Florent Daigniere 3fc0a0e7fa Merge branch 'master' of https://github.com/Mailu/Mailu into fetchmail-improvements
Florent Daigniere 4da2db1b0b add comment as requested
Florent Daigniere c79e8d3852 Fix display bug
bors[bot] 553b02fb3d
Merge
2529: Improve fetchmail r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Improve fetchmail:
- allow delivery via LMTP (faster, bypassing the filters)
- allow several folders to be retrieved
- run fetchmail as non-root
- tweak the compose file to ensure we have all the dependencies

### Related issue(s)
- closes  
- closes  
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
bors[bot] 31c6c26ec8
Merge
2547: Disable libhardened-malloc for non x86. r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Support is going to be a nightmare if RPI4 is not working; We can always reintroduce it later.

### Related issue(s)
- closes  


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere dcf11aea48 Don't force a password reset
Florent Daigniere db9ed1fd59 Disable libhardened-malloc for non x86.
@see 

Support is going to be a nightmare if RPI4 is not working.
Florent Daigniere f802601a08
Update f4f0f89e0047_.py
Florent Daigniere b20bf996ec Fix : make public announcements work
Florent Daigniere bdc085048d Restore the Dockerfile like it was
Florent Daigniere e3b875aa6b Well, -i stands for --insecure
Florent Daigniere 699be6f9fa Drop privs when running admin too
Florent Daigniere 42cd5bf2dc Move it to base since admin will also use it
Florent Daigniere e5a1a353db Upgrade to alpine 3.16.3
This has PHP fixes and a new rspamd
Florent Daigniere 86637f0259 Make setup use the base image
bors[bot] 68bb8da2b7
Merge
2538: Fix the ARM build again r=mergify[bot] a=nextgens

I have double-checked from the builder and this works.

gcc -v from the alpine image tells me that we have  ``--enable-default-pie``

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere 7745420fe0 Fix the ARM build again
bors[bot] b66f3fe9de
Merge
2537: Fix the armv7 build (again)! r=mergify[bot] a=nextgens

Revert "simplify": ghostwheel42's approach was right
This reverts commit 04f6bd2633.

Without the build still errors-out because of ``set -euxo pipefail``
see https://github.com/Mailu/Mailu/actions/runs/3479399158/jobs/5817902589

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere b9b0c77d2e Revert "simplify": ghostwheel42's approach was right
This reverts commit 04f6bd2633.
bors[bot] f43c8c652e
Merge
2483: Introduce FETCHMAIL_ENABLED r=mergify[bot] a=DjVinnii

## What type of PR?

Enhancement

## What does this PR do?
Add `FETCHMAIL_ENABLED` to enable/disable the Fetchmail functionality in the Admin UI.

### Related issue(s)
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


2535: fix the linux/arm/v7 build r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

The arm builder is running aarch64 ... and there is no package for arm/v7


Co-authored-by: Vincent Kling <v.kling@vinniict.nl>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Dimitri Huisman 8afb544a10
Default FETCHMAIL_ENABLED to False
Florent Daigniere 32f3241569 ensure we have -pie too
Florent Daigniere 7ab3d8f9fe There is no good reason not to export them is the base image too
Florent Daigniere aa44a42654 ensure we compile the wheels with bells and whistles too
Florent Daigniere 04f6bd2633 simplify
Florent Daigniere d43e7f72df ghostwheel42's suggestion
Florent Daigniere 1f895d5f82 ghostwheel42's suggestion
Florent Daigniere 031a157ad9 fix the linux/arm/v7 build
bors[bot] 04a196c417
Merge
2525: Switch to GrapheneOS's hardened_malloc r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

Switch to GrapheneOS's hardened_malloc

This was suggested during the dev meeting of the 18/09/22.

It may break things and it may make things unbearably slow... but it should also make the exploitation of memory corruption bugs a lot harder.

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


2534: Close : document SQLALCHEMY_DATABASE_URI r=mergify[bot] a=nextgens

## What type of PR?

documentation

## What does this PR do?

document SQLALCHEMY_DATABASE_URI

### Related issue(s)
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>