8097 Commits

Author SHA1 Message Date
Yousong Zhou 1091badd83 openvswitch: fix file generation in /etc/modules.d
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
2020-05-20 23:29:44 +08:00
Aaron Goodman aafdd0730c mwan3: don't add ipv6 link local address to routing tables
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-05-20 05:37:40 -04:00
Aaron Goodman 02ebd831c1 mwan3: reduce calls to `ip route list'
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-05-20 05:37:39 -04:00
Jan Pavlinec 51aa3e53cb tor: update to version 0.4.3.5
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-20 11:35:30 +02:00
Josef Schlehofer ef71facb41 Merge pull request #12215 from BKPepe/unbound-1.10.1
unbound: update to version 1.10.1 (security fix)
2020-05-20 08:40:18 +02:00
Rosen Penev 71975d68a4 cifs-utils: fix compilation
Now that libcap-ng is in the tree, cifs-utils is picking it up.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-19 22:14:10 -07:00
Hannu Nyman 5e84c4872c Merge pull request #12210 from jefferyto/etesync-server-minor-cleanup
etesync-server: Minor Makefile cleanup
2020-05-19 17:01:14 +03:00
Josef Schlehofer 8ccff44ad1 unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:23:57 +02:00
Rosen Penev ee9fe907e7 Merge pull request #12212 from lnslbrty/package/netsniff-ng
netsniff-ng: new package
2020-05-19 01:18:00 -07:00
Toni Uhlig 563b1225ff netsniff-ng: new package
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
2020-05-19 09:55:00 +02:00
Jeffery To 70064ea4ad etesync-server: Minor Makefile cleanup
* Replace creating an empty PYTHON3_PKG_DIR with setting filespec to an
  empty value

* Disable the default Python package build recipe (with
  PYTHON3_PKG_BUILD:=0) and set an empty Build/Compile

* Remove VARIANT:=python3 and PROVIDES (providing the same name as the
  package)

* Add PKG_BUILD_PARALLEL:=1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-19 00:19:54 +08:00
Lucian Cristian a659c58f29 libreswan: various fixes
start if kernel has missing ipv6 support
add libcap-ng support
fix some errors displayed on syslog

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-17 04:57:48 +03:00
Sebastian Kemper 07db6b4a39 apache: revisit suEXEC setup
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.

Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.

This also does away with uidmin/gidmin 99. The default is 100, which is
fine.

Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.

It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.

[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:47:37 +02:00
Sebastian Kemper dbaad2fa44 apache: create log directory o=
Hides away the contents of the log directory from others.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:24:05 +02:00
W. van den Akker fbed8ff1e7 Shorewall6: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:35:30 +02:00
W. van den Akker 49a930dae6 Shorewall: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:34:21 +02:00
W. van den Akker 10afa55dfb Shorewall6-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:33:12 +02:00
W. van den Akker 3a61f1244d Shorewall-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:32:11 +02:00
W. van den Akker fba9ad6c3b Shorewall-core: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:31:02 +02:00
Rosen Penev 66c94cd4e9 Merge pull request #12168 from lucize/libreswup
libreswan: update to 3.32
2020-05-14 20:45:37 -07:00
Olivier Poitrey 5d6e75743a nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:01 +00:00
Robert von Könemann 3bd11c3751 mini_snmpd: Add sysDescr option.
Some monitoring tools will run into errors when sysDescr field is empty. This was the case for cacti 1.2.8 that i'm using to monitor my network. Ideally the sysDescr field would contain some information from the overview of luci, e.g. the Model, Firmware and Kernel-Version fields, but i am stranger to OpenWRT, so I'm unable to do that.

Signed-off-by: Robert von Könemann <lordtaifleh@gmail.com>
2020-05-14 21:18:48 +02:00
Lucian Cristian 7d969ca3e1 libreswan: update to 3.32
also add -flto to compiler flags

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-14 16:32:10 +03:00
Rosen Penev a22fff844d Merge pull request #9865 from peter-stadler/etesync
etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
2020-05-14 00:24:59 -07:00
Aleksander Morgado daff1c4497 modemmanager: improve package README
Explain which are the options supported by the protocol, and also
which are the supported values in each (if the field has value
validation).

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-14 09:19:57 +02:00
Aleksander Morgado c5c5620f20 modemmanager: allow specifying list of authentication protocols
ModemManager allows specifying which are the authentication protocols
to be used during the user/password context authentication with the
peer.

This protocol update allows users to provide a new 'allowedauth'
option in the interface configuration, which is then used in two
different places:
 * It is sent to ModemManager in the --simple-connect call so that
   modems with a network interface can perform the authentication
   using their own vendor-specific protocol.
 * If the connection is done using PPP, this list of protocols is used
   to configure the pppd call.

If the new 'allowedauth' option is not given, all auth protocols are
implicitly allowed.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-14 09:19:54 +02:00
Peter Stadler 62609f1587 nginx: do not reduce max processes
Use the upstream value for NGX_MAX_PROCESSES (=1024) again.
So it is safe to use `worker_processes auto;` (which sets it to
the number of CPUs). Also use this directive in the conf instead
of calculating the number in the init and passing it as argument.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-14 09:19:45 +02:00
Rosen Penev 355d2b7bef Merge pull request #12060 from looklookson/master
sslh: Add http probe support
2020-05-13 15:22:38 -07:00
Rosen Penev 5f1c9e3c94 Merge pull request #11964 from zhanhb/nginx-all-module
nginx: update all-module configurations
2020-05-13 14:56:58 -07:00
Rosen Penev f1b445963b Merge pull request #11981 from zhanhb/conffiles
treewide: add conffiles
2020-05-13 14:44:35 -07:00
Rosen Penev edff5dffaa Merge pull request #12146 from kobboi/master
ifstat: make dependency on libnetsnmp conditional
2020-05-13 14:39:52 -07:00
Othmar Truniger 33fb579a41 knxd: bump to version 0.14.37
Signed-off-by: Othmar Truniger <github@truniger.ch>
2020-05-13 14:12:50 +02:00
Christophe Lermytte 888e9d9cea ifstat: make dependency on libnetsnmp conditional
The upstream package supports it with a configure switch.
Defaulting to 'with SNMP support' as it was before.

Signed-off-by: Christophe Lermytte <gentoo@lermytte.be>
2020-05-13 10:46:00 +02:00
Oleg Derevenetz 654078b68d bwping: update to version 1.17
Signed-off-by: Oleg Derevenetz <oleg-derevenetz@yandex.ru>
2020-05-12 23:14:55 +03:00
Eneas U de Queiroz 6df2abceca libreswan: fix compilation with Linux 4.14
According to a comment in programs/pluto/kernel_xfrm_interface.c:177:

* IFLA_XFRM_IF_ID was added to mainline kernel 4.19 linux/if_link.h
  with older kernel headers 'make USE_XFRM_INTERFACE_IFLA_HEADER=true'

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-05-12 09:30:30 -03:00
Kevin Darbyshire-Bryant f084977ca3 netifyd: support uci parameters
Integrate with uci to support 'enabled/disabled' startup option and
override netify's default auto network selection.

config netifyd
       option enabled 0
       option autoconfig 1

autoconfig: Use netify's in-built interface selection
else use 'internal/external_if' definitions.

Also persist important agent config across sysupgrade
agent.uuid, serial.uuid, site.uuid

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-12 07:23:16 +01:00
Toke Høiland-Jørgensen 59b91fc342 Merge pull request #12121 from 4wrxb/acme_dns_calias
acme: Update acme.sh URL, add support for challenge & domain alises.
2020-05-11 11:47:48 +02:00
Will O'Neill 99cc5bbd97 acme: Update acme.sh URL, add support for challenge & domain alises.
Signed-off-by: Will O'Neill <0100wrxb@gmail.com>
2020-05-10 16:54:41 -07:00
Lucian Cristian 19059a5275 frr: update to 7.3.1
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-10 22:10:31 +03:00
Kevin Darbyshire-Bryant b7c59c390f miniupnpd: make hotplug work again
hotplug scripts are sourced not exec'd so #!/bin/sh /etc/rc.common
doesn't pull in the functions defined in /etc/rc.common thus since
'enabled' isn't defined the following sequence always fails:

enabled miniupnpd || exit 0

Unfortunately sourcing /etc/rc.common doesn't appear to work so come up
with some alternatives.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-10 17:30:11 +01:00
Rosen Penev 83d36065d5 Merge pull request #12098 from neheb/pdnsr
pdns: fix compilation with boost 1.73
2020-05-09 19:50:19 -07:00
Rosen Penev ea692188e0 Merge pull request #12099 from neheb/pdns
pdns-recursor: fix compilation with boost 1.73
2020-05-09 19:50:12 -07:00
Rosen Penev 386f5b58e5 Merge pull request #12126 from lucize/netopeer
Netopeer2: update Netopeer2 and dependencies to master
2020-05-09 19:49:55 -07:00
Lucian Cristian c825364c1d Netopeer2: update Netopeer2 and dependencies to master
libnetconf2 to 1.1.24
libyang to 1.0.167
sysrepo to 1.4.58

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-10 00:03:55 +03:00
Aleksander Morgado 3feeacc051 modemmanager: release 1.12.10
https://lists.freedesktop.org/archives/modemmanager-devel/2020-May/007828.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-09 15:29:08 +02:00
Huangbin Zhan 0ec746ccb6 treewide: add conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2020-05-09 06:06:43 +08:00
Rosen Penev 234eb30b38 Merge pull request #12067 from NeoRaider/wifidog-build-dir
wifidog-ng: remove incorrect PKG_BUILD_DIR override
2020-05-08 10:53:51 -07:00
Hannu Nyman 8b06605d64 Merge pull request #12106 from rs/nextdns-1.5.7-master
nextdns: Update to version 1.5.7
2020-05-08 16:13:01 +03:00
Stijn Tintel d1e31481ec strongswan: bump to 5.8.4
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-05-08 06:02:32 +03:00
Stijn Tintel e1f607af94 vallumd: switch to codeload.github.com
Review of my PR to add readsb requested to use codeload. Update vallumd
to use codeload as well, so that things are consistent.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-05-08 04:17:48 +03:00