Commit Graph

23455 Commits

Author SHA1 Message Date
Lucian Cristian 630c19f648 nss: revert -flto change
it seems that it can lead to segfault in libfreebl3.so

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-16 21:06:53 +03:00
Sebastian Kemper 07db6b4a39 apache: revisit suEXEC setup
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.

Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.

This also does away with uidmin/gidmin 99. The default is 100, which is
fine.

Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.

It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.

[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:47:37 +02:00
Lucian Cristian 16ecc549f1 libcap-ng: add package libcap-ng
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-16 15:28:52 +03:00
Sebastian Kemper dbaad2fa44 apache: create log directory o=
Hides away the contents of the log directory from others.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:24:05 +02:00
Michael Heimpold 04575c258e php7-pecl-redis: update to 5.2.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 14:09:51 +02:00
Michael Heimpold ceb660cc61 php7: update to 7.4.6
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 13:56:33 +02:00
Hannu Nyman 909f4c6638 Merge pull request #12179 from wvdakker/master
Shorewall: Bump to 5.2.4.5
2020-05-16 11:58:13 +03:00
W. van den Akker fbed8ff1e7 Shorewall6: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:35:30 +02:00
W. van den Akker 49a930dae6 Shorewall: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:34:21 +02:00
W. van den Akker 10afa55dfb Shorewall6-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:33:12 +02:00
W. van den Akker 3a61f1244d Shorewall-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:32:11 +02:00
W. van den Akker fba9ad6c3b Shorewall-core: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:31:02 +02:00
Rosen Penev 9f4cde559c Merge pull request #12167 from lucize/nsslto
nss: add -flto and makefile cleanup
2020-05-15 12:55:33 -07:00
Rosen Penev a85753f2e4 Merge pull request #12166 from lucize/nsprlto
nspr: nspr add -flto to compile
2020-05-15 12:55:16 -07:00
Rosen Penev 1efe4cf4a1 Merge pull request #12170 from kagurazakakotori/open-vm-tools
open-vm-tools: bump to version 11.1.0
2020-05-15 12:53:01 -07:00
Lucian Cristian 47570b4cf5 nss: add -flto and makefile cleanup
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-15 16:28:23 +03:00
Lucian Cristian df7392149c nspr: nspr add -flto to compile
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-15 10:29:23 +03:00
Rosen Penev 66c94cd4e9 Merge pull request #12168 from lucize/libreswup
libreswan: update to 3.32
2020-05-14 20:45:37 -07:00
Rosen Penev c732b9358c Merge pull request #12172 from rs/nextdns-1.5.8-master
nextdns: Update to version 1.5.8
2020-05-14 20:45:16 -07:00
Rosen Penev fbc719b3f3 Merge pull request #12162 from neheb/upnp23
npupnp updates
2020-05-14 20:44:53 -07:00
Olivier Poitrey 5d6e75743a nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:01 +00:00
Rosen Penev 8302890162 Merge pull request #12149 from ja-pa/python-atomicwrites-udate
python-atomicwrites: update to version 1.4.0
2020-05-14 16:14:45 -07:00
Rosen Penev 2ad0aab050 Merge pull request #12161 from neheb/faad22
faad2: update to 2.9.2
2020-05-14 16:14:04 -07:00
Rosen Penev aee7061658 Merge pull request #12165 from jefferyto/golang-tweaks
golang: Various improvements/tweaks
2020-05-14 16:13:44 -07:00
Robert von Könemann 3bd11c3751 mini_snmpd: Add sysDescr option.
Some monitoring tools will run into errors when sysDescr field is empty. This was the case for cacti 1.2.8 that i'm using to monitor my network. Ideally the sysDescr field would contain some information from the overview of luci, e.g. the Model, Firmware and Kernel-Version fields, but i am stranger to OpenWRT, so I'm unable to do that.

Signed-off-by: Robert von Könemann <lordtaifleh@gmail.com>
2020-05-14 21:18:48 +02:00
Kagurazaka Kotori 24a12c8f28 open-vm-tools: bump to version 11.1.0
Signed-off-by: Kagurazaka Kotori <kagurazakakotori@gmail.com>
2020-05-15 02:30:46 +08:00
Rosen Penev d9328d42bd Merge pull request #12130 from jefferyto/python3-find-stdlib-depends
python3: Add script to help find standard library dependencies
2020-05-14 09:06:30 -07:00
Jeffery To d4d78c2511 python3: Add script to help find standard library dependencies
This adds a script that searches a Python package's source code to find
imports for separately-packaged standard library modules.

The script can be run by calling make with the configure target and
"PY3=stdlib V=s" arguments, e.g.

    make package/python3-lxml/configure PY3=stdlib V=s

This also updates the readme on how to call this script, as well as more
information on Python package dependencies in general.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-14 23:38:24 +08:00
Lucian Cristian 7d969ca3e1 libreswan: update to 3.32
also add -flto to compiler flags

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-14 16:32:10 +03:00
Jeffery To da3fb97b9c golang: Set/reset default platform options for target Go compiler
Because the first stage for building target Go is actually a host build,
the default platform options (GO386, GOARM, etc.) are detected from the
host. These values are written to a source file and kept when building
the second stage.

This modifies this source file to set the appropriate values for the
target platform, and reset values for other platforms to their
cross-compiling / most compatible defaults.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-14 17:45:18 +08:00
Daniel Engberg 626c304d67 admin/netdata: Update to 1.22.1
Update netdata to 1.22.1
Disable cloud functionality
Shoehorn patches from FreeBSD's ports repo
Remove cloud notifications and netdata's self-update feature
json-c is no longer optional

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2020-05-14 11:02:49 +02:00
Rosen Penev a22fff844d Merge pull request #9865 from peter-stadler/etesync
etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
2020-05-14 00:24:59 -07:00
Aleksander Morgado daff1c4497 modemmanager: improve package README
Explain which are the options supported by the protocol, and also
which are the supported values in each (if the field has value
validation).

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-14 09:19:57 +02:00
Aleksander Morgado c5c5620f20 modemmanager: allow specifying list of authentication protocols
ModemManager allows specifying which are the authentication protocols
to be used during the user/password context authentication with the
peer.

This protocol update allows users to provide a new 'allowedauth'
option in the interface configuration, which is then used in two
different places:
 * It is sent to ModemManager in the --simple-connect call so that
   modems with a network interface can perform the authentication
   using their own vendor-specific protocol.
 * If the connection is done using PPP, this list of protocols is used
   to configure the pppd call.

If the new 'allowedauth' option is not given, all auth protocols are
implicitly allowed.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-14 09:19:54 +02:00
Peter Stadler 62609f1587 nginx: do not reduce max processes
Use the upstream value for NGX_MAX_PROCESSES (=1024) again.
So it is safe to use `worker_processes auto;` (which sets it to
the number of CPUs). Also use this directive in the conf instead
of calculating the number in the init and passing it as argument.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-14 09:19:45 +02:00
Rosen Penev ba2c714aa8 Merge pull request #12075 from ja-pa/redis-update
redis: update to version 6.0.1
2020-05-13 16:33:16 -07:00
Rosen Penev 2d7fcf3893 Merge pull request #12140 from neheb/ger
gerbera: set config file to 600 permissions
2020-05-13 16:32:46 -07:00
Rosen Penev df99a7c712 gerbera: set config file to 600 permissions
Only gerbera needs to read the file.

Added config file to conffiles to fix opkg update support.

Added several extra options to the UCI config. Manual editing is still required.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 16:32:30 -07:00
Jan Pavlinec 00eb395c3f redis: update to version 6.0.1
Note:
add explicit -latomic on 32-bit MIPS because 32-bit MIPS is not able to perform 64-bit atomics in hardware

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-14 00:27:48 +02:00
Rosen Penev 6b44750ee3 upmpdcli: update to 1.4.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 15:26:45 -07:00
Rosen Penev 1546a63414 libupnpp: update to 0.19.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 15:26:45 -07:00
Rosen Penev 724ec0659f libnpupnp: update to 4.0.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 15:26:45 -07:00
Rosen Penev ad1203ebb9 faad2: update to 2.9.2
Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 15:25:23 -07:00
Rosen Penev 355d2b7bef Merge pull request #12060 from looklookson/master
sslh: Add http probe support
2020-05-13 15:22:38 -07:00
Rosen Penev 0a4ed5845a Merge pull request #11528 from hroo/lvm2_at_preinit
lvm2: Added script and updated Makefile to activate lvm2 at preinit t…
2020-05-13 14:58:20 -07:00
Rosen Penev 5f1c9e3c94 Merge pull request #11964 from zhanhb/nginx-all-module
nginx: update all-module configurations
2020-05-13 14:56:58 -07:00
Rosen Penev f1b445963b Merge pull request #11981 from zhanhb/conffiles
treewide: add conffiles
2020-05-13 14:44:35 -07:00
Rosen Penev d5c68c9e35 Merge pull request #12037 from olek210/coremark
coremark: Add coremark package
2020-05-13 14:41:55 -07:00
Rosen Penev f7554197c2 Merge pull request #12104 from stintel/readsb
readsb: new package
2020-05-13 14:41:11 -07:00
Rosen Penev edff5dffaa Merge pull request #12146 from kobboi/master
ifstat: make dependency on libnetsnmp conditional
2020-05-13 14:39:52 -07:00