Commit Graph

5682 Commits

Author SHA1 Message Date
Daniel Bermond
63379c3d35 proxychains-ng: new package
Compile tested: R7800 (arm_cortex-a15_neon-vfpv4), OpenWrt git master
Run tested: R7800 (arm_cortex-a15_neon-vfpv4), OpenWrt git master

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
2019-09-24 20:31:46 +00:00
David Yang
f9cf4e1f2c i2pd: Update to 2.28.0
Signed-off-by: David Yang <mmyangfl@gmail.com>
2019-09-22 13:42:04 +08:00
Rosen Penev
78248fb2fd miniupnpc: Update to 2.1.20190824
Switched to CMAKE_INSTALL to get rid of InstallDev.

Added PKG_BUILD_PARALLEL for faster compilation.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-21 15:57:41 -07:00
Rosen Penev
61b5f5b16c cshark: Switch to standard PKG_SOURCE_VERSION/DATE
Several other cleanups.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed PKG_INSTALL as cmake.mk already defines it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-21 15:56:58 -07:00
Diana Dragusin
bda3b710ba phantap: update to latest commit
7cc6017 phantap-learn: Add another way to detect the victim
8a4b30b phantap-learn: Continue listening for DNS traffic after initial detection
3e1cf09 Improve setup documentation
ddde4b9 Fix neighbour spelling
bee7e92 Readme.md: Update
efb57f6 Readme.md: Update

Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
2019-09-21 14:53:32 -07:00
Rosen Penev
a0516d7e1d Merge pull request #10027 from James-TR/fix/pdns-lua-dep
pdns: Explicitly define lua implementation
2019-09-18 11:52:08 -07:00
Jan Pavlinec
b42159dea3 irssi: update to version 1.2.2 (security fix)
Fixes CVE-2019-15717

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-18 20:12:17 +02:00
James Taylor
001e30e387 pdns: Explicitly define lua implementation
Compile Tested: yes, selects lua as implementation and doesn't pick up luajit
Run Tested: no, minor change

Maintainer: me

Description:
On some architectures PowerDNS was preferring Luajit over Lua, which wasn't added
as a dependency. On previous versions this was controlled by passing `--with-lua`
and `--without-luajit` however this isn't functional anymore.

On the 4.2 series, it is instead possible to define the lua implementation to be
used by passing `--with-lua=[implementation]` ie `--with-lua=lua`

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-09-19 00:11:04 +10:00
Jan Pavlinec
299e5b0a9b treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Florian Eckert
ffe358b918 Merge pull request #10015 from mwarning/zt
zerotier: update to 1.4.6
2019-09-17 08:35:10 +02:00
Rosen Penev
0fa6b85686 ulogd: Add back autoreconf
Compile fails at times, probably because of the patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-16 17:49:17 -07:00
Moritz Warning
6181852408 zerotier: update to 1.4.6
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-09-17 01:37:24 +02:00
Rosen Penev
b505803714 Merge pull request #9995 from flyn-org/scapy
scapy: update to 2.4.3
2019-09-16 09:46:59 -07:00
Dirk Brenken
496d527080 adblock: update 3.8.6
* refine stop logic to prevent needless dns backend restarts
  and other oddities
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-16 10:49:37 +02:00
Yousong Zhou
feacaa5f80 openvswitch: bump to version 2.12.0
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-09-16 07:59:31 +00:00
Stijn Tintel
6bcfacca5e strongswan: bump to 5.8.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2019-09-16 02:28:20 +03:00
W. Michael Petullo
aa96854564 scapy: fix PKG_LICENSE_FILES
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-15 13:36:52 -04:00
Rosen Penev
744fc97820 Merge pull request #9584 from ynezz/upstream/move-scons
scons: move host build tool to a proper place
2019-09-15 07:21:52 -07:00
W. Michael Petullo
3c9ce19f92 scapy: update to 2.4.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-14 12:11:19 -04:00
Toke Høiland-Jørgensen
1126368e0e sqm-scripts: Bump to v1.4.0
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2019-09-14 13:19:23 +02:00
Hannu Nyman
05c939c643 Merge pull request #9986 from neheb/nut
nut: Switch to pkgconfig for finding libgd
2019-09-14 10:39:16 +03:00
Rosen Penev
81e6bb77cf nut: Switch to pkgconfig for finding libgd
nut uses gdlib-config to find libgd, which happens to be deprecated. This
switches it to use pkgconfig and allows a fallback to gdlib-config, same
as the libusb check.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-13 12:56:43 -07:00
Ted Hess
2d49aab04c dnscrypt-proxy: Update to latest git version.
Revise dnscrypt-resolvers.csv with new dnscrypt-ca info.

Signed-off-by: Ted Hess <thess@kitschensync.net>
2019-09-13 14:46:44 -04:00
Rosen Penev
58e8fe2fee Merge pull request #9983 from James-TR/pdns-4.2.0-bump
pdns: bump version to 4.2.0
2019-09-13 10:59:03 -07:00
James Taylor
d7fb1e3fca pdns: bump version to 4.2.0
Bump PowerDNS Authoritative DNS Server to 4.2.0. Release changelong can be found at
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.0

Compile Tested: OpenWRT Snapshot - armv7
Run Tested: Linksys WRT1900ACS - package runs correctly, not all functionality has been tested.

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-09-13 23:14:55 +10:00
Jo-Philipp Wich
a8b4a28372 cgi-io: use splice() to stream backup archive
This improves the I/O performance when outputting large backups.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Jo-Philipp Wich
8c22db6531 cgi-io: pass appropriate HTTP error codes to failure()
Instead of always replying with a generic 500 internal server error code,
use more appropriate codes such as 403 to indicate denied permissions.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Jo-Philipp Wich
ab2a2b080d cgi-io: add download operation
Add a new `cgi-download` applet which allows to retrieve the contents
of regular files or block devices.

In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "path" containing the file path to
download.

Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".

Below is an example for the required acl rules to grant download access
to files or block devices:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "cgi-io",
        "objects": [
            [ "download", "read" ]
        ]
    }'

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/etc/config/*", "read" ],
            [ "/dev/mtdblock*", "read" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Jo-Philipp Wich
c8a86c8c8e cgi-io: use different acl scopes for path and command permissions
Use the `cgi-io` scope to check for permission to execute the requested
command (`upload`, `backup`) and the `file` scope to check path
permissions.

The reasoning of this change is that `cgi-io` is usually used in
conjunction with `rpcd-mod-file` to transfer large file data out
of band and `rpcd-mod-file` already uses the `file` scope to manage
file path access permissions. After this change, both `rpc-mod-file`
and `cgi-io` can share the same path acl rules.

Write access to a path can be granted by using an ubus call in the
following form:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/var/lib/uploads/*", "write" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Alexandru Ardelean
dc08f0fab8 seafile-seahub: update dependency to python-mysqlclient
The `python-mysql` package was updated with PR https://github.com/openwrt/packages/pull/9705

For seahub this was omitted, since the Python dependencies are prefixed
with `python-`, so it was missed during the grep search.
And grepping just for `mysql` yields many results.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-13 12:27:23 +03:00
Petr Štetiar
c3bacb6631 iotivity,smartsnmpd,gpsd: use scons from feed
commit 0c090fde68b2 ("scons: move host build tool to a proper place")
has moved scons into the packages feeds, so switch to that package
include and adjust build dependency to a new scons home.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2019-09-13 07:14:08 +02:00
Paul Tobias
21f5cdd2fa ddns-scripts: Use https for domains.google.com
Without https the update fails with:

```
 132954       : #> /usr/bin/curl -RsS -o /var/run/ddns/myddns_ipv4.dat --stderr /var/run/ddns/myddns_ipv4.err --noproxy '*' 'http://CENSORED:***PW***@domains.google.com/nic/update?hostname=CENSORED&myip=CENSORED'
 132954       : DDNS Provider answered:
<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="https://domains.google.com/nic/update?hostname=CENSORED&amp;myip=CENSORED">here</A>.
</BODY>
</HTML>
 132954 ERROR : IP update not accepted by DDNS Provider
```

Signed-off-by: Paul Tobias <tobias.pal@gmail.com>
2019-09-12 15:26:07 -07:00
Rosen Penev
eadd5abe40 smartsnmpd: Update to 2015-02-22 version
Ran through 2to3 to get it to compile.

Ran init script through shellcheck. Grouped several file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-12 15:11:49 -07:00
Rosen Penev
73a81c586d Merge pull request #9937 from mwarning/zerotier
zerotier: license change and make sure path exists
2019-09-12 14:20:04 -07:00
William Fleurant
1147695a9f yggdrasil: fix #9960 re: vendor fix
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2019-09-12 14:28:02 -04:00
Rosen Penev
61ccd29d37 Merge pull request #9705 from commodo/python-mysqlclient
python-mysql[client]: rename to python-mysqlclient & bump to version 1.4.4
2019-09-12 08:53:27 -07:00
Rosen Penev
408ccf7946 Merge pull request #9952 from neheb/rt
rtorrent: Switch to static linking
2019-09-11 22:48:40 -07:00
Dirk Brenken
04bd683af8 banip: update 0.2.1
* fix for #9954

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-10 19:34:49 +02:00
Sven Eckelmann
bbb1ea7345 treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2019-09-10 07:45:15 +02:00
Rosen Penev
331201deae Merge pull request #9947 from eglooca/master
netifyd: Updated to v2.92.
2019-09-09 22:20:05 -07:00
Rosen Penev
358495f118 rtorrent: Switch to using static libtorrent
rtorrent is the only user of libtorrent. Statically link to save space.

Added usleep patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-09 15:32:29 -07:00
Dirk Brenken
9b18f3ac82 Merge pull request #9948 from dibdot/banIP
banip: update 0.2.0
2019-09-09 21:25:25 +02:00
Dirk Brenken
5f49601e63 banip: update 0.2.0
* remove 'http-only' mode, all sources are now fetched from https sites
* the backup mode is now mandatory ('/tmp' is the default backup
  directory), always create and re-use backups if available.
  To force a re-download take the 'reload' action.
* support 'sshd' in addition to 'dropbear' for logfile parsing
  to detect break-in events
* always update the black-/whitelist with logfile parsing results
  in 'refresh' mode (no new downloads)
* rework the return code handling
* tweak procd trigger
* various small fixes
* (s)hellsheck cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-09 21:11:10 +02:00
Darryl Sokoloski
898de0336f netifyd: Updated to v2.92.
Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
2019-09-09 10:22:32 -04:00
Yousong Zhou
20efa32d2d acme: depends on gnu-wget
Fixes openwrt/packages#9456

Ref: https://github.com/openwrt/packages/issues/9456
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-09-09 09:40:34 +02:00
Yousong Zhou
99aed64005 wget: provides gnu-wget
So that packages like acme requiring features from it can depend on it
explicitly, not the more basic "wget" which is also provided by
"uclient-fetch"

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-09-09 09:40:34 +02:00
Moritz Warning
43cca9cddc zerotier: make sure the /var/lib exists
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-09-09 01:28:32 +02:00
Moritz Warning
2da998768b zerotier: change license to BSL 1.1
Business Source License.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-09-09 01:28:07 +02:00
Rosen Penev
41fe5a8335 softethervpn: Fix openssl header patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-06 19:51:59 -07:00
Dirk Brenken
35838f4271 Merge pull request #9929 from dibdot/adblock
adblock: update 3.8.5
2019-09-06 20:53:58 +02:00