aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | Merge pull request #12899 from aaronjg/openwrtize-openfortivpnRosen Penev2020-08-01
|\ \ \ \ | | | | | | | | | | openfortivpn: use a more 'OpenWRT' paradigm throughout the code
| * | | | openfortivpn: remove explicit handling of peerdns and defaultrouteAaron Goodman2020-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | netifd is clever enough to handle the peerdns and default route arguments, so we can just let them get passed along, and when ppp-up invokes proto_send_update, netifd will only apply what is needed Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | openfortivpn: improve loggingAaron Goodman2020-07-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | openfortivpn: add defaultroute optionAaron Goodman2020-07-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | openfortivpn: use functions/network.sh to access interface paramsAaron Goodman2020-07-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | openfortivpn: use proper method to access configuration in hotplugAaron Goodman2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use functions.sh to get configuration variables rather than calling uci Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | openfortivpn: version bump to 1.14.1-6Aaron Goodman2020-07-28
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | openfortivpn: don't report error if symlink already existsAaron Goodman2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If two openfortivpn scripts are started at the same time, a race condition can occur where the conditional evaluates to true, but the symlink exists by the time the other script tries to create it Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | openfortivpn: minor formatting changesAaron Goodman2020-07-28
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | openfortivpn: block restart after authentication failureAaron Goodman2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Block restart of the interface if the openfortivpn fails to authenticate. Without this check, with a bad password, netifd will continually hit the VPN endpoint with connection attempts Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | openfortivpn: Only start autostart interfaces on hotplug eventAaron Goodman2020-07-21
| |/ / / | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | | | Merge pull request #12904 from odmdas/odmdas-freeradius3-MakefileRosen Penev2020-08-01
|\ \ \ \ | | | | | | | | | | freeradius3: add missing conffiles to Makefile
| * | | | freeradius3: add missing conffiles to MakefileAlexey Dobrovolsky2020-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Config files /etc/freeradius3/policy.d/accounting /etc/freeradius3/policy.d/filter /etc/freeradius3/proxy.conf /etc/freeradius3/sites-available/default and link /etc/freeradius3/sites-enabled/default are in the freeradius3 package and are mentioned in the main config file /etc/freeradius3/radiusd.conf Thus, they must be explicitly specified in the Makefile. File /etc/freeradius3/sites/default is not included in the package, is not created during installation, is not mentioned in the main config file and should therefore be excluded from the Makefile. Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
* | | | | Merge pull request #12994 from ↵Rosen Penev2020-08-01
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | dangowrt/libsodium-build-with-scalarmult_ed25519_ref10 libsodium: compile with scalarmult_ed25519_ref10
| * | | | | libsodium: compile with scalarmult_ed25519_ref10Daniel Golle2020-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | scalarmult_ed25519_ref10 was excluded from 'minimal' variant (which is what we are building) by upstream commit f5076db5f8ef27. Revert that to allow downstream projects to make use of it (eg. gnunet) Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | Merge pull request #12984 from gladiac1337/haproxy-2.2.2Rosen Penev2020-08-01
|\ \ \ \ \ \ | | | | | | | | | | | | | | haproxy: Update HAProxy to v2.2.2
| * | | | | | haproxy: Update HAProxy to v2.2.2Christian Lachner2020-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash - This new version also adds LUA 5.4 support Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | | | libextractor: update to 1.10Rosen Penev2020-08-01
| |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Made two compile options dependent on whether or not the plugins are selected. Removed autoreconf as autools files are not being patched. Added PKG_BUILD_PARALLEL for faster compilation. Added patch to fix compilation with libjpeg-turbo. libjpeg-turbo can be fixed to include this API, but it's probably better for size reasons to patch libextractor instead. Added -liconv since it seems to be needed for some reason. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | glib2: add back libiconv/host build dependencyRosen Penev2020-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | HOST_LDFLAGS are used in target builds with meson. Having -liconv is necessary because of certain hosts that lack iconv in libc. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | meson: backport upstream rpath fixRosen Penev2020-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | -Wl,rpath= does not work with clang, yet -Wl,rpath, does not work with meson. Backport upstream patch fixing this. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | Merge pull request #11017 from neheb/jpeg-turboRosen Penev2020-07-31
|\ \ \ \ \ \ | | | | | | | | | | | | | | libjpeg-turbo: Add new package
| * | | | | | libjpeg-turbo: Add new packageRosen Penev2020-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's faster than regular libjpeg with ASM optimizations for various platforms. Tests with djpeg indicate that it's twice as fast. This is meant to replace the regular libjpeg. Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | libjpeg: removeRosen Penev2020-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This library is more than 2x slower that -turbo on MIPS. It also conflicts with -turbo as they write the same InstallDev entries. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | glib2: add gettext-full build dependencyRosen Penev2020-07-31
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I don't know why this is needed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* / / / / / glib2: revert intl changeRosen Penev2020-07-31
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was causing massive buildbot failure. The intent was to fix uClibc-ng and CONFIG_BUILD_NLS, but that ended up breaking everything. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #12594 from hnyman/nlbwHannu Nyman2020-07-31
|\ \ \ \ \ | | | | | | | | | | | | nlbwmon: add hotplug script to reload after interface ifup
| * | | | | nlbwmon: add hotplug script to reload after interface ifupHannu Nyman2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a hotplug script to reload nlbwmon's config after interface ifup actions. That should improve the detection of the IPv6 LAN address that can get enabled a bit later in the boot process. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | | docker-ce: fix bip default config valueFlorian Eckert2020-07-31
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | Merge pull request #12478 from ja-pa/jsoncpp-updateJosef Schlehofer2020-07-31
|\ \ \ \ \ \ | | | | | | | | | | | | | | jsoncpp: update to version 1.9.3
| * | | | | | jsoncpp: update to version 1.9.3Jan Pavlinec2020-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | Merge pull request #12980 from neheb/plsRosen Penev2020-07-31
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | pulseaudio: fix compilation with ICONV_FULL
| * | | | | | | pulseaudio: fix compilation with ICONV_FULLRosen Penev2020-07-30
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reordered check to check external iconv first. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | mpd: fixup iconv supportRosen Penev2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Removes liconv LDFLAG and fixes ICONV_FULL. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #12978 from Andy2244/ksmbd_3-2-4Rosen Penev2020-07-30
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | ksmbd: update to 3.2.4
| * | | | | | | ksmbd: update to 3.2.4Andy Walsh2020-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | upstream changelog: * cifsd: release 3.2.4 version * cifsd: don't support FSCTL_VALIDATE_NEGOTIATE_INFO if connect dialect is smaller than SMB3.02 * cifsd: initialize server using init_smb2_0_server() instead of init_smb3_11_server() * cifsd: fix auto negotiation failure when setting min/max protocol is higher than SMB 2.0 * cifsd: sign session setup response on SMB3.0 and SMB3.02 * cifsd: make 8byte context alignment when there is the next context in negotiate contexts * cifsd: fix null pointer dereferencing error in ->set_sign_rsp() * cifsd: ignore EOPNOTSUPP error from ksmbd_vfs_alloc_size * cifsd: fix warning: unused variable small_sz * cifsd: release 3.2.3 version * cifsd: set correct status code on ksmbd_vfs_readdir error * cifsd: fix stuck issue while writing many files with windows client * cifsd: return only a single entry if SMB2_RETURN_SINGLE_ENTRY is set Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | | | Merge pull request #12971 from neheb/glb2Rosen Penev2020-07-30
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | glib2: add back gettext dependencies
| * | | | | | | glib2: add back gettext dependenciesRosen Penev2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The libintl check is broken in meson.build. Patched it and added back the gettext build dependencies. Avoids the proxy-intl thing that glib2 likes to use. Updated configure options. Refreshed patches. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | Merge pull request #12907 from neheb/muttRosen Penev2020-07-30
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | mutt: update to 1.14.6
| * | | | | | | | mutt: update to 1.14.6Rosen Penev2020-07-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2020-14154 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | Merge pull request #12975 from ja-pa/clamav-security-fixJosef Schlehofer2020-07-30
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | clamav: update to version 0.102.4 (security fix)
| * | | | | | | | | clamav: update to version 0.102.4 (security fix)Jan Pavlinec2020-07-30
| | |_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2020-3481 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | | | Merge pull request #12974 from ja-pa/python3-maxminddb-2.0.1Hannu Nyman2020-07-30
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | python3-maxminddb: update to version 2.0.1
| * | | | | | | | | python3-maxminddb: update to version 2.0.1Jan Pavlinec2020-07-30
| |/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | | | nano: update to 5.0Hannu Nyman2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update nano editor to version 5.0. http://git.savannah.gnu.org/cgit/nano.git/tree/NEWS Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | | | | | Merge pull request #12897 from TDT-AG/pr/20200721-docker-ceFlorian Eckert2020-07-30
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | docker-ce: add default bridge to openwrt uci backend
| * | | | | | | | | docker-ce: add uci config on bootFlorian Eckert2020-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | docker-ce: fix typo for registry_mirrors uci optionFlorian Eckert2020-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | docker-ce: add bip uci to default configFlorian Eckert2020-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | docker-ce: add hosts optionFlorian Eckert2020-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | docker-ce: add default bridge to openwrt uci backendFlorian Eckert2020-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit adds two additional init.d targets: * uciadd: This command adds the default docker0 bridge to the network configuration. Additional, a new firewall zone docker is created * ucidel This command removes default docker0 bridge from the network configuration. The new docker firewall zone gets also deleted. Signed-off-by: Florian Eckert <fe@dev.tdt.de>