aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | modemmanager: bump to 1.18.4 with patchNicholas Smith2022-02-11
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | The included patch corrects an issue preventing udev rules from being parsed correctly. [1][2] This patch should not be needed after the next release. [3] More information: [1] https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/commit/e9f254ba3f923248efffe4fd458dc5e5469e0f73 [2] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009024.html [3] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009022.html Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
* | openssh-server: manually set path to passwd binaryRucke Teg2022-02-10
| | | | | | | | | | | | | | | | In the build environment the autotools finds the `passwd` binary in /usr/bin. But in the target image it is available under /bin instead. Manually set the path to `passwd` binary to `/bin/passwd` Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
* | openssh-server: change sshd.failsafeRucke Teg2022-02-10
| | | | | | | | | | | | | | There is no need to remove root password from /etc/shadow as the password in the file is blank anyway in the failsafe mode. Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
* | jool: update default configTiago Gaspar2022-02-10
| | | | | | | | | | | | | | | | Update the default configuration files to match the upstream example ones. Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
* | dnsproxy: Update to 0.41.1Tianling Shen2022-02-10
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | mbusd: Repair UCI config file about parityChip Lee2022-02-10
| | | | | | | | | | | | in mbusd, parity must be N, E or O, can't be y. Signed-off-by: Chip Lee <chplee@gmail.com>
* | Merge pull request #17829 from neheb/6Dirk Brenken2022-02-10
|\ \ | | | | | | banip: make reproducible
| * | banip: make reproducibleRosen Penev2022-02-07
| | | | | | | | | | | | | | | | | | Timestamp needs to be removed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #17828 from neheb/5Dirk Brenken2022-02-10
|\ \ \ | | | | | | | | adblock: make reproducible
| * | | adblock: make reproducibleRosen Penev2022-02-07
| |/ / | | | | | | | | | | | | | | | Need to get rid of the timestamp. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | knot: update to 3.1.6Jan Hák2022-02-09
| | | | | | | | | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz>
* | | Merge pull request #17827 from skingry/snmpd_init_orderStijn Tintel2022-02-09
|\ \ \ | | | | | | | | net-snmp: move start order from 50 to 99
| * | | net-snmp: move start order from 50 to 99Seth Kingry2022-02-08
| | | | | | | | | | | | | | | | Signed-off-by: Seth Kingry <sjkingry@gmail.com>
* | | | usteer: update to latest git headDavid Bauer2022-02-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 6aebb75 local-node: check correct field f42bf29 gitignore: add .orig files 3c0cd98 local-node: save latest bss-transition-response 1dc69d7 ubus: add get_connected_clients 04ef308 local-node: save beacon-reports b0dab90 measurement: add handling of measurements 76ccae6 node: add methods to access nodes by bssid 3b51bfb local-node: obtain channel + op-class c7830b5 policy: add min_snr_kick_delay e36967f local-node: handle BSS transition queries 022635c policy: don't track roam_scan_done 742236f policy: fix incurrect handling of scan-requests with disabled timeout 9a78412 policy: add roam-scan timeout 7e999e0 policy: don't select better candidate with bad signal 3c1dd51 policy: export snr_to_signal to other source files 1c5a738 ubus: only request beacon-report for current SSID 5610ace config: make remote_node_timeout configurable 918b809 policy: only select candidates with better load 55e98d8 sta: uniform disconnect state handling 806e647 sta: remove duplicate code 2ccb99e policy: remove redundant candidate evaluation bbf133f policy: fix not selecting better candidate on request Signed-off-by: David Bauer <mail@david-bauer.net>
* | | | tcpreplay: bump to version 4.4.0Alexandru Ardelean2022-02-08
| |/ / |/| | | | | | | | | | | | | | Also need to use musl-fts when building with musl now. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | bind: support compile-time exclusion of DNS-over-HTTPS supportNoah Meyerhans2022-02-07
| | | | | | | | | | | | | | | | | | | | | | | | DoH is enabled by default, but disabling it removes the need to link against libnghttp2, which may be desirable more constrained environments. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | i2pd: add service reload supportR4SAS I2P2022-02-07
| | | | | | | | | | | | Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
* | | gg: Update to 0.2.2Tianling Shen2022-02-07
| | | | | | | | | | | | | | | | | | Updated PKG_LICENSE_FILES according to upstream change. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #17785 from TDT-AG/pr/20220204-stunnelFlorian Eckert2022-02-07
|\ \ \ | | | | | | | | stunnel: update version to 5.62
| * | | stunnel: update version to 5.62Florian Eckert2022-02-04
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #17784 from TDT-AG/pr/20220204-keepalivedFlorian Eckert2022-02-07
|\ \ \ \ | | | | | | | | | | keepalived: update version to 2.2.7
| * | | | keepalived: update version to 2.2.7Florian Eckert2022-02-04
| |/ / / | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | / / https-dns-proxy: init script refactoringStan Grishin2022-02-06
| |/ / |/| | | | | | | | | | | | | | | | | * consolidate dnsmasq config manipulation into one function * more elegant code for PROCD data processing (Thanks @jow-!) Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | v2rayA: Update to 1.5.6.2Tianling Shen2022-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | Manually added new env variable `XDG_DATA_HOME` which won't be passed by procd by default. Removed upstreamed patch. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | v2raya: init: convert arguments into env variablesTianling Shen2022-02-04
| | | | | | | | | | | | | | | | | | Suggested by upstream, to provide forward compatibility. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | xray-core: Update to 1.5.3Tianling Shen2022-02-04
| | | | | | | | | | | | | | | | | | | | | | | | Removed outdated `alterId` in sample config. Updated geodata to latest version while at it. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #17671 from tohojo/sqm-nftHannu Nyman2022-02-03
|\ \ \ | |/ / |/| | sqm-scripts: Change iptables dependency to iptables-nft
| * | sqm-scripts: Change iptables dependency to iptables-nftToke Høiland-Jørgensen2022-02-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There's only one of the shaper scripts (simple.qos) that uses iptables, and it should be fine with iptables-nft for compatibility with the new default nft-based firewall. Confusingly, we still need the iptables-mod-ipopt package to get the DSCP match module; we never used CONNMARK, though, so drop the iptables-mod-conntrack-extra dependency while we're at it. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* | | Merge pull request #17748 from neheb/8Florian Eckert2022-02-03
|\ \ \ | | | | | | | | xinetd: fix bad printf formats
| * | | xinetd: fix bad printf formatsRosen Penev2022-01-30
| | | | | | | | | | | | | | | | | | | | | | | | Easier to use the proper C macro. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #17762 from stangri/master-https-dns-proxyStan Grishin2022-02-02
|\ \ \ \ | | | | | | | | | | https-dns-proxy: update to 2021-11-22-1
| * | | | https-dns-proxy: update to 2021-11-22-1Stan Grishin2022-01-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update to 2021-11-22 upstream source * update patch file * update init script to preserve manual entries (fixes https://github.com/stangri/source.openwrt.melmac.net/issues/149) * update init script service_triggers Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | adguardhome: Bump adguardhome to v0.107.3 stableJames White2022-02-02
| | | | | | | | | | | | | | | | | | | | Signed-off-by: James White <james@jmwhite.co.uk>
* | | | | apache2: security update to version 2.4.52Josef Schlehofer2022-02-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVEs: - CVE-2021-44790 - CVE-2021-44224 Refreshed patches Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | strongswan: Update to 5.9.5Philip Prindeville2022-02-01
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | wg-installer: use babeld add_interface functionNick Hainke2022-02-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With commit 385200443554 ("babeld: add add_interface function") babeld has a new ubus function allowing to dynamically add an interface. Before the add_interface function, we were required to reload babeld. The reload influenced the babeld routing. However, the remove part is still missing and will be added at a later stage. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | bind: bump to 9.18.0Noah Meyerhans2022-02-01
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | | | samba4: update to 4.14.12Andy Walsh2022-02-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update to 4.14.12 * fixes: CVE-2021-44142, CVE-2022-0336 Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | chaosvpn: fix build on macosSergey V. Lobanov2022-01-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | chaosvpn Makefile detects Darwin (macos) and changes compilation flags for macos target, but OpenWrt is always Linux so build fails. This patch redefines OS=Linux to use Linux compilation flags. Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* | | | | nut: fix build on macosSergey V. Lobanov2022-01-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nut build fails on macos due to: 1. configure script can not use AR env var due to OpenWrt build system provides only executable name (e.g. aarch64-openwrt-linux-musl-gcc-ar) but configure script checks if AR has '/'. As a result, configure script ignores AR env var and uses system `ar` but macos `ar` is not compatible with the objects generated by OpenWrt GCC toolchain. This commit explicitly sets ac_cv_path_AR=$(TARGET_AR) to use OpenWrt toolchain AR. 2. configure script detects if build host is macos and adds macosx_ups driver as a build target, but this driver can not be build with OpenWrt toolchain because OpenWrt is Linux. This commit explicitly disables macosx_ups driver using configure flag --without-macosx_ups Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* | | | | softethervpn: fix build on macosSergey V. Lobanov2022-01-31
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | host-compile fails on macos due to several reasons: 1. host-compile Makefile always selected for linux 2. macos host cc (clang) fails due to implicit-function-declaration 3. ar and ranlib tools are hardcoded in softethervpn Makefiles All three issues are fixed by this patch Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* | | | bridge-utils: update to 1.7.1Rosen Penev2022-01-31
| | | | | | | | | | | | | | | | | | | | | | | | Added missing limits header for PATH_MAX. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | linuxptp: fix bad formats with ppc64 and mips64Rosen Penev2022-01-31
| | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | ddns-scripts: remove extra pipeAndré Herbst2022-01-31
|/ / / | | | | | | | | | | | | The extra pipe caused an error WARN : PID 'xyz' exit WITH ERROR '2' when executing ddns update. Signed-off-by: André Herbst <moormaster@gmx.net>
* | | knxd: fix build on macosSergey V. Lobanov2022-01-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | knxd compilation fails on macos due to clang does not support exit() builtin function that is used to detect build cc This commit adds a patch to fix this issue (replaces `exit 0` by `return 0` in conftest.c) Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* | | dnsproxy: Update to 0.41.0Tianling Shen2022-01-30
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | coova-chilli: add interface_trigger "wan"Thibaut VARÈNE2022-01-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This intends to replace the hotplug script. It still hardcodes "wan" interface name (as several other packages do) for lack of a deterministic way to detect the actual wan iface before it is brought up, but at least it is fully integrated with procd and will not start a disabled service. The interface trigger forcefully restarts chilli as a simple reload may not be sufficient to recover from wan changes. Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* | | coova-chilli: remove hotplug callThibaut VARÈNE2022-01-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This hotplug trigger unconditionaly restarts coova-chilli when the "wan" interface sees action "ifup", without checking whether or not the service is disabled or the upstream interface is actually called "wan". This hotplug could be replaced by a suitable service trigger instead. Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* | | coova-chilli: execute firewall cleanup at shutdownThibaut VARÈNE2022-01-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Coova Chilli creates "undo" firewall scripts that are intended to be run when the daemon is shut down. Failure to do so results in leftover entries in firewall and duplicated ones if chilli is subsequently restarted. Execute these scripts when the service stops. Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* | | coova-chilli: postpone startup until wan is availableThibaut VARÈNE2022-01-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | Coova Chilli will fail to start if e.g. it cannot resolve names in its configuration (like uamserver, radiusserver, etc) which is typically the case when wan is unavailable. Prevent this situation by delaying startup if wan is not available. Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>