aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | | | cgi-io: require whitelisting upload locationsJo-Philipp Wich2019-08-30
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Introduce further ACL checks to verify that the request-supplied upload location may be written to. This prevents overwriting things like /bin/busybox and allows to confine uploads to specific directories. To setup the required ACLs, the following ubus command may be used on the command line: ubus call session grant '{ "ubus_rpc_session": "d41d8cd98f00b204e9800998ecf8427e", "scope": "cgi-io", "objects": [ [ "/etc/certificates/*", "write" ], [ "/var/uploads/*", "write" ] ] }' Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | Merge pull request #9863 from dibdot/adblockDirk Brenken2019-08-29
|\ \ \ \ | | | | | | | | | | adblock: update 3.8.4
| * | | | adblock: update 3.8.4Dirk Brenken2019-08-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix the 'adb_sysver' output * pass the adblock version information to the helper scripts correctly Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #9862 from dibdot/travelmateDirk Brenken2019-08-29
|\ \ \ \ \ | |_|/ / / |/| | | | travelmate: update 1.4.12
| * | | | travelmate: update 1.4.12Dirk Brenken2019-08-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * automatically add open uplinks to your wireless config, e.g. hotel captive portals (disabled by default) * shift net status check in a separate function * (s)hellcheck cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | phantap: update to latest commitEtienne Champetier2019-08-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 758fba1 Fix EAP (802.1x) passthrough Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | | Merge pull request #9843 from cshoredaniel/pr-fix-uwsgi-cgi-pythonRosen Penev2019-08-27
|\ \ \ \ \ | | | | | | | | | | | | uwsgi-cgi: use python3 hostpkg not system python3
| * | | | | uwsgi-cgi: use python3 hostpkg not system python3Daniel F. Dickinson2019-08-27
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On a Debian system without python3-distutils install, uwsgi-cgi was failing to build because it couldn't import sysconfig from distutils. OpenWrt packages should be using the OpenWrt python not the system python. In addition we need to use python3 not python2, even when both are available. Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
* / | | | hcxtools: Updated to v5.2.0. Also modified default install dir to /usr/sbinAndreas Nilsen2019-08-26
|/ / / / | | | | | | | | | | | | Signed-off-by: Andreas Nilsen <adde88@gmail.com>
* | | | Merge pull request #9828 from dibdot/adblockDirk Brenken2019-08-26
|\ \ \ \ | | |/ / | |/| | adblock: update 3.8.3
| * | | adblock: update 3.8.3Dirk Brenken2019-08-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix a dns restart issue if 'flush dns cache' is set * fix a suspend/resume issue, the status wasn't properly updated * fix a long standing query issue * rework return code handling, mostly for debugging * various cleanups & cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | phantap: update to latest commitEtienne Champetier2019-08-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2ccec01 Replace phantap (script) with phantap-learn (C) 7ed8acd Remove Makefile cc0911e phantap-learn: Output ERROR on stderr and DEBUG on stdout b50421e phantap-learn: add dhcp handling code 17da18b phantap-learn: modify dhcp-protocol.h af55a3d phantap-learn: import dhcp-protocol.h from dnsmasq 850af88 phantap-learn: add network info detection code 721423c phantap-learn: add handle_packet_ip() / handle_packet_arp() 2c0f1b0 phantap-learn: add set_bpf_filter() b914e3e phantap-learn: rework handle_neighboor() 8ffc56c phantap-learn: rework handle_packet() Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com> Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | softflowd: Update to 1.0.0Rosen Penev2019-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Development moved to GitHub. Update URLs. Cleaned up Makefile a bit for consistency between packages. Added patch that removes deprecated bzero. Ran init script through shellcheck. Fixed minor warnings. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | tor: update to version 0.4.1.5Jan Pavlinec2019-08-23
| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | simple-adblock: move to POSIX compliance, better output on check, better bg ↵Stan Grishin2019-08-22
| | | | | | | | | | | | | | | | | | | | | | | | process data collection. Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | Merge pull request #9596 from dengqf6/bindRosen Penev2019-08-22
|\ \ \ \ | | | | | | | | | | bind: update to 9.14.4
| * | | | bind: update to 9.14.4DENG Qingfang2019-07-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | | | Merge pull request #9802 from stangri/master-simple-adblockRosen Penev2019-08-22
|\ \ \ \ \ | | | | | | | | | | | | simple-adblock: boot-up optimization
| * | | | | simple-adblock: boot-up optimizationStan Grishin2019-08-22
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | | | Merge pull request #9733 from dengqf6/ocRosen Penev2019-08-22
|\ \ \ \ \ \ | |/ / / / / |/| | | | | openconnect: update to 8.04
| * | | | | openconnect: update to 8.04DENG Qingfang2019-08-15
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | Removed upstream patches Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | | | Merge pull request #9451 from alinnastac/snmp-firewall-reloadStijn Tintel2019-08-22
|\ \ \ \ \ | | | | | | | | | | | | net-snmp: reload firewall only when needed
| * | | | | net-snmp: reload firewall only when neededAlin Nastac2019-08-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Firewall needs to be reloaded in the following cases: - on service start when snmpd.general.enabled=1 - when snmpd daemon is stopped Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
* | | | | | Merge pull request #9741 from lucize/bfddRosen Penev2019-08-22
|\ \ \ \ \ \ | | | | | | | | | | | | | | bfdd: add BFD package
| * | | | | | bfdd: add BFD packageLucian Cristian2019-08-22
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bidirectional Forwarding Detection (BFD) is a network protocol that is used to detect faults between two forwarding engines connected by a link. Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | yggdrasil: bump to 0.3.8William Fleurant2019-08-21
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: William Fleurant <meshnet@protonmail.com>
* | | | | | Merge pull request #9678 from Andy2244/cifsd-update-05-08-2019Rosen Penev2019-08-21
|\ \ \ \ \ \ | | | | | | | | | | | | | | cifsd: update to git (2019-08-19)
| * | | | | | cifsd: update to git (2019-08-19)Andy Walsh2019-08-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update to git (2019-08-19) * use new "kill_server" sysfs option on stop * ensure reload_service() works correctly * add inherit owner, force create mode, force directory mode UCI options * add patches for mips target (vfree, vmalloc) Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | | fastd: update URL and PKG_SOURCE_URLMatthias Schiffer2019-08-21
| | | | | | |
* | | | | | | Merge pull request #9788 from dibdot/adblockDirk Brenken2019-08-21
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | / / | | |_|_|/ / | |/| | | | adblock: update 3.8.2
| * | | | | adblock: update 3.8.2Dirk Brenken2019-08-21
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * background service: no longer miss "signal" events for the dns backend (to trigger adblock) * fix a dns backend reload issue during switch between different blocking modes * domain query: report found domains only once in "null" blocking mode with IPv4 & IPv6 list entries Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #9780 from wfleurant/ygg-bump-0-3-7Rosen Penev2019-08-20
|\ \ \ \ \ | |/ / / / |/| | | | yggdrasil: bump to 0.3.7
| * | | | yggdrasil: bump to 0.3.7William Fleurant2019-08-20
| | | | | | | | | | | | | | | | | | | | Signed-off-by: William Fleurant <meshnet@protonmail.com>
* | | | | Merge pull request #9779 from dibdot/adblockDirk Brenken2019-08-20
|\ \ \ \ \ | |/ / / / |/| | | | adblock: update 3.8.1
| * | | | adblock: update 3.8.1Dirk Brenken2019-08-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix a possible race condition during DNS file reset on slow hardware * optimize DNS restart behaviour in 'null' blocking mode * mute useless warnings Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #9763 from stangri/master-simple-adblockHannu Nyman2019-08-18
|\ \ \ \ \ | | | | | | | | | | | | simple-adblock: support for varios DNS resolvers/options
| * | | | | simple-adblock: support for varios DNS resolvers/optionsStan Grishin2019-08-17
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | | | Merge pull request #9727 from cotequeiroz/iotivity_py2Rosen Penev2019-08-17
|\ \ \ \ \ \ | | | | | | | | | | | | | | iotivity: force use of python2 for scons
| * | | | | | iotivity: force use of python2 for sconsEneas U de Queiroz2019-08-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | iotivity's scons build script is not compatible with python3, so use python2.7 from python/host to run it. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | | | | clamav: update to version 0.101.3Josef Schlehofer2019-08-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Correct SPDX License Identifier Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | Merge pull request #9748 from wfleurant/ygg-builder-hotfixRosen Penev2019-08-17
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | yggdrasil: fix #9712 upstream dependency with branch develop
| * | | | | | yggdrasil: fix #9712 upstream dependency with branch developWilliam Fleurant2019-08-16
| | |_|/ / / | |/| | | | | | | | | | | | | | | | Signed-off-by: William Fleurant <meshnet@protonmail.com>
* | | | | | Merge pull request #9571 from damadmai/mwan3-allipsFlorian Eckert2019-08-17
|\ \ \ \ \ \ | | | | | | | | | | | | | | mwan3: Add missing IPs to wanb
| * | | | | | mwan3: Add missing IPs to wanbDaniel A. Maierhofer2019-08-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Florian Eckert @feckert Compile tested: not needed Run tested: x86_64 Description: Only two of the four IPs defined for wan are found in wanb, adding it so it is the same. Signed-off-by: Daniel A. Maierhofer <git@damadmai.at>
* | | | | | | Merge pull request #9742 from dibdot/adblockDirk Brenken2019-08-16
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | / / / | | |_|/ / / | |/| | | | adblock: release 3.8.0
| * | | | | adblock: release 3.8.0Dirk Brenken2019-08-16
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add support for 'DNS File Reset', where the final DNS blockfile will be purged after DNS backend loading (save storage space). A small background service will be started to trace/handle dns backend reloads/restarts * add support for the 'null' blocking variant in dnsmasq (via addn-hosts), which may provide better response times in dnsmasq * enhance the report & search engine to support the new blocking variants. Search now includes backups & black-/whitelist as well * compressed source list backups are now mandatory (default to '/tmp') * speed up TLD compression * E-Mail notification setup is now integrated in UCI/LuCI * update the LuCI frontend to reflect all changes (separate PR) * drop preliminary dnscrypt-proxy-support (use dnsmasq instead) * drop additional 'dnsjail' blocklist support (not used by anyone) * procd cleanups in init * various shellcheck cleanups * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #9701 from cotequeiroz/https-dns-proxy_clangRosen Penev2019-08-14
|\ \ \ \ \ | | | | | | | | | | | | https-dns-proxy: avoid picking up host clang-tidy
| * | | | | https-dns-proxy: avoid picking up host clang-tidyEneas U de Queiroz2019-08-14
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Otherwise compilation fails when clang-tidy is found in the host: -- clang-tidy found: /usr/lib/llvm/7/bin/clang-tidy error: unknown argument: '-fhonour-copts' [clang-diagnostic-error] error: unknown argument:'-iremap[...]:https_dns_proxy-2018-04-23' [clang-diagnostic-error] Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | | Merge pull request #9684 from eglooca/masterRosen Penev2019-08-14
|\ \ \ \ \ | | | | | | | | | | | | netifyd: Updated to v2.91.
| * | | | | netifyd: Updated to v2.91.Darryl Sokoloski2019-08-09
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>