aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* cshark: Switch to standard PKG_SOURCE_VERSION/DATERosen Penev2019-09-21
| | | | | | | | | | Several other cleanups. Added PKG_BUILD_PARALLEL for faster compilation. Removed PKG_INSTALL as cmake.mk already defines it. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* phantap: update to latest commitDiana Dragusin2019-09-21
| | | | | | | | | | | 7cc6017 phantap-learn: Add another way to detect the victim 8a4b30b phantap-learn: Continue listening for DNS traffic after initial detection 3e1cf09 Improve setup documentation ddde4b9 Fix neighbour spelling bee7e92 Readme.md: Update efb57f6 Readme.md: Update Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
* Merge pull request #10027 from James-TR/fix/pdns-lua-depRosen Penev2019-09-18
|\ | | | | pdns: Explicitly define lua implementation
| * pdns: Explicitly define lua implementationJames Taylor2019-09-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Compile Tested: yes, selects lua as implementation and doesn't pick up luajit Run Tested: no, minor change Maintainer: me Description: On some architectures PowerDNS was preferring Luajit over Lua, which wasn't added as a dependency. On previous versions this was controlled by passing `--with-lua` and `--without-luajit` however this isn't functional anymore. On the 4.2 series, it is instead possible to define the lua implementation to be used by passing `--with-lua=[implementation]` ie `--with-lua=lua` Signed-off-by: James Taylor <james@jtaylor.id.au>
* | irssi: update to version 1.2.2 (security fix)Jan Pavlinec2019-09-18
|/ | | | | | Fixes CVE-2019-15717 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* treewide: add PKG_CPE_ID for better cvescanner coverageJan Pavlinec2019-09-17
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* Merge pull request #10015 from mwarning/ztFlorian Eckert2019-09-17
|\ | | | | zerotier: update to 1.4.6
| * zerotier: update to 1.4.6Moritz Warning2019-09-17
| | | | | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | ulogd: Add back autoreconfRosen Penev2019-09-16
|/ | | | | | Compile fails at times, probably because of the patches. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Merge pull request #9995 from flyn-org/scapyRosen Penev2019-09-16
|\ | | | | scapy: update to 2.4.3
| * scapy: fix PKG_LICENSE_FILESW. Michael Petullo2019-09-15
| | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
| * scapy: update to 2.4.3W. Michael Petullo2019-09-14
| | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | adblock: update 3.8.6Dirk Brenken2019-09-16
| | | | | | | | | | | | | | * refine stop logic to prevent needless dns backend restarts and other oddities * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | openvswitch: bump to version 2.12.0Yousong Zhou2019-09-16
| | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | strongswan: bump to 5.8.1Stijn Tintel2019-09-16
| | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | Merge pull request #9584 from ynezz/upstream/move-sconsRosen Penev2019-09-15
|\ \ | | | | | | scons: move host build tool to a proper place
| * | iotivity,smartsnmpd,gpsd: use scons from feedPetr Štetiar2019-09-13
| | | | | | | | | | | | | | | | | | | | | | | | commit 0c090fde68b2 ("scons: move host build tool to a proper place") has moved scons into the packages feeds, so switch to that package include and adjust build dependency to a new scons home. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* | | sqm-scripts: Bump to v1.4.0Toke Høiland-Jørgensen2019-09-14
| | | | | | | | | | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* | | Merge pull request #9986 from neheb/nutHannu Nyman2019-09-14
|\ \ \ | | | | | | | | nut: Switch to pkgconfig for finding libgd
| * | | nut: Switch to pkgconfig for finding libgdRosen Penev2019-09-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nut uses gdlib-config to find libgd, which happens to be deprecated. This switches it to use pkgconfig and allows a fallback to gdlib-config, same as the libusb check. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | dnscrypt-proxy: Update to latest git version.Ted Hess2019-09-13
|/ / / | | | | | | | | | | | | | | | Revise dnscrypt-resolvers.csv with new dnscrypt-ca info. Signed-off-by: Ted Hess <thess@kitschensync.net>
* | | Merge pull request #9983 from James-TR/pdns-4.2.0-bumpRosen Penev2019-09-13
|\ \ \ | | | | | | | | pdns: bump version to 4.2.0
| * | | pdns: bump version to 4.2.0James Taylor2019-09-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump PowerDNS Authoritative DNS Server to 4.2.0. Release changelong can be found at https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.0 Compile Tested: OpenWRT Snapshot - armv7 Run Tested: Linksys WRT1900ACS - package runs correctly, not all functionality has been tested. Signed-off-by: James Taylor <james@jtaylor.id.au>
* | | | cgi-io: use splice() to stream backup archiveJo-Philipp Wich2019-09-13
| | | | | | | | | | | | | | | | | | | | | | | | This improves the I/O performance when outputting large backups. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | cgi-io: pass appropriate HTTP error codes to failure()Jo-Philipp Wich2019-09-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of always replying with a generic 500 internal server error code, use more appropriate codes such as 403 to indicate denied permissions. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | cgi-io: add download operationJo-Philipp Wich2019-09-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a new `cgi-download` applet which allows to retrieve the contents of regular files or block devices. In order to initiate a transfer, a POST request in x-www-form-urlencoded format must be sent to the applet, with one field "sessionid" holding the login session and another field "path" containing the file path to download. Further optional fields are "filename" which - if present - will cause the download applet to set a Content-Dispostition header and "mimetype" which allows to let the applet respond with a specific type instead of the default "application/octet-stream". Below is an example for the required acl rules to grant download access to files or block devices: ubus call session grant '{ "ubus_rpc_session": "...", "scope": "cgi-io", "objects": [ [ "download", "read" ] ] }' ubus call session grant '{ "ubus_rpc_session": "...", "scope": "file", "objects": [ [ "/etc/config/*", "read" ], [ "/dev/mtdblock*", "read" ] ] }' Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | cgi-io: use different acl scopes for path and command permissionsJo-Philipp Wich2019-09-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use the `cgi-io` scope to check for permission to execute the requested command (`upload`, `backup`) and the `file` scope to check path permissions. The reasoning of this change is that `cgi-io` is usually used in conjunction with `rpcd-mod-file` to transfer large file data out of band and `rpcd-mod-file` already uses the `file` scope to manage file path access permissions. After this change, both `rpc-mod-file` and `cgi-io` can share the same path acl rules. Write access to a path can be granted by using an ubus call in the following form: ubus call session grant '{ "ubus_rpc_session": "...", "scope": "file", "objects": [ [ "/var/lib/uploads/*", "write" ] ] }' Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | seafile-seahub: update dependency to python-mysqlclientAlexandru Ardelean2019-09-13
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | The `python-mysql` package was updated with PR https://github.com/openwrt/packages/pull/9705 For seahub this was omitted, since the Python dependencies are prefixed with `python-`, so it was missed during the grep search. And grepping just for `mysql` yields many results. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | ddns-scripts: Use https for domains.google.comPaul Tobias2019-09-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Without https the update fails with: ``` 132954 : #> /usr/bin/curl -RsS -o /var/run/ddns/myddns_ipv4.dat --stderr /var/run/ddns/myddns_ipv4.err --noproxy '*' 'http://CENSORED:***PW***@domains.google.com/nic/update?hostname=CENSORED&myip=CENSORED' 132954 : DDNS Provider answered: <HTML> <HEAD> <TITLE>Moved Temporarily</TITLE> </HEAD> <BODY BGCOLOR="#FFFFFF" TEXT="#000000"> <H1>Moved Temporarily</H1> The document has moved <A HREF="https://domains.google.com/nic/update?hostname=CENSORED&amp;myip=CENSORED">here</A>. </BODY> </HTML> 132954 ERROR : IP update not accepted by DDNS Provider ``` Signed-off-by: Paul Tobias <tobias.pal@gmail.com>
* | | smartsnmpd: Update to 2015-02-22 versionRosen Penev2019-09-12
| | | | | | | | | | | | | | | | | | | | | | | | Ran through 2to3 to get it to compile. Ran init script through shellcheck. Grouped several file writes. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #9937 from mwarning/zerotierRosen Penev2019-09-12
|\ \ \ | | | | | | | | zerotier: license change and make sure path exists
| * | | zerotier: make sure the /var/lib existsMoritz Warning2019-09-09
| | | | | | | | | | | | | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de>
| * | | zerotier: change license to BSL 1.1Moritz Warning2019-09-09
| | | | | | | | | | | | | | | | | | | | | | | | Business Source License. Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | | yggdrasil: fix #9960 re: vendor fixWilliam Fleurant2019-09-12
| | | | | | | | | | | | | | | | Signed-off-by: William Fleurant <meshnet@protonmail.com>
* | | | Merge pull request #9705 from commodo/python-mysqlclientRosen Penev2019-09-12
|\ \ \ \ | |_|/ / |/| | | python-mysql[client]: rename to python-mysqlclient & bump to version 1.4.4
| * | | python-mysql: rename to python-mysqlclient & bump to version 1.4.4Alexandru Ardelean2019-09-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The package on PyPi is named `mysqlclient`. This should have been named `python-mysqlclient` from the start. There is a `mysql` package on PyPi already but that's a different code/package. Doing this should avoid any future confusion. There is no good time to do this rename; at least 19.07 has been branched already and this can go into the next release [in a year or so]. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | Merge pull request #9952 from neheb/rtRosen Penev2019-09-11
|\ \ \ \ | |_|_|/ |/| | | rtorrent: Switch to static linking
| * | | rtorrent: Switch to using static libtorrentRosen Penev2019-09-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | rtorrent is the only user of libtorrent. Statically link to save space. Added usleep patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | banip: update 0.2.1Dirk Brenken2019-09-10
| | | | | | | | | | | | | | | | | | | | * fix for #9954 Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | treewide: Change .*GPL.*+ licenses to SPDX compatible identifierSven Eckelmann2019-09-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL licenses. But a lot of packages did use a different, non-SPDX style with a "+" at the end instead of "-or-later". Signed-off-by: Sven Eckelmann <sven@narfation.org>
* | | | Merge pull request #9947 from eglooca/masterRosen Penev2019-09-09
|\ \ \ \ | |/ / / |/| | | netifyd: Updated to v2.92.
| * | | netifyd: Updated to v2.92.Darryl Sokoloski2019-09-09
| | | | | | | | | | | | | | | | Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* | | | Merge pull request #9948 from dibdot/banIPDirk Brenken2019-09-09
|\ \ \ \ | |/ / / |/| | | banip: update 0.2.0
| * | | banip: update 0.2.0Dirk Brenken2019-09-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove 'http-only' mode, all sources are now fetched from https sites * the backup mode is now mandatory ('/tmp' is the default backup directory), always create and re-use backups if available. To force a re-download take the 'reload' action. * support 'sshd' in addition to 'dropbear' for logfile parsing to detect break-in events * always update the black-/whitelist with logfile parsing results in 'refresh' mode (no new downloads) * rework the return code handling * tweak procd trigger * various small fixes * (s)hellsheck cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | acme: depends on gnu-wgetYousong Zhou2019-09-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes openwrt/packages#9456 Ref: https://github.com/openwrt/packages/issues/9456 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | wget: provides gnu-wgetYousong Zhou2019-09-09
| |_|/ |/| | | | | | | | | | | | | | | | | | | | So that packages like acme requiring features from it can depend on it explicitly, not the more basic "wget" which is also provided by "uclient-fetch" Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | softethervpn: Fix openssl header patchRosen Penev2019-09-06
| | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #9929 from dibdot/adblockDirk Brenken2019-09-06
|\ \ \ | | | | | | | | adblock: update 3.8.5
| * | | adblock: update 3.8.5Dirk Brenken2019-09-06
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * use raw procd interface trigger as last resort, if the adblock config is not available during startup * fix selective subdomain whitelisting for dnsmasq * fix a kresd restart issue with 'DNS File Reset' * fix a suspend/resume cornercase * disable the tld compression, if the number of blocked domains is greater than 'adb_maxtld' (default: 100000) * made the fw portlist configurable (default '53 853 5353') * preliminary support for inotify-like autoload features of dns backends like kresd in future Turris OS. If 'adb_dnsinotify' is set to 'true', all adblock related restarts and the 'DNS File Reset' will be disabled Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #9931 from sebastian-de/ipfixRosen Penev2019-09-06
|\ \ \ | | | | | | | | ulogd2: Build IPFIX module
Powered by cgit, Themed by Ted Yin.