aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* Merge pull request #12296 from neheb/transRosen Penev2020-05-26
|\ | | | | transmission: update to 3.0
| * transmission: update to 3.0Rosen Penev2020-05-24
| | | | | | | | | | | | remove upstreamed patches. Refresh remaining one. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | miniupnpd: improve hotplug & interface handlingKevin Darbyshire-Bryant2020-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The existing interface selection/detection code was incomprehensible at worst and convoluted at best. The uci config file suggested it understood an external ipv6 interface but in reality the init script took no notice. Re-work it so it is at least comprehendible and takes notice of ipv6 interface details if specified. Update the hotplug script to use the same interface selection/detection code as the init script and take note of ipv6 interface selection, only restarting miniupnpd on interface up events and only if that interface isn't already known (for that ip class) by miniupnpd. For me this has solved numerous 'flaky' startup problems, especially with regard to ipv6. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | Merge pull request #12302 from aleksander0m/aleksander/mm-mtuRosen Penev2020-05-25
|\ \ | | | | | | modemmanager: set interface MTU based on bearer settings
| * | modemmanager: set interface MTU based on bearer settingsAleksander Morgado2020-05-25
| |/ | | | | | | | | | | | | | | Using the same method used by other protocol handlers like uqmi. Fixes https://github.com/openwrt/packages/issues/11383 Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
* / clamav: update to version 0.102.3 (security fix)Jan Pavlinec2020-05-25
|/ | | | | | | | Fixes: CVE-2020-3341 CVE-2020-3327 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* Merge pull request #12077 from peter-stadler/uwsgiRosen Penev2020-05-24
|\ | | | | uwsgi: make luci-webui single threaded and log more
| * uwsgi: make luci-webui single threaded and log morePeter Stadler2020-05-04
| | | | | | | | | | | | | | | | | | | | More threads can lead to a problem if a luci-app makes a fork (e.g. for executing a command). Parallelism is still achieved by using `processes = 3`. Make the log more verbose by filtering only standard messages for start/stop/reload out (leaving one line each). Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | Merge pull request #12184 from peter-stadler/nginx-luciRosen Penev2020-05-24
|\ \ | | | | | | nginx: set log level to crit for luci-static
| * | nginx: set log level to crit for luci-staticPeter Stadler2020-05-24
| | | | | | | | | | | | | | | | | | Do not write errors for inexistent files to the system log. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | adblock: limit domain name lengthDirk Brenken2020-05-24
|/ / | | | | | | | | | | * limit domain name length to max. 63 chars to fix issues with energized sources Signed-off-by: Dirk Brenken <dev@brenken.org>
* | Merge pull request #12159 from peter-stadler/nginx-smpRosen Penev2020-05-23
|\ \ | | | | | | nginx: do not reduce max processes
| * | nginx: do not reduce max processesPeter Stadler2020-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | Use the upstream value for NGX_MAX_PROCESSES (=1024) again. So it is safe to use `worker_processes auto;` (which sets it to the number of CPUs). Also use this directive in the conf instead of calculating the number in the init and passing it as argument. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | adblock: release 4.0.5Dirk Brenken2020-05-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update energized source urls, add ultimate variant * switch shalla source to http (invalid server certificate) * add another stevenblack source variant (normal / porn) * small cornercase fixes * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #12243 from PolynomialDivision/feature/update_dawn_latestRosen Penev2020-05-23
|\ \ \ | | | | | | | | dawn: update to latest version
| * | | dawn: update to latest versionNick Hainke2020-05-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes: - dawn_iwinfo: fix whitespace - dawn_iwinfo: indentation - dawn_iwinfo: iwinfo_finish(); - dawn_iwinfo: filter out global interface - dawn_iwinfo: release iwinfo after usage - tcpsocket: fix port print - github: set CONFIG_SRC_TREE_OVERRIDE in actions CI - github: fix link to dawn source - github: use v2 for checkout action - github: add GitHub Actions CI - ubus: only update TCP socket list when using TCP connections - add notice that full wpad is requirement - fix link to luci-app-dawn - update readme and install instructions Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | Merge pull request #12252 from BKPepe/knot-disable-libcap-ngRosen Penev2020-05-22
|\ \ \ \ | | | | | | | | | | knot: disable libcap-ng
| * | | | knot: disable libcap-ngJosef Schlehofer2020-05-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Recently, there was added libcap-ng to OpenWrt packages feed, which is optional for Knot DNS. It enables POSIX 1003.1e capabilities. This can restrict root (by default it runs as root) permissions and might harm and as there isn't systemd on OpenWrt it can interfere. There is an added patch, which introduced an option to disable libcap-ng. This will be part of the next release. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | fastd: update to v19Matthias Schiffer2020-05-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | | seafile-server: Update to 7.1.4, refresh patchesJeffery To2020-05-21
| |/ / / |/| | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | bind: update to version 9.16.3Josef Schlehofer2020-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2020-8616 CVE-2020-8617 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | Merge pull request #12232 from neheb/cifsRosen Penev2020-05-20
|\ \ \ \ | | | | | | | | | | cifs-utils: fix compilation
| * | | | cifs-utils: fix compilationRosen Penev2020-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now that libcap-ng is in the tree, cifs-utils is picking it up. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | openvswitch: fix file generation in /etc/modules.dYousong Zhou2020-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> Reported-by: Paul Spooren <mail@aparcar.org>
* | | | | Merge pull request #12215 from BKPepe/unbound-1.10.1Josef Schlehofer2020-05-20
|\ \ \ \ \ | |/ / / / |/| | | | unbound: update to version 1.10.1 (security fix)
| * | | | unbound: update to version 1.10.1Josef Schlehofer2020-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2020-12662 CVE-2020-12663 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | Merge pull request #12210 from jefferyto/etesync-server-minor-cleanupHannu Nyman2020-05-19
|\ \ \ \ \ | |_|/ / / |/| | | | etesync-server: Minor Makefile cleanup
| * | | | etesync-server: Minor Makefile cleanupJeffery To2020-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Replace creating an empty PYTHON3_PKG_DIR with setting filespec to an empty value * Disable the default Python package build recipe (with PYTHON3_PKG_BUILD:=0) and set an empty Build/Compile * Remove VARIANT:=python3 and PROVIDES (providing the same name as the package) * Add PKG_BUILD_PARALLEL:=1 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | Merge pull request #12212 from lnslbrty/package/netsniff-ngRosen Penev2020-05-19
|\ \ \ \ \ | |/ / / / |/| | | | netsniff-ng: new package
| * | | | netsniff-ng: new packageToni Uhlig2020-05-19
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | | | | libreswan: various fixesLucian Cristian2020-05-17
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | start if kernel has missing ipv6 support add libcap-ng support fix some errors displayed on syslog Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | apache: revisit suEXEC setupSebastian Kemper2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When adding suEXEC to the apache package, Alpine's package [1] served as a template. Not enough attention was paid to the details. Alpine uses a different layout. So for OpenWrt to use /var/www as DocumentRoot does not make sense. /var is also volatile on OpenWrt. This commit removes the configure argument. The default is htdocsdir. This also does away with uidmin/gidmin 99. The default is 100, which is fine. Finally, the suexec binary is moved from /usr/sbin to /usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with "4750" (see [2]) and the group set to the user's group. While that would be possible, it would cause a few headaches on OpenWrt. The group would need to be changed first in a post-install script and a call to chmod would need to be made afterward, to make the binary SUID again. It's easier to hide the SUID binary away from others in a directory. This way we don't need to use chmod in the post-install script. [1] https://github.com/alpinelinux/aports/tree/master/main/apache2 [2] https://httpd.apache.org/docs/2.4/suexec.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | apache: create log directory o=Sebastian Kemper2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | Hides away the contents of the log directory from others. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | Shorewall6: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Shorewall: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Shorewall6-lite: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Shorewall-lite: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Shorewall-core: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Merge pull request #12168 from lucize/libreswupRosen Penev2020-05-14
|\ \ \ \ | | | | | | | | | | libreswan: update to 3.32
| * | | | libreswan: update to 3.32Lucian Cristian2020-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | also add -flto to compiler flags Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | nextdns: Update to version 1.5.8Olivier Poitrey2020-05-14
|/ / / / | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | Merge pull request #9865 from peter-stadler/etesyncRosen Penev2020-05-14
|\ \ \ \ | |_|/ / |/| | | etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
| * | | etesync-server: add packagePeter Stadler2020-05-06
| | | | | | | | | | | | | | | | | | | | | | | | Setup pyhton3-django-etesync-journal using uWSGI with Nginx. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | Merge pull request #12060 from looklookson/masterRosen Penev2020-05-13
|\ \ \ \ | | | | | | | | | | sslh: Add http probe support
| * | | | sslh: Add http probe supportWarren Ng2020-05-03
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Warren Ng <looklookson@gmail.com>
* | | | | Merge pull request #11964 from zhanhb/nginx-all-moduleRosen Penev2020-05-13
|\ \ \ \ \ | | | | | | | | | | | | nginx: update all-module configurations
| * | | | | nginx: update all-module configurationsHuangbin Zhan2020-04-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nginx-all-module also provides nginx-ssl and shoud have configuration file uwsgi_params Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* | | | | | Merge pull request #11981 from zhanhb/conffilesRosen Penev2020-05-13
|\ \ \ \ \ \ | | | | | | | | | | | | | | treewide: add conffiles
| * | | | | | treewide: add conffilesHuangbin Zhan2020-05-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* | | | | | | Merge pull request #12146 from kobboi/masterRosen Penev2020-05-13
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | ifstat: make dependency on libnetsnmp conditional
Powered by cgit, Themed by Ted Yin.