aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
| * | | nginx: set log level to crit for luci-staticPeter Stadler2020-05-24
| | |/ | |/| | | | | | | | | | | | | Do not write errors for inexistent files to the system log. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* / | adblock: limit domain name lengthDirk Brenken2020-05-24
|/ / | | | | | | | | | | * limit domain name length to max. 63 chars to fix issues with energized sources Signed-off-by: Dirk Brenken <dev@brenken.org>
* | Merge pull request #12159 from peter-stadler/nginx-smpRosen Penev2020-05-23
|\ \ | | | | | | nginx: do not reduce max processes
| * | nginx: do not reduce max processesPeter Stadler2020-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | Use the upstream value for NGX_MAX_PROCESSES (=1024) again. So it is safe to use `worker_processes auto;` (which sets it to the number of CPUs). Also use this directive in the conf instead of calculating the number in the init and passing it as argument. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | adblock: release 4.0.5Dirk Brenken2020-05-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update energized source urls, add ultimate variant * switch shalla source to http (invalid server certificate) * add another stevenblack source variant (normal / porn) * small cornercase fixes * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #12243 from PolynomialDivision/feature/update_dawn_latestRosen Penev2020-05-23
|\ \ \ | | | | | | | | dawn: update to latest version
| * | | dawn: update to latest versionNick Hainke2020-05-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes: - dawn_iwinfo: fix whitespace - dawn_iwinfo: indentation - dawn_iwinfo: iwinfo_finish(); - dawn_iwinfo: filter out global interface - dawn_iwinfo: release iwinfo after usage - tcpsocket: fix port print - github: set CONFIG_SRC_TREE_OVERRIDE in actions CI - github: fix link to dawn source - github: use v2 for checkout action - github: add GitHub Actions CI - ubus: only update TCP socket list when using TCP connections - add notice that full wpad is requirement - fix link to luci-app-dawn - update readme and install instructions Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | Merge pull request #12252 from BKPepe/knot-disable-libcap-ngRosen Penev2020-05-22
|\ \ \ \ | | | | | | | | | | knot: disable libcap-ng
| * | | | knot: disable libcap-ngJosef Schlehofer2020-05-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Recently, there was added libcap-ng to OpenWrt packages feed, which is optional for Knot DNS. It enables POSIX 1003.1e capabilities. This can restrict root (by default it runs as root) permissions and might harm and as there isn't systemd on OpenWrt it can interfere. There is an added patch, which introduced an option to disable libcap-ng. This will be part of the next release. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | fastd: update to v19Matthias Schiffer2020-05-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | | seafile-server: Update to 7.1.4, refresh patchesJeffery To2020-05-21
| |/ / / |/| | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | bind: update to version 9.16.3Josef Schlehofer2020-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2020-8616 CVE-2020-8617 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | Merge pull request #12232 from neheb/cifsRosen Penev2020-05-20
|\ \ \ \ | | | | | | | | | | cifs-utils: fix compilation
| * | | | cifs-utils: fix compilationRosen Penev2020-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now that libcap-ng is in the tree, cifs-utils is picking it up. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | openvswitch: fix file generation in /etc/modules.dYousong Zhou2020-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> Reported-by: Paul Spooren <mail@aparcar.org>
* | | | | Merge pull request #12215 from BKPepe/unbound-1.10.1Josef Schlehofer2020-05-20
|\ \ \ \ \ | |/ / / / |/| | | | unbound: update to version 1.10.1 (security fix)
| * | | | unbound: update to version 1.10.1Josef Schlehofer2020-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2020-12662 CVE-2020-12663 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | Merge pull request #12210 from jefferyto/etesync-server-minor-cleanupHannu Nyman2020-05-19
|\ \ \ \ \ | |_|/ / / |/| | | | etesync-server: Minor Makefile cleanup
| * | | | etesync-server: Minor Makefile cleanupJeffery To2020-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Replace creating an empty PYTHON3_PKG_DIR with setting filespec to an empty value * Disable the default Python package build recipe (with PYTHON3_PKG_BUILD:=0) and set an empty Build/Compile * Remove VARIANT:=python3 and PROVIDES (providing the same name as the package) * Add PKG_BUILD_PARALLEL:=1 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | Merge pull request #12212 from lnslbrty/package/netsniff-ngRosen Penev2020-05-19
|\ \ \ \ \ | |/ / / / |/| | | | netsniff-ng: new package
| * | | | netsniff-ng: new packageToni Uhlig2020-05-19
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | | | | libreswan: various fixesLucian Cristian2020-05-17
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | start if kernel has missing ipv6 support add libcap-ng support fix some errors displayed on syslog Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | apache: revisit suEXEC setupSebastian Kemper2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When adding suEXEC to the apache package, Alpine's package [1] served as a template. Not enough attention was paid to the details. Alpine uses a different layout. So for OpenWrt to use /var/www as DocumentRoot does not make sense. /var is also volatile on OpenWrt. This commit removes the configure argument. The default is htdocsdir. This also does away with uidmin/gidmin 99. The default is 100, which is fine. Finally, the suexec binary is moved from /usr/sbin to /usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with "4750" (see [2]) and the group set to the user's group. While that would be possible, it would cause a few headaches on OpenWrt. The group would need to be changed first in a post-install script and a call to chmod would need to be made afterward, to make the binary SUID again. It's easier to hide the SUID binary away from others in a directory. This way we don't need to use chmod in the post-install script. [1] https://github.com/alpinelinux/aports/tree/master/main/apache2 [2] https://httpd.apache.org/docs/2.4/suexec.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | apache: create log directory o=Sebastian Kemper2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | Hides away the contents of the log directory from others. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | Shorewall6: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Shorewall: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Shorewall6-lite: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Shorewall-lite: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Shorewall-core: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | Merge pull request #12168 from lucize/libreswupRosen Penev2020-05-14
|\ \ \ \ | | | | | | | | | | libreswan: update to 3.32
| * | | | libreswan: update to 3.32Lucian Cristian2020-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | also add -flto to compiler flags Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | nextdns: Update to version 1.5.8Olivier Poitrey2020-05-14
|/ / / / | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | Merge pull request #9865 from peter-stadler/etesyncRosen Penev2020-05-14
|\ \ \ \ | |_|/ / |/| | | etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
| * | | etesync-server: add packagePeter Stadler2020-05-06
| | | | | | | | | | | | | | | | | | | | | | | | Setup pyhton3-django-etesync-journal using uWSGI with Nginx. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | Merge pull request #12060 from looklookson/masterRosen Penev2020-05-13
|\ \ \ \ | | | | | | | | | | sslh: Add http probe support
| * | | | sslh: Add http probe supportWarren Ng2020-05-03
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Warren Ng <looklookson@gmail.com>
* | | | | Merge pull request #11964 from zhanhb/nginx-all-moduleRosen Penev2020-05-13
|\ \ \ \ \ | | | | | | | | | | | | nginx: update all-module configurations
| * | | | | nginx: update all-module configurationsHuangbin Zhan2020-04-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nginx-all-module also provides nginx-ssl and shoud have configuration file uwsgi_params Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* | | | | | Merge pull request #11981 from zhanhb/conffilesRosen Penev2020-05-13
|\ \ \ \ \ \ | | | | | | | | | | | | | | treewide: add conffiles
| * | | | | | treewide: add conffilesHuangbin Zhan2020-05-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* | | | | | | Merge pull request #12146 from kobboi/masterRosen Penev2020-05-13
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | ifstat: make dependency on libnetsnmp conditional
| * | | | | | | ifstat: make dependency on libnetsnmp conditionalChristophe Lermytte2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The upstream package supports it with a configure switch. Defaulting to 'with SNMP support' as it was before. Signed-off-by: Christophe Lermytte <gentoo@lermytte.be>
* | | | | | | | knxd: bump to version 0.14.37Othmar Truniger2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Othmar Truniger <github@truniger.ch>
* | | | | | | | bwping: update to version 1.17Oleg Derevenetz2020-05-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Oleg Derevenetz <oleg-derevenetz@yandex.ru>
* | | | | | | | libreswan: fix compilation with Linux 4.14Eneas U de Queiroz2020-05-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to a comment in programs/pluto/kernel_xfrm_interface.c:177: * IFLA_XFRM_IF_ID was added to mainline kernel 4.19 linux/if_link.h with older kernel headers 'make USE_XFRM_INTERFACE_IFLA_HEADER=true' Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | | | | | netifyd: support uci parametersKevin Darbyshire-Bryant2020-05-12
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Integrate with uci to support 'enabled/disabled' startup option and override netify's default auto network selection. config netifyd option enabled 0 option autoconfig 1 autoconfig: Use netify's in-built interface selection else use 'internal/external_if' definitions. Also persist important agent config across sysupgrade agent.uuid, serial.uuid, site.uuid Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | | | | | | Merge pull request #12121 from 4wrxb/acme_dns_caliasToke Høiland-Jørgensen2020-05-11
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | acme: Update acme.sh URL, add support for challenge & domain alises.
| * | | | | | | acme: Update acme.sh URL, add support for challenge & domain alises.Will O'Neill2020-05-10
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Will O'Neill <0100wrxb@gmail.com>
* | | | | | | frr: update to 7.3.1Lucian Cristian2020-05-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | miniupnpd: make hotplug work againKevin Darbyshire-Bryant2020-05-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | hotplug scripts are sourced not exec'd so #!/bin/sh /etc/rc.common doesn't pull in the functions defined in /etc/rc.common thus since 'enabled' isn't defined the following sequence always fails: enabled miniupnpd || exit 0 Unfortunately sourcing /etc/rc.common doesn't appear to work so come up with some alternatives. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
Powered by cgit, Themed by Ted Yin.