Commit Graph

31 Commits

Author SHA1 Message Date
Jan Pavlinec 299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Jan Pavlinec ad16f2a851
samba4: update to version 4.9.13 (security fix)
Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-04 13:29:35 +02:00
Andy Walsh c02ef3ae7f samba4: add python2 host dependency
* add python2/host dependency

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-30 11:09:17 +02:00
Rosen Penev d03b88b5b0
samba4: Run init script through shellcheck
Some performance improvements by batching file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-07-28 17:51:00 -07:00
Andy Walsh 2f2a4bccd9 samba4: revert to 4.9.11
* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-21 16:01:20 +02:00
Andy Walsh c37eda5f28 samba4: add libreadline dep, cleanup old patches
* add missing libreadline dep
* remove old patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-14 14:57:44 +02:00
Andy Walsh 0ddd8f1484 samba4: update to 4.10.6
* update to 4.10.6
* use python3
* disable SERVER_AD_DC option (bugged atm)
* fix init script symlink smb.conf detection
* add new deps (libtasn1, libopenssl)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-13 14:22:04 +02:00
Andy Walsh fd74d9f4ea samba4: update to 4.9.8
* fixes CVE-2018-16860

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-05-16 10:26:15 +02:00
Andy Walsh 9c8d7444cc samba4: update to 4.9.7
* update to 4.9.7
* add write_list, read_list UCI support

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-05-10 11:12:21 +02:00
Andy Walsh 710700c7b4 samba4: fix build with parallel jobs
* fixes openwrt/packages#8721

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-24 12:21:18 +02:00
Daniel Engberg 1f812c4518 Samba4: Rework URLs
Avoid Hetzner hosted servers due to availability (.ru users)
and try to keep availability as good as possible without
sacrificing performance for the majority of users.
Update upstream project download URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2019-04-17 20:26:31 +00:00
Andy Walsh 2cf952f7bb samba4: update to 4.9.6
* fix CVE-2019-3870, CVE-2019-3880
* switch to fossies.org as main download (faster)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-16 11:45:15 +02:00
Andy Walsh 3e1d9c0bfd samba4: update to 4.9.5, switch to embedded heimdal build
* update to 4.9.5
* use embedded heimdal build
* remove mitkrb5 deps
* add AD-DC tools (samba4kinit samba4kgetcred samba4kpasswd samba4ktutil)
* add eventlogadm to ADMIN tools
* build VFS modules shared
* preserve custom smb.conf after reboots
* add missing lib/samba/? private dirs, even if empty
* handle python-crypto via EXTRA_DEPENDS
* fix CONFIGURE_CMD argument order
* move python install to libs
* remove redundant Config.in selects

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-09 09:50:23 +02:00
Andy Walsh 77436747ce samba4: tmsize patch, build with netbios by default
* add patch for tmsize overflow (https://bugzilla.samba.org/show_bug.cgi?id=13622)
* re-enable netbios by default
(Some users still need netbios and its just a minor size increase 50kb)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-03-01 11:19:25 +01:00
Val Kulkov d12521c169 samba4: add mandatory option per CVE-2018-16853
Since 4.9.3, Samba AD-DC with MIT Kerberos will refuse to build unless
--with-experimental-mit-ad-dc is provided to the configure command.

The mandatory requirement was introduced in response to a report that
a user in a Samba AD domain can crash the KDC when Samba is built in
the non-default MIT Kerberos configuration:
https://www.samba.org/samba/security/CVE-2018-16853.html

This requirement was introduced in Samba commit
c5370a4349d381ba3b64b063dc28a2c54cfacdfc.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
2019-01-10 13:34:30 -05:00
Deng Qingfang 5b75a84165 samba4: update to 4.9.4
Fixes following CVEs (4.9.3 and 4.9.4):
CVE-2018-16853, CVE-2018-14629, CVE-2018-16853
CVE-2018-14629, CVE-2018-16841, CVE-2018-16851
CVE-2018-16852, CVE-2018-16853, CVE-2018-16857

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
2018-12-24 21:01:15 +08:00
Daniel Engberg b4b451055d samba4: Update to 4.9.2
Update Samba to 4.9.2
Refresh patches

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-17 00:44:40 +01:00
Andy Walsh 409feb8ef6 samba4: fix hostname if not defined via Dnsmasq
* use kernel fs to get the hostname, drop domainname

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-10-15 10:28:01 +02:00
Andy Walsh c5e0c3822a samba4: fix missing busybox 'hostname -f' command
* busybox does not have 'hostname' by default so replaced it with uci calls

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-29 11:06:09 +08:00
Andy Walsh 32328835df samba4: fix netbios_name
* fixes: error 0x80070035
* add triggers to catch hostname changes

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-27 17:03:28 +02:00
Andy Walsh 68270c787d samba4: update to 4.9.1
fixes: nmbd: Stop nmbd network announce storm (bug #13620).

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-24 11:02:47 +02:00
Andy Walsh 6d520e7d81 samba4: fix typo
* fix a typo in vfs_extd_audit

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-16 11:19:02 +02:00
Andy Walsh 31a8f1e98d samba4: update to 4.9.0
* update to 4.9.0
* move vfs_xattr_tdb to defaults
* add vfs_audit, vfs_extd_audit, vfs_full_audit to AD-DC variant
* disable jansson, libarchive by default, enabled for AD-DC variant
* update waf answers

Noteable smb.conf changes:
* store dos attributes Default changed yes
* ea support Default changed yes

Fixes: Timemachine "The identity of the Backup disk ... has changed since the previous backup."

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-14 12:05:04 +02:00
Andy Walsh 4c1a10a30c samba4: enable avahi by default, add timemachine support
* enable avahi by default, so Linux/Mac Clients can see samba shares
* enable timemachine config support
* fix invalid --builtin-libraries
* default to 'mdns name = mdns' in template

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-10 15:40:39 +02:00
Andy Walsh 8040e8c9a6 samba4: update to 4.8.5
* update to 4.8.5
* enable aesni support for x86_64
* add 'unbundle libbsd' patch
* update smb.conf.template (disable spoolss)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-01 14:03:09 +02:00
Andy Walsh 7358fc99fd samba4: update to 4.8.4
* remove perl, python host depends
* fixes: CVE-2018-1139, CVE-2018-1140, CVE-2018-10858, CVE-2018-10918, CVE-2018-10919
* remove avahi timemachine service file (4.8 handles this automatically via avahi client-lib)
* fix more optional depends

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-15 17:35:38 +02:00
Eneas U de Queiroz 460dbee226 samba4: add nfs-kernel-server/host build dependency
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-06 17:31:23 +00:00
Andy Walsh 18e9a8b479 samba4: add missing avahi service definitions
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-06 09:50:54 +08:00
Andy Walsh 0c13081965 samba4: switch to waf cross-answer files
* switch waf build to cross-answer files
* move timemachine related vfs modules to default vfs option

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-06 09:50:54 +08:00
Andy Walsh efdd707dc7 samba4: add optional lib dependencies (libgcrypt, libpam)
* add libgcrypt, libpam to optional libs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-01 13:59:00 +02:00
Andy Walsh 0d23c9f2ea samba4: add package samba-4.8
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-07-26 21:38:19 +02:00