Commit Graph

60 Commits

Author SHA1 Message Date
Sergey V. Lobanov 510d44d988 samba4: fix build on macos
This commit fixes two issues on macos:
1. Added a patch to fix 'echo -n' issue with MacOS shell
(backported from upstream)
2. Redefined sys.platform='linux' for target build if build host is
MacOS (otherwise, build script tries to use MacOS logic for
OpenWrt(Linux) target build)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-05-22 13:40:48 -07:00
Andy Walsh 1fa70d6a3c samba4: update to 4.14.12
* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-02-01 07:20:56 -05:00
Andy Walsh 7730a65d30 samba4: update to 4.14.11; fix AD_DC build
* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-01-28 12:09:09 -08:00
Andy Walsh f75bb89c7e samba: update to 4.14.7
* update to 4.14.7

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-09-08 07:28:54 -07:00
Fritz D. Ansel 2992e3bb7d samba4: allow disabling wsdd2 in menuconfig
but keep it selected by default as before
so it could be selected if nmbd and/or wssd2
should be used

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 14:55:31 +03:00
Andy Walsh 7f3f6d162a samba4: update to 4.14.5
* update to 4.14.5
* refresh patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-06-27 15:32:34 +02:00
Andy Walsh 2057fc9ee4 samba4: update to 4.13.9
* update to 4.13.9

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-06-17 18:28:08 +02:00
Andy Walsh 93b34d4dda samba4: update to 4.13.8
* update to 4.13.8
* remove faulty io_uring kernel detection
* fixes CVE's: CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2021-20254
* resolves #15512

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-05-06 14:31:29 -07:00
Andy Walsh 35b3a4444e samba4: update to 4.13.4
* update to 4.13.4

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-26 12:15:24 +01:00
Andy Walsh c8f3cca283 samba4: add proper io_uring kernel detection
* add proper io_uring kernel detection

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-11 23:02:26 +02:00
Andy Walsh 97e55a28b3 samba4: update to 4.13.3, enbale io_uring
* update to 4.13.3
* enable vfs io_uring module by default, if kernel supports it
* fix for possible exploit openwrt/packages#13758
* sanetize all external template/config inputs
* fix some shellcheck warnings
* remove old aio modules/deps

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-08 17:28:36 +01:00
Andy Walsh 2789b91e94 samba4: update to 4.13.2
* update to 4.13.2
* remove outdated option "write cache size"

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-12-08 19:48:00 +01:00
Jan Pavlinec 6647b3278b
samba4: update to version 4.12.7
Note:
Fixes CVE-2020-1472 in case smb.conf
contains 'server schannel = no' or 'server schannel = auto'

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-24 12:29:16 +02:00
Andy Walsh 896ebed773 samba4: update to 4.12.6
* update to 4.12.6
* fix optional modules not included on module build (vfs_btrfs, vfs_linux_xfs_sgid)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-09-13 17:50:37 +02:00
Andy Walsh 4da8b01f67 samba4: update to 4.12.5
* update to 4.12.5
* fixes CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303
* add fix-musl_missing__nss_buflen_passwd.patch
* remove fixed tirpc include
* add extra CONFIGURE_VARS (XSLTPROC=false, WAF_NO_PREFORK=1)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-07-03 01:38:48 +02:00
Andy Walsh 68af8dcde3 samba4: add new UCI option "enable_extra_tuning"
* add new UCI option "enable_extra_tuning"
* update template
* add config examples for options
* fix some access warnings on samba /var dirs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-27 22:47:30 +02:00
Andy Walsh d1e7a77e61 samba4: fix python3 host paths
* fix python3 host paths, ensure we use build hostpkg tools

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-19 13:22:52 +02:00
Andy Walsh c5b1b6f86e samba4: update waf-cross-answers
* update waf-cross-answers for 4.12.x

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-16 21:46:04 +02:00
Andy Walsh 2698c06d5b samba4: unbundle libunwind, icu
* add unbundle libunwind, icu patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-14 17:51:21 +02:00
Andy Walsh f29cf74c28 samba4: update to 4.12.3
* update to 4.12.3
* update/remove patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 02:01:25 +02:00
Jeffery To 1bc2f4f3c6 treewide: Remove Python variants for non-Python packages
This removes Python-related build variants, and adds
PYTHON3_PKG_BUILD:=0 and minor build adjustments (where appropriate),
for non-Python packages. There should be no changes to build output.

This also updates some include paths for python3-package.mk and/or
python3-host.mk to be relative to the package Makefile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-19 01:56:23 +08:00
Daniel Bermond b1aed107b6
samba4: bring back the fix to build with parallel jobs
Fixes #11417

The fix was implemented in commit 710700c and was later removed in
commit c50c583.

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
2020-02-23 19:07:52 +00:00
Andy Walsh 8a13ba8de1 samba4: update to 4.11.6, add new UCI option
* update to 4.11.6
* add new UCI option "allow_legacy_protocols" to section [samba]

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-09 23:21:35 +01:00
Andy Walsh 6d4cf0f2d7 samba4: fix libpam deps
* use old workaround for broken unbundle pam patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-20 00:20:23 +01:00
Andy Walsh c50c5836ea samba4: update to 4.11.4
* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-17 11:54:50 +01:00
Andy Walsh 1298a4ceda samba4: make host-buildtools private/add suffix
* fix openwrt/packages#10700
* add suffix to asn1_compile, compile_et to avoid krb5 conflicts
* bundle samba's com_err

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-03 16:06:07 +01:00
Andy Walsh 226e0c6497 samba4: update to 4.9.16, remove AD-DC/Winbind options
* update to 4.9.16
* cherry-pick some musl alpine/openembedded patches
* cleanup/remove AD-DC/Winbind options and related code
* build the compile_et via samba4/host

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-28 17:11:55 +01:00
Andy Walsh ec3225b495 samba4: add UCI option 'disable_async_io'
* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 13:54:24 +01:00
Andy Walsh d08b1279eb samba4: update to 4.9.15
* update to 4.9.15
* fixes CVE-2019-10218, CVE-2019-14833, CVE-2019-14847
* update smb.conf.template (aio, sendfile)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-08 13:21:45 +01:00
Jan Pavlinec 299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Jan Pavlinec ad16f2a851
samba4: update to version 4.9.13 (security fix)
Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-04 13:29:35 +02:00
Andy Walsh c02ef3ae7f samba4: add python2 host dependency
* add python2/host dependency

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-30 11:09:17 +02:00
Rosen Penev d03b88b5b0
samba4: Run init script through shellcheck
Some performance improvements by batching file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-07-28 17:51:00 -07:00
Andy Walsh 2f2a4bccd9 samba4: revert to 4.9.11
* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-21 16:01:20 +02:00
Andy Walsh c37eda5f28 samba4: add libreadline dep, cleanup old patches
* add missing libreadline dep
* remove old patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-14 14:57:44 +02:00
Andy Walsh 0ddd8f1484 samba4: update to 4.10.6
* update to 4.10.6
* use python3
* disable SERVER_AD_DC option (bugged atm)
* fix init script symlink smb.conf detection
* add new deps (libtasn1, libopenssl)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-07-13 14:22:04 +02:00
Andy Walsh fd74d9f4ea samba4: update to 4.9.8
* fixes CVE-2018-16860

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-05-16 10:26:15 +02:00
Andy Walsh 9c8d7444cc samba4: update to 4.9.7
* update to 4.9.7
* add write_list, read_list UCI support

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-05-10 11:12:21 +02:00
Andy Walsh 710700c7b4 samba4: fix build with parallel jobs
* fixes openwrt/packages#8721

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-24 12:21:18 +02:00
Daniel Engberg 1f812c4518 Samba4: Rework URLs
Avoid Hetzner hosted servers due to availability (.ru users)
and try to keep availability as good as possible without
sacrificing performance for the majority of users.
Update upstream project download URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2019-04-17 20:26:31 +00:00
Andy Walsh 2cf952f7bb samba4: update to 4.9.6
* fix CVE-2019-3870, CVE-2019-3880
* switch to fossies.org as main download (faster)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-16 11:45:15 +02:00
Andy Walsh 3e1d9c0bfd samba4: update to 4.9.5, switch to embedded heimdal build
* update to 4.9.5
* use embedded heimdal build
* remove mitkrb5 deps
* add AD-DC tools (samba4kinit samba4kgetcred samba4kpasswd samba4ktutil)
* add eventlogadm to ADMIN tools
* build VFS modules shared
* preserve custom smb.conf after reboots
* add missing lib/samba/? private dirs, even if empty
* handle python-crypto via EXTRA_DEPENDS
* fix CONFIGURE_CMD argument order
* move python install to libs
* remove redundant Config.in selects

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-09 09:50:23 +02:00
Andy Walsh 77436747ce samba4: tmsize patch, build with netbios by default
* add patch for tmsize overflow (https://bugzilla.samba.org/show_bug.cgi?id=13622)
* re-enable netbios by default
(Some users still need netbios and its just a minor size increase 50kb)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-03-01 11:19:25 +01:00
Val Kulkov d12521c169 samba4: add mandatory option per CVE-2018-16853
Since 4.9.3, Samba AD-DC with MIT Kerberos will refuse to build unless
--with-experimental-mit-ad-dc is provided to the configure command.

The mandatory requirement was introduced in response to a report that
a user in a Samba AD domain can crash the KDC when Samba is built in
the non-default MIT Kerberos configuration:
https://www.samba.org/samba/security/CVE-2018-16853.html

This requirement was introduced in Samba commit
c5370a4349d381ba3b64b063dc28a2c54cfacdfc.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
2019-01-10 13:34:30 -05:00
Deng Qingfang 5b75a84165 samba4: update to 4.9.4
Fixes following CVEs (4.9.3 and 4.9.4):
CVE-2018-16853, CVE-2018-14629, CVE-2018-16853
CVE-2018-14629, CVE-2018-16841, CVE-2018-16851
CVE-2018-16852, CVE-2018-16853, CVE-2018-16857

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
2018-12-24 21:01:15 +08:00
Daniel Engberg b4b451055d samba4: Update to 4.9.2
Update Samba to 4.9.2
Refresh patches

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-17 00:44:40 +01:00
Andy Walsh 409feb8ef6 samba4: fix hostname if not defined via Dnsmasq
* use kernel fs to get the hostname, drop domainname

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-10-15 10:28:01 +02:00
Andy Walsh c5e0c3822a samba4: fix missing busybox 'hostname -f' command
* busybox does not have 'hostname' by default so replaced it with uci calls

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-29 11:06:09 +08:00
Andy Walsh 32328835df samba4: fix netbios_name
* fixes: error 0x80070035
* add triggers to catch hostname changes

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-27 17:03:28 +02:00
Andy Walsh 68270c787d samba4: update to 4.9.1
fixes: nmbd: Stop nmbd network announce storm (bug #13620).

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-24 11:02:47 +02:00