Commit Graph

8872 Commits

Author SHA1 Message Date
David Bauer 63e2771140 usteer: update to latest git head
6813542 remote: always re-schedule update timeout
d7833e1 remote: fix compilation with glibc
bee2caf sta: schedule sta_info timeout on creation
ae32cb9 ubus: fix channel for active probing
8dc0753 ubus: introduce enum for beacon measurement mode
46e5976 policy: use correct reference signal
1116fdb policy: avoid creating kick loop for client
d3ff0d5 sta: add sta_connection_state enum
30f9ba7 remote: include node BSSID into messages
8af7b6c usteer: add BSSID to node struct

Signed-off-by: David Bauer <mail@david-bauer.net>
2021-10-31 21:06:01 +01:00
Javier Marcet 19596a013c nginx: add scgi_params if CONFIG_NGINX_HTTP_SCGI=y
Signed-off-by: Javier Marcet <javier@marcet.info>
2021-10-30 14:59:14 -07:00
Rui Salvaterra 2997d2dcf5 tor: bump to 0.4.6.8 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-10-30 01:13:07 -07:00
Peter Stadler 55c3bc14f7 nginx, python3-{asgiref,django-cors-headers,drf-nested-routers,sqlparse}: bump versions
Update to the newest versions and switch to $(AUTORELEASE) for the python3 packages (where I am the maintainer).

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-10-30 01:12:02 -07:00
Matthew Hagan bbf13f9d89 openfortivpn: add persistent reconnect option
Currently when the connection times out, the interface will disconnect.
Add capability to add persistent option to re-establish connectivity.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2021-10-30 01:07:49 -07:00
Matthew Hagan 008d4afa5f openfortivpn: add user, key, CA PEM support
Allow authentication inputs by key/cert PEM.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2021-10-30 01:07:49 -07:00
Chao Liu e99afaa97c zerotier: add respawn procd param
Signed-off-by: Chao Liu <git@expiron.dev>
2021-10-30 01:07:28 -07:00
Peter Stadler 545629e386 uwsgi: bump version and use less workarounds
* adopt pypi name and line numbers in patches
* remove custom tar command and patch for using python3 (changed upstream)

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-10-30 01:07:08 -07:00
Tianling Shen ab540e6990 xray-core: remove dead jail files
It never works... And Xray-core needs root access to work.

Bump geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-10-30 01:06:40 -07:00
Glenn Strauss 2b67f2b178 lighttpd: update to lighttpd 1.4.61 release hash
also remove patches incorporated upstream into lighttpd 1.4.61

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2021-10-30 01:05:07 -07:00
Rosen Penev 53b5695ea8 softethervpn: update to 4.38-9760-rtm
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-28 16:54:50 -07:00
Philip Prindeville a11d34617a
Merge pull request #16992 from pprindeville/named-restart-intf-flap
bind: detect new interfaces when they come up
2021-10-28 17:01:14 -06:00
Philip Prindeville 24e346e20b
Merge pull request #16984 from pprindeville/strongswan-update-5.9.4
strongswan: bump version to 5.9.4
2021-10-28 16:57:51 -06:00
Philip Prindeville 26bef5067c
Merge pull request #17010 from pprindeville/bind-update-9.17.19
bind: Bump to 9.17.19
2021-10-28 16:56:31 -06:00
Philip Prindeville c2de702cbd bind: Bump to 9.17.19
The following CVE updates are included:

* CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
  effectively disables the lame server cache, as it could previously be
  abused by an attacker to significantly degrade resolver performance.

* CVE-2021-25218: An assertion failure occurred when named attempted
  to send a UDP packet that exceeded the MTU size, if Response Rate
  Limiting (RRL) was enabled.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-28 14:06:07 -06:00
Philip Prindeville 049b25bcf9 bind: detect new interfaces when they come up
Reload the service when interfaces flap; note that libcap support
is required to open new sockets on interfaces coming up during
a reload, otherwise a full restart would be needed.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-28 14:00:43 -06:00
Philip Prindeville 3ea87e6401
Merge pull request #17003 from pprindeville/named-deprecate-managed-keys
bind: deprecate managed-keys
2021-10-28 13:54:40 -06:00
Philip Prindeville f7d11c9a1c strongswan: Bump to 5.9.4
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-28 13:04:40 -06:00
Daniel Golle 025bca81a0 nfs-kernel-server: reload when exported mountpoints show
Use newly introduced procd_add_reload_mount_trigger to reload nfsd
when a mountpoint covering an exported filesystem is added by blockd.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-28 19:54:29 +01:00
Daniel Golle c3c6a2ff1d
gnunet: several improvements
Fix uci-defaults for PostgreSQL backends
Add user 'gnunet' to 'postgres' group
Always build with sqlite3 as configure fails when --without-sqlite

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-28 16:31:44 +01:00
Ren Zongjia 1a5d35dd7b transmission: update seccomp config file
Add missing syscalls found using utrace.

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-28 16:31:30 +01:00
Jan Hoffmann f9ea814260 vnstat2: add hotplug script for adding interfaces
If an interface doesn't exist yet when vnStat is started, it won't be
monitored, as only existing interfaces can be added to the database via
the vnstat command.

This adds a hotplug script which adds any configured interfaces to the
vnStat database when it goes up.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2021-10-28 01:31:18 -07:00
Jan Hoffmann ecae7dedde vnstat2: fix all interfaces being monitored when none are configured
By default, vnstatd adds all available interfaces on startup when its
database is empty. The --noadd option prevents this, but it breaks
import of legacy databases, and causes vnstatd to exit immediately
after startup, which breaks reloading.

This changes the init script to add the --noadd option when no legacy
databases need to be imported, and patches vnstatd to keep running
even when no interfaces are configured.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2021-10-28 01:31:18 -07:00
Huangbin Zhan c1f4273501 nginx-util: add conffiles
Add /etc/config/nginx, restrict_locally, uci.conf.template
 as conffile

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan e56930a8fc rosy-file-server: fix conffile name
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan 1c3600ca68 uradvd: fix installed filename, add conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan 94d57346fc treewide: add missing conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan 3d66be4203 atftpd: fix conffiles
Add missing conffiles
Fix conffile permission

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan e6e770b268 treewide: fix broken conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Philip Prindeville a39a8372b3 bind: deprecate managed-keys
This has been replaced with the "trust-anchors" keyword, per
section 8.21.1 New Features of the Bind 9 Administrator Reference
Manual:

• In order to clarify the configuration of DNSSEC keys, the trusted-keys and managed-keys statements have been deprecated, and the new trust-anchors statement should now be used for both types of key.
  When used with the keyword initial-key, trust-anchors has the same behavior as managed-keys, i.e., it configures a trust anchor that is to be maintained via RFC 5011.
  When used with the new keyword static-key, trust-anchors has the same behavior as trusted-keys, i.e., it configures a permanent trust anchor that will not automatically be updated. (This usage is not recommended for the root key.) [GL #6]

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-27 21:49:31 -06:00
Alexandru Ardelean 179358efbf mstpd: bump to version 0.1.0
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-27 20:55:38 +03:00
Florian Eckert 9301cf124a
Merge pull request #16936 from aleksander0m/aleksander/mm-wwan-subsystem
modemmanager: add support for wwan subsystem in hotplug
2021-10-27 14:16:18 +02:00
Tianling Shen 92ee2a3cbb dnsproxy: Update to 0.39.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-10-26 23:04:11 -07:00
Sebastian Kemper 83d1cdaf3f apache: fixup apxs
apxs is used to get information about the apache installation when
building external modules. Currently there are issues:

1.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
apache2
apxs:Error: ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/apr-1-config not found!.

This error is fixed by sed script #2.

2.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
cannot open ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/share/apache2/build/config_vars.mk: No such file or directory at ./staging_dir/target-mips_24kc_musl/usr/bin/apxs line 213.

This error is fixed by sed scipt #1.

Both sed scripts taken from buildroot (see [1]).

[1] https://github.com/buildroot/buildroot/blob/master/package/apache/apache.mk

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-10-26 09:39:53 -07:00
Sebastian Kemper da4b1ca8d6 apache: security bump to 2.4.51
Fixes (see [1] for details):

  CVE-2021-33193
  CVE-2021-41524
  CVE-2021-41773
  CVE-2021-42013

[1] https://httpd.apache.org/security/vulnerabilities_24.html

Patch 020-openssl-deprecated.patch refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-10-26 09:39:53 -07:00
Nick Hainke 8b7fb614dd dawn: set symm_enc default to 0
User mpeleshenko reported that symm encryption breaks hearing map.
Set the default to 0.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-10-26 17:52:49 +02:00
Nick Hainke 2e02deb5a9 dawn: update to 2021-10-26
ddc007e32ced ubus: avoid use after free in handle_probe_req()
e1275713c057 github: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-10-26 00:37:56 +02:00
Jan Hák 175087bf25 knot: update to version 3.1.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2021-10-25 08:34:35 -07:00
David Bauer 737b4fef25 usteer: add package
This commits adds the new usteer package to the packages feed.

usteer is a daemon for steering wireless clients across frequency
bands as well as between multiple access points on a network.

Signed-off-by: David Bauer <mail@david-bauer.net>
2021-10-24 23:48:04 +02:00
Lucian Cristian 3dd857de9e frr: fixes and update to latest
ospf running in instance mod will keep cpu to 100% so revert offending commit
if daemon is disabled in the file while running also close that daemon
also add the pythontools to support reload

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-10-22 18:22:20 -07:00
Rosen Penev 23b5b516ae gnunet: fix compilation with big endian
if is in the wrong spot.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-22 18:14:36 -07:00
Rosen Penev b6cd312557 wsdd: update to 2021-10-22
Fixes another segfault.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-22 18:14:15 -07:00
Olivier Poitrey 8d4baa39e4 nextdns: Update to version 1.37.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-10-22 10:13:40 -07:00
Nick Hainke c1490175d3 dawn: respawn dawn in case of crash
Some users report that DAWN sometimes crashes after a while. Mostly
this happens after the new update has been rolled out.

Since I would not like to go back to the older version, I add as
a workaround for now that DAWN automatically respawned.

Workaround for:
https://github.com/berlin-open-wireless-lab/DAWN/issues/151

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-10-21 11:25:10 +02:00
Rosen Penev 27c315c3bb wsdd2: update to 2021-10-14
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-20 15:33:31 -07:00
Tianling Shen 1ea73ae717 cloudreve: add new package
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-10-20 13:05:28 -07:00
Aleksander Morgado 2a31359c47 modemmanager: add support for wwan subsystem in hotplug
WWAN devices may now be exposed in the new 'wwan' subsystem in the
kernel (since 5.13), initially applicable to devices exposed in PCIe
(no USB), but at some point may also apply to USB devices that until
now were exposed via other subsystems (e.g. usbmisc, tty).

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2021-10-19 21:39:26 +02:00
Stan Grishin 2b6c8d8273 vpn-policy-routing: bugfixes: killall and tmpfs params
* bugfix: change killall param from -HUP to -s HUP
* bugfix: change tmpfs param from status to gateway

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-10-19 05:40:17 +00:00
Stan Grishin a8bce8d516
Merge pull request #16911 from stangri/master-vpn-policy-routing
vpn-policy-routing: revert to 0.3.4-8
2021-10-18 19:32:07 -07:00
Josef Schlehofer 6b37a15230 dnscrypt-proxy2: update to version 2.1.1
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-17 19:03:52 -07:00